last executing test programs:

9.807746763s ago: executing program 2 (id=1055):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d4090415"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = epoll_create(0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="188000000d0e000000000000d92e00", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = epoll_create1(0x0)
r4 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x80b45741, 0x0)
r5 = epoll_create(0x7)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100))
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000140)={0x60000000})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000000)={0x2000})
sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getrandom(&(0x7f0000000380)=""/300, 0x12c, 0x1)

8.03896147s ago: executing program 2 (id=1066):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000000100)={0x14}, 0x14)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000011f000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00')

7.624646302s ago: executing program 4 (id=1068):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d", 0x27, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082cc", 0x1d, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.239545675s ago: executing program 0 (id=1070):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000006c0)=0x3, 0x4)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000004c0)=""/168, 0xa8}], 0x2}, 0x2000000}], 0x2, 0x101, 0x0)

6.424922699s ago: executing program 4 (id=1072):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1}], 0x1, 0x40800)
recvmsg$can_raw(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}], 0x1}, 0x2103)

6.309109071s ago: executing program 4 (id=1073):
kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b", 0xa7, 0x5, 0xffffffff}, {0x0, 0x0, 0x7, 0x2}], 0x0)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c99", 0x3c}], 0x2}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6.243985518s ago: executing program 0 (id=1074):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)

6.120770891s ago: executing program 0 (id=1075):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

6.014610122s ago: executing program 2 (id=1076):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0xfffffff7, 0x84a8, 0x515f3157, 0x4, "78e1141009fd93233bce43f20613281f43d01f"})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r5, 0x0, 0x0)

5.930329776s ago: executing program 0 (id=1077):
kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3", 0xa9, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531b", 0x20, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5", 0x2d}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.233050581s ago: executing program 3 (id=1081):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0)
close(r5)
socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xe, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5.157955533s ago: executing program 4 (id=1082):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$unix(0x1, 0x1, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xf, 0xa}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

5.093195725s ago: executing program 3 (id=1083):
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042)
write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c)
add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc", 0x36, 0xfffffffffffffffe)
socket(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket(0x10, 0x3, 0x0)

4.932309995s ago: executing program 3 (id=1084):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000004c0)=""/168, 0xa8}], 0x2}, 0x2000000}], 0x2, 0x101, 0x0)

4.867731038s ago: executing program 1 (id=1085):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB=' mO'], 0x0, 0x0, 0x0, 0x0}, 0x0)

4.816665715s ago: executing program 0 (id=1086):
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
r4 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0)
write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54", 0x3f)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
r5 = dup3(r1, r0, 0x0)
fchdir(r5)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

4.784869873s ago: executing program 3 (id=1087):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0xfffffff7, 0x84a8, 0x515f3157, 0x4, "78e1141009fd93233bce43f20613281f43d01f"})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r5, 0x0, 0x0)

4.533315752s ago: executing program 4 (id=1088):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d4090415"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = epoll_create(0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="188000000d0e000000000000d92e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = epoll_create1(0x0)
r4 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x80b45741, 0x0)
r5 = epoll_create(0x7)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100))
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000000)={0x2000})
sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getrandom(&(0x7f0000000380)=""/300, 0x12c, 0x1)

