last executing test programs:

2m24.707502659s ago: executing program 1 (id=504):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17)

2m24.650138761s ago: executing program 1 (id=505):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0x3], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0x400, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x2b, 0x81, 0x8, 0x5, 0x0, 0xfffffff8, 0x1})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f00000004c0)={0x7, "df7de3898d6625d8827fbf1322a7df1669cc99b70aa57aa3427733618a2ff15ee74630a8d183a7bae4978c20b62ff38f6df75c15c560f28dc757c3d2aec02444", {0xffffffff, 0x9}}) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
syz_emit_ethernet(0x26, &(0x7f00000007c0)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b40)={'ip6tnl0\x00', <r5=>0x0, 0x2f, 0x40, 0x4, 0x4, 0x10, @private0, @private2, 0x700, 0x80, 0x1, 0x8}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x19, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x4, 0x23db163c47c7a47, 0x8, 0xa, 0x8, 0xfffffffffffffff4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x28b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='GPL\x00', 0x1, 0x53, &(0x7f0000000ac0)=""/83, 0x41100, 0x10, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000c40)={0x0, 0xa, 0x49c, 0x94}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[r2, r4, r4], &(0x7f0000000cc0)=[{0x4, 0x2, 0x6}], 0x10, 0x9}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r3, 0xffffffffffffffff, 0x22, 0x0, @void}, 0x10) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f0000000200)={0x17c04, 0xffffffffffffffff, 0x0, 0x973f, 0x83, 0x3}) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r7, r8, 0x0, r0}, 0x10) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32)
r9 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000940), 0x4)
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000580)="27031c00160014000000002f1eafacf706e105000000894f00030001ee0b80558ddbba9b37242d29a50ed004484890af07c36505", 0x34}, {&(0x7f0000000180)="0f11f8f4caab9546afd30face8d9da8f0b8cb67a9875", 0x16}], 0x2}, 0x4004)
r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) (async)
syz_usb_connect$uac2(0x6, 0xab, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1055, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x8, 0x90, 0x0, {0x8, 0xb, 0x0, 0x2, 0x1, 0xc, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x6, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x1, 0x7, 0x1, 0x1002, 0x6, 0x2, 0x81}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xf}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7a, 0x7, 0x3, {0x8, 0x25, 0x1, 0x2, 0xc, 0x7, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x10, 0x2, 0x5, 0xc9, 0x6, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xc0, 0xc, 0x7, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xa2, 0x6, 0x6e, {0x8, 0x25, 0x1, 0x2, 0x0, 0x40, 0xfff5}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7f, 0xfb, 0x5, 0x8, 0xc}, 0x12, &(0x7f0000000180)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x9, 0x9, 0x81}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x827}}, {0x7, &(0x7f0000000300)=@string={0x7, 0x3, "1a057185e8"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x449}}, {0x1f, &(0x7f0000000380)=ANY=[@ANYBLOB="1f035f7d0c3422248f2fc33bd7c47e896913494919c8d73cd2ff3f542f0a0d"]}]})
syz_usb_control_io$hid(r10, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r10, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (rerun: 32)

2m23.480195017s ago: executing program 1 (id=508):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0)
r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x32, 0x30, 0x63, 0x6]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r1)
keyctl$link(0x8, r0, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x50, &(0x7f0000000340)={'filter\x00', 0x0, [0xfffff001, 0x4, 0x5]}, &(0x7f00000003c0)=0x44)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0000000000000073019a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c2943657274696669636174652076657203adfd2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020104ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6246c4963803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921ada95fa8675efaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81c90b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04161414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a563b1854ea871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b304b4657b82924b2fdee2c0da483fa652a07358b97cfbd96bbdfa55e49c4f9c36c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f911c0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e67391080000008e46ad5af5b3db692104fdd31cdf949d56b00ad115768dec9edd0b159764ade5f26202fc9e5f00", 0x559, 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032abd7000fbdbdf2516000000140001800d00010075647089953a73797a"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x840)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000000200)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2})
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x9)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000940)={'fscrypt:', @desc1}, &(0x7f0000000b00)={0x0, "00112233000011223344ddeeff0011223344556600", 0x8080040}, 0x48, r0)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a820383"], 0x0}, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000007c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0)

2m21.868399657s ago: executing program 1 (id=515):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xc8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="05160000740f0000300012800b00010067726574617000002000028008000100", @ANYRES32, @ANYBLOB="0800140000000a0004001200060003008000000008000a00", @ANYRES32], 0x58}}, 0x4000)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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")
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180))
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x2000, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}]}]}, 0x2c}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f00000010c0))
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)

2m21.700687803s ago: executing program 1 (id=516):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x81, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x0, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xb, 0xff}}}}}]}}]}}, 0x0)
r1 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000000000000102030405060708090a0b0c0d0e0f101112f813dc973fb02b30e9db7df1863fc4f01f2815161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40e23f7412cc8d19b23395797e70d2"], 0x48, 0xfffffffffffffffe)
keyctl$setperm(0x5, r1, 0x20000)
keyctl$read(0xb, r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_io_uring_setup(0x2c51, &(0x7f0000000100)={0x0, 0xc698, 0x2000, 0x1, 0x389}, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240))
writev(r2, &(0x7f0000000300)=[{&(0x7f0000000280)="9d65fc42aee4768cbf86c8e61914d1752028c32e7bf80989ccd63c1744b7653a6169a5ec74f16a9ac6e45a638bfc7d4261c5342b5c51a3da536a8c5014ae89d8fea64cac89467678f9fefc7c52d930affb9c0dfe145fc44b61b7ef469a6d", 0x5e}], 0x1)

2m21.459527229s ago: executing program 1 (id=517):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_TX(r2, 0x29, 0x19, 0x0, 0x0)
r3 = syz_usb_connect$cdc_ecm(0x1, 0x88, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0xff, 0x30, 0x7, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x8, {{0xa, 0x24, 0x6, 0x0, 0x0, "39497da39f"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x499e, 0x2, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x8000}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x7fff, 0x6, 0x3, 0xe5ad, 0xa4}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x0, 0x40, 0x8, 0x0, 0xb}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x5f, 0xfc}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x4, 0xbc}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x6, 0x6, 0x2, 0x40, 0x6}, 0x54, &(0x7f0000000180)={0x5, 0xf, 0x54, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x7, 0x8001}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x4, 0xb}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0xff, 0xf0f, 0x80, [0xff3f, 0xff0030, 0xc000, 0xcf, 0xc030, 0xfe803f]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "74de1df071525cee721fa3b850ae1820"}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3808}}, {0x6b, &(0x7f0000000240)=@string={0x6b, 0x3, "9eb09831f4fa9bebebf576b91388b4a7d133d24bd391ca0f3042d14450896322d5edf1b15decc8775cecb33d6a2465479880595c14d562556baec85a8ccd8d1deaca8e39680b4e5a36d1143c0f86f60edc48389ec68b2ffeaf35fb6f6f26b7a06ba0de8c253ae7732c"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x455}}, {0xcb, &(0x7f0000000400)=@string={0xcb, 0x3, "8bc3a15423738c75d27d2a1eee98f43232a87a902b1fd9677468a6459a1f04bb599e7c33e8f58f74dae0f877ece39dd1723b3189237a47de196fe629330a3a5a3fef2d9889f400fc16d01f430498b82991912fbafc78b1e629644d8c10104baf07f8aeee72a1d86a69fb299a75ac20e05c77322492cde816864a3443df9c9d26b6314bd35fe0a12d2eb3fea312cf55ad01615bfdc036339b0980776699d78162638c3b479d1a2f1930938f2e70309be024c5a87d99b5ff1f8c462dca9e1f421b6bf3df8f031e2f3104"}}, {0xfe, &(0x7f0000000500)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xaf, &(0x7f0000000640)=@string={0xaf, 0x3, "ac2f3d1c3e9ee298494d38883cebbef143e1044d1c150475c31fc4aa856737e395ab6e39aac5ec61ff2773566ddc1aceb5f0739c4c02dcea7818e5d24bd5deaaef3f0b5c9da4b93178c16fb0a07e57c917c6bf2c3abd780b19293ceb6eb7ca2f3f9d739fd484c6d8685d8eee1cec8bc30307c038ab38b95139b19f00cbe77c9d305ee56694053e7b1303986341bdffa9f88c2011eec0a55dec761072a6d5ad01c2d80f5806d2c1e168d853ac93"}}]})
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x84001, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, &(0x7f0000000340))
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYRES64=r2, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x2}}}}}]}}]}}, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129202, 0x0) (async)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$inet_tcp_TLS_TX(r2, 0x29, 0x19, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x1, 0x88, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0xff, 0x30, 0x7, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x8, {{0xa, 0x24, 0x6, 0x0, 0x0, "39497da39f"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x499e, 0x2, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x8000}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x7fff, 0x6, 0x3, 0xe5ad, 0xa4}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x0, 0x40, 0x8, 0x0, 0xb}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x5f, 0xfc}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x4, 0xbc}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x6, 0x6, 0x2, 0x40, 0x6}, 0x54, &(0x7f0000000180)={0x5, 0xf, 0x54, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x7, 0x8001}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x4, 0xb}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0xff, 0xf0f, 0x80, [0xff3f, 0xff0030, 0xc000, 0xcf, 0xc030, 0xfe803f]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "74de1df071525cee721fa3b850ae1820"}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3808}}, {0x6b, &(0x7f0000000240)=@string={0x6b, 0x3, "9eb09831f4fa9bebebf576b91388b4a7d133d24bd391ca0f3042d14450896322d5edf1b15decc8775cecb33d6a2465479880595c14d562556baec85a8ccd8d1deaca8e39680b4e5a36d1143c0f86f60edc48389ec68b2ffeaf35fb6f6f26b7a06ba0de8c253ae7732c"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x455}}, {0xcb, &(0x7f0000000400)=@string={0xcb, 0x3, "8bc3a15423738c75d27d2a1eee98f43232a87a902b1fd9677468a6459a1f04bb599e7c33e8f58f74dae0f877ece39dd1723b3189237a47de196fe629330a3a5a3fef2d9889f400fc16d01f430498b82991912fbafc78b1e629644d8c10104baf07f8aeee72a1d86a69fb299a75ac20e05c77322492cde816864a3443df9c9d26b6314bd35fe0a12d2eb3fea312cf55ad01615bfdc036339b0980776699d78162638c3b479d1a2f1930938f2e70309be024c5a87d99b5ff1f8c462dca9e1f421b6bf3df8f031e2f3104"}}, {0xfe, &(0x7f0000000500)=@string={0xfe, 0x3, "f7586bdef1ca43145485fc5bc22ac90cd5cf05ee9a10834db54f334e7772cc853909cefb2326646b0a31989aefb4c3fc5de32c4d027694ffb0f17bc7545b27181f24fab4416369c18cf51d7f4c9c1e00a42890c7334f1869026f89c9e1667f11d3b3ecfc77d7c288763d49e113f9fe952a08ef77f577713a4b0832cb5df59009b8323b07a369ac8579ee2832cd88787e73a2048632acef7e9f5e583b223e33a8d85a33ce5dc564e3550e13e9237ac54c0dd5df6e466a0052b2d325d1d0c6435d29f8638ff22545cf1a2b0c7efa1bb0f3c0a5737323d27f5481659481ce159f8e6d2ec3706e2642098fb3675ba5bb88cea527f61a061036b139bd74fd"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xaf, &(0x7f0000000640)=@string={0xaf, 0x3, "ac2f3d1c3e9ee298494d38883cebbef143e1044d1c150475c31fc4aa856737e395ab6e39aac5ec61ff2773566ddc1aceb5f0739c4c02dcea7818e5d24bd5deaaef3f0b5c9da4b93178c16fb0a07e57c917c6bf2c3abd780b19293ceb6eb7ca2f3f9d739fd484c6d8685d8eee1cec8bc30307c038ab38b95139b19f00cbe77c9d305ee56694053e7b1303986341bdffa9f88c2011eec0a55dec761072a6d5ad01c2d80f5806d2c1e168d853ac93"}}]}) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x84001, 0x0) (async)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, &(0x7f0000000340)) (async)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYRES64=r2, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)

2m21.367451298s ago: executing program 32 (id=517):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_TX(r2, 0x29, 0x19, 0x0, 0x0)
r3 = syz_usb_connect$cdc_ecm(0x1, 0x88, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0xff, 0x30, 0x7, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x8, {{0xa, 0x24, 0x6, 0x0, 0x0, "39497da39f"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x499e, 0x2, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x8000}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x7fff, 0x6, 0x3, 0xe5ad, 0xa4}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x0, 0x40, 0x8, 0x0, 0xb}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x5f, 0xfc}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x4, 0xbc}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x6, 0x6, 0x2, 0x40, 0x6}, 0x54, &(0x7f0000000180)={0x5, 0xf, 0x54, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x7, 0x8001}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x4, 0xb}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0xff, 0xf0f, 0x80, [0xff3f, 0xff0030, 0xc000, 0xcf, 0xc030, 0xfe803f]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "74de1df071525cee721fa3b850ae1820"}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3808}}, {0x6b, &(0x7f0000000240)=@string={0x6b, 0x3, "9eb09831f4fa9bebebf576b91388b4a7d133d24bd391ca0f3042d14450896322d5edf1b15decc8775cecb33d6a2465479880595c14d562556baec85a8ccd8d1deaca8e39680b4e5a36d1143c0f86f60edc48389ec68b2ffeaf35fb6f6f26b7a06ba0de8c253ae7732c"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x455}}, {0xcb, &(0x7f0000000400)=@string={0xcb, 0x3, "8bc3a15423738c75d27d2a1eee98f43232a87a902b1fd9677468a6459a1f04bb599e7c33e8f58f74dae0f877ece39dd1723b3189237a47de196fe629330a3a5a3fef2d9889f400fc16d01f430498b82991912fbafc78b1e629644d8c10104baf07f8aeee72a1d86a69fb299a75ac20e05c77322492cde816864a3443df9c9d26b6314bd35fe0a12d2eb3fea312cf55ad01615bfdc036339b0980776699d78162638c3b479d1a2f1930938f2e70309be024c5a87d99b5ff1f8c462dca9e1f421b6bf3df8f031e2f3104"}}, {0xfe, &(0x7f0000000500)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xaf, &(0x7f0000000640)=@string={0xaf, 0x3, "ac2f3d1c3e9ee298494d38883cebbef143e1044d1c150475c31fc4aa856737e395ab6e39aac5ec61ff2773566ddc1aceb5f0739c4c02dcea7818e5d24bd5deaaef3f0b5c9da4b93178c16fb0a07e57c917c6bf2c3abd780b19293ceb6eb7ca2f3f9d739fd484c6d8685d8eee1cec8bc30307c038ab38b95139b19f00cbe77c9d305ee56694053e7b1303986341bdffa9f88c2011eec0a55dec761072a6d5ad01c2d80f5806d2c1e168d853ac93"}}]})
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x84001, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, &(0x7f0000000340))
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYRES64=r2, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x2}}}}}]}}]}}, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129202, 0x0) (async)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$inet_tcp_TLS_TX(r2, 0x29, 0x19, 0x0, 0x0) (async)
syz_usb_connect$cdc_ecm(0x1, 0x88, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0xff, 0x30, 0x7, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x8, {{0xa, 0x24, 0x6, 0x0, 0x0, "39497da39f"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x499e, 0x2, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x8000}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x7fff, 0x6, 0x3, 0xe5ad, 0xa4}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x0, 0x40, 0x8, 0x0, 0xb}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x5f, 0xfc}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x4, 0xbc}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x6, 0x6, 0x2, 0x40, 0x6}, 0x54, &(0x7f0000000180)={0x5, 0xf, 0x54, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x7, 0x8001}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x4, 0xb}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0xff, 0xf0f, 0x80, [0xff3f, 0xff0030, 0xc000, 0xcf, 0xc030, 0xfe803f]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "74de1df071525cee721fa3b850ae1820"}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3808}}, {0x6b, &(0x7f0000000240)=@string={0x6b, 0x3, "9eb09831f4fa9bebebf576b91388b4a7d133d24bd391ca0f3042d14450896322d5edf1b15decc8775cecb33d6a2465479880595c14d562556baec85a8ccd8d1deaca8e39680b4e5a36d1143c0f86f60edc48389ec68b2ffeaf35fb6f6f26b7a06ba0de8c253ae7732c"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x455}}, {0xcb, &(0x7f0000000400)=@string={0xcb, 0x3, "8bc3a15423738c75d27d2a1eee98f43232a87a902b1fd9677468a6459a1f04bb599e7c33e8f58f74dae0f877ece39dd1723b3189237a47de196fe629330a3a5a3fef2d9889f400fc16d01f430498b82991912fbafc78b1e629644d8c10104baf07f8aeee72a1d86a69fb299a75ac20e05c77322492cde816864a3443df9c9d26b6314bd35fe0a12d2eb3fea312cf55ad01615bfdc036339b0980776699d78162638c3b479d1a2f1930938f2e70309be024c5a87d99b5ff1f8c462dca9e1f421b6bf3df8f031e2f3104"}}, {0xfe, &(0x7f0000000500)=@string={0xfe, 0x3, "f7586bdef1ca43145485fc5bc22ac90cd5cf05ee9a10834db54f334e7772cc853909cefb2326646b0a31989aefb4c3fc5de32c4d027694ffb0f17bc7545b27181f24fab4416369c18cf51d7f4c9c1e00a42890c7334f1869026f89c9e1667f11d3b3ecfc77d7c288763d49e113f9fe952a08ef77f577713a4b0832cb5df59009b8323b07a369ac8579ee2832cd88787e73a2048632acef7e9f5e583b223e33a8d85a33ce5dc564e3550e13e9237ac54c0dd5df6e466a0052b2d325d1d0c6435d29f8638ff22545cf1a2b0c7efa1bb0f3c0a5737323d27f5481659481ce159f8e6d2ec3706e2642098fb3675ba5bb88cea527f61a061036b139bd74fd"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xaf, &(0x7f0000000640)=@string={0xaf, 0x3, "ac2f3d1c3e9ee298494d38883cebbef143e1044d1c150475c31fc4aa856737e395ab6e39aac5ec61ff2773566ddc1aceb5f0739c4c02dcea7818e5d24bd5deaaef3f0b5c9da4b93178c16fb0a07e57c917c6bf2c3abd780b19293ceb6eb7ca2f3f9d739fd484c6d8685d8eee1cec8bc30307c038ab38b95139b19f00cbe77c9d305ee56694053e7b1303986341bdffa9f88c2011eec0a55dec761072a6d5ad01c2d80f5806d2c1e168d853ac93"}}]}) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x84001, 0x0) (async)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, &(0x7f0000000340)) (async)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYRES64=r2, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)

9.570065734s ago: executing program 0 (id=897):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xc, &(0x7f0000001980)=ANY=[@ANYBLOB="6461783d6e657665722c63616368655f73747261746567793d64697361626c65642c63616368655f73747261746567793d7265616461686561642c61636c2c757365725f78617474722c63616368655f73747261746567793d64697361626c65642c00547b83cb08d660ef166f38bd557b5c8c67014aac67f2ab79a132c1b9d1c41ec61d6e2cb8b79b26446f39ce9bc0e213fd1a719346"], 0x3, 0x1c8, &(0x7f00000000c0)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