4.419431934s ago: executing program 0 (id=1089):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
shutdown(r3, 0x0)
statx(0xffffffffffffffff, 0x0, 0x400, 0xe6025bc676a83de5, 0x0)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r4, 0x80086303, &(0x7f0000000000))
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000003700)={&(0x7f0000000140)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000000300)="2a98e7422a2e196acdcb68c5c40d08888acfe0434f6d1aa193d2c2df3f46a83a97e25d10fe4551921df0ad3490c0be01a3c7a46480c8ca40d961499d646b2dd380c10b8db8d9267d35979f598153a4835754f2ab3e7a91d3d02fe28413ec82b8e96b5a0521fe9cfbbe46af6d34cad4339d6319f0527e155997b93d3594143bbe1ffbb57bcbaa5b090ccd66cac2402cb18fadb524ed8f5c6979f7005dff59da1ff6382673800bf8c8fe10a867c8be295817c13b06cc1f72cce843f7dc49dabf58bd90", 0xc2}, {&(0x7f0000000400)}, {0x0}, {&(0x7f0000002100)}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003280)="9ce32744e86ad85bd9b549b20bff0457a292c53d3383ee9f024a6e24643644f6956bea3369d121d5045eedb33078ac1ac479886486c937328471d586783d6a1ab84ec50b4ca6f7800d09167680c488ea70424c76c5251b7d5f3c09d8f678f5014d81ca705a7820ab193fb8183f8343a0e7", 0x71}, {0x0}], 0xa, &(0x7f0000003500)=[{0x38, 0x6, 0x6, "d3c02e4f0e08fcb0ed44664f149f6b6438055ad88c1ef967169375c8a91c4d4e0dcc706d4e7e416e"}, {0xf0, 0x112, 0x9, "46997ff33f8ee410e27b8ff6117a1a2e01e836ab3040a9e4637ca7e70650389a5de1df9448834844d85c77f59d2c56de0350693cd5b6390e88ac7ae47b481190afa2b2f1798740a9bff07e16973a398fc2470fd3134402b9e73bd1c92dc651f7df1cd47a4771703b9f6e232ccefbc282e9a10586018f2f431f034e63d38437ad3daf29d797c8a387b105ae0f1a8a81d2dad96b1c6796554750c9be6a140cc5a6e6b609a66f391e73522bbcb417c5a63ceed00510a1a009b5cf477b6b0d1570085fdd9b2b29be54a9eb03667101fcb1414e44afc8d3c8d122695b5802cb"}, {0x60, 0x10e, 0xfff, "1169545783a4bc48fabf2854dbcf2c600dbcfe0e2bb7681a8f5902055b928e41a56fbf900fc3e9ed4301e81921ea415080dbe5342f0ac7808e7e42a171a7227754e989eb32fa12b65dba"}, {0x70, 0xff, 0x6, "e2461e6fb640cb2bff77f5ee4d09253ed706bcafb20b07878a53accee97f9fa9eb8c9a5705abed5dccaa8ff928e76cd332c62a34f15c8c6a448ca273da0c5f6c7b66e583ec99b5611472a323f251e3982183f503429ca6d89a"}], 0x1f8}, 0x20004000)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0)
getpriority(0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2}}, @TCA_RATE={0x6}]}, 0x38}}, 0x4000)

3.416423736s ago: executing program 3 (id=1090):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
munlockall()
bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[], 0x48)

3.361213323s ago: executing program 1 (id=1091):
syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df00090582"], 0x0)

3.231187142s ago: executing program 2 (id=1092):
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004)

2.247992955s ago: executing program 3 (id=1093):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000980)=[{r3, 0x1}], 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff)

2.113110452s ago: executing program 1 (id=1094):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

2.003673118s ago: executing program 2 (id=1095):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)

1.938488503s ago: executing program 1 (id=1096):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x800)
r3 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$binfmt_register(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
writev(r4, &(0x7f0000001980)=[{&(0x7f0000000240)="f9", 0x1}], 0x1)

703.552531ms ago: executing program 2 (id=1097):
kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3", 0xa9, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531b", 0x20, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5", 0x2d}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

574.546147ms ago: executing program 1 (id=1098):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd"], 0x0)
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
socket$nl_netfilter(0x10, 0x3, 0xc)

307.218627ms ago: executing program 4 (id=1099):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d4090415"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = epoll_create(0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="188000000d0e000000000000d92e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = epoll_create1(0x0)
r3 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x80b45741, 0x0)
r4 = epoll_create(0x7)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100))
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000140)={0x60000000})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000000)={0x2000})

0s ago: executing program 1 (id=1100):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d", 0x27, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082cc", 0x1d, 0x100, 0x9}], 0x0)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c99", 0x3c}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d62230167", 0x9e}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