9.569516082s ago: executing program 0 (id=898):
r0 = socket$netlink(0x10, 0x3, 0x0)
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008)
sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="280000402e00030500000400ecff00000008000400", @ANYRES32=r0, @ANYBLOB], 0x28}], 0x1}, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x101200)
r2 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
sendmmsg$inet(r3, &(0x7f0000003780), 0x0, 0x8044)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv6_delrule={0x44, 0x21, 0x1, 0x70bd2b, 0x25dfdbfc, {0xa, 0x14, 0x14, 0x1, 0x76, 0x0, 0x0, 0x8, 0x3}, [@FRA_SRC={0x1b, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x44}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000800)={&(0x7f00000003c0)={{@hyper, 0xfffffa0e}, {@any, 0x7fff}, 0x400, "69e8d5da81f18688bd8e668efb8135af7a841c9ce89b0b7f0d32783ecab6cba907abc83723de3d4675584f97f0f25103758d1f78cc39d866cd2984e800e4e003fd4356bab938f73d699e1d4c0f6240a994f29263506558522279ad1cb6155164fcdd5adb9ce670b7fad103f234e350b14d01e32cb295664547c7877889f648d4a60bd2b4aedbbd65f7dbbe3956b0c1fdecef30e54e0b109fda261065ada71e381f5387ea0562787d4b8c42186d1b6942bc22746bf68a3750ccecb27cc77a97df8e1fc38c2c07a1f4da057df4425f9f2cb0364fa29ae9e794d7b9f7b1bf21b78278791e6a9d82aa51e8e0169988d808bbe8e8695a2f7595f7ee7c9606b0b6cb91f5d05c31c8c4b4c15714e02c04c086db3ef11ada41701939d6f0e8e682a287b35ef47d8845a79434fb842edcae6ffca1a5169fcab6f901b708eddf5f60aeb161f09896062cda575b476ed7f499bec2406e73a4f02ca7df5e5ae5f64f9befba56a8a8879cb1a786feafd22810b30640f66617fa098ab79c1cf972f1632cb7206e4d938384a0ebe14738196722906528ca844c2ade2e874b47ca735ba056e14f327563e5a5a08104669b4ea20aca4f0ebd455876809bfe3e6aa355ede63f521b333ab62def47bd1d4d339b104ad5782b468be4fdb514081c77eded15de8094c392b6fc03eb81a96087f2c791f60489564eaef3db767621b265bf56a8ddb53223fe324ca53870210a2a0905948cbcb1e0d27bf25cee8cd428cd32683c37fd6c4f6d23a55e0c9ec560d69d6e0c37720282f7d1fc37461d8ffaf318142e5a2d3be6b880d274f928ad5b59dc25442a863c2e155940abfa1eb8ee6e030baddad29f572b28434d26e2b22f9cedc174f1d0d09f34dbc5457038bc2793312711f3c67fb048a12e4e1de8c7fd1274480ae1557eba96fc6d0b50bd7851af70bd0167067068250edb07e41726c4b4e6e7bf6a02978ae32407c6360af8d326df486b581f1bb40b9ba03412670cb6383ba74821ca8f0468341de3df84ad026515ba1399401e4dd2515d99ac91d26e1352ab276c8f4192b081e7e252f691483bae022c3e9e23c175a235dee1d8ef9ffdf1016f15f91e75e021a7b79bc2a771d716bb815c0753916ff13e7f88f62dc903d3af5d7f979c9900a47247f9f586593790941fcb592985fb70f067d4c9c8e1e3d42eaeb63236f7cfa0e92da36fbda549d5722bf4e151cd23e6b67174bfd27a4582e337b29b587b961d431d8f97fbec068cd5a7f6945883fe29584d8a18cdf022175f03c063c320565f41f90416e97f06ff54a76a8f06dfaa2e9374382b14d4981d48b29a26c9b1d699b2cc338bf6841f99dc365a5abced338caca477dd91f782f908581f5f60111a2295aabec90428afaa2c0a74d8eafe51fcb8a183ca66f53b7e7cdda3fe69e9d21f7c3cc833dc1a3887ae4c7d4dde7407"}, 0x418, 0x8})
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x46002, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000600)={0x0, 0x0, {0x1, 0x2, 0x0, 0x0, 0x100000}, 0x1009})
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)

9.468721595s ago: executing program 0 (id=900):
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRES32, @ANYBLOB="5853116175fc486456ef28d4fddf5cd84265c4f0dc1b80a35601a6593ee1693f73203d9cc5a1afb407b4463596c9d12b8a871a17a9227835334fef576d16f61da7a99a984e37a59f302ab1c8171d5f33d3ff2e8f37e48722729d2a76f2cb49dfa114ece9030800abd3757c49ada8ba30dc01726b80a7cb25aa745bbacf30c2d5c7b5ded63d4f1265fbf3d96c24e7f38237598fd851e465b6d81700d93bc202f544aba9dc90e4511400929ba58bbe6bfcd76dbdfd43d2fd5ad59e9e4df8b080480b43222a1ca3", @ANYBLOB="d0c895e03147ab9ef31f45d9d7d558f9c7b22b13231c460ce80da463c7f9276e50dd26d9718cae29b13ad71d584547275ca236929e2372e674a1b5e850f1cb5674c72a25780a81f13d4f353a6dc2503550d230764d9a591e11827e104a266d774268fe10b5b4db658101161e89c9b7c844b95926507b4843a426558c7ecb154df3a1cf2f02ba06ad962576d0b01cda2cee9b1b5ef359d967120983a6dd047587b269b529f1d9c7b7386dab1d6725024a89a9980dd2f5649e261af6107a69caa5bea5c1bf4d7e6a67bc0d13918968c233a135f5520e6fa4655ba899e7ea2090dac1ab7d52142feec30a3050c3ccfa61d588edfbf59a51f050435ab88e"], 0x8e)
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xb7, &(0x7f00000001c0)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8, @ANYRES32, @ANYRESDEC, @ANYRESHEX=r0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_reconf_req={{0x19, 0x80, 0x18}, {0x80, 0x8000, [0x9, 0x3ff, 0x1ff, 0xc, 0x0, 0x9, 0x7, 0x7, 0xb, 0x543]}}}}, 0x25)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="400cf202"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9.46701128s ago: executing program 3 (id=901):
mremap(&(0x7f0000dc7000/0x12000)=nil, 0x12000, 0x600000, 0x2, &(0x7f0000a00000/0x600000)=nil)
syz_usb_connect(0x3, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="120150028d1c5610d112349690180102030109022f0001fb0080020904212200ff0137060524fc000105240008000d240f"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt(r2, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8)
bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
sendto(r2, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0)
r3 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000004c0), 0x0, 0x559e, &(0x7f0000005680)="$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")
syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$BTRFS_IOC_SEND(r3, 0xd0009411, &(0x7f0000000140)={{r4}, 0x0, 0x0, 0x81, 0x3})

8.048921558s ago: executing program 3 (id=904):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xc, &(0x7f0000001980)=ANY=[@ANYBLOB="6461783d6e657665722c63616368655f73747261746567793d64697361626c65642c63616368655f73747261746567793d7265616461686561642c61636c2c757365725f78617474722c63616368655f73747261746567793d64697361626c65642c00547b83cb08d660ef166f38bd557b5c8c67014aac67f2ab79a132c1b9d1c41ec61d6e2cb8b79b26446f39ce9bc0e213fd1a719346"], 0x3, 0x1c8, &(0x7f00000000c0)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

7.848556737s ago: executing program 3 (id=906):
syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004086800000000000000001090222000101008032090400000103000000092111010001224c0007058103"], 0x0) (async)
r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004086800000000000000001090222000101008032090400000103000000092111010001224c0007058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x1, @remote, @local}}}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd27, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_usb_connect$midi(0x1, 0xab, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1005, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x1, 0x1, 0x9, 0x0, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x9}], [{{0x9, 0x5, 0xe, 0xc, 0x10, 0x2, 0x5, 0x1, {0x6, 0x25, 0x1, 0x2, "26de"}}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x2, 0x7, 0x2, {0x13, 0x25, 0x1, 0xf, "c9bcfddf1a6f6586c1783d889a99f5"}}}, {{0x9, 0x5, 0x6, 0x1, 0x0, 0xb, 0x81, 0xf2, {0x6, 0x25, 0x1, 0x2, "e4e2"}}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x10, 0xfb, 0x2, {0x13, 0x25, 0x1, 0xf, "c41510b835ef1fa44b13d4e2b9c7ab"}}}, {{0x9, 0x5, 0xd, 0x5cf9fc4cbe16947e, 0x40, 0x7, 0x6a, 0xff, {0xc, 0x25, 0x1, 0x8, "654b8008d426195a"}}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x8, 0x1, 0xc0, {0xd, 0x25, 0x1, 0x9, "161a7b87af0e902e3d"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x110, 0x4, 0x2, 0x1, 0x8}, 0x7f, &(0x7f0000000440)={0x5, 0xf, 0x7f, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "d1bcfad9ddc667421db56013a002b1bb"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "e6fb51d991439205835b2a55dbe5fbf1"}, @wireless={0xb, 0x10, 0x1, 0xa, 0x0, 0xc, 0x5, 0x0, 0x90}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x3, 0xf, 0x200, [0xf, 0xff000f, 0xf, 0xff3f0f, 0x3f00]}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xa, 0x6, 0x3, 0xff0f, 0x1, [0x30, 0xc000, 0xc0c0, 0x3f00, 0xff00cf, 0xc0]}]}, 0x4, [{0x100, &(0x7f00000004c0)=@string={0x100, 0x3, "32c0834b753112a8d747ee96ab3372a2e9cc5a10aca1a42fdcf967d01f396307e35b17a36dbfe00f8f1b6a5db1fc134a6706c4ce26716d26698bde84c4f192d77fa2ca1c6293d084b6ee46c5f73c7043abeb52f448270546f27053ecb3afd4e40d7c599d9e752b417d6376993dcd9df4af731e30a31efe85116fcb8a697ab37dd90954ee5b4db3a368d56c27e319df49e39131d3860a90eea9af923555a89478e50eaadc393058e3ea93455cac1f1816c419351caf0c7938a01b8062cacbedcc537b69ebf9f2ad39ea61857ca80a0015a0614b7478b542ac0529785005105eab3cd9020bc38e0622bc04c573c234be5064d2be74bf8eab0e8665f3b06b30"}}, {0x53, &(0x7f00000005c0)=@string={0x53, 0x3, "0f36fbbb261ad3423459c1f9fcfbec4c1a2cbc660720b05db14b3eb19c831e7d0762b2c31470a106a1ee2d301e7a215fe2c6b2feee1e044247b04533c12dc89ef37dfb535809424275971886cb0c923e81"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2c01}}, {0x50, &(0x7f0000000680)=@string={0x50, 0x3, "97b437492072529411fd8818e6f5210e2a0b4c7f07a3c85f16033cb82878b5502b815fa2770a9e740b8819f0c87ae58d3440e47674b3eb3df735a23e5928d601001ea183014b4a143d9f5e84618b"}}]}) (async)
r7 = syz_usb_connect$midi(0x1, 0xab, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1005, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x1, 0x1, 0x9, 0x0, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x9}], [{{0x9, 0x5, 0xe, 0xc, 0x10, 0x2, 0x5, 0x1, {0x6, 0x25, 0x1, 0x2, "26de"}}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x2, 0x7, 0x2, {0x13, 0x25, 0x1, 0xf, "c9bcfddf1a6f6586c1783d889a99f5"}}}, {{0x9, 0x5, 0x6, 0x1, 0x0, 0xb, 0x81, 0xf2, {0x6, 0x25, 0x1, 0x2, "e4e2"}}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x10, 0xfb, 0x2, {0x13, 0x25, 0x1, 0xf, "c41510b835ef1fa44b13d4e2b9c7ab"}}}, {{0x9, 0x5, 0xd, 0x5cf9fc4cbe16947e, 0x40, 0x7, 0x6a, 0xff, {0xc, 0x25, 0x1, 0x8, "654b8008d426195a"}}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x8, 0x1, 0xc0, {0xd, 0x25, 0x1, 0x9, "161a7b87af0e902e3d"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x110, 0x4, 0x2, 0x1, 0x8}, 0x7f, &(0x7f0000000440)={0x5, 0xf, 0x7f, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "d1bcfad9ddc667421db56013a002b1bb"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "e6fb51d991439205835b2a55dbe5fbf1"}, @wireless={0xb, 0x10, 0x1, 0xa, 0x0, 0xc, 0x5, 0x0, 0x90}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x3, 0xf, 0x200, [0xf, 0xff000f, 0xf, 0xff3f0f, 0x3f00]}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xa, 0x6, 0x3, 0xff0f, 0x1, [0x30, 0xc000, 0xc0c0, 0x3f00, 0xff00cf, 0xc0]}]}, 0x4, [{0x100, &(0x7f00000004c0)=@string={0x100, 0x3, "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"}}, {0x53, &(0x7f00000005c0)=@string={0x53, 0x3, "0f36fbbb261ad3423459c1f9fcfbec4c1a2cbc660720b05db14b3eb19c831e7d0762b2c31470a106a1ee2d301e7a215fe2c6b2feee1e044247b04533c12dc89ef37dfb535809424275971886cb0c923e81"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2c01}}, {0x50, &(0x7f0000000680)=@string={0x50, 0x3, "97b437492072529411fd8818e6f5210e2a0b4c7f07a3c85f16033cb82878b5502b815fa2770a9e740b8819f0c87ae58d3440e47674b3eb3df735a23e5928d601001ea183014b4a143d9f5e84618b"}}]})
syz_usb_control_io$rtl8150(r7, &(0x7f0000000840)={0x14, 0xfffffffffffffffd, &(0x7f0000000780)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "57c4b868189f471a29827af19c412b31ff59afb26acc71a194d85b8b7dfcd1c0e739c97d4cf7d47ae15d12d223e1ed26ddc7dec458492700e76641b11034da68719d769778f364f5ed1fc776c7dd388548bd6d0bfc2a344bdc627c42392c88e64d28523e9c567294e05b55bf2610f5e378b9966c8dc3f79eac9932b886"}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x40, 0x11, 0xa8, "424809cc2a9c422627ae1d53f554d18a18ebce1e336c56ba30e633d337b8ee8b3e4cfecd1689f61b766767d8821b429e095721167b83ff36b62d64124ec641478d1230db1f46361ef712cbd492d6664c3ecbc6a93cd9c4e678af837ba6ffaa7fc61863193fd04dd0c7b9582da0edce3e70624d6e533f923b42e651f4b577f7d755d4f01813a357cceff9e57b16e158f71f6fa0105f5cd51d5834c3da97fb0a0f8cd9658750c01b34"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000009c0)={0xc0, 0x5, 0x6, "e758cc6e08db"}, &(0x7f0000000a00)={0x40, 0x5, 0x6, "b9971fdeb6a2"}}) (async)
syz_usb_control_io$rtl8150(r7, &(0x7f0000000840)={0x14, 0xfffffffffffffffd, &(0x7f0000000780)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "57c4b868189f471a29827af19c412b31ff59afb26acc71a194d85b8b7dfcd1c0e739c97d4cf7d47ae15d12d223e1ed26ddc7dec458492700e76641b11034da68719d769778f364f5ed1fc776c7dd388548bd6d0bfc2a344bdc627c42392c88e64d28523e9c567294e05b55bf2610f5e378b9966c8dc3f79eac9932b886"}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x40, 0x11, 0xa8, "424809cc2a9c422627ae1d53f554d18a18ebce1e336c56ba30e633d337b8ee8b3e4cfecd1689f61b766767d8821b429e095721167b83ff36b62d64124ec641478d1230db1f46361ef712cbd492d6664c3ecbc6a93cd9c4e678af837ba6ffaa7fc61863193fd04dd0c7b9582da0edce3e70624d6e533f923b42e651f4b577f7d755d4f01813a357cceff9e57b16e158f71f6fa0105f5cd51d5834c3da97fb0a0f8cd9658750c01b34"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000009c0)={0xc0, 0x5, 0x6, "e758cc6e08db"}, &(0x7f0000000a00)={0x40, 0x5, 0x6, "b9971fdeb6a2"}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$inet6_sctp(0xa, 0x5, 0x84)

6.1265117s ago: executing program 0 (id=910):
mremap(&(0x7f0000dc7000/0x12000)=nil, 0x12000, 0x600000, 0x2, &(0x7f0000a00000/0x600000)=nil)
syz_usb_connect(0x3, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="120150028d1c5610d112349690180102030109022f0001fb0080020904212200ff0137060524fc000105240008000d240f"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt(r2, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8)
bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000004c0), 0x0, 0x559e, &(0x7f0000005680)="$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")
syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$BTRFS_IOC_SEND(r3, 0xd0009411, &(0x7f0000000140)={{r4}, 0x0, 0x0, 0x81, 0x3})