controller
[  294.544126][    T9] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[  294.566964][ T5617] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  294.635264][ T5635] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  294.635712][ T5635] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  294.636039][ T5635] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  294.636345][ T5635] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  294.693876][    T9] usb 5-1: USB disconnect, device number 6
[  294.917249][ T8235] warning: `syz.4.562' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  296.094273][ T8252] loop0: detected capacity change from 0 to 32768
[  296.143648][ T8252] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  296.196767][ T8252] XFS (loop0): Ending clean mount
[  296.205037][ T8252] XFS (loop0): Quotacheck needed: Please wait.
[  296.417894][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  296.449331][ T8265] loop4: detected capacity change from 0 to 512
[  296.453134][ T8265] EXT4-fs: Ignoring removed nomblk_io_submit option
[  296.564172][ T8265] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  296.564192][ T8265] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102]
[  296.564511][ T8265] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  296.564527][ T8265] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  296.569556][    T9] usb 3-1: Using ep0 maxpacket: 16
[  296.575678][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.575740][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  296.575767][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  296.575789][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  296.575811][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  296.580346][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  296.580447][    T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  296.580467][    T9] usb 3-1: Manufacturer: syz
[  296.667796][ T8252] XFS (loop0): Quotacheck: Done.
[  296.918370][ T8265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  296.926658][ T8265] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.568: dx entry: limit 65535 != root limit 120
[  296.926689][ T8265] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.568: Corrupt directory, running e2fsck is recommended
[  296.970743][ T8270] overlayfs: missing 'lowerdir'
[  296.970923][   T37] audit: type=1800 audit(1780430638.138:36): pid=8270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.569" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0
[  298.090467][    T9] usb 3-1: config 0 descriptor??
[  298.226286][ T5618] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  298.437866][    T9] rc_core: IR keymap rc-hauppauge not found
[  298.437886][    T9] Registered IR keymap rc-empty
[  298.438019][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  298.460003][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  298.498549][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  298.504824][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22
[  298.513536][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  298.532721][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  298.579685][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  298.599249][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  298.621988][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  298.638574][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  298.660938][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  298.679941][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  298.709259][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  298.728072][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  298.759922][    T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  298.759946][    T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  298.889332][ T5737] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  298.960649][    T9] usb 3-1: USB disconnect, device number 13
[  299.038333][ T5737] usb 4-1: Using ep0 maxpacket: 16
[  299.040563][ T5737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.040592][ T5737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.040614][ T5737] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  299.040654][ T5737] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  299.040676][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.047118][ T5737] usb 4-1: config 0 descriptor??
[  299.549931][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.602274][ T5737] shield 0003:0955:7214.0007: unknown main item tag 0x0
[  299.602297][ T5737] shield 0003:0955:7214.0007: unknown main item tag 0x0
[  299.602314][ T5737] shield 0003:0955:7214.0007: unknown main item tag 0x0
[  299.602329][ T5737] shield 0003:0955:7214.0007: unknown main item tag 0x0
[  299.602344][ T5737] shield 0003:0955:7214.0007: unknown main item tag 0x0
[  299.604826][ T5737] input: HID 0955:7214 Haptics as /devices/virtual/input/input23
[  299.703151][ T5737] shield 0003:0955:7214.0007: Registered Thunderstrike controller
[  299.703469][ T5737] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0
[  299.998389][  T822] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  299.998777][  T822] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  299.999093][    T9] usb 4-1: USB disconnect, device number 8
[  299.999093][  T822] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  299.999154][  T822] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  300.931491][ T8318] loop3: detected capacity change from 0 to 32768
[  300.961920][ T8318] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  301.017854][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  301.056076][ T8318] XFS (loop3): Ending clean mount
[  301.066195][ T8318] XFS (loop3): Quotacheck needed: Please wait.
[  301.199098][    T9] usb 3-1: Using ep0 maxpacket: 16
[  301.215557][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.215585][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  301.215597][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  301.215621][    T9] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  301.215633][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.239169][    T9] usb 3-1: config 0 descriptor??