4.772691606s ago: executing program 3 (id=916):
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRES32, @ANYBLOB="5853116175fc486456ef28d4fddf5cd84265c4f0dc1b80a35601a6593ee1693f73203d9cc5a1afb407b4463596c9d12b8a871a17a9227835334fef576d16f61da7a99a984e37a59f302ab1c8171d5f33d3ff2e8f37e48722729d2a76f2cb49dfa114ece9030800abd3757c49ada8ba30dc01726b80a7cb25aa745bbacf30c2d5c7b5ded63d4f1265fbf3d96c24e7f38237598fd851e465b6d81700d93bc202f544aba9dc90e4511400929ba58bbe6bfcd76dbdfd43d2fd5ad59e9e4df8b080480b43222a1ca3", @ANYBLOB="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"], 0x8e)
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xb7, &(0x7f00000001c0)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8, @ANYRES32, @ANYRESDEC, @ANYRESHEX=r0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_reconf_req={{0x19, 0x80, 0x18}, {0x80, 0x8000, [0x9, 0x3ff, 0x1ff, 0xc, 0x0, 0x9, 0x7, 0x7, 0xb, 0x543]}}}}, 0x25)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="400cf202"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.259202102s ago: executing program 2 (id=922):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106a05c50000000000000109022400010000a0000904000501030000000921000040012218000905810300020304000d718ff5beb03587fc4328f5f27950e0706b4d74afebaf754dfe8394373db8f7509fdcb8f2d7a39b8b5daa743e5c42b026c0229eedf390d5ce660365c7791bc26154814c4c31bc507ee315ef15e763e36af8ca0ea7e2c1ce7d3fd5aadd148d89a8af013919e330a797ca635fa86aa1b3342f8d243ec39ef214f982a290c53a71146b6c8ab70ebba7f7a055d9a35f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000000340)={0x20, 0x21, 0xea, {0xea, 0x23, "ef2241f41230dfd27ae70a1dab59dba475c7fce7301f1bf1c87a0030923c0de410a514a0ae519788e2ba26d0ca56064b04a5d0ddba55404ed251fdfb308ffc26d598f708cc5c5246f7494d6ec642cf426295480fbc92f3d37dbcff631bd56759e6344434cca70f64828c4c9426a91de2e3666293b829eed64467c5140bcadaf039fbf2eb5d9e087bad6d609ef1727f342415a7c19d30e72ee34c858989fb2726c696792dae7e9f7bdd9b5498700f990a4e6a8c7b369668ce5a4fef59cbc79c0439c981b0c1848817d970c100e01441ae56168b00478f64e1f1f93bd6a7cfb6a5593cc12db2505fbe"}}, &(0x7f0000000440)={0x0, 0x3, 0x24, @string={0x24, 0x3, "96a426c9f463f915d08648b0f3af7ca766dc02600a30f4e3735c470dd96eb19988c8"}}, &(0x7f0000000480)={0x0, 0x22, 0x1a, {[@global=@item_4={0x3, 0x1, 0xa, "830bfd0d"}, @main=@item_012={0x2, 0x0, 0x8, "995d"}, @local=@item_012={0x1, 0x2, 0x0, "0e"}, @local=@item_012={0x0, 0x2, 0x3}, @global=@item_4={0x3, 0x1, 0x4, "c6582e4c"}, @global=@item_4={0x3, 0x1, 0x5, "0bbe3e82"}, @main=@item_4={0x3, 0x0, 0xc, "7050d324"}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0xf46}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x1a, 0xcf, "a1113952680d8b16f91e91d8512fdd4a1470c5666b8e41957997f40ecfec38adc662749f705f0b90be6088d5903f6df91c70ff75859c23b2fe6cc5951ac70f6624b24e0135684f396957a5ee85237b2bd3f36491a54fb2c3c28216b7554a0cd9914e157a063747284b2f707a6c08f697503ca2d2b0819137f461292ba4770ccdac3877368fb64d83707d8f77d4aac0806908fdd08449f8d67f4c7b6f2db9dc3bd1009d19b4bb669961b264d8c8614ebcf46fa28d0f85d9f0bc0a904edf1949c37e51591ede549e9d4c5988028fc18d"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x6f}, &(0x7f0000000780)={0x0, 0x8, 0x1}, &(0x7f00000007c0)={0x20, 0x1, 0xe0, "00389d73be25384cbb545de95d91f5d0f17731637a36ecddf331097b41393ed851da37d2ae66ba0361fd70c7df9fdb5e9d42c94f8ee2230e01eaee2b9726279783360836adf0d6de89538601a26af4ac2a7e4a06c94640d4f22d30e4f5c2fa45b196a993678089149225ee84f00b762b39be19db25a14a2b54b444f600d1e88c72e4d710d974c86a8420469e842e585e1bd811a22cfddda178ddee1ae8e691ece9acb26bbbd0fcc37098bf9373d25bbc05033ed394f01705203f1300ec84314169e8111133a00e627f930bd30eaad577a7a76dcf5914a25b8f64b53886150f35"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0xbf}})
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000000c0)={0x2, 0x0, [0x101, 0x9, 0x2, 0xe9cb, 0x8, 0x6, 0x8, 0x40]})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r2=>0x0})
r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xd42)
ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"32ebfde428d49f1d6138b5600cb1e9fe45fec610eaca3788d56482ba9353f4a9f5cc35a59afb344716db0f807a42968d718057734f3e582ac4c8f62b11419a1b634ee6f44e2ecc406d87726a09b4db1b4fb7a6fdc4fb1c56c04f7c722bd9a18013704e9398c28dd6e68768a8430a267dfa0ba89a03cc2f18b5bb0e52ad88658c2626663c9b68bd2d0673d44ae55951d85065516fed5f5f92ef33d632f5bbd3ba4870adbcbb3e2a4d6e2e88e10201eb5f314e8e6dce688905b286a3d9f70e0a0739a722cd596eaa0fc4367b185724a6fa8e61c4f662917837e956dfe73b248d22ada4178160d1cb0ad1be2e1e664bd86df9b9c36d442f7ce1c4d9e1f57575ea328875486424275db811a52057386fbac82b7ce3d36374500e4a1b15f1320c4f02b201645f729d2f0f5037b23eaf03f581b97ba62562a58b82272f25d2ffcb9bb56cc61ef5bfa8c65aba855644711eebbc1137c49f9cae4bbb5fc29ba0480aec798e0ddcde4a7f5079401ee171421d50d3e38ea63b718bf3975227c0a78195e45d4fa871629d64c99fe0945ae9b14aca2edbb4098a4b9d53ab599d99fbe2698f590efd56284d76b3e593929ecbde1f391dc112b6ed91ae6c5a3264f08227b49894f298cf1882608e778aa3921a0530cc24e35f496df9ae23ef06c50864a4c9097d0b67d58c61e6b1bfd56e84384557fc9ec4d9a2f423d9afba24b9a4bf0a50f88ad8b489bf31b4c73c7537ab3cb17b7928051d665f69456671b8fe2a5199a158ccd95e1cf235e3085be259c5ea68dab3bdd20b1607ba0102e448d64cc2744a4c2eb4efcb747918c5ed574ff86345fac45bb04d7ac7c301e6c2b99253bd0169c51da80e1bec743bcbadf41423a75231083277541ec7a9810826dec3d974c537c7469f19334136a6d30a7361a73ae9182356dea71bc1a1f58f8d68d6c06c2a4b662d7dc1a857b917dec133cc08a2afbe84df11b5fb1a2469cd73351005caa480a04d8d0fa54fb01e8552e19a0d348c4e3192a09a32d2e5b278433398f53fa26bbcf24a4a9ce5d6b6dc2962da0feebdf6a159e35dd7c3ecc078a1f3aca079f41911440f71965d334d261ee8ac9ba7c1f6af29d967225728baba7ac31911a24abc83b3d028ebc0cd14542aa834168176409ce62d9e557f83ae1bf1b1c241010ef6fc6061e98d76d9860cd3a276f5b30e4cb846e8775d0fa3f6fa89c638446ed82f2c4dd0f8b19fee21b9f868daea8b2cbc32f19a8be27f60c54a16c8090555b3a234ba33dcb49064d991585d90028878bbb980c1453e95e6c228fa399934a70685cd8f1cfc9cdb6a68504913be1a318b160878654161450504d33d83ce6d50ac9c3713eded94459a75e30d92168148e7f55384db344b17dba3b6d779a2418ec971ac803b12fdd037ae5158d88e82a68a6c9998a754d4e7822a6236c7fcd6f2574d50b0573986243aa0a60c3491777e992e36d357c55f270ca0a85983d92ec35b598ba2c2a880a4b8b631441d553317d217e066121a96e46ff1045af0b098ba4a7fbea84e032bb666346df15f35fb87580b94c03a03deb14f8840308c4736ff0306d791fb72378ec36b326fc07175f5ea5258326a37581be4559272f6922b832d85880c4fb67e186368202d6f8ef36e2f675f06c649e36f9266bdd92faa5376d3c5e96d708cb9b8adabaf804a32fc79a2cbe07ddd97c45fdd502b0adb667b1c9b5134b087802dd680d0b2c751a675bf82b5ceaf680cb43dc7a29bc1d06b8b467fae3bf29d0f7581bdaead293921dd2ba7ecc78a2757d39fc6c63cba2f98faadf1f09a175a50ab8dfe60eb9602cf9f85b0dc2c61655254aa8e0714db1c395b1cff3a7cc4e2fc150f4691f289f3900dbb118cec2b3df57b655630fa65dc1294d5828f0a2bb0aeff6c9b4b1a6735ff9e56b0ecd9a10525c61777dfd6619d00aff0a06a4fa332d06112fe76a729dd28eef7f5b32fb1f81dca60487de5f589d213c0b26d05285a55f72630397f3aa60c13a2c4ca6bb5aaa43601c77e5ad1efb08f02642cc7c0f054c0bcf69e396050245e61c38b0bd1e5cd9c5daea83475b98ea0d4a8cf18b1768e36b281964893e4c6f2a8d8ce42ce3c69008e9bcbe67ad057fc2961b670018b1c9c191658fbf952d2f30401392ffd38dca45c43e6a9e7c26dc8e3b0747ce486c3333d08161050784aca86c3f969ff58bb95b092d19e6f646f204c22e7ef1a4ff998ee1f7115a6f29e82421152be57f82d14f0b3fd686c2b351ed62cbd0d273d3bc5b314a889d2f35fb91e421c27b17f85958197fe82e1630bf2f5a3009c30db8b4a00b81deb0af2157f491ed63da76991f86db2a6cf2a020ceb49508055f15a79c282177ac2034bbce9e6d792d31842f03a661734936feb3fc65e228272b9b9d55b9c36346fba07eb37e80df9ec02c4ce050f4537cfc6a7862461679a1c06441c5b5fc9e118f5e62f848a27010183e8ceaa1a0713083e2610491f2e61da9285ba8263f7bbf85608c3c52b90c0bd364b6f8c2f7fd4322aa3a549c7c9eba6a08af2945207f366f319bfe76aaf91f2597b4a23108e3321ecb6f46666d7f7a9f080869216814498f016da2fa301f097572603375f91bb32e6117ee402f14d445c666eafd19f6127a18e0960c6c3f448347e10da8c7a5162b96aed0cab0edd3381012b1394e2829484b10291a2d1d06202832f36d808ccf908444d317e839a9b20a47ea13efea530c2ba0fc8fdd53cac93e6d5df19b211df9e16df926b75e1be83c7425dd6b2319bc96f8996774afb2477df7fedd27b0d960dbab7dbd8525d9d1fd226e00485ed60acee967d1a15964b15240e7da4ddafd7a1c7faef36f82d2a5cd9dff4db53874eaf4b3ab20eea99178437bbbc49e2528de80698c52a585881ad8b0b2c83cdb935824e01060c53d5bd8c6e265043fa3c682082ba939039c74268e8b1fda5a6d6c705b2a99d3f341ac5e65a80152ee168bf69471204905a71f22274c31d4eb88cb484b90582e63b214a7d380bcaf3b74848e90f56ed113a3fd9cef8b14ee2a28aa1db033474cfa478dd8c3d97dba56681f2f9f4d24eb38ac1eab1fb1b1e564a1d72eca6c69043d042f2934db86e543b67115cf8d9e5f4bbe364e9ceac89f3c23ce4d2fecffdd5879d923e095cc3f4d43413ffd5627f3978e72cff032980a5f0671788223901faae900406b0ca9393aa551862b9dadfce9b6a88a58fe690941e9fb2225db0e0c7c9cb456c4c13450b10e7f73aef1298d4915c53d05a9257f37e510c95d33e80d323445a467c901a72ba9d7fdd0973636ea670dc01a9ca85192412324f4f0644bb913b4a2a3693cc05b9af15ed16fcc9cba10eac4aa0dce40dead9bec82c0d3e945117a83d9201f29c22eab7582a02cc4cd1e2c2d46fcd5ed2e61e3c61a8f7c19ca22d9854191cc1dc16c47758d06a9a4bc74e685d13d0ad5deaff7108d4237650a3211811b5337aaf117c04836a8bc88290159e5902fd890eb56209a065599fa9e90317e2faa938034524f54ec00a7a0cb2ba1e94691cf1a67769b9c50266045109dae9af2e3a028971e96f5bd654b785944ab0a88551099238db17d27181d7b50b47fe6f7b6e0042a6fe3ec801f01c56a8874f0caeaae9f83dacb167c48589e3d0b5d432504765d300145ec74daf16d330c0632d6c5d94a05f1a4a6e73868d7805f286000f266e63c8fbb3fa493f3c3ce8bb97230a2b6e208c085f6028c80ab365b893e4065c25c65f77c2c561f23796edd2c53348be84c055576d055a310e20218e6e30fbbf10580f4f3fbe1b3c87fb64e595810616c168b2ddc929016daacf668d34c2de28fe8ec5aa68b91bd8b3d0c295448dd4d281323cc601bd89ec7104a4db92d664ccf04057fd4c18f6526bdae8c2d11094488bdb8ee600f98334da1f848f475c2b45c158276a63ad98511a8e12f48ce5ca4c904ca7e4d51622669788c787ddfe60f4a645f94a3710ac577693986f30cc1b0561c27f8ad03c98fec5a3f33bc55869729fbe2c51ab86c943bf02cafcb5d75bd1ec553a179c81014ea9c56334c714f8fff03ff5777c0349535528e38d9815e79fbb8d037b1d11ab2a0605082e28e43750367e0884424f73c09d9b0fb888ed765e50a4176c0d9604e2c65adb481841c463303e5dd5357678be9fb590fd9018fa80d8356b419e8fc560f81836ae0fcc14d31c7b18c8cbe026ca394bdd13d8d59fc235e868847395c6596d05e86ad3d68ec76ea31df31f2cbf563843e766b001a4c29fd65f935ff50fb8ee0d078117eb2d5524a19f053ed0631e80a16eeded5a2cd9a2ac57997237d00ea1bdb02b05411845fca2c9ab683fa1ebe9289d65e0e0fbea025ba802ea9c694c006096b0522a755308a7e775d99047130b775e12d02f745b191728e516aeeccd95c9ddb3abe3125d5a5e3eaa7372d5b8d43e0f13dd4c660291281a0d4aed852108606fe1fc1483e8e2618b42431f01c781af8c573ad78e2148732bb9eb06d4fda46e51e4ead934dc3150b876335a451bb5f61b3f75859e58049058a743a8fd0636a5a816fe9f3e68e4a1301f3be8ce019de0d4ced21af782f4a8837729f3a8307e9e0470f7de32c48895602b4ad488feef5ad7ae9e1c951287c4fb8bf9795dce765ad25596abc1b51bae259e527b3297b353f39d021e02efbed77f692f403d0eede62fa3afcb822b686856c0528d1084de6353f4b8d91399773969cb68f12c12ef8d04303c44acec2b5959f51be1efd427e82368c1e673012f978de76f5dc521339007a66ffc7436b340818b92aeff075ca8bd69987630a2aa014214c095d96d419bc5ed123e410c478b73521df745fbb4a1d0a0ae1819e5aa62eb5c7fdc1ec66b74ea52b0a44a2edf74c5d63fb54a94ff6e6b06bb46aa21316c6755f735a9efe0192be2536d848f98fa08d4ab8dfb522e1a32402be63ef9f6e81c4e31e613d506a50efdb20a6a2e01fc2dc5c69cb446cc8d568c5e6e3c8269a0016dc14eb64e59cba2f0ef6280c550e59a31027237fd840657626e902c9aea87efc42d18dc2bb0ea01026a16f11e6ad6a04a49550b775acbf907794f8db813d1edca5519e77d89c7ce27cb46a1823d952c88f728476556d6f3b532e1074bc28aedb8eb2b99dee22e6a3a53ef3c97a3ce9cccb8d37b45c3a17df4009bd516e30adaf3c363bda1c50dd3c2aab1bb2d4573adab546280c296de01a5cd0d284368f08d5eef8743455b4a5222ca246b228c92d7c4edc6ef293ec987ba8125ff6345085adb842c83df5ddc2116eacda304807017dbc8cdee7e2df02c092eba6f16b8b30752c230ae04b39dfb2f55afce215b812a606d32ae948493fd49d4412bb2a22cb619cc9b9a58b51e714066924a6ed2211635c806696b45740a18758ebb8456a98dded9ff786ea22c1d5601acf9113b1ba62bacfb19790b84b8d41d6199e6c7ed4dc93df28689155e3cf1e5ab14154e73fc379edd18d7d761756d43605928473920260154f7bebf282c8961f39623fae82840341ec24d31d5cc6c5955defa6f2238cc0df5e1692cf3452dbf83c63e7f3aca2d81d3e89b0519018c9cbd4b3366ae3e159c8075704f9a0f3eea7af9539dc1e5a83fde5b6b2e7fb214093e259bb91a794621b2e822b94570f6b7f65bb3a4c694ed8a8433e0871a46ba8d1b704e06c285d871a13b2f19f2de3e476fc6b7a12b052549072c62a6843ea9476e95798346deaa3c8bf919086ee6aeee1e6f0b276703f5ce162f99c620252d8710b47cdb3a760e6a72f54a8470565e85fa1e547e5e7e386bd552a688d56d483c40", 0x1000}}, 0x1006)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', r2, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
init_module(&(0x7f0000001980)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xf7, 0x4, 0x0, 0x9, 0x2, 0x3, 0x4, 0x15, 0x40, 0x25e, 0x0, 0xfffe, 0x38, 0x1, 0x4, 0x4, 0x3}, [{0x1, 0x2, 0xe28c, 0x5, 0xd39, 0x9, 0x0, 0xffffffffffffffe0}], "411ff1c6bcdd8b7ad1d3d9bd3e9a98b9060345d5c86956e7311a9df8acc4373970918c0c3fbe7eba57504725f8ed5bddf06b4849b6c1b36dd93af264d10e1b98ab4c6fb32fa72f89f4ac8d4d88acf8a6"}, 0xc8, &(0x7f0000001a80)='@\x00')
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000085000000b20000009500000000000040"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
write(r5, &(0x7f0000000240)="542a599b1cf3ba00eb5e21", 0xb)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0xffffffffffffff46, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)

3.030141434s ago: executing program 0 (id=923):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040700c03f0050000000001090224000100000000090400000103000000092100000001221600090581034000000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000100)={0x3, 0x1, 0xb4f, 0x0, 0x1, 0x9})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040700c03f0050000000001090224000100000000090400000103000000092100000001221600090581034000000000"], 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async)
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000100)={0x3, 0x1, 0xb4f, 0x0, 0x1, 0x9}) (async)

2.695770987s ago: executing program 2 (id=924):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe80000007ffffff00000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0)

2.695360331s ago: executing program 2 (id=925):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0)
bind$vsock_stream(r1, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @local}, 0x10)
r4 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="134154aa16a547cc1201100100000008ac057a02000000000001090224000100005000090400000203000000092100000001221800090581030800fc06fd"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002255c508530501150825ff0904a101090192007508950109308102c0c0"], 0x0}, 0x0)

2.139097669s ago: executing program 2 (id=926):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
setns(0xc9, 0x0)
r1 = socket(0x8, 0x5, 0x5)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000040))
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xb7, &(0x7f00000001c0)=ANY=[@ANYBLOB="20c81e0000004d61501d0100000000000000100000000000800700000000000038000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r2, 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r3, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00')
read$FUSE(r4, &(0x7f0000000a00)={0x2020}, 0x2020)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @d}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r6, 0xee00, 0xee01)

1.719434497s ago: executing program 3 (id=927):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x7f, 0xb})
fcntl$lock(r0, 0x7, &(0x7f0000000600)={0x2, 0x0, 0x1, 0x4})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=r1, @ANYRESHEX=r1], 0x13c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0495c200000000000109022d00010000000109040010020300000009210000000122180009058103"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0)

1.597287166s ago: executing program 2 (id=928):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14)

1.571778543s ago: executing program 2 (id=929):
mremap(&(0x7f0000dc7000/0x12000)=nil, 0x12000, 0x600000, 0x2, &(0x7f0000a00000/0x600000)=nil)
syz_usb_connect(0x3, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="120150028d1c5610d112349690180102030109022f0001fb0080020904212200ff0137060524fc000105240008000d240f"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt(r2, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8)
bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000004c0), 0x0, 0x559e, &(0x7f0000005680)="$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")
syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$BTRFS_IOC_SEND(r3, 0xd0009411, &(0x7f0000000140)={{r4}, 0x0, 0x0, 0x81, 0x3})

249.355361ms ago: executing program 3 (id=930):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private0, 0x800, 0x0, 0x103, 0x1}, 0x20)
mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_debugfs/asoc/components\x00', 0x0, 0x0)
read(r1, &(0x7f0000000500), 0x400)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002910140820528d7a7a00000000109021b0001000000000904000001ff443200090507"], 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
syz_clone3(&(0x7f0000000080)={0x2a614b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58)
sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000200021401002cbd7000fddbdfa508000100000000000500540001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4004801}, 0x800)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffd}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
sendto(r8, 0x0, 0x0, 0x40008c1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000e00)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0xc0)
socket$nl_audit(0x10, 0x3, 0x9)
socket(0x27, 0x80000, 0x5)

0s ago: executing program 0 (id=931):
r0 = syz_usb_connect$uac1(0x5, 0xbe, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x7cf, 0x6801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x10, 0x30, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x2b}, [@processing_unit={0xc, 0x24, 0x7, 0x2, 0x0, 0x1, "6cec6c39fd"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x1, 0x2, 0xe, 0x0, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x402, 0x6, 0x1, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0xf, 0xff, "", "ade052"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x0, 0x8, "d035eed91a1f5a"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x1, 0xff, 'v'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xa, 0x80, 0x5, {0x7, 0x25, 0x1, 0xc, 0x3, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x10, 0x1, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x8, 0x6, 0x7, {0x7, 0x25, 0x1, 0x8, 0x5, 0x3}}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x10, 0x8, 0xf8, 0x40, 0xf}, 0x57, &(0x7f0000000480)={0x5, 0xf, 0x57, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0xd, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x1, 0x3, 0xd6a0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xb4, "10702fc33e544e801f7f3708f4a5a75b"}, @generic={0x2c, 0x10, 0x1, "5ca34eb35b6e1b9de3c743aa17ff455c1fd8a004789ca20c702c9bf404c201f9850e989a56fef6cdf7"}]}, 0x6, [{0xa3, &(0x7f0000000500)=@string={0xa3, 0x3, "d365f423e2c6de93a1d4a66d350cd3f6c184b60f49d60c34aca3c5043a318319f99033541602a0a5708f57655d326d69ae7e1cf062e7234696ffc04d409e6cecb13f079fad03315e18e6b853a9da306328745e08090d2e33b42598026e746b55510d3f61239563c5d20654405476978f038f91b9a0990ebd4f5231cbb2830300af57b2efb6337a75689707b96744c8b8c878b4f1daa82be5f1d2ebf6b1ad0512a4"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc04}}, {0xc2, &(0x7f0000000600)=ANY=[@ANYBLOB="c2030181f5722a4e9c6bce86ab3c0b243350733fbde8714b74d2d490c23680e518fcddef118a61122316824f64541f13e475122c94e5c241de14d79dc3089c0657aeed66fa07504e35c807e171536d86b7d86613125d1d686c7af97ca075faa1f650010b89e387ba9877673a132c522fe4592d27d52b57c4fd069cbc0420ff72cb2f124b3d84ea036f0560e0356844893bb8fd5d817ee41a1919cbacfafab85834701ae0a814f76495e23cef8669ffadc8fe3a17535a386367c81dd85d80570a4ad7"]}, {0xab, &(0x7f0000000700)=@string={0xab, 0x3, "1a67621677b21367db98d7f080a21b46aa507c71d896541455ce2012e41c94fc8c6792ad5bf3e7a54c5080879b429d1f54acd43285fdab8040b372ae7ce46fdd07b1d2bc28f5581f6e51a3f1591e7b6d8411969b8936124e192a9d50c4bea89bb88ef3c39d55a2f35e58b6165f1a10044f6932804f937ceeffa66db7f9cd689769b0c3b58a9d91c8d622d74f3df8b9aca9ce1911cbc6f57297daefc7686004126503d0c340df7e92ae"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x8f, &(0x7f00000008c0)=@string={0x8f, 0x3, "3bb7f79f4208d1f98aea5f44177ad854a259a9eb70608f1a0faef655f55584305f8fdd00e5ad04e796ace498528540e6139e27644750f9ae262c8906d07b59caca8a061eb664fca0826f6b70242650f9e71ed767ae6ab503ae10db879df14114f8966b8db5b30c4c282e55ddd488b059ce98613b7e785aebcee16024ba01e93ea69a4d09f61903643738db441d"}}]})
syz_usb_disconnect(r0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="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", 0x150)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000010700c0df0000000000001096fff11022400010000e80b09040000093fd1d0786f0103000200092108fdc4748d00040122e301090581fbffffff0a706e3cb8b1ee545d35ae6697f2364cd324deb48bdcc9ccd15797496023dae32eeee7a14f4cd5a34b0ae4def7d7a5593c87e2acd3446350b36ea05cb7bd62c6aee1125e175f5394258fac8fee61295a4547e3e393777ac530821ae1"], 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r3, 0x0, <r4=>0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r3, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000680)={0x48, 0x8, r4, 0x0, 0x0, 0x1, &(0x7f0000000ac0)='L', 0x1})
r5 = syz_open_dev$video(&(0x7f0000000e00), 0x80000000003920, 0x202001)
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000001000)={0x1, 0x1, 0x1})
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x11, r5, 0xffffe000)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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")
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000140)={0x60, 0x2, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2, 0x0, 0x0, 0x8, 0x22, 0x14, 0x70, 0x9})
sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0xffff, 0x9, 0x0, 0x4, 0x9, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8d0}, 0x4008000)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x2d)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

9] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.983407][ T8289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.987036][ T8289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.994979][ T8289] loop3: detected capacity change from 0 to 64
[  265.002666][ T8289] BFS-fs: bfs_fill_super(): Impossible last inode number 2359345 > 513 on loop3
[  265.012456][ T5672] usb 4-1: USB disconnect, device number 38
[  265.496630][  T147] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  265.501133][ T5598] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  265.504248][ T5598] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  265.508770][ T5598] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  265.511486][ T5809] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  265.541802][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.564462][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.569176][ T8300] FAULT_INJECTION: forcing a failure.
[  265.569176][ T8300] name fail_futex, interval 1, probability 0, space 0, times 0
[  265.576518][ T8300] CPU: 0 UID: 0 PID: 8300 Comm: syz.3.724 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  265.576533][ T8300] Tainted: [L]=SOFTLOCKUP
[  265.576537][ T8300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  265.576542][ T8300] Call Trace:
[  265.576545][ T8300]  <TASK>
[  265.576549][ T8300]  dump_stack_lvl+0xe8/0x150
[  265.576565][ T8300]  should_fail_ex+0x410/0x560
[  265.576577][ T8300]  get_futex_key+0x1b4/0x1580
[  265.576590][ T8300]  ? __lock_acquire+0x683/0x2cf0
[  265.576604][ T8300]  ? kasan_save_track+0x3e/0x80
[  265.576640][ T8300]  ? __kasan_slab_free+0x5c/0x80
[  265.576652][ T8300]  ? kmem_cache_free+0x182/0x650
[  265.576681][ T8300]  ? __pfx_get_futex_key+0x10/0x10
[  265.576697][ T8300]  futex_wake+0x119/0x5f0
[  265.576709][ T8300]  ? __pfx_futex_wake+0x10/0x10
[  265.576749][ T8300]  do_futex+0x458/0x4e0
[  265.576759][ T8300]  ? __pfx_do_futex+0x10/0x10
[  265.576767][ T8300]  ? kmem_cache_free+0x182/0x650
[  265.576782][ T8300]  __se_sys_futex+0x3a8/0x450
[  265.576791][ T8300]  ? __fget_files+0x2a/0x420
[  265.576799][ T8300]  ? __pfx___se_sys_futex+0x10/0x10
[  265.576807][ T8300]  ? rcu_is_watching+0x16/0xb0
[  265.576818][ T8300]  ? __x64_sys_futex+0x21/0xf0
[  265.576827][ T8300]  do_syscall_64+0x166/0x520
[  265.576837][ T8300]  ? trace_irq_disable+0x3b/0x140
[  265.576847][ T8300]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.576857][ T8300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.576865][ T8300] RIP: 0033:0x7ffbc0b9e159
[  265.576873][ T8300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.576880][ T8300] RSP: 002b:00007ffbc1a490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  265.576890][ T8300] RAX: ffffffffffffffda RBX: 00007ffbc0e25fa8 RCX: 00007ffbc0b9e159
[  265.576896][ T8300] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffbc0e25fac
[  265.576900][ T8300] RBP: 00007ffbc0e25fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  265.576905][ T8300] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  265.576909][ T8300] R13: 00007ffbc0e26038 R14: 00007ffc07dbcc20 R15: 00007ffc07dbcd08
[  265.576921][ T8300]  </TASK>
[  265.953603][   T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  266.094568][   T24] usb 4-1: device descriptor read/64, error -71
[  266.114492][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.117844][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.121899][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'.
[  266.343535][   T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  266.483559][   T24] usb 4-1: device descriptor read/64, error -71
[  266.593759][   T24] usb usb4-port1: attempt power cycle
[  266.943504][   T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  266.975046][   T24] usb 4-1: device descriptor read/8, error -71
[  267.223818][   T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  267.246566][   T24] usb 4-1: device descriptor read/8, error -71
[  267.363781][   T24] usb usb4-port1: unable to enumerate USB device
[  268.453526][   T33] audit: type=1326 audit(1789587140.914:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.0.722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8c79e159 code=0x7fc00000
[  269.143771][   T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  269.309847][ T8313] loop2: detected capacity change from 0 to 40427
[  269.318984][   T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00
[  269.322726][ T8313] F2FS-fs (loop2): Invalid log blocks per segment (1)
[  269.325128][ T8313] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  269.327765][ T8313] F2FS-fs (loop2): Image doesn't support compression
[  269.330447][ T8313] F2FS-fs (loop2): build fault injection rate: 690
[  269.333020][ T8313] F2FS-fs (loop2): build fault injection type: 0x35f7
[  269.335838][   T24] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  269.343068][   T24] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  269.349224][ T8313] F2FS-fs (loop2): invalid crc value
[  269.352366][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  269.354770][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.364088][   T24] usb 4-1: config 0 descriptor??
[  269.373630][   T24] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count
[  269.407685][ T8313] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  269.416007][ T8313] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[  269.419082][ T8313] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  269.423384][ T8313] F2FS-fs (loop2): Start checkpoint disabled!
[  269.432474][ T8313] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[  269.437665][ T8313] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  269.440458][ T8313] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  269.451305][   T33] audit: type=1800 audit(1789587141.914:20): pid=8313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.730" name="file0" dev="loop2" ino=10 res=0 errno=0
[  269.518178][ T8317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.730'.
[  269.522371][ T8317] netlink: 240 bytes leftover after parsing attributes in process `syz.2.730'.
[  269.525869][ T8317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.730'.
[  269.572367][   T24] usbhid 4-1:0.0: can't add hid device: -71
[  269.574511][   T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  269.578057][   T24] usb 4-1: USB disconnect, device number 43
[  269.584797][ T8318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.593966][ T8318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.403737][ T5672] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  270.554170][ T5672] usb 4-1: New USB device found, idVendor=ef36, idProduct=0004, bcdDevice= 1.00
[  270.558240][ T5672] usb 4-1: config 1 has an invalid interface number: 119 but max is 0
[  270.560742][ T5672] usb 4-1: config 1 has no interface number 0
[  270.562881][ T5672] usb 4-1: config 1 interface 119 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  270.566446][ T5672] usb 4-1: config 1 interface 119 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  270.569461][ T5672] usb 4-1: config 1 interface 119 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64
[  270.572506][ T5672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.577532][ T8322] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  270.579934][ T8322] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  270.582285][ T8322] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  270.789263][ T8322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.793008][ T8322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.804434][   T24] usb 4-1: USB disconnect, device number 44
[  271.743550][   T32] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  271.893555][   T32] usb 4-1: Using ep0 maxpacket: 16
[  271.895843][   T32] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c04, bcdDevice= 0.00
[  271.899958][   T32] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  271.904429][   T32] usb 4-1: config 0 interface 0 has no altsetting 0
[  271.906558][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.911996][   T32] usb 4-1: config 0 descriptor??
[  272.169922][ T5809] kworker/u10:5: attempt to access beyond end of device
[  272.169922][ T5809] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  272.176908][ T5809] CPU: 0 UID: 0 PID: 5809 Comm: kworker/u10:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  272.176929][ T5809] Tainted: [L]=SOFTLOCKUP
[  272.176933][ T5809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  272.176941][ T5809] Workqueue: writeback wb_workfn (flush-7:2)
[  272.176965][ T5809] Call Trace:
[  272.176970][ T5809]  <TASK>
[  272.176975][ T5809]  dump_stack_lvl+0xe8/0x150
[  272.176989][ T5809]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  272.177002][ T5809]  f2fs_write_end_io+0x1215/0x16f0
[  272.177015][ T5809]  ? blkg_put+0x22/0x240
[  272.177030][ T5809]  __submit_merged_bio+0x258/0x6a0
[  272.177040][ T5809]  ? rcu_is_watching+0x16/0xb0
[  272.177049][ T5809]  __submit_merged_write_cond+0x3c9/0x4e0
[  272.177062][ T5809]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  272.177080][ T5809]  f2fs_write_data_pages+0x2a27/0x36f0
[  272.177106][ T5809]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  272.177122][ T5809]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  272.177152][ T5809]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  272.177179][ T5809]  ? __lock_acquire+0x683/0x2cf0
[  272.177206][ T5809]  ? set_shrinker_bit+0x7c/0x350
[  272.177227][ T5809]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  272.177248][ T5809]  do_writepages+0x338/0x560
[  272.177267][ T5809]  ? __lock_acquire+0x683/0x2cf0
[  272.177282][ T5809]  ? reacquire_held_locks+0x104/0x190
[  272.177289][ T5809]  ? writeback_sb_inodes+0x450/0x1b00
[  272.177302][ T5809]  __writeback_single_inode+0x136/0x1220
[  272.177314][ T5809]  ? do_raw_spin_unlock+0x4d/0x200
[  272.177324][ T5809]  writeback_sb_inodes+0x9de/0x1b00
[  272.177335][ T5809]  ? __lock_acquire+0x683/0x2cf0
[  272.177354][ T5809]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  272.177379][ T5809]  ? rcu_is_watching+0x16/0xb0
[  272.177386][ T5809]  ? queue_io+0x2d3/0x470
[  272.177398][ T5809]  wb_writeback+0x41c/0xad0
[  272.177410][ T5809]  ? queue_io+0x281/0x470
[  272.177423][ T5809]  ? __pfx_wb_writeback+0x10/0x10
[  272.177432][ T5809]  ? do_raw_spin_lock+0x12b/0x2f0
[  272.177446][ T5809]  wb_workfn+0x431/0x10f0
[  272.177462][ T5809]  ? __pfx_wb_workfn+0x10/0x10
[  272.177470][ T5809]  ? rcu_is_watching+0x16/0xb0
[  272.177477][ T5809]  ? trace_hrtimer_start+0x82/0x200
[  272.177490][ T5809]  ? irqentry_exit+0x218/0x910
[  272.177500][ T5809]  ? lockdep_hardirqs_on+0x7b/0x110
[  272.177509][ T5809]  ? irqentry_exit+0x218/0x910
[  272.177517][ T5809]  ? trace_irq_disable+0x3b/0x140
[  272.177528][ T5809]  ? process_scheduled_works+0xa1a/0x14c0
[  272.177538][ T5809]  ? process_scheduled_works+0xa1a/0x14c0
[  272.177548][ T5809]  ? rcu_is_watching+0x16/0xb0
[  272.177556][ T5809]  ? process_scheduled_works+0xa1a/0x14c0
[  272.177564][ T5809]  process_scheduled_works+0xa88/0x14c0
[  272.177582][ T5809]  ? __pfx_process_scheduled_works+0x10/0x10
[  272.177593][ T5809]  ? assign_work+0x3cf/0x5d0
[  272.177611][ T5809]  worker_thread+0xa47/0xfb0
[  272.177632][ T5809]  ? __kthread_parkme+0x71/0x1f0
[  272.177654][ T5809]  kthread+0x38b/0x480
[  272.177672][ T5809]  ? __pfx_worker_thread+0x10/0x10
[  272.177684][ T5809]  ? __pfx_kthread+0x10/0x10
[  272.177729][ T5809]  ret_from_fork+0x514/0xb70
[  272.177749][ T5809]  ? __pfx_ret_from_fork+0x10/0x10
[  272.177760][ T5809]  ? __switch_to+0xc89/0x1420
[  272.177770][ T5809]  ? __pfx_kthread+0x10/0x10
[  272.177781][ T5809]  ret_from_fork_asm+0x1a/0x30
[  272.177797][ T5809]  </TASK>
[  272.177801][ T5809] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  272.295846][ T5809] CPU: 0 UID: 0 PID: 5809 Comm: kworker/u10:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  272.295860][ T5809] Tainted: [L]=SOFTLOCKUP
[  272.295863][ T5809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  272.295868][ T5809] Workqueue: writeback wb_workfn (flush-7:2)
[  272.295884][ T5809] Call Trace:
[  272.295888][ T5809]  <TASK>
[  272.295892][ T5809]  dump_stack_lvl+0xe8/0x150
[  272.295905][ T5809]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  272.295918][ T5809]  f2fs_write_end_io+0x1215/0x16f0
[  272.295938][ T5809]  __submit_merged_bio+0x258/0x6a0
[  272.295947][ T5809]  ? rcu_is_watching+0x16/0xb0
[  272.295957][ T5809]  __submit_merged_write_cond+0x3c9/0x4e0
[  272.295971][ T5809]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  272.295990][ T5809]  f2fs_write_data_pages+0x2a27/0x36f0
[  272.296015][ T5809]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  272.296031][ T5809]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  272.296052][ T5809]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  272.296069][ T5809]  ? __lock_acquire+0x683/0x2cf0
[  272.296086][ T5809]  ? set_shrinker_bit+0x7c/0x350
[  272.296100][ T5809]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  272.296112][ T5809]  do_writepages+0x338/0x560
[  272.296124][ T5809]  ? __lock_acquire+0x683/0x2cf0
[  272.296136][ T5809]  ? reacquire_held_locks+0x104/0x190
[  272.296143][ T5809]  ? writeback_sb_inodes+0x450/0x1b00
[  272.296156][ T5809]  __writeback_single_inode+0x136/0x1220
[  272.296168][ T5809]  ? do_raw_spin_unlock+0x4d/0x200
[  272.296179][ T5809]  writeback_sb_inodes+0x9de/0x1b00
[  272.296189][ T5809]  ? __lock_acquire+0x683/0x2cf0
[  272.296208][ T5809]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  272.296236][ T5809]  ? rcu_is_watching+0x16/0xb0
[  272.296243][ T5809]  ? queue_io+0x2d3/0x470
[  272.296255][ T5809]  wb_writeback+0x41c/0xad0
[  272.296267][ T5809]  ? queue_io+0x281/0x470
[  272.296280][ T5809]  ? __pfx_wb_writeback+0x10/0x10
[  272.296290][ T5809]  ? do_raw_spin_lock+0x12b/0x2f0
[  272.296305][ T5809]  wb_workfn+0x431/0x10f0
[  272.296321][ T5809]  ? __pfx_wb_workfn+0x10/0x10
[  272.296330][ T5809]  ? rcu_is_watching+0x16/0xb0
[  272.296337][ T5809]  ? trace_hrtimer_start+0x82/0x200
[  272.296349][ T5809]  ? irqentry_exit+0x218/0x910
[  272.296359][ T5809]  ? lockdep_hardirqs_on+0x7b/0x110
[  272.296368][ T5809]  ? irqentry_exit+0x218/0x910
[  272.296377][ T5809]  ? trace_irq_disable+0x3b/0x140
[  272.296388][ T5809]  ? process_scheduled_works+0xa1a/0x14c0
[  272.296398][ T5809]  ? process_scheduled_works+0xa1a/0x14c0
[  272.296408][ T5809]  ? rcu_is_watching+0x16/0xb0
[  272.296417][ T5809]  ? process_scheduled_works+0xa1a/0x14c0
[  272.296424][ T5809]  process_scheduled_works+0xa88/0x14c0
[  272.296444][ T5809]  ? __pfx_process_scheduled_works+0x10/0x10
[  272.296455][ T5809]  ? assign_work+0x3cf/0x5d0
[  272.296465][ T5809]  worker_thread+0xa47/0xfb0
[  272.296479][ T5809]  ? __kthread_parkme+0x71/0x1f0
[  272.296492][ T5809]  kthread+0x38b/0x480
[  272.296503][ T5809]  ? __pfx_worker_thread+0x10/0x10
[  272.296510][ T5809]  ? __pfx_kthread+0x10/0x10
[  272.296521][ T5809]  ret_from_fork+0x514/0xb70
[  272.296533][ T5809]  ? __pfx_ret_from_fork+0x10/0x10
[  272.296543][ T5809]  ? __switch_to+0xc89/0x1420
[  272.296553][ T5809]  ? __pfx_kthread+0x10/0x10
[  272.296565][ T5809]  ret_from_fork_asm+0x1a/0x30
[  272.296591][ T5809]  </TASK>
[  272.296596][ T5809] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  272.419102][   T32] corsair-psu 0003:1B1C:1C04.0036: unknown main item tag 0x6
[  272.424907][   T32] corsair-psu 0003:1B1C:1C04.0036: item fetching failed at offset 28/40
[  272.429642][   T32] corsair-psu 0003:1B1C:1C04.0036: probe with driver corsair-psu failed with error -22
[  272.639982][ T8335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.642917][ T8335] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.445216][ T8339] loop2: detected capacity change from 0 to 32768
[  273.454002][ T8339] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.739 (8339)
[  273.461961][ T8339] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  273.465974][ T8339] BTRFS info (device loop2): using crc32c checksum algorithm
[  273.468349][ T8339] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  273.496476][ T8339] BTRFS info (device loop2): rebuilding free space tree
[  273.504841][ T8339] BTRFS info (device loop2): disabling free space tree
[  273.507082][ T8339] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  273.510086][ T8339] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  273.519414][ T8339] BTRFS info (device loop2): enabling ssd optimizations
[  273.521615][ T8339] BTRFS info (device loop2): turning on async discard
[  273.523826][ T8339] BTRFS info (device loop2): enabling disk space caching
[  273.526234][ T8339] BTRFS info (device loop2): force clearing of disk cache
[  273.528516][ T8339] BTRFS info (device loop2): use zstd compression, level 3
[  273.532439][ T8339] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  273.655842][ T8340] EXT4-fs (sda1): re-mounted b4773fba-1738-4da0-8a90-0fe043d0a496.
[  273.691469][ T8358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.695092][ T8358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.390924][   T32] usb 4-1: USB disconnect, device number 45
[  274.393599][   T33] audit: type=1326 audit(1789587146.844:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.3.734" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc0b9e159 code=0x7fc00000
[  274.753947][   T32] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  274.914414][   T32] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00
[  274.918438][   T32] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  274.922020][   T32] usb 4-1: config 0 interface 0 has no altsetting 0
[  274.924454][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.930497][   T32] usb 4-1: config 0 descriptor??
[  274.932719][ T8361] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  275.348450][   T32] itetech 0003:06CB:73F5.0037: unknown main item tag 0x0
[  275.350792][   T32] itetech 0003:06CB:73F5.0037: unknown main item tag 0x0
[  275.352951][   T32] itetech 0003:06CB:73F5.0037: unknown main item tag 0x0
[  275.355374][   T32] itetech 0003:06CB:73F5.0037: unknown main item tag 0x0
[  275.357602][   T32] itetech 0003:06CB:73F5.0037: unknown main item tag 0x0
[  275.359759][   T32] itetech 0003:06CB:73F5.0037: unknown main item tag 0x0
[  275.361913][   T32] itetech 0003:06CB:73F5.0037: unknown main item tag 0x0
[  275.364476][   T32] itetech 0003:06CB:73F5.0037: unknown main item tag 0x0
[  275.366786][   T32] itetech 0003:06CB:73F5.0037: unknown main item tag 0x0
[  275.370225][   T32] itetech 0003:06CB:73F5.0037: hidraw0: USB HID v0.81 Device [HID 06cb:73f5] on usb-dummy_hcd.3-1/input0
[  275.547226][ T5672] usb 4-1: USB disconnect, device number 46
[  276.207842][ T8374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.746'.
[  276.453577][   T24] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[  276.614108][   T24] usb 4-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[  276.619034][   T24] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  276.623517][   T24] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  276.628754][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  276.631591][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.637066][   T24] usb 4-1: config 0 descriptor??
[  276.640072][ T8374] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  276.840328][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.843788][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.056002][   T24] asus 0003:0B05:19B6.0038: hidraw0: USB HID v0.0c Device [HID 0b05:19b6] on usb-dummy_hcd.3-1/input0
[  277.250571][   T24] usb 4-1: USB disconnect, device number 47
[  277.628815][ T8379] loop0: detected capacity change from 0 to 2048
[  277.635810][ T8379] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  277.642273][ T5593] udevd[5593]: incorrect nilfs2 checksum on /dev/loop0
[  277.645834][ T8379] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 2048)
[  277.647274][ T8379] NILFS (loop0): invalid segment: Magic number mismatch
[  277.652712][ T8379] NILFS (loop0): unable to fall back to spare super block
[  277.656901][ T8379] NILFS (loop0): error -22 while searching super root
[  277.662215][ T5593] udevd[5593]: incorrect nilfs2 checksum on /dev/loop0
[  278.023611][   T31] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  278.184062][   T31] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  278.188194][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.191814][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  278.196119][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.200643][   T31] usb 4-1: config 0 descriptor??
[  278.610623][   T31] hid_parser_main: 45 callbacks suppressed
[  278.610636][   T31] pyra 0003:1E7D:2CF6.0039: unknown main item tag 0x0
[  278.615040][   T31] pyra 0003:1E7D:2CF6.0039: unknown main item tag 0x0
[  278.617175][   T31] pyra 0003:1E7D:2CF6.0039: unknown main item tag 0x0
[  278.619254][   T31] pyra 0003:1E7D:2CF6.0039: unknown main item tag 0x0
[  278.621377][   T31] pyra 0003:1E7D:2CF6.0039: unknown main item tag 0x0
[  278.623578][   T31] pyra 0003:1E7D:2CF6.0039: unknown main item tag 0x0
[  278.625788][   T31] pyra 0003:1E7D:2CF6.0039: unknown main item tag 0x0
[  278.629082][   T31] pyra 0003:1E7D:2CF6.0039: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0
[  278.994657][   T31] pyra 0003:1E7D:2CF6.0039: couldn't init struct pyra_device
[  278.997014][   T31] pyra 0003:1E7D:2CF6.0039: couldn't install mouse
[  279.000570][   T31] pyra 0003:1E7D:2CF6.0039: probe with driver pyra failed with error -71
[  279.005433][   T31] usb 4-1: USB disconnect, device number 48
[  279.698089][ T8388] loop3: detected capacity change from 0 to 32768
[  279.700999][ T8388] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.751 (8388)
[  279.708513][ T8388] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  279.711667][ T8388] BTRFS info (device loop3): using sha256 checksum algorithm
[  279.734042][ T8388] BTRFS info (device loop3): enabling ssd optimizations
[  279.746083][   T33] audit: type=1326 audit(1789587152.204:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.2.747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89479e159 code=0x7fc00000
[  279.753058][ T8388] BTRFS info (device loop3): turning on async discard