[  301.246528][ T8318] XFS (loop3): Quotacheck: Done.
[  301.621597][   T37] audit: type=1800 audit(1780430642.798:37): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.586" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  301.630619][ T8330] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  301.630667][ T8330] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  302.036425][ T8334] loop4: detected capacity change from 0 to 32768
[  302.045791][    T9] shield 0003:0955:7214.0008: unknown main item tag 0x0
[  302.045823][    T9] shield 0003:0955:7214.0008: unknown main item tag 0x0
[  302.045850][    T9] shield 0003:0955:7214.0008: unknown main item tag 0x0
[  302.045876][    T9] shield 0003:0955:7214.0008: unknown main item tag 0x0
[  302.047513][    T9] shield 0003:0955:7214.0008: unknown main item tag 0x0
[  302.072734][    T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input24
[  302.104894][ T8334] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  302.142715][ T8334] XFS (loop4): Ending clean mount
[  302.160530][ T8334] XFS (loop4): Quotacheck needed: Please wait.
[  302.529599][    T9] shield 0003:0955:7214.0008: Registered Thunderstrike controller
[  302.543034][    T9] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0
[  302.608159][   T10] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  302.608468][   T10] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  302.608766][   T10] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  302.609066][   T10] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  302.626726][ T8334] XFS (loop4): Quotacheck: Done.
[  302.653914][    T9] usb 3-1: USB disconnect, device number 14
[  303.098747][ T8355] overlayfs: missing 'lowerdir'
[  303.776545][ T8360] macvtap3: entered allmulticast mode
[  303.862513][ T5616] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  304.142120][ T5617] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  305.223440][ T8395] syzkaller0: entered promiscuous mode
[  305.223466][ T8395] syzkaller0: entered allmulticast mode
[  305.283549][ T8380] loop2: detected capacity change from 0 to 32768
[  305.293900][ T8380] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.602 (8380)
[  305.359065][ T8380] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  305.359099][ T8380] BTRFS info (device loop2): using crc32c checksum algorithm
[  305.516071][ T8380] BTRFS info (device loop2): enabling ssd optimizations
[  305.516106][ T8380] BTRFS info (device loop2): turning on flush-on-commit
[  305.516382][ T8380] BTRFS info (device loop2): turning on async discard
[  305.516401][ T8380] BTRFS info (device loop2): enabling free space tree
[  305.516417][ T8380] BTRFS info (device loop2): enabling auto defrag
[  305.516434][ T8380] BTRFS info (device loop2): force zlib compression, level 3
[  305.516452][ T8380] BTRFS info (device loop2): max_inline set to 4096
[  305.635404][   T37] audit: type=1800 audit(1780430646.818:38): pid=8380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.602" name="file1" dev="loop2" ino=260 res=0 errno=0
[  305.894805][ T5615] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  306.464795][ T8428] macvtap2: entered allmulticast mode
[  307.076597][ T8448] loop1: detected capacity change from 0 to 128
[  307.122880][ T8448] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  308.340427][ T8454] loop1: detected capacity change from 0 to 128
[  308.369101][ T8454] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  308.829681][ T8469] macvtap3: entered allmulticast mode
[  308.945386][ T8480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.626'.
[  308.959358][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.627'.
[  309.068916][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'.
[  309.068955][ T8481] bond5: entered promiscuous mode
[  309.068975][ T8481] bond5: entered allmulticast mode
[  309.108152][ T5737] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  309.498791][ T5737] usb 5-1: Using ep0 maxpacket: 16
[  309.510955][ T5737] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  309.511009][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  309.511037][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  309.511059][ T5737] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  309.511081][ T5737] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  309.551842][ T5737] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  309.551872][ T5737] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  309.551892][ T5737] usb 5-1: Manufacturer: syz
[  309.605222][ T5737] usb 5-1: config 0 descriptor??
[  309.688221][ T8487] loop3: detected capacity change from 0 to 128
[  309.720584][ T8487] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  309.907829][ T5737] rc_core: IR keymap rc-hauppauge not found
[  309.907849][ T5737] Registered IR keymap rc-empty
[  309.907990][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  309.935768][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  309.978263][ T5737] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  309.982836][ T5737] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25
[  310.195344][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  310.218127][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  310.270059][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  311.120777][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  311.219630][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  311.238737][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  311.265869][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  311.277872][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  311.298207][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  311.317864][ T5737] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  311.347616][ T5737] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  311.347638][ T5737] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  311.380105][ T5737] usb 5-1: USB disconnect, device number 7
[  311.510571][ T8516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.638'.
[  311.820627][ T8526] loop3: detected capacity change from 0 to 512
[  311.828746][ T8526] EXT4-fs (loop3): Test dummy encryption mode enabled