[  279.762998][ T8388] BTRFS info (device loop3): enabling free space tree
[  279.777112][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.790578][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.801697][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.807303][ T7452] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  279.812208][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.143584][ T5672] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  280.294249][ T5672] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  280.298474][ T5672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.302500][ T5672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.306286][ T5672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.310796][ T5672] usb 4-1: config 0 descriptor??
[  280.360252][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.363248][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.921244][ T5672] usbhid 4-1:0.0: can't add hid device: -71
[  280.925533][ T8413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.928529][ T8413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.929941][ T5672] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  280.941346][ T5672] usb 4-1: USB disconnect, device number 49
[  281.571591][ T8420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.574718][ T8420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.703704][   T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  281.854569][   T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  281.860514][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.865196][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  281.869463][   T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  281.873328][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  281.879158][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.502357][ T8417] loop3: detected capacity change from 0 to 2048
[  282.505008][ T8417] EXT4-fs: Ignoring removed nomblk_io_submit option
[  282.517734][ T8417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.530262][ T8417] EXT4-fs (loop3): shut down requested (2)
[  282.946219][   T10] [drm] Initialized gud 1.0.0 for 4-1:1.0 on minor 2
[  283.339260][   T10] gud 4-1:1.0: [drm] Cannot find any crtc or sizes
[  283.345525][   T10] usb 4-1: USB disconnect, device number 50
[  283.864616][ T7452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.183541][   T32] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  284.354806][   T32] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  284.359366][   T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.363236][   T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.366832][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.371968][   T32] usb 4-1: config 0 descriptor??
[  284.461179][   T33] audit: type=1326 audit(1789587156.924:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.2.758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89479e159 code=0x7fc00000
[  284.505501][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.508996][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.520631][ T8428] loop2: detected capacity change from 0 to 2048
[  284.525765][ T8428] EXT4-fs: Ignoring removed nomblk_io_submit option
[  284.549707][ T8428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.562068][ T8428] EXT4-fs (loop2): shut down requested (2)
[  284.779893][   T32] hid-steam 0003:28DE:1142.003A: unknown main item tag 0x0
[  284.782743][   T32] hid-steam 0003:28DE:1142.003A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  284.846180][   T32] hid-steam 0003:28DE:1142.003A: Steam wireless receiver connected
[  284.848977][   T32] hid-steam 0003:28DE:1142.003A: No HID_FEATURE_REPORT present for ID 0
[  284.854206][   T32] hid-steam 0003:28DE:1142.003A: steam_probe:steam_get_conn_status failed with error -22
[  284.859882][   T32] hid-steam 0003:28DE:1142.003B: unknown main item tag 0x0
[  284.867551][   T32] hid-steam 0003:28DE:1142.003B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  285.088751][ T5598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.117936][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.121059][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.137960][ T8434] loop2: detected capacity change from 0 to 2048
[  285.140504][ T8434] EXT4-fs: Ignoring removed nomblk_io_submit option
[  285.157571][ T8434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.164177][ T8434] EXT4-fs (loop2): shut down requested (2)
[  285.679540][ T5598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.804389][ T8440] loop2: detected capacity change from 0 to 32768
[  285.807275][ T8440] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.764 (8440)
[  285.815403][ T8440] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  285.821899][ T8440] BTRFS info (device loop2): using crc32c checksum algorithm
[  285.827742][ T8440] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  285.861461][ T8440] BTRFS info (device loop2): rebuilding free space tree
[  285.877394][ T8440] BTRFS info (device loop2): disabling free space tree
[  285.881019][ T8440] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  285.885317][ T8440] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  285.894739][ T8440] BTRFS info (device loop2): enabling ssd optimizations
[  285.897576][ T8440] BTRFS info (device loop2): turning on async discard
[  285.900335][ T8440] BTRFS info (device loop2): enabling disk space caching
[  285.903174][ T8440] BTRFS info (device loop2): force clearing of disk cache
[  285.907293][ T8440] BTRFS info (device loop2): use zstd compression, level 3
[  286.190718][ T5598] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  286.369901][ T8466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.372957][ T8466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.520766][ T8467] loop2: detected capacity change from 0 to 32768
[  286.524621][ T8467] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.767 (8467)
[  286.538251][ T8467] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  286.542053][ T8467] BTRFS info (device loop2): using sha256 checksum algorithm
[  286.561800][ T8467] BTRFS info (device loop2): enabling ssd optimizations
[  286.564536][ T8467] BTRFS info (device loop2): turning on async discard
[  286.566707][ T8467] BTRFS info (device loop2): enabling free space tree
[  286.634716][   T31] usb 4-1: reset high-speed USB device number 51 using dummy_hcd
[  286.805831][   T31] usb 4-1: device firmware changed
[  286.810234][   T10] usb 4-1: USB disconnect, device number 51
[  286.823035][   T10] hid-steam 0003:28DE:1142.003A: Steam wireless receiver disconnected
[  286.953638][   T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  287.104279][   T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  287.108393][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  287.111496][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  287.115004][   T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  287.117935][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  287.121949][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.740466][ T8463] loop3: detected capacity change from 0 to 2048
[  287.743367][ T8463] EXT4-fs: Ignoring removed nomblk_io_submit option
[  287.771985][ T8463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.777946][ T8463] EXT4-fs (loop3): shut down requested (2)
[  287.982950][   T10] gud 4-1:1.0: Failed to get connectors (error=-5)
[  287.985903][   T10] gud 4-1:1.0: probe with driver gud failed with error -5
[  289.350053][   T31] usb 4-1: USB disconnect, device number 52
[  289.356902][ T7452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.386548][ T5598] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  289.559392][ T8497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.564326][ T8497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.669877][ T8497] loop2: detected capacity change from 0 to 32768
[  289.676401][ T8497] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.772 (8497)
[  289.686777][ T8497] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  289.689966][ T8497] BTRFS info (device loop2): using sha256 checksum algorithm
[  289.729762][ T8497] BTRFS info (device loop2): enabling ssd optimizations
[  289.732108][ T8497] BTRFS info (device loop2): turning on async discard
[  289.735035][ T8497] BTRFS info (device loop2): enabling free space tree
[  289.822052][ T5661] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  290.361486][ T8497] syz.2.772 (8497) used greatest stack depth: 19400 bytes left
[  290.381195][ T5598] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  290.508286][ T8520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.511094][ T8520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.516048][ T8520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.518891][ T8520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.553587][   T31] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  290.713497][   T31] usb 4-1: Using ep0 maxpacket: 8
[  290.717230][   T31] usb 4-1: unable to get BOS descriptor or descriptor too short
[  290.719685][   T31] usb 4-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[  290.726694][   T31] usb 4-1: language id specifier not provided by device, defaulting to English
[  290.730962][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.734033][   T31] usb 4-1: Product: 聒簶浢ꢽ
[  290.735922][   T31] usb 4-1: Manufacturer: 耉⃢ნﰂ듬߻௺걵ᾣ뚑胤西識᭠ԧ
[  290.738583][   T31] usb 4-1: SerialNumber: Б
[  290.944346][ T8516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.947237][ T8516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.963190][   T31] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  290.966215][   T31] usb 4-1: found format II with max.bitrate = 2, frame size=19039
[  290.969607][   T31] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  290.988091][   T31] usb 4-1: USB disconnect, device number 53
[  291.048196][ T8526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.051037][ T8526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.054356][ T8526] sg_write: data in/out 331740/136 bytes for SCSI command 0x0-- guessing data in;
[  291.054356][ T8526]    program syz.2.777 not setting count and/or reply_len properly
[  291.066789][ T8526] loop2: detected capacity change from 0 to 128
[  291.069542][ T8526] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  291.080755][ T8526] loop2: detected capacity change from 0 to 736
[  291.803679][   T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  291.955159][   T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  291.959994][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  291.966032][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  291.969924][   T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  291.975356][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  291.980426][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.606881][ T8530] loop3: detected capacity change from 0 to 2048
[  292.610427][ T8530] EXT4-fs: Ignoring removed nomblk_io_submit option
[  292.648025][ T8530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.657997][   T10] gud 4-1:1.0: Failed to add properties (error=-71)
[  292.662289][   T10] gud 4-1:1.0: probe with driver gud failed with error -71
[  292.673602][   T10] usb 4-1: USB disconnect, device number 54
[  293.180381][ T7452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.503564][   T32] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  293.673540][   T32] usb 4-1: Using ep0 maxpacket: 16
[  293.676101][   T32] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  293.679941][   T32] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  293.684271][   T32] usb 4-1: config 0 interface 0 has no altsetting 0
[  293.686486][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.696431][   T32] usb 4-1: config 0 descriptor??
[  293.719687][ T8539] loop0: detected capacity change from 0 to 512
[  293.724092][ T8539] EXT4-fs (loop0): Test dummy encryption mode enabled
[  293.728688][ T8539] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  293.732746][ T8539] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  293.747947][ T8539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.758128][ T8539] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  293.774309][ T8539] device-mapper: ioctl: Invalid ioctl structure: name test_m, dev 32
[  293.787812][ T5594] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.811547][ T8544] loop0: detected capacity change from 0 to 8
[  294.244390][ T8546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.251583][ T8546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.303273][ T8537] loop3: detected capacity change from 0 to 32768
[  294.342970][ T8537] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  294.347341][ T8537] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  294.373888][ T8537] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  294.382873][ T8537] XFS (loop3): Tail block (0x10) overwrite detected. Updated to 0x30
[  294.392369][ T8537] XFS (loop3): Ending clean mount
[  294.402846][   T32] holtek_mouse 0003:04D9:A067.003C: unknown main item tag 0x0
[  294.405475][   T32] holtek_mouse 0003:04D9:A067.003C: unknown main item tag 0x0
[  294.408091][   T32] holtek_mouse 0003:04D9:A067.003C: unknown main item tag 0x0
[  294.410566][   T32] holtek_mouse 0003:04D9:A067.003C: unknown main item tag 0x0
[  294.413015][   T32] holtek_mouse 0003:04D9:A067.003C: unknown main item tag 0x0
[  294.415579][   T32] holtek_mouse 0003:04D9:A067.003C: unknown main item tag 0x0
[  294.418048][   T32] holtek_mouse 0003:04D9:A067.003C: unknown main item tag 0x0
[  294.420881][   T32] holtek_mouse 0003:04D9:A067.003C: unknown main item tag 0x0
[  294.423006][ T8546] infiniband syz2: set down
[  294.423721][   T32] holtek_mouse 0003:04D9:A067.003C: unknown main item tag 0x0
[  294.423735][   T32] holtek_mouse 0003:04D9:A067.003C: unknown main item tag 0x0
[  294.431687][ T8546] infiniband syz2: added ipvlan1
[  294.431822][   T32] holtek_mouse 0003:04D9:A067.003C: hidraw0: USB HID v0.05 Device [HID 04d9:a067] on usb-dummy_hcd.3-1/input0
[  294.458826][ T8546] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  294.463719][ T8546] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  294.469007][ T8546] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  294.487996][ T8546] RDS/IB: syz2: added
[  294.489745][ T8546] smc: adding ib device syz2 with port count 1
[  294.492183][ T8546] smc:    ib device syz2 port 1 has no pnetid
[  294.601569][   T10] usb 4-1: USB disconnect, device number 55
[  295.117695][ T7452] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  295.243208][ T8558] loop3: detected capacity change from 0 to 512
[  295.250743][ T8558] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  295.257615][ T8558] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (26919!=33349)
[  295.262350][ T8558] EXT4-fs (loop3): mount failed
[  295.513664][   T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  295.587737][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.591184][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.610883][ T8561] loop2: detected capacity change from 0 to 2048
[  295.624288][ T8561] EXT4-fs: Ignoring removed nomblk_io_submit option
[  295.642913][ T8561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.664730][   T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  295.669748][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.674416][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.679687][   T10] usb 4-1: config 0 descriptor??
[  295.895461][   T33] audit: type=1800 audit(1789587168.364:24): pid=8558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.784" name="default_roce_mode" dev="configfs" ino=15701 res=0 errno=0
[  296.110523][   T10] keytouch 0003:0926:3333.003D: fixing up Keytouch IEC report descriptor
[  296.116397][   T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.003D/input/input53
[  296.172967][ T5598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.254291][   T10] keytouch 0003:0926:3333.003D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  296.405753][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.408851][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.685685][ T5672] usb 4-1: USB disconnect, device number 56
[  296.946585][ T8574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.950139][ T8574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.957736][ T8574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.961424][ T8574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.973284][ T8572] loop0: detected capacity change from 0 to 32768
[  296.976811][ T8574] IPVS: sh: FWM 3 0x00000003 - no destination available
[  296.979841][ T8572] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.789 (8572)
[  296.991905][ T8572] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  296.996840][ T8572] BTRFS info (device loop0): using crc32c checksum algorithm
[  296.999179][ T8572] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  297.018963][ T8572] BTRFS info (device loop0): rebuilding free space tree
[  297.028688][ T8572] BTRFS info (device loop0): disabling free space tree
[  297.033275][ T8572] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  297.036824][ T8572] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  297.042196][ T8572] BTRFS info (device loop0): enabling ssd optimizations
[  297.044829][ T8572] BTRFS info (device loop0): turning on async discard
[  297.046967][ T8572] BTRFS info (device loop0): enabling disk space caching
[  297.049104][ T8572] BTRFS info (device loop0): force clearing of disk cache
[  297.051719][ T8572] BTRFS info (device loop0): use zstd compression, level 3
[  297.355458][ T5594] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  297.508973][ T8593] loop3: detected capacity change from 0 to 32768
[  297.513802][ T8593] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.791 (8593)
[  297.548581][ T8593] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  297.560688][ T8593] BTRFS info (device loop3): using crc32c checksum algorithm
[  297.568735][ T8593] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  297.588497][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.591516][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.628120][ T8593] BTRFS info (device loop3): rebuilding free space tree
[  297.652719][ T8593] BTRFS info (device loop3): disabling free space tree
[  297.655036][ T8593] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  297.658137][ T8593] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  297.663361][ T8593] BTRFS info (device loop3): enabling ssd optimizations
[  297.666138][ T8593] BTRFS info (device loop3): turning on async discard
[  297.668410][ T8593] BTRFS info (device loop3): enabling disk space caching
[  297.670603][ T8593] BTRFS info (device loop3): force clearing of disk cache
[  297.673042][ T8593] BTRFS info (device loop3): use zstd compression, level 3
[  297.923677][   T31] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  298.094043][   T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  298.097924][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.139525][ T8616] netlink: 'syz.2.795': attribute type 4 has an invalid length.
[  298.180135][ T8618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.183152][ T8618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.306088][   T31] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[  298.730651][ T8621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.735094][ T8621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.739224][   T55] Bluetooth: hci2: link tx timeout
[  298.742341][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  298.748646][   T55] Bluetooth: hci2: link tx timeout
[  298.751823][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  298.760772][ T8593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.763918][ T8593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.307066][ T8625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.309847][ T8625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.888495][ T8629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.891746][ T8629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.555579][ T8636] loop2: detected capacity change from 0 to 32768
[  300.558368][ T8636] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 0d78c974-4b3e-427e-ab0b-e0e8a423cc25
[  300.562895][ T8636] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.803 (8636)
[  300.574486][ T8636] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  300.580782][ T8636] BTRFS info (device loop2): using crc32c checksum algorithm
[  300.585880][ T8636] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  300.611320][ T8640] FAULT_INJECTION: forcing a failure.
[  300.611320][ T8640] name failslab, interval 1, probability 0, space 0, times 0
[  300.618942][ T8640] CPU: 0 UID: 0 PID: 8640 Comm: syz.0.804 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  300.618956][ T8640] Tainted: [L]=SOFTLOCKUP
[  300.618960][ T8640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  300.618966][ T8640] Call Trace:
[  300.618969][ T8640]  <TASK>
[  300.618973][ T8640]  dump_stack_lvl+0xe8/0x150
[  300.618988][ T8640]  should_fail_ex+0x410/0x560
[  300.618999][ T8640]  should_failslab+0xa8/0x100
[  300.619014][ T8640]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  300.619025][ T8640]  ? sock_alloc_inode+0x2c/0x1a0
[  300.619061][ T8640]  ? sock_alloc_inode+0x2c/0x1a0
[  300.619076][ T8640]  ? __pfx_sock_alloc_inode+0x10/0x10
[  300.619088][ T8640]  sock_alloc_inode+0x2c/0x1a0
[  300.619100][ T8640]  ? __pfx_sock_alloc_inode+0x10/0x10
[  300.619116][ T8640]  alloc_inode+0x6a/0x1b0
[  300.619128][ T8640]  __sock_create+0x12d/0x9d0
[  300.619136][ T8640]  ? ksys_write+0x242/0x270
[  300.619148][ T8640]  __sys_socket+0xd6/0x1b0
[  300.619157][ T8640]  __x64_sys_socket+0x7a/0x90
[  300.619166][ T8640]  do_syscall_64+0x166/0x520
[  300.619176][ T8640]  ? trace_irq_disable+0x3b/0x140
[  300.619187][ T8640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.619197][ T8640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.619204][ T8640] RIP: 0033:0x7f8b8c79e159