[  311.929496][ T8526] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.802523][ T5617] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  313.941472][ T8552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.650'.
[  314.416492][ T8559] macvtap4: entered allmulticast mode
[  314.538334][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  314.697855][    T9] usb 3-1: Using ep0 maxpacket: 16
[  314.705710][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.705769][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  314.705797][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  314.705820][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  314.705843][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  314.807455][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  314.807485][    T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  314.807506][    T9] usb 3-1: Manufacturer: syz
[  314.930576][    T9] usb 3-1: config 0 descriptor??
[  314.987454][ T8572] overlayfs: overlapping lowerdir path
[  315.253982][ T8577] loop0: detected capacity change from 0 to 512
[  315.277120][ T8577] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  315.288759][ T8577] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal
[  315.298766][    T9] rc_core: IR keymap rc-hauppauge not found
[  315.298792][    T9] Registered IR keymap rc-empty
[  315.298940][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  315.317897][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  315.342018][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  315.345440][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26
[  315.373852][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  315.391067][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  315.407941][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  315.427901][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  315.447908][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  315.467886][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  315.487891][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  315.507897][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  315.527866][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  315.547862][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  315.720268][    T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  315.720293][    T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  316.178685][    T9] usb 3-1: USB disconnect, device number 15
[  317.014745][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  317.014842][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  317.809903][ T8620] input: syz0 as /devices/virtual/input/input27
[  318.150171][ T5625] Bluetooth: hci4: unexpected event for opcode 0x0804
[  318.250760][ T8627] loop0: detected capacity change from 0 to 4096
[  318.310338][ T8627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.082308][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.365080][ T8644] loop4: detected capacity change from 0 to 128
[  319.387585][ T8644] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  321.178491][ T8651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.680'.
[  321.641105][ T8654] loop4: detected capacity change from 0 to 32768
[  321.686954][ T8654] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  321.773150][ T8654] XFS (loop4): Ending clean mount
[  321.783547][ T8654] XFS (loop4): Quotacheck needed: Please wait.
[  321.969019][ T8654] XFS (loop4): Quotacheck: Done.
[  322.217829][ T8674] loop0: detected capacity change from 0 to 32768
[  322.238647][ T8654] overlayfs: failed to resolve './bus': -2
[  322.249416][ T8674] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.686 (8674)
[  322.255750][ T5625] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  322.255910][ T5625] Bluetooth: hci4: Injecting HCI hardware error event
[  322.258172][ T5621] Bluetooth: hci4: hardware error 0x00
[  322.416852][   T37] audit: type=1800 audit(1780430663.408:39): pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.681" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0
[  322.491647][ T8674] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  322.491677][ T8674] BTRFS info (device loop0): using crc32c checksum algorithm
[  322.661042][ T5616] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  322.744137][ T8674] BTRFS info (device loop0): enabling ssd optimizations
[  322.744162][ T8674] BTRFS info (device loop0): turning on flush-on-commit
[  322.744179][ T8674] BTRFS info (device loop0): turning on async discard
[  322.744195][ T8674] BTRFS info (device loop0): enabling free space tree
[  322.744211][ T8674] BTRFS info (device loop0): enabling auto defrag
[  322.744228][ T8674] BTRFS info (device loop0): use lzo compression, level 1
[  322.744249][ T8674] BTRFS info (device loop0): max_inline set to 4096
[  322.851345][   T37] audit: type=1800 audit(1780430664.038:40): pid=8674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.686" name="file1" dev="loop0" ino=260 res=0 errno=0
[  323.169621][ T5618] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  324.644104][ T5621] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  324.813858][ T5751] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  324.967802][ T5751] usb 1-1: Using ep0 maxpacket: 16
[  324.972579][ T5751] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  324.972630][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  324.972659][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  324.972680][ T5751] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  324.972705][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  324.974223][ T5751] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  324.974250][ T5751] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  324.974269][ T5751] usb 1-1: Manufacturer: syz
[  325.069411][ T5751] usb 1-1: config 0 descriptor??
[  325.268206][ T8727] netlink: 44 bytes leftover after parsing attributes in process `syz.2.698'.
[  325.331123][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.374673][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.497795][ T5751] rc_core: IR keymap rc-hauppauge not found
[  325.497814][ T5751] Registered IR keymap rc-empty
[  325.498003][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  325.522540][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  325.537581][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'.