[  300.619212][ T8640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  300.619218][ T8640] RSP: 002b:00007f8b8d696028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  300.619228][ T8640] RAX: ffffffffffffffda RBX: 00007f8b8ca25fa0 RCX: 00007f8b8c79e159
[  300.619233][ T8640] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010
[  300.619238][ T8640] RBP: 00007f8b8c83506b R08: 0000000000000000 R09: 0000000000000000
[  300.619242][ T8640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.619246][ T8640] R13: 00007f8b8ca26038 R14: 00007f8b8ca25fa0 R15: 00007ffcfcada828
[  300.619258][ T8640]  </TASK>
[  300.619297][ T8640] socket: no more sockets
[  300.725966][ T8636] BTRFS info (device loop2): rebuilding free space tree
[  300.745994][ T8636] BTRFS info (device loop2): disabling free space tree
[  300.748248][ T8636] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  300.751265][ T8636] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  300.767182][ T8636] BTRFS info (device loop2): enabling ssd optimizations
[  300.770366][ T8636] BTRFS info (device loop2): turning on async discard
[  300.773098][ T8636] BTRFS info (device loop2): enabling disk space caching
[  300.776037][ T8636] BTRFS info (device loop2): force clearing of disk cache
[  300.778393][ T8636] BTRFS info (device loop2): use zstd compression, level 3
[  300.845811][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  301.033410][ T5598] BTRFS info (device loop2): last unmount of filesystem 0d78c974-4b3e-427e-ab0b-e0e8a423cc25
[  301.232024][ T8664] ip_tables: iptables: counters copy to user failed while replacing table
[  301.238465][ T8664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.243020][ T8664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.818702][ T8666] loop2: detected capacity change from 0 to 4096
[  301.821971][ T8666] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  301.834928][ T8666] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  301.837181][ T8666] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  301.850332][ T1108] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  301.852716][ T5598] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  301.855213][ T5598] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  301.857497][ T5598] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  301.859877][ T1118] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  301.897961][ T8668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.901850][ T8668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.918713][ T8668] Bluetooth: MGMT ver 1.23
[  301.921961][ T8668] Bluetooth: hci0: service_discovery: too big uuid_count value 36441
[  301.952458][ T8668] loop2: detected capacity change from 0 to 4096
[  302.510348][ T8675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.515289][ T8675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.720012][ T8675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.723164][ T8675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.923583][ T5600] Bluetooth: hci2: command 0x0406 tx timeout
[  303.248271][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.251651][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.255542][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.258341][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.261124][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.264138][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.267156][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.269923][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.272720][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.276151][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.779721][ T8687] loop0: detected capacity change from 0 to 512
[  303.782660][ T8687] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  303.787360][ T8687] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (26919!=33349)
[  303.793400][ T8687] EXT4-fs (loop0): mount failed
[  303.843720][ T8690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.846783][ T8690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.044942][   T10] usb 4-1: USB disconnect, device number 57
[  304.107717][ T7452] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  304.463637][   T32] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  304.486014][ T8695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.489794][ T8695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.634406][   T32] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  304.638388][   T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  304.641898][   T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  304.645635][   T32] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  304.648922][   T32] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  304.653167][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.273143][ T8692] loop3: detected capacity change from 0 to 2048
[  305.276527][ T8692] EXT4-fs: Ignoring removed nomblk_io_submit option
[  305.291644][ T8692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.301220][   T32] gud 4-1:1.0: Failed to add properties (error=-71)
[  305.304469][   T32] gud 4-1:1.0: probe with driver gud failed with error -71
[  305.319556][   T32] usb 4-1: USB disconnect, device number 58
[  305.821927][ T7452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.986244][ T8700] loop3: detected capacity change from 0 to 32768
[  305.991121][ T8700] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.817 (8700)
[  306.016370][ T8700] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  306.023567][ T8700] BTRFS info (device loop3): using crc32c checksum algorithm
[  306.030385][ T8700] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  306.072794][ T8700] BTRFS info (device loop3): rebuilding free space tree
[  306.082948][ T8700] BTRFS info (device loop3): disabling free space tree
[  306.085891][ T8700] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  306.089518][ T8700] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  306.097790][ T8700] BTRFS info (device loop3): enabling ssd optimizations
[  306.100524][ T8700] BTRFS info (device loop3): turning on async discard
[  306.103137][ T8700] BTRFS info (device loop3): enabling disk space caching
[  306.106793][ T8700] BTRFS info (device loop3): force clearing of disk cache
[  306.109843][ T8700] BTRFS info (device loop3): use zstd compression, level 3
[  306.474298][ T7452] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  306.621351][   T33] audit: type=1400 audit(1789587179.084:25): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=8720 comm="syz.3.819" name="p" offset=33
[  306.815329][ T8723] loop0: detected capacity change from 0 to 512
[  306.822399][ T8723] EXT4-fs (loop0): Test dummy encryption mode enabled
[  306.827052][ T8723] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  306.831162][ T8723] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  306.840949][ T8723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.848559][ T8723] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  306.858520][ T8723] device-mapper: ioctl: Invalid ioctl structure: name test_m, dev 3200000000
[  306.872004][ T5594] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.893564][   T32] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  306.902838][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'.
[  306.912093][ T8726] loop0: detected capacity change from 0 to 256
[  307.054234][   T32] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  307.058263][   T32] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.061278][   T32] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  307.065402][   T32] usb 4-1: config 0 interface 0 has no altsetting 0
[  307.068140][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.072375][   T32] usb 4-1: config 0 descriptor??
[  307.383623][   T33] audit: type=1326 audit(1789587179.844:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.2.816" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89479e159 code=0x7fc00000
[  307.416258][ T8729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.419823][ T8729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.482888][   T32] input: HID 1020:0006 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1020:0006.003E/input/input54
[  307.551251][   T32] belkin 0003:1020:0006.003E: input,hidraw0: USB HID v0.00 Joystick [HID 1020:0006] on usb-dummy_hcd.3-1/input0
[  307.678756][   T10] usb 4-1: USB disconnect, device number 59
[  307.952485][ T8731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.955445][ T8731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.960450][ T8731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.963185][ T8731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.972222][ T8731] IPVS: sh: FWM 3 0x00000003 - no destination available
[  308.473745][   T10] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[  308.509936][ T8737] loop2: detected capacity change from 0 to 512
[  308.512753][ T8737] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  308.516110][ T8737] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (26919!=33349)
[  308.521153][ T8737] EXT4-fs (loop2): mount failed
[  308.538234][ T8737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.545251][ T8737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.624308][   T10] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  308.629272][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  308.634103][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.641224][   T10] usb 4-1: config 0 descriptor??
[  308.645743][ T8735] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  309.052940][ T8735] xt_bpf: check failed: parse error
[  309.058113][   T10] cypress 0003:04B4:07B1.003F: ignoring exceeding usage max
[  309.062318][   T10] cypress 0003:04B4:07B1.003F: hidraw0: USB HID vef.fd Device [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0
[  309.105544][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.109185][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.259678][   T32] usb 4-1: USB disconnect, device number 60
[  309.747922][ T8743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.751561][ T8743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.023627][   T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  310.173568][   T10] usb 4-1: Using ep0 maxpacket: 8
[  310.176930][   T10] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  310.184931][   T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30
[  310.189179][   T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  310.194032][   T10] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[  310.198851][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  310.201511][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.208683][   T10] usb 4-1: config 0 descriptor??
[  310.247952][ T8749] loop0: detected capacity change from 0 to 256
[  310.499221][ T8759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.502950][ T8759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.021266][   T10] hid-alps 0003:044E:120C.0040: failed read register (-71)
[  311.023963][   T10] hid-alps 0003:044E:120C.0040: failed T4_PRM_ID_CONFIG_3 (-71)
[  311.027818][   T10] hid-alps 0003:044E:120C.0040: hidraw0: USB HID v0.00 Joystick [HID 044e:120c] on usb-dummy_hcd.3-1/input0
[  311.033033][   T10] usb 4-1: USB disconnect, device number 61
[  311.692826][ T8761] loop3: detected capacity change from 0 to 32768
[  311.700178][ T8761] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.836 (8761)
[  311.720317][ T8761] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  311.724649][ T8761] BTRFS info (device loop3): using sha256 checksum algorithm
[  311.745527][ T8761] BTRFS info (device loop3): enabling ssd optimizations
[  311.747759][ T8761] BTRFS info (device loop3): turning on async discard
[  311.749889][ T8761] BTRFS info (device loop3): enabling free space tree
[  311.896527][ T7452] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  312.273534][   T32] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  312.403619][   T32] usb 4-1: device descriptor read/64, error -71
[  312.643526][   T32] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  312.647366][   T33] audit: type=1326 audit(1789587185.114:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8741 comm="syz.2.828" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89479e159 code=0x7fc00000
[  312.773554][   T32] usb 4-1: device descriptor read/64, error -71
[  312.786645][ T8780] loop2: detected capacity change from 0 to 4096
[  312.798165][ T8780] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  312.819337][ T8780] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  312.821908][ T8780] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  312.848231][   T88] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  312.850606][ T5598] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  312.852923][ T5598] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  312.856279][ T5598] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  312.858885][   T88] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  312.894063][   T32] usb usb4-port1: attempt power cycle
[  313.243648][   T32] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  313.275084][   T32] usb 4-1: device descriptor read/8, error -71
[  313.535176][   T32] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  313.555534][   T32] usb 4-1: device descriptor read/8, error -71
[  313.676065][   T32] usb usb4-port1: unable to enumerate USB device
[  315.403659][   T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  315.553706][   T10] usb 4-1: Using ep0 maxpacket: 16
[  315.556958][   T10] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c04, bcdDevice= 0.00
[  315.561701][   T10] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  315.566737][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  315.569744][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.577082][   T10] usb 4-1: config 0 descriptor??
[  315.961827][ T8798] FAULT_INJECTION: forcing a failure.
[  315.961827][ T8798] name failslab, interval 1, probability 0, space 0, times 0
[  315.965837][ T8798] CPU: 1 UID: 0 PID: 8798 Comm: syz.2.845 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  315.965850][ T8798] Tainted: [L]=SOFTLOCKUP
[  315.965853][ T8798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  315.965859][ T8798] Call Trace:
[  315.965862][ T8798]  <TASK>
[  315.965866][ T8798]  dump_stack_lvl+0xe8/0x150
[  315.965882][ T8798]  should_fail_ex+0x410/0x560
[  315.965894][ T8798]  should_failslab+0xa8/0x100
[  315.965908][ T8798]  __kmalloc_cache_noprof+0xa8/0x660
[  315.965920][ T8798]  ? __task_pid_nr_ns+0x28/0x470
[  315.965933][ T8798]  ? proc_self_get_link+0xe5/0x180
[  315.965942][ T8798]  ? proc_self_get_link+0xe5/0x180
[  315.965952][ T8798]  ? __task_pid_nr_ns+0x399/0x470
[  315.965969][ T8798]  proc_self_get_link+0xe5/0x180
[  315.965978][ T8798]  ? __pfx_proc_self_get_link+0x10/0x10
[  315.965986][ T8798]  pick_link+0x782/0xfe0
[  315.965998][ T8798]  step_into_slowpath+0x58a/0x820
[  315.966007][ T8798]  ? __pfx_step_into_slowpath+0x10/0x10
[  315.966019][ T8798]  link_path_walk+0xd5e/0x1910
[  315.966035][ T8798]  path_openat+0x1c9/0x1d60
[  315.966051][ T8798]  do_file_open+0x23e/0x4a0
[  315.966063][ T8798]  ? __pfx_do_file_open+0x10/0x10
[  315.966080][ T8798]  ? _raw_spin_unlock+0x28/0x50
[  315.966089][ T8798]  ? alloc_fd+0x651/0x6c0
[  315.966104][ T8798]  do_sys_openat2+0x115/0x200
[  315.966114][ T8798]  ? __se_sys_futex+0x3a8/0x450
[  315.966124][ T8798]  ? __pfx_do_sys_openat2+0x10/0x10
[  315.966140][ T8798]  __x64_sys_openat+0x138/0x170
[  315.966154][ T8798]  do_syscall_64+0x166/0x520
[  315.966164][ T8798]  ? trace_irq_disable+0x3b/0x140
[  315.966175][ T8798]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.966185][ T8798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.966192][ T8798] RIP: 0033:0x7fd89475e98e
[  315.966200][ T8798] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  315.966206][ T8798] RSP: 002b:00007fd8955daec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  315.966216][ T8798] RAX: ffffffffffffffda RBX: 00007fd8955db6c0 RCX: 00007fd89475e98e
[  315.966221][ T8798] RDX: 0000000000000002 RSI: 00007fd8955daf90 RDI: ffffffffffffff9c
[  315.966226][ T8798] RBP: 00007fd89483506b R08: 0000000000000000 R09: 0000000000000000
[  315.966231][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  315.966235][ T8798] R13: 00007fd894a26038 R14: 00007fd894a25fa0 R15: 00007ffd5354f598
[  315.966246][ T8798]  </TASK>
[  316.057085][   T10] hid_parser_main: 25 callbacks suppressed
[  316.057097][   T10] corsair-psu 0003:1B1C:1C04.0041: unknown main item tag 0x6
[  316.061712][   T10] corsair-psu 0003:1B1C:1C04.0041: item fetching failed at offset 28/40
[  316.066380][   T10] corsair-psu 0003:1B1C:1C04.0041: probe with driver corsair-psu failed with error -22
[  316.073132][ T8800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.080732][ T8800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.631645][ T8802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.637591][ T8802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.697981][ T8806] tipc: Trying to set illegal importance in message
[  317.078390][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  317.082585][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  317.184245][ T8808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.191050][ T8808] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.735794][ T8810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.740741][ T8810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.760249][ T8810] loop2: detected capacity change from 0 to 1764
[  317.777276][ T8810] iso9660: Unknown parameter 'no	'
[  317.795449][ T8810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.851'.
[  318.058367][   T33] audit: type=1326 audit(1789587190.524:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8794 comm="syz.3.844" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc0b9e159 code=0x7fc00000
[  318.078446][   T31] usb 4-1: USB disconnect, device number 66
[  318.362009][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.367866][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.928139][ T8817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.931586][ T8817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.948145][ T8817] loop2: detected capacity change from 0 to 2048
[  318.950631][ T8817] EXT4-fs: Ignoring removed nomblk_io_submit option
[  318.968268][ T8817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.972775][ T8817] EXT4-fs (loop2): shut down requested (2)
[  321.140847][ T5598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.197304][ T8825] FAULT_INJECTION: forcing a failure.
[  321.197304][ T8825] name failslab, interval 1, probability 0, space 0, times 0
[  321.202582][ T8825] CPU: 0 UID: 0 PID: 8825 Comm: syz.3.857 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  321.202596][ T8825] Tainted: [L]=SOFTLOCKUP
[  321.202598][ T8825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  321.202604][ T8825] Call Trace:
[  321.202608][ T8825]  <TASK>
[  321.202612][ T8825]  dump_stack_lvl+0xe8/0x150
[  321.202627][ T8825]  should_fail_ex+0x410/0x560
[  321.202639][ T8825]  should_failslab+0xa8/0x100
[  321.202654][ T8825]  __kmalloc_noprof+0xfe/0x720
[  321.202664][ T8825]  ? rcu_is_watching+0x16/0xb0
[  321.202672][ T8825]  ? tomoyo_realpath_from_path+0xef/0x640
[  321.202683][ T8825]  ? tomoyo_realpath_from_path+0xef/0x640
[  321.202695][ T8825]  tomoyo_realpath_from_path+0xef/0x640
[  321.202709][ T8825]  ? tomoyo_path_number_perm+0x219/0x5f0
[  321.202723][ T8825]  tomoyo_path_number_perm+0x246/0x5f0
[  321.202737][ T8825]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  321.202748][ T8825]  ? __lock_acquire+0x683/0x2cf0
[  321.202763][ T8825]  ? hook_file_ioctl+0x1f0/0x5f0
[  321.202778][ T8825]  ? __fget_files+0x2a/0x420
[  321.202787][ T8825]  ? __fget_files+0x2a/0x420
[  321.202793][ T8825]  ? __fget_files+0x3a2/0x420
[  321.202800][ T8825]  ? __fget_files+0x2a/0x420
[  321.202810][ T8825]  security_file_ioctl+0xc3/0x2a0
[  321.202823][ T8825]  __se_sys_ioctl+0x47/0x170
[  321.202852][ T8825]  do_syscall_64+0x166/0x520
[  321.202865][ T8825]  ? trace_irq_disable+0x3b/0x140
[  321.202875][ T8825]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.202886][ T8825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.202895][ T8825] RIP: 0033:0x7ffbc0b9e159
[  321.202903][ T8825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  321.202911][ T8825] RSP: 002b:00007ffbc1a49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  321.202920][ T8825] RAX: ffffffffffffffda RBX: 00007ffbc0e25fa0 RCX: 00007ffbc0b9e159
[  321.202926][ T8825] RDX: 00000000000000c8 RSI: 0000000000005441 RDI: 0000000000000003
[  321.202930][ T8825] RBP: 00007ffbc0c3506b R08: 0000000000000000 R09: 0000000000000000
[  321.202935][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  321.202949][ T8825] R13: 00007ffbc0e26038 R14: 00007ffbc0e25fa0 R15: 00007ffc07dbcd08
[  321.202970][ T8825]  </TASK>
[  321.203059][ T8825] ERROR: Out of memory at tomoyo_realpath_from_path.
[  321.216168][ T8828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.286595][ T8828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.292777][ T8828] loop2: detected capacity change from 0 to 256
[  321.297110][ T8828] exFAT-fs (loop2): bogus data start sector
[  321.299666][ T8828] exFAT-fs (loop2): failed to read boot sector
[  321.301529][ T8828] exFAT-fs (loop2): failed to recognize exfat type
[  321.523512][   T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  321.673601][   T10] usb 4-1: Using ep0 maxpacket: 8
[  321.676245][   T10] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  321.680032][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  321.683191][   T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  321.689246][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.691788][   T10] usb 4-1: Product: syz
[  321.693064][   T10] usb 4-1: Manufacturer: syz
[  321.694630][   T10] usb 4-1: SerialNumber: syz
[  321.825622][ T8830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.828968][ T8830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.904037][   T10] usb 4-1: unit 4 not found!