[  325.552333][ T5751] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  325.572175][ T5751] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input28
[  325.639920][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  325.665841][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  325.680825][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  325.697869][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  325.717890][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  325.738419][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  325.781034][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  325.797904][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  325.817966][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  325.838203][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  325.883896][ T5751] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  325.884069][ T5751] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  325.922691][ T8712] loop4: detected capacity change from 0 to 32768
[  325.923028][ T5751] usb 1-1: USB disconnect, device number 6
[  325.939714][ T8712] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.694 (8712)
[  326.056511][ T8744] netlink: 44 bytes leftover after parsing attributes in process `syz.3.704'.
[  326.057504][ T8712] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  326.057532][ T8712] BTRFS info (device loop4): using crc32c checksum algorithm
[  326.061581][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.128655][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.422434][ T8712] BTRFS info (device loop4): enabling ssd optimizations
[  326.422459][ T8712] BTRFS info (device loop4): turning on flush-on-commit
[  326.422476][ T8712] BTRFS info (device loop4): turning on async discard
[  326.422492][ T8712] BTRFS info (device loop4): enabling free space tree
[  326.422509][ T8712] BTRFS info (device loop4): enabling auto defrag
[  326.422526][ T8712] BTRFS info (device loop4): force zlib compression, level 3
[  326.422546][ T8712] BTRFS info (device loop4): max_inline set to 4096
[  326.504978][ T8740] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5615] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8740]
[  326.542870][   T37] audit: type=1800 audit(1780430667.728:41): pid=8712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.694" name="file1" dev="loop4" ino=260 res=0 errno=0
[  328.493699][ T5616] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  329.865575][ T8807] loop3: detected capacity change from 0 to 32768
[  329.918244][ T8807] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  330.022237][ T8807] XFS (loop3): Ending clean mount
[  330.025777][ T8807] XFS (loop3): Quotacheck needed: Please wait.
[  331.325636][ T8807] XFS (loop3): Quotacheck: Done.
[  331.477015][   T37] audit: type=1800 audit(1780430672.658:42): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.717" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  331.487070][ T8807] overlayfs: failed to resolve './bus': -2
[  331.832635][ T5617] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  332.250972][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'.
[  332.291404][ T8838] macvtap3: entered promiscuous mode
[  332.291778][ T8838] macvtap3: entered allmulticast mode
[  332.293979][ T8838] 8021q: adding VLAN 0 to HW filter on device macvtap3
[  332.381839][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'.
[  332.663373][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'.
[  332.663397][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'.
[  332.737542][ T1993] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  332.738133][ T8849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.727'.
[  332.741847][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'.
[  332.741864][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'.
[  332.758711][ T2748] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  332.761823][ T2748] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  332.761865][ T2748] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  333.270929][ T8855] loop0: detected capacity change from 0 to 32768
[  333.315642][ T8855] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  333.362955][ T8855] XFS (loop0): Ending clean mount
[  333.366241][ T8855] XFS (loop0): Quotacheck needed: Please wait.
[  333.602078][ T8855] XFS (loop0): Quotacheck: Done.
[  333.974488][ T8880] overlayfs: failed to resolve './bus': -2
[  333.975362][   T37] audit: type=1800 audit(1780430675.148:43): pid=8880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.730" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0
[  334.427293][ T8879] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5616] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8879]
[  334.570985][ T5618] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  334.887061][ T8887] loop3: detected capacity change from 0 to 32768
[  334.910978][ T8887] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  334.999758][ T8887] XFS (loop3): Ending clean mount
[  335.010966][ T8887] XFS (loop3): Quotacheck needed: Please wait.
[  335.580206][ T8902] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5614] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8902]
[  335.801682][ T8887] XFS (loop3): Quotacheck: Done.
[  336.192760][ T8917] overlayfs: missing 'lowerdir'
[  336.426120][   T37] audit: type=1800 audit(1780430677.288:44): pid=8916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.735" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  336.829696][ T8919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.741'.
[  336.874363][ T5617] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  338.579072][ T8937] loop0: detected capacity change from 0 to 32768
[  338.582230][ T8937] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.745 (8937)
[  338.626129][ T8937] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  338.626161][ T8937] BTRFS info (device loop0): using crc32c checksum algorithm
[  338.933018][ T8937] BTRFS info (device loop0): enabling ssd optimizations
[  338.933044][ T8937] BTRFS info (device loop0): turning on flush-on-commit
[  338.933060][ T8937] BTRFS info (device loop0): turning on async discard