[  321.943776][   T10] usb 4-1: USB disconnect, device number 67
[  321.970713][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'.
[  321.974100][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'.
[  321.992977][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'.
[  322.002930][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'.
[  322.683851][ T5672] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  322.770234][ T8839] loop0: detected capacity change from 0 to 16
[  322.776033][ T8839] erofs (device loop0): mounted with root inode @ nid 36.
[  322.830428][ T8841] FAULT_INJECTION: forcing a failure.
[  322.830428][ T8841] name failslab, interval 1, probability 0, space 0, times 0
[  322.837785][ T5672] usb 4-1: Using ep0 maxpacket: 8
[  322.842152][ T8841] CPU: 0 UID: 0 PID: 8841 Comm: syz.0.862 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  322.842178][ T8841] Tainted: [L]=SOFTLOCKUP
[  322.842183][ T8841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  322.842191][ T8841] Call Trace:
[  322.842197][ T8841]  <TASK>
[  322.842203][ T8841]  dump_stack_lvl+0xe8/0x150
[  322.842228][ T8841]  should_fail_ex+0x410/0x560
[  322.842250][ T8841]  should_failslab+0xa8/0x100
[  322.842271][ T8841]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  322.842289][ T8841]  ? seq_open+0x5f/0x140
[  322.842304][ T8841]  ? seq_open+0x5f/0x140
[  322.842325][ T8841]  seq_open+0x5f/0x140
[  322.842345][ T8841]  md_seq_open+0x23/0xc0
[  322.842363][ T8841]  proc_reg_open+0x244/0x530
[  322.842383][ T8841]  ? __pfx_proc_reg_open+0x10/0x10
[  322.842398][ T8841]  do_dentry_open+0x816/0x1380
[  322.842425][ T8841]  vfs_open+0x3b/0x340
[  322.842441][ T8841]  ? path_openat+0x1428/0x1d60
[  322.842457][ T8841]  path_openat+0x1443/0x1d60
[  322.842483][ T8841]  do_file_open+0x23e/0x4a0
[  322.842502][ T8841]  ? __pfx_do_file_open+0x10/0x10
[  322.842532][ T8841]  ? _raw_spin_unlock+0x28/0x50
[  322.842578][ T8841]  ? alloc_fd+0x651/0x6c0
[  322.842607][ T8841]  do_sys_openat2+0x115/0x200
[  322.842630][ T8841]  ? __se_sys_futex+0x3a8/0x450
[  322.842647][ T8841]  ? __pfx_do_sys_openat2+0x10/0x10
[  322.842670][ T8841]  ? __fget_files+0x2a/0x420
[  322.842685][ T8841]  ? rcu_is_watching+0x16/0xb0
[  322.842704][ T8841]  __x64_sys_openat+0x138/0x170
[  322.842728][ T8841]  do_syscall_64+0x166/0x520
[  322.842744][ T8841]  ? trace_irq_disable+0x3b/0x140
[  322.842760][ T8841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.842777][ T8841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.842790][ T8841] RIP: 0033:0x7f8b8c79e159
[  322.842803][ T8841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  322.842814][ T8841] RSP: 002b:00007f8b8d696028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  322.842829][ T8841] RAX: ffffffffffffffda RBX: 00007f8b8ca25fa0 RCX: 00007f8b8c79e159
[  322.842840][ T8841] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  322.842851][ T8841] RBP: 00007f8b8c83506b R08: 0000000000000000 R09: 0000000000000000
[  322.842859][ T8841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  322.842869][ T8841] R13: 00007f8b8ca26038 R14: 00007f8b8ca25fa0 R15: 00007ffcfcada828
[  322.842892][ T8841]  </TASK>
[  322.843130][ T5672] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00
[  322.940603][ T5672] usb 4-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  322.946056][ T5672] usb 4-1: config 0 interface 0 has no altsetting 0
[  322.948785][ T5672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.957855][ T5672] usb 4-1: config 0 descriptor??
[  323.225110][ T8847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.228971][ T8847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.363963][ T8837] vcan0: tx address claim with dlc 0
[  323.375623][ T5672] input: HID 0d8c:0014 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0014.0042/input/input56
[  323.386417][ T5672] cmedia_hs100b 0003:0D8C:0014.0042: input,hidraw0: USB HID v80.04 Joystick [HID 0d8c:0014] on usb-dummy_hcd.3-1/input0
[  323.572952][ T5672] usb 4-1: USB disconnect, device number 68
[  323.770034][ T8849] FAULT_INJECTION: forcing a failure.
[  323.770034][ T8849] name failslab, interval 1, probability 0, space 0, times 0
[  323.774329][ T8849] CPU: 0 UID: 0 PID: 8849 Comm: syz.2.866 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  323.774342][ T8849] Tainted: [L]=SOFTLOCKUP
[  323.774345][ T8849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  323.774351][ T8849] Call Trace:
[  323.774354][ T8849]  <TASK>
[  323.774358][ T8849]  dump_stack_lvl+0xe8/0x150
[  323.774373][ T8849]  should_fail_ex+0x410/0x560
[  323.774385][ T8849]  should_failslab+0xa8/0x100
[  323.774400][ T8849]  __kmalloc_noprof+0xfe/0x720
[  323.774410][ T8849]  ? rcu_is_watching+0x16/0xb0
[  323.774419][ T8849]  ? tomoyo_realpath_from_path+0xef/0x640
[  323.774429][ T8849]  ? tomoyo_realpath_from_path+0xef/0x640
[  323.774441][ T8849]  tomoyo_realpath_from_path+0xef/0x640
[  323.774455][ T8849]  ? tomoyo_path_number_perm+0x219/0x5f0
[  323.774466][ T8849]  tomoyo_path_number_perm+0x246/0x5f0
[  323.774479][ T8849]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  323.774490][ T8849]  ? __lock_acquire+0x683/0x2cf0
[  323.774507][ T8849]  ? hook_file_ioctl+0x1f0/0x5f0
[  323.774523][ T8849]  ? __fget_files+0x2a/0x420
[  323.774563][ T8849]  ? __fget_files+0x2a/0x420
[  323.774570][ T8849]  ? __fget_files+0x3a2/0x420
[  323.774577][ T8849]  ? __fget_files+0x2a/0x420
[  323.774586][ T8849]  security_file_ioctl+0xc3/0x2a0
[  323.774600][ T8849]  __se_sys_ioctl+0x47/0x170
[  323.774612][ T8849]  do_syscall_64+0x166/0x520
[  323.774622][ T8849]  ? trace_irq_disable+0x3b/0x140
[  323.774632][ T8849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.774643][ T8849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.774652][ T8849] RIP: 0033:0x7fd89479e159
[  323.774660][ T8849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  323.774669][ T8849] RSP: 002b:00007fd8955db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  323.774679][ T8849] RAX: ffffffffffffffda RBX: 00007fd894a25fa0 RCX: 00007fd89479e159
[  323.774686][ T8849] RDX: 00000000000000c8 RSI: 0000000000005441 RDI: 0000000000000003
[  323.774693][ T8849] RBP: 00007fd89483506b R08: 0000000000000000 R09: 0000000000000000
[  323.774698][ T8849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  323.774703][ T8849] R13: 00007fd894a26038 R14: 00007fd894a25fa0 R15: 00007ffd5354f598
[  323.774715][ T8849]  </TASK>
[  323.774719][ T8849] ERROR: Out of memory at tomoyo_realpath_from_path.
[  323.825067][ T8850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.856292][ T8850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.144515][ T8854] loop3: detected capacity change from 0 to 16
[  324.157355][ T8854] erofs (device loop3): mounted with root inode @ nid 36.
[  324.412193][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.415037][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.434469][ T5672] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  324.563918][ T5672] usb 4-1: device descriptor read/64, error -71
[  324.803623][ T5672] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  324.935020][ T5672] usb 4-1: device descriptor read/64, error -71
[  324.945908][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.949058][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.043806][ T5672] usb usb4-port1: attempt power cycle
[  325.384030][ T5672] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  325.404845][ T5672] usb 4-1: device descriptor read/8, error -71
[  325.561356][ T8870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.565730][ T8870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.643674][ T5672] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  325.664411][ T5672] usb 4-1: device descriptor read/8, error -71
[  325.773795][ T5672] usb usb4-port1: unable to enumerate USB device
[  326.058501][ T8872] FAULT_INJECTION: forcing a failure.
[  326.058501][ T8872] name fail_futex, interval 1, probability 0, space 0, times 0
[  326.062362][ T8872] CPU: 1 UID: 0 PID: 8872 Comm: syz.0.874 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  326.062376][ T8872] Tainted: [L]=SOFTLOCKUP
[  326.062379][ T8872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  326.062384][ T8872] Call Trace:
[  326.062388][ T8872]  <TASK>
[  326.062392][ T8872]  dump_stack_lvl+0xe8/0x150
[  326.062407][ T8872]  should_fail_ex+0x410/0x560
[  326.062418][ T8872]  get_futex_key+0x1b4/0x1580
[  326.062435][ T8872]  ? __pfx_get_futex_key+0x10/0x10
[  326.062448][ T8872]  ? __pfx_inet_ioctl+0x10/0x10
[  326.062463][ T8872]  futex_wake+0x119/0x5f0
[  326.062474][ T8872]  ? __pfx_futex_wake+0x10/0x10
[  326.062486][ T8872]  ? sock_do_ioctl+0x1bd/0x320
[  326.062498][ T8872]  do_futex+0x458/0x4e0
[  326.062508][ T8872]  ? __pfx_do_futex+0x10/0x10
[  326.062518][ T8872]  __se_sys_futex+0x3a8/0x450
[  326.062551][ T8872]  ? __fget_files+0x2a/0x420
[  326.062560][ T8872]  ? __pfx___se_sys_futex+0x10/0x10
[  326.062566][ T8872]  ? __fget_files+0x2a/0x420
[  326.062576][ T8872]  ? __x64_sys_futex+0x21/0xf0
[  326.062585][ T8872]  do_syscall_64+0x166/0x520
[  326.062597][ T8872]  ? trace_irq_disable+0x3b/0x140
[  326.062609][ T8872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.062619][ T8872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.062649][ T8872] RIP: 0033:0x7f8b8c79e159
[  326.062662][ T8872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  326.062677][ T8872] RSP: 002b:00007f8b8d6960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  326.062692][ T8872] RAX: ffffffffffffffda RBX: 00007f8b8ca25fa8 RCX: 00007f8b8c79e159
[  326.062702][ T8872] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8b8ca25fac
[  326.062710][ T8872] RBP: 00007f8b8ca25fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  326.062719][ T8872] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  326.062728][ T8872] R13: 00007f8b8ca26038 R14: 00007ffcfcada740 R15: 00007ffcfcada828
[  326.062746][ T8872]  </TASK>
[  326.129260][ T8872] macvlan0: entered promiscuous mode
[  326.131685][ T8872] netlink: 'syz.0.874': attribute type 1 has an invalid length.
[  326.136617][ T8872] netlink: 'syz.0.874': attribute type 2 has an invalid length.
[  326.178998][ T8874] loop2: detected capacity change from 0 to 16
[  326.187135][ T8874] erofs (device loop2): mounted with root inode @ nid 36.
[  326.194842][ T8876] FAULT_INJECTION: forcing a failure.
[  326.194842][ T8876] name failslab, interval 1, probability 0, space 0, times 0
[  326.198700][ T8876] CPU: 0 UID: 0 PID: 8876 Comm: syz.0.876 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  326.198713][ T8876] Tainted: [L]=SOFTLOCKUP
[  326.198717][ T8876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  326.198722][ T8876] Call Trace:
[  326.198726][ T8876]  <TASK>
[  326.198731][ T8876]  dump_stack_lvl+0xe8/0x150
[  326.198746][ T8876]  should_fail_ex+0x410/0x560
[  326.198758][ T8876]  should_failslab+0xa8/0x100
[  326.198771][ T8876]  __kmalloc_noprof+0xfe/0x720
[  326.198782][ T8876]  ? rcu_is_watching+0x16/0xb0
[  326.198791][ T8876]  ? tomoyo_realpath_from_path+0xef/0x640
[  326.198802][ T8876]  ? tomoyo_realpath_from_path+0xef/0x640
[  326.198814][ T8876]  tomoyo_realpath_from_path+0xef/0x640
[  326.198828][ T8876]  ? tomoyo_path_number_perm+0x219/0x5f0
[  326.198842][ T8876]  tomoyo_path_number_perm+0x246/0x5f0
[  326.198856][ T8876]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  326.198869][ T8876]  ? __lock_acquire+0x683/0x2cf0
[  326.198885][ T8876]  ? hook_file_ioctl+0x1f0/0x5f0
[  326.198900][ T8876]  ? __fget_files+0x2a/0x420
[  326.198909][ T8876]  ? __fget_files+0x2a/0x420
[  326.198916][ T8876]  ? __fget_files+0x3a2/0x420
[  326.198923][ T8876]  ? __fget_files+0x2a/0x420
[  326.198933][ T8876]  security_file_ioctl+0xc3/0x2a0
[  326.198946][ T8876]  __se_sys_ioctl+0x47/0x170
[  326.198957][ T8876]  do_syscall_64+0x166/0x520
[  326.198967][ T8876]  ? trace_irq_disable+0x3b/0x140
[  326.198976][ T8876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.198986][ T8876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.198993][ T8876] RIP: 0033:0x7f8b8c79e159
[  326.199001][ T8876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  326.199008][ T8876] RSP: 002b:00007f8b8d696028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  326.199018][ T8876] RAX: ffffffffffffffda RBX: 00007f8b8ca25fa0 RCX: 00007f8b8c79e159
[  326.199024][ T8876] RDX: 00000000000000c8 RSI: 0000000000005441 RDI: 0000000000000003
[  326.199030][ T8876] RBP: 00007f8b8c83506b R08: 0000000000000000 R09: 0000000000000000
[  326.199036][ T8876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  326.199041][ T8876] R13: 00007f8b8ca26038 R14: 00007f8b8ca25fa0 R15: 00007ffcfcada828
[  326.199054][ T8876]  </TASK>
[  326.199059][ T8876] ERROR: Out of memory at tomoyo_realpath_from_path.
[  326.300171][ T8879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.303016][ T8879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.314808][ T8879] loop2: detected capacity change from 0 to 2048
[  326.317120][ T8879] EXT4-fs: Ignoring removed nomblk_io_submit option
[  326.338571][ T8879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.343393][ T8879] EXT4-fs (loop2): shut down requested (2)
[  326.856430][ T5598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.882608][ T8884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.885785][ T8884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.888723][ T5600] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  327.416881][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.420159][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.424273][ T8888] syz.2.880: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  327.430593][ T8888] CPU: 0 UID: 0 PID: 8888 Comm: syz.2.880 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  327.430609][ T8888] Tainted: [L]=SOFTLOCKUP
[  327.430614][ T8888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  327.430621][ T8888] Call Trace:
[  327.430626][ T8888]  <TASK>
[  327.430631][ T8888]  dump_stack_lvl+0xe8/0x150
[  327.430653][ T8888]  warn_alloc+0x24c/0x270
[  327.430672][ T8888]  ? __UNIQUE_ID_modinfo_13832+0x647de405/0xffffffffffec92bb
[  327.430686][ T8888]  ? __pfx_warn_alloc+0x10/0x10
[  327.430703][ T8888]  __vmalloc_node_range_noprof+0x12c/0x1730
[  327.430714][ T8888]  ? __mutex_trylock_common+0x15f/0x270
[  327.430724][ T8888]  ? __pfx___mutex_trylock_common+0x10/0x10
[  327.430732][ T8888]  ? __UNIQUE_ID_modinfo_13832+0x647de405/0xffffffffffec92bb
[  327.430742][ T8888]  ? trace_contention_end+0x3d/0x140
[  327.430750][ T8888]  ? __mutex_lock+0x30b/0x1550
[  327.430763][ T8888]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  327.430772][ T8888]  ? tomoyo_path_number_perm+0x219/0x5f0
[  327.430786][ T8888]  ? dvb_demux_do_ioctl+0x320/0x540
[  327.430796][ T8888]  ? __pfx___mutex_lock+0x10/0x10
[  327.430806][ T8888]  ? __UNIQUE_ID_modinfo_13832+0x647de405/0xffffffffffec92bb
[  327.430814][ T8888]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  327.430823][ T8888]  vmalloc_noprof+0xb2/0xe0
[  327.430833][ T8888]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  327.430842][ T8888]  ? __UNIQUE_ID_modinfo_13832+0x647de405/0xffffffffffec92bb
[  327.430850][ T8888]  dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  327.430861][ T8888]  dvb_demux_do_ioctl+0x45d/0x540
[  327.430869][ T8888]  ? __UNIQUE_ID_modinfo_13832+0x647de405/0xffffffffffec92bb
[  327.430878][ T8888]  ? __UNIQUE_ID_modinfo_13832+0x647de405/0xffffffffffec92bb
[  327.430886][ T8888]  dvb_usercopy+0x199/0x2e0
[  327.430893][ T8888]  ? __UNIQUE_ID_modinfo_13832+0x647de405/0xffffffffffec92bb
[  327.430901][ T8888]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  327.430909][ T8888]  ? __pfx_dvb_usercopy+0x10/0x10
[  327.430921][ T8888]  ? __fget_files+0x3a2/0x420
[  327.430928][ T8888]  ? __fget_files+0x2a/0x420
[  327.430935][ T8888]  ? __UNIQUE_ID_modinfo_13832+0x647de405/0xffffffffffec92bb
[  327.430945][ T8888]  ? __UNIQUE_ID_modinfo_13832+0x647de405/0xffffffffffec92bb
[  327.430953][ T8888]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  327.430961][ T8888]  ? __UNIQUE_ID_modinfo_13832+0x647de405/0xffffffffffec92bb
[  327.430969][ T8888]  dvb_demux_ioctl+0x29/0x40
[  327.430977][ T8888]  __se_sys_ioctl+0xfc/0x170
[  327.430988][ T8888]  do_syscall_64+0x166/0x520
[  327.430997][ T8888]  ? trace_irq_disable+0x3b/0x140
[  327.431007][ T8888]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.431017][ T8888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.431024][ T8888] RIP: 0033:0x7fd89479e159
[  327.431032][ T8888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  327.431038][ T8888] RSP: 002b:00007fd8955db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  327.431047][ T8888] RAX: ffffffffffffffda RBX: 00007fd894a25fa0 RCX: 00007fd89479e159
[  327.431053][ T8888] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000004
[  327.431058][ T8888] RBP: 00007fd89483506b R08: 0000000000000000 R09: 0000000000000000
[  327.431062][ T8888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  327.431067][ T8888] R13: 00007fd894a26038 R14: 00007fd894a25fa0 R15: 00007ffd5354f598
[  327.431076][ T8888]  ? __UNIQUE_ID_modinfo_13832+0x647de405/0xffffffffffec92bb
[  327.431087][ T8888]  </TASK>
[  327.431090][ T8888] Mem-Info:
[  327.477418][ T8889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.480306][ T8888] active_anon:6839 inactive_anon:0 isolated_anon:0
[  327.480306][ T8888]  active_file:43 inactive_file:60912 isolated_file:0
[  327.480306][ T8888]  unevictable:1000 dirty:141 writeback:0
[  327.480306][ T8888]  slab_reclaimable:10736 slab_unreclaimable:85632
[  327.480306][ T8888]  mapped:20122 shmem:1623 pagetables:1174
[  327.480306][ T8888]  sec_pagetables:0 bounce:0
[  327.480306][ T8888]  kernel_misc_reclaimable:0
[  327.480306][ T8888]  free:1110959 free_pcp:20680 free_cma:0
[  327.480803][ T8889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.482866][ T8888] Node 0 active_anon:9616kB inactive_anon:0kB active_file:168kB inactive_file:153368kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:12736kB dirty:308kB writeback:0kB shmem:3052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6008kB pagetables:2244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  327.489588][ T8889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.492152][ T8888] Node 1 active_anon:17740kB inactive_anon:0kB active_file:4kB inactive_file:90280kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:67752kB dirty:256kB writeback:0kB shmem:3440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6880kB pagetables:2452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  327.494579][ T8889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.495736][ T8888] Node 0 
[  327.502402][ T8889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.504323][ T8888] DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  327.518049][ T8889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.521657][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.526695][ T8888] lowmem_reserve[]:
[  327.533216][ T8891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.534642][ T8888]  0
[  327.539339][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.540336][ T8888]  1582
[  327.544575][ T8891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.546081][ T8888]  2112 2112 2112
[  327.622277][ T8888] Node 0 DMA32 free:1552572kB boost:0kB min:24976kB low:31220kB high:37464kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1900kB inactive_anon:0kB active_file:52kB inactive_file:18156kB unevictable:0kB writepending:220kB zspages:0kB present:2080636kB managed:1620928kB mlocked:0kB bounce:0kB free_pcp:12904kB local_pcp:12904kB free_cma:0kB
[  327.632588][ T8888] lowmem_reserve[]: 0 0 530 530 530
[  327.635223][ T8888] Node 0 Normal free:16904kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7680kB inactive_anon:0kB active_file:116kB inactive_file:135212kB unevictable:2000kB writepending:88kB zspages:0kB present:1572868kB managed:542748kB mlocked:0kB bounce:0kB free_pcp:4004kB local_pcp:3908kB free_cma:0kB
[  327.645366][ T8888] lowmem_reserve[]: 0 0 0 0 0
[  327.646851][ T8888] Node 1 Normal free:2859096kB boost:0kB min:56380kB low:70472kB high:84564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17740kB inactive_anon:0kB active_file:4kB inactive_file:90280kB unevictable:2000kB writepending:256kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:65288kB local_pcp:34100kB free_cma:0kB
[  327.657303][ T8888] lowmem_reserve[]: 0 0 0 0 0
[  327.658994][ T8888] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  327.662838][ T8888] Node 0 DMA32: 19*4kB (UME) 4*8kB (UE) 7*16kB (UME) 21*32kB (UME) 9*64kB (UM) 24*128kB (UME) 23*256kB (UME) 10*512kB (UME) 3*1024kB (UM) 9*2048kB (UME) 370*4096kB (UM) = 1552572kB
[  327.668561][ T8888] Node 0 Normal: 334*4kB (UME) 130*8kB (UME) 149*16kB (UME) 189*32kB (UME) 79*64kB (UME) 4*128kB (UME) 2*256kB (UE) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16888kB
[  327.673868][  T987] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  327.676875][ T8888] Node 1 Normal: 2*4kB (UM) 0*8kB 23*16kB (UE) 353*32kB (UM) 116*64kB (UME) 19*128kB (UE) 4*256kB (UM) 2*512kB (ME) 11*1024kB (M) 9*2048kB (UME) 685*4096kB (UM) = 2859032kB
[  327.682667][ T8888] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  327.685799][ T8888] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  327.688954][ T8888] 62532 total pagecache pages
[  327.690486][ T8888] 0 pages in swap cache
[  327.691901][ T8888] Free swap  = 124996kB
[  327.693240][ T8888] Total swap = 124996kB
[  327.695033][ T8888] 1834877 pages RAM
[  327.696315][ T8888] 0 pages HighMem/MovableOnly
[  327.697919][ T8888] 391447 pages reserved
[  327.699273][ T8888] 0 pages cma reserved
[  327.803908][  T987] usb 4-1: device descriptor read/64, error -71
[  328.043557][  T987] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  328.173610][  T987] usb 4-1: device descriptor read/64, error -71
[  328.222276][ T8899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.225160][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.283837][  T987] usb usb4-port1: attempt power cycle
[  328.623565][  T987] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  328.644051][  T987] usb 4-1: device descriptor read/8, error -71
[  328.779079][ T8903] loop2: detected capacity change from 0 to 16
[  328.786656][ T8903] erofs (device loop2): mounted with root inode @ nid 36.
[  328.823068][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.826729][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.838637][ T8905] loop2: detected capacity change from 0 to 2048
[  328.841049][ T8905] EXT4-fs: Ignoring removed nomblk_io_submit option
[  328.857911][ T8905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.862479][ T8905] EXT4-fs (loop2): shut down requested (2)
[  328.883567][  T987] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  328.904513][  T987] usb 4-1: device descriptor read/8, error -71
[  329.014506][  T987] usb usb4-port1: unable to enumerate USB device
[  329.375250][ T5598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.410016][ T8912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.414651][ T8912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.418245][ T5600] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  329.959776][ T8914] netlink: 14 bytes leftover after parsing attributes in process `syz.2.887'.
[  330.055452][ T8917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.059441][ T8917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.249248][   T33] audit: type=1326 audit(1789587202.714:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc0b9e159 code=0x7ffc0000
[  330.256622][   T33] audit: type=1326 audit(1789587202.714:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc0b9e159 code=0x7ffc0000
[  330.265391][   T33] audit: type=1326 audit(1789587202.714:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc0b9e159 code=0x7ffc0000
[  330.277589][   T33] audit: type=1326 audit(1789587202.714:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc0b9e159 code=0x7ffc0000
[  330.285594][ T8921] loop3: detected capacity change from 0 to 16
[  330.287000][   T33] audit: type=1326 audit(1789587202.714:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.889" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbc0b9e159 code=0x7ffc0000
[  330.295937][ T8921] erofs (device loop3): mounted with root inode @ nid 36.
[  330.298163][   T33] audit: type=1326 audit(1789587202.714:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc0b9e159 code=0x7ffc0000
[  330.310472][   T33] audit: type=1326 audit(1789587202.714:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc0b9e159 code=0x7ffc0000
[  330.323752][   T33] audit: type=1326 audit(1789587202.714:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.889" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffbc0b9e159 code=0x7ffc0000
[  330.342460][   T33] audit: type=1326 audit(1789587202.714:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.3.889" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffbc0b9e159 code=0x7ffc0000
[  330.583552][   T24] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  330.589217][ T8927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.592356][ T8927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.595827][ T5600] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  330.744086][   T24] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  330.748044][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.751226][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  330.754682][   T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  330.757742][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  330.761570][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.127571][ T8929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.130901][ T8929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.385445][ T8925] loop3: detected capacity change from 0 to 2048
[  331.391035][ T8925] EXT4-fs: Ignoring removed nomblk_io_submit option
[  331.407613][ T8925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.414717][ T8925] EXT4-fs (loop3): shut down requested (2)
[  331.620309][   T24] gud 4-1:1.0: Failed to get connectors (error=-5)
[  331.622749][   T24] gud 4-1:1.0: probe with driver gud failed with error -5
[  331.667471][ T8934] netlink: 'syz.2.895': attribute type 4 has an invalid length.
[  331.698319][ T8936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.708700][ T8936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.725385][ T8936] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  331.822804][   T31] usb 4-1: USB disconnect, device number 77
[  332.239492][ T8939] loop0: detected capacity change from 0 to 16
[  332.242763][ T8939] erofs (device loop0): mounted with root inode @ nid 36.
[  332.282851][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.288599][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.898'.
[  332.298052][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.319134][ T8943] ALSA: seq fatal error: cannot create timer (-19)
[  332.344343][ T7452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.623584][ T5791] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  332.773612][ T5791] usb 4-1: Using ep0 maxpacket: 16
[  332.777651][ T5791] usb 4-1: unable to get BOS descriptor or descriptor too short
[  332.780093][ T5791] usb 4-1: New USB device found, idVendor=12d1, idProduct=9634, bcdDevice=18.90
[  332.785085][ T5791] usb 4-1: config 251 has an invalid interface number: 33 but max is 0
[  332.787703][ T5791] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  332.790789][ T5791] usb 4-1: config 251 has no interface number 0
[  332.792647][ T5791] usb 4-1: config 251 interface 33 has no altsetting 0
[  332.796900][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.799328][ T5791] usb 4-1: Product: syz
[  332.800618][ T5791] usb 4-1: Manufacturer: syz
[  332.802002][ T5791] usb 4-1: SerialNumber: syz
[  332.847648][ T8950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.851728][ T8950] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.173111][ T8948] loop3: detected capacity change from 0 to 32768
[  333.176926][ T8948] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.901 (8948)
[  333.189740][ T8948] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  333.198655][ T8948] BTRFS info (device loop3): using sha256 checksum algorithm
[  333.221613][ T8948] BTRFS info (device loop3): enabling ssd optimizations
[  333.224958][ T8948] BTRFS info (device loop3): turning on async discard
[  333.227160][ T8948] BTRFS info (device loop3): enabling free space tree
[  333.240156][ T5791] qmi_wwan 4-1:251.33: probe with driver qmi_wwan failed with error -22
[  333.251439][ T5791] usb 4-1: USB disconnect, device number 78
[  333.382814][ T8968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.386115][ T8968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.416412][ T8968] netlink: 428 bytes leftover after parsing attributes in process `syz.2.903'.
[  333.751073][ T7452] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  333.909737][ T8972] loop3: detected capacity change from 0 to 16
[  333.916694][ T8972] erofs (device loop3): mounted with root inode @ nid 36.
[  333.959871][ T8974] FAULT_INJECTION: forcing a failure.
[  333.959871][ T8974] name failslab, interval 1, probability 0, space 0, times 0
[  333.965305][ T8974] CPU: 0 UID: 0 PID: 8974 Comm: syz.2.905 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  333.965320][ T8974] Tainted: [L]=SOFTLOCKUP
[  333.965323][ T8974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  333.965330][ T8974] Call Trace:
[  333.965334][ T8974]  <TASK>
[  333.965338][ T8974]  dump_stack_lvl+0xe8/0x150
[  333.965352][ T8974]  should_fail_ex+0x410/0x560
[  333.965364][ T8974]  ? bpf_jit_binary_pack_alloc+0x10a/0x300
[  333.965373][ T8974]  should_failslab+0xa8/0x100
[  333.965388][ T8974]  __kvmalloc_node_noprof+0x176/0x870
[  333.965403][ T8974]  ? bpf_jit_binary_pack_alloc+0x10a/0x300
[  333.965412][ T8974]  ? __pfx_jit_fill_hole+0x10/0x10
[  333.965425][ T8974]  bpf_jit_binary_pack_alloc+0x10a/0x300
[  333.965433][ T8974]  ? __pfx_jit_fill_hole+0x10/0x10
[  333.965452][ T8974]  bpf_int_jit_compile+0x9f3/0x1670
[  333.965470][ T8974]  ? __pfx_bpf_int_jit_compile+0x10/0x10
[  333.965486][ T8974]  ? __kmalloc_node_track_caller_noprof+0x2ff/0x740
[  333.965497][ T8974]  ? bpf_prepare_filter+0xd6d/0x1280
[  333.965537][ T8974]  __bpf_prog_select_runtime+0x4e2/0xb20
[  333.965547][ T8974]  ? bpf_prog_realloc+0x172/0x210
[  333.965560][ T8974]  bpf_prepare_filter+0x10ef/0x1280
[  333.965576][ T8974]  ? __pfx_bpf_prepare_filter+0x10/0x10
[  333.965590][ T8974]  ? kmemdup_noprof+0x55/0x70
[  333.965605][ T8974]  ? __get_filter+0x2d5/0x420
[  333.965619][ T8974]  sk_attach_filter+0x24/0x140
[  333.965632][ T8974]  sk_setsockopt+0x2635/0x2f10
[  333.965644][ T8974]  ? __pfx_sk_setsockopt+0x10/0x10
[  333.965654][ T8974]  ? aa_sk_perm+0x6e0/0x910
[  333.965663][ T8974]  ? __fget_files+0x2a/0x420
[  333.965674][ T8974]  ? aa_sock_opt_perm+0x105/0x1b0
[  333.965684][ T8974]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  333.965694][ T8974]  do_sock_setsockopt+0x11b/0x1b0
[  333.965705][ T8974]  __x64_sys_setsockopt+0x13d/0x1b0
[  333.965716][ T8974]  do_syscall_64+0x166/0x520
[  333.965726][ T8974]  ? trace_irq_disable+0x3b/0x140
[  333.965736][ T8974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.965746][ T8974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.965753][ T8974] RIP: 0033:0x7fd89479e159
[  333.965761][ T8974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  333.965768][ T8974] RSP: 002b:00007fd8955db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  333.965777][ T8974] RAX: ffffffffffffffda RBX: 00007fd894a25fa0 RCX: 00007fd89479e159
[  333.965783][ T8974] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005
[  333.965787][ T8974] RBP: 00007fd89483506b R08: 0000000000000010 R09: 0000000000000000
[  333.965792][ T8974] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  333.965797][ T8974] R13: 00007fd894a26038 R14: 00007fd894a25fa0 R15: 00007ffd5354f598
[  333.965808][ T8974]  </TASK>
[  333.972287][ T8976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.064979][ T8976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.092928][ T8979] loop2: detected capacity change from 0 to 2048
[  334.111138][ T8979] NILFS (loop2): invalid segment: Magic number mismatch
[  334.118383][ T8979] NILFS (loop2): trying rollback from an earlier position
[  334.129359][ T8979] NILFS (loop2): recovery complete
[  334.131886][ T8980] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  334.190991][ T8982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.194849][ T8982] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.214266][   T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  334.384079][   T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00
[  334.388065][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.392286][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.396803][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.850912][ T8984] loop2: detected capacity change from 0 to 32768
[  334.856281][ T8984] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.909 (8984)
[  335.061372][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.065031][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.067759][ T8988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.071391][ T8988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.149134][ T8984] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  335.152976][ T8984] BTRFS info (device loop2): using crc32c checksum algorithm
[  335.159480][ T8984] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  335.738850][ T8984] BTRFS info (device loop2): rebuilding free space tree
[  335.761241][ T8984] BTRFS info (device loop2): disabling free space tree
[  335.768135][ T8984] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  335.774466][ T8984] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  335.779933][ T8984] BTRFS info (device loop2): enabling ssd optimizations
[  335.782201][ T8984] BTRFS info (device loop2): turning on async discard
[  335.785628][ T8984] BTRFS info (device loop2): enabling disk space caching
[  335.788308][ T8984] BTRFS info (device loop2): force clearing of disk cache
[  335.791130][ T8984] BTRFS info (device loop2): use zstd compression, level 3
[  336.059233][ T5598] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  336.199786][ T9009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.203287][ T9009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.207984][ T9009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.211287][ T9009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.742326][ T9013] loop2: detected capacity change from 0 to 16
[  336.757534][ T9013] erofs (device loop2): mounted with root inode @ nid 36.
[  336.812359][ T9015] FAULT_INJECTION: forcing a failure.
[  336.812359][ T9015] name fail_futex, interval 1, probability 0, space 0, times 0
[  336.817414][ T9015] CPU: 0 UID: 0 PID: 9015 Comm: syz.2.913 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  336.817428][ T9015] Tainted: [L]=SOFTLOCKUP
[  336.817437][ T9015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  336.817442][ T9015] Call Trace:
[  336.817445][ T9015]  <TASK>
[  336.817449][ T9015]  dump_stack_lvl+0xe8/0x150
[  336.817463][ T9015]  should_fail_ex+0x410/0x560
[  336.817473][ T9015]  get_futex_key+0xf12/0x1580
[  336.817488][ T9015]  ? perf_lock_task_context+0xfe/0x850
[  336.817533][ T9015]  ? __pfx_get_futex_key+0x10/0x10
[  336.817543][ T9015]  ? __lock_acquire+0x683/0x2cf0
[  336.817558][ T9015]  futex_wake+0x119/0x5f0
[  336.817569][ T9015]  ? __pfx_futex_wake+0x10/0x10
[  336.817580][ T9015]  ? exit_mm_release+0x1a/0x30
[  336.817590][ T9015]  do_futex+0x458/0x4e0
[  336.817599][ T9015]  ? __pfx_do_futex+0x10/0x10
[  336.817608][ T9015]  ? __might_fault+0xaf/0x130
[  336.817620][ T9015]  mm_release+0x101/0x290
[  336.817629][ T9015]  exit_mm+0x4d/0x2d0
[  336.817640][ T9015]  do_exit+0x6cd/0x2360
[  336.817653][ T9015]  ? __pfx_do_exit+0x10/0x10
[  336.817665][ T9015]  ? do_raw_spin_lock+0x12b/0x2f0
[  336.817677][ T9015]  do_group_exit+0x22d/0x2f0
[  336.817687][ T9015]  ? _raw_spin_unlock_irq+0x23/0x50
[  336.817697][ T9015]  get_signal+0x121b/0x12c0
[  336.817713][ T9015]  arch_do_signal_or_restart+0xbb/0x860
[  336.817724][ T9015]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  336.817740][ T9015]  exit_to_user_mode_loop+0x10e/0x770
[  336.817750][ T9015]  ? rcu_is_watching+0x16/0xb0
[  336.817760][ T9015]  do_syscall_64+0x328/0x520
[  336.817769][ T9015]  ? trace_irq_disable+0x3b/0x140
[  336.817778][ T9015]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.817788][ T9015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.817796][ T9015] RIP: 0033:0x7fd89479e159
[  336.817804][ T9015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  336.817810][ T9015] RSP: 002b:00007fd8955db0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  336.817819][ T9015] RAX: fffffffffffffe00 RBX: 00007fd894a25fa8 RCX: 00007fd89479e159
[  336.817825][ T9015] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd894a25fa8
[  336.817830][ T9015] RBP: 00007fd894a25fa0 R08: 0000000000000000 R09: 0000000000000000
[  336.817835][ T9015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.817839][ T9015] R13: 00007fd894a26038 R14: 00007ffd5354f4b0 R15: 00007ffd5354f598
[  336.817851][ T9015]  </TASK>
[  337.024941][   T24] usbhid 4-1:1.0: can't add hid device: -71
[  337.027038][   T24] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  337.032483][   T24] usb 4-1: USB disconnect, device number 79
[  337.123061][ T9019] loop2: detected capacity change from 0 to 32768
[  337.127831][ T9019] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.915 (9019)
[  337.134002][ T9019] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  337.137862][ T9019] BTRFS info (device loop2): using crc32c checksum algorithm
[  337.140318][ T9019] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  337.164100][ T9019] BTRFS info (device loop2): rebuilding free space tree
[  337.176826][ T9019] BTRFS info (device loop2): disabling free space tree
[  337.180552][ T9019] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  337.184598][ T9019] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  337.189484][ T9019] BTRFS info (device loop2): enabling ssd optimizations
[  337.191736][ T9019] BTRFS info (device loop2): turning on async discard
[  337.194058][ T9019] BTRFS info (device loop2): enabling disk space caching
[  337.196319][ T9019] BTRFS info (device loop2): force clearing of disk cache
[  337.198539][ T9019] BTRFS info (device loop2): use zstd compression, level 3
[  337.443584][   T24] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  337.485906][ T5598] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  337.604407][   T24] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  337.608270][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  337.611647][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  337.614795][   T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  337.618050][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  337.622326][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.638875][ T9041] loop2: detected capacity change from 0 to 512
[  337.643186][ T9041] EXT4-fs (loop2): Test dummy encryption mode enabled
[  337.650117][ T9041] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  337.655764][ T9041] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  337.659586][ T9041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.666272][ T9041] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  337.689636][ T5598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.750624][ T9045] loop2: detected capacity change from 0 to 4096
[  337.757907][ T9045] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  337.771268][ T9045] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  337.773749][ T9045] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  337.790281][ T1108] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  337.792614][ T5598] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  337.795770][ T5598] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  337.797740][ T5598] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  337.802690][ T1108] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  337.844143][ T9047] loop2: detected capacity change from 0 to 16
[  337.848600][ T9047] erofs (device loop2): mounted with root inode @ nid 36.
[  337.888625][ T9049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.892265][ T9049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.032261][   T24] gud 4-1:1.0: No supported pixel formats found
[  338.034457][   T24] gud 4-1:1.0: probe with driver gud failed with error -22
[  338.481149][ T9054] loop2: detected capacity change from 0 to 24
[  338.485973][ T9054] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  338.494244][ T9054] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  338.571309][ T9058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.575058][ T9058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.581766][ T9058] Invalid ELF header type: 2 != 1
[  339.138744][ T9065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.142025][ T9065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.673332][ T9068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.676365][ T9068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.080229][   T24] usb 4-1: USB disconnect, device number 80
[  340.243025][ T9074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.247854][ T9074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.410062][ T9075] loop2: detected capacity change from 0 to 32768
[  340.415798][ T9075] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.929 (9075)
[  340.429561][ T9075] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  340.433320][ T9075] BTRFS info (device loop2): using sha256 checksum algorithm
[  340.445133][   T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  340.472139][ T9075] BTRFS info (device loop2): enabling ssd optimizations
[  340.474517][ T9075] BTRFS info (device loop2): turning on async discard
[  340.476695][ T9075] BTRFS info (device loop2): enabling free space tree
[  340.604114][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00
[  340.608070][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  340.611304][   T24] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.615239][   T24] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.619540][   T24] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  340.624164][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  340.626386][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.632583][   T24] usb 4-1: config 0 descriptor??
[  341.039516][   T24] usbhid 4-1:0.0: can't add hid device: -71
[  341.042160][   T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  341.045938][   T24] usb 4-1: USB disconnect, device number 81
[  341.803604][ T5791] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  341.954641][ T5791] usb 4-1: New USB device found, idVendor=0582, idProduct=d728, bcdDevice=a0.a7
[  341.958502][ T5791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  341.962561][ T5791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.966521][ T5791] usb 4-1: config 0 descriptor??
[  341.973714][   T13] unregister_netdevice: waiting for vcan0 to become free. Usage count = 3
[  341.983324][   T13] ref_tracker: netdev@ffff8881698e8700 has 1/2 users at
[  341.983324][   T13]      j1939_ecu_create_locked+0x1cd/0x400
[  341.983324][   T13]      j1939_local_ecu_get+0xeb/0x220
[  341.983324][   T13]      j1939_sk_bind+0x70a/0xc60
[  341.983324][   T13]      __sys_bind+0x2e3/0x410
[  341.983324][   T13]      __x64_sys_bind+0x7a/0x90
[  341.983324][   T13]      do_syscall_64+0x166/0x520
[  341.983324][   T13]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.983324][   T13] 
[  341.997020][   T13] ref_tracker: netdev@ffff8881698e8700 has 1/2 users at
[  341.997020][   T13]      j1939_netdev_start+0x387/0xb20
[  341.997020][   T13]      j1939_sk_bind+0x946/0xc60
[  341.997020][   T13]      __sys_bind+0x2e3/0x410
[  341.997020][   T13]      __x64_sys_bind+0x7a/0x90
[  341.997020][   T13]      do_syscall_64+0x166/0x520
[  341.997020][   T13]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.997020][   T13] 
[  342.246457][ T5345] usb 4-1: USB disconnect, device number 82
[  343.260304][ T5598] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