[  338.933077][ T8937] BTRFS info (device loop0): enabling free space tree
[  338.933101][ T8937] BTRFS info (device loop0): enabling auto defrag
[  338.933119][ T8937] BTRFS info (device loop0): force zlib compression, level 3
[  338.933137][ T8937] BTRFS info (device loop0): max_inline set to 4096
[  338.937672][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'.
[  338.937692][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'.
[  339.200770][   T37] audit: type=1800 audit(1780430680.378:45): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.745" name="file1" dev="loop0" ino=260 res=0 errno=0
[  339.386647][ T8965] loop3: detected capacity change from 0 to 32768
[  339.460983][ T8965] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  339.524838][ T8965] XFS (loop3): Ending clean mount
[  339.534958][ T8965] XFS (loop3): Quotacheck needed: Please wait.
[  339.669449][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'.
[  339.669470][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'.
[  339.703263][ T5751] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  339.786754][ T5618] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  339.851239][ T5751] usb 5-1: Using ep0 maxpacket: 16
[  339.853730][ T5751] usb 5-1: config 251 has an invalid interface number: 202 but max is 0
[  339.853756][ T5751] usb 5-1: config 251 has no interface number 0
[  339.853798][ T5751] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  339.853819][ T5751] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  339.853842][ T5751] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  339.853864][ T5751] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  339.853890][ T5751] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  339.853914][ T5751] usb 5-1: config 251 interface 202 altsetting 1 has a duplicate endpoint with address 0x81, skipping
[  339.853938][ T5751] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  339.853963][ T5751] usb 5-1: config 251 interface 202 has no altsetting 0
[  339.863562][ T5751] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  339.863588][ T5751] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  339.863607][ T5751] usb 5-1: Product: syz
[  339.863621][ T5751] usb 5-1: SerialNumber: syz
[  340.069653][ T8965] XFS (loop3): Quotacheck: Done.
[  340.548752][ T8985] overlayfs: missing 'lowerdir'
[  340.720770][   T37] audit: type=1800 audit(1780430681.658:46): pid=8984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.751" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  340.855701][ T5751] cxacru 5-1:251.202: usbatm_usb_probe: bind failed: -19!
[  341.036589][ T5751] usb 5-1: USB disconnect, device number 8
[  341.516898][ T5617] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  342.058157][ T5751] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  342.228049][ T5751] usb 3-1: Using ep0 maxpacket: 8
[  342.230315][ T5751] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  342.230347][ T5751] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  342.230373][ T5751] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  342.230397][ T5751] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  342.230437][ T5751] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  342.230460][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.543464][ T5751] usb 3-1: usb_control_msg returned -71
[  342.543507][ T5751] usbtmc 3-1:16.0: can't read capabilities
[  342.599729][ T5751] usb 3-1: USB disconnect, device number 16
[  342.744045][ T9017] loop1: detected capacity change from 0 to 512
[  342.803003][ T9017] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 12
[  343.068263][ T9007] loop4: detected capacity change from 0 to 32768
[  343.223163][ T9007] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.763 (9007)
[  343.358403][ T9019] loop3: detected capacity change from 0 to 32768
[  343.414965][ T9019] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  343.434734][ T9007] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  343.434864][ T9007] BTRFS info (device loop4): using crc32c checksum algorithm
[  343.484830][ T9019] XFS (loop3): Ending clean mount
[  343.490458][ T9019] XFS (loop3): Quotacheck needed: Please wait.
[  343.879959][ T9007] BTRFS info (device loop4): enabling ssd optimizations
[  343.879985][ T9007] BTRFS info (device loop4): turning on flush-on-commit
[  343.880002][ T9007] BTRFS info (device loop4): turning on async discard
[  343.880017][ T9007] BTRFS info (device loop4): enabling free space tree
[  343.880032][ T9007] BTRFS info (device loop4): enabling auto defrag
[  343.880049][ T9007] BTRFS info (device loop4): force zlib compression, level 3
[  343.880069][ T9007] BTRFS info (device loop4): max_inline set to 4096
[  343.957577][   T37] audit: type=1800 audit(1780430685.138:47): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.763" name="file1" dev="loop4" ino=260 res=0 errno=0
[  344.183730][ T9019] XFS (loop3): Quotacheck: Done.
[  344.783359][ T9055] overlayfs: missing 'lowerdir'
[  344.926654][   T37] audit: type=1800 audit(1780430685.768:48): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.767" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  345.189832][ T9059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.773'.
[  345.431929][ T5617] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  345.481678][ T5616] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  346.802410][ T5737] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  347.000264][ T5737] usb 1-1: Using ep0 maxpacket: 16
[  347.011460][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.011492][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.011514][ T5737] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  347.011556][ T5737] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  347.011578][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.074995][ T5737] usb 1-1: config 0 descriptor??
[  347.090508][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.782'.
[  347.760308][ T9091] loop3: detected capacity change from 0 to 32768
[  347.801217][ T5737] usbhid 1-1:0.0: can't add hid device: -71
[  347.801445][ T5737] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  347.850748][ T5737] usb 1-1: USB disconnect, device number 7
[  347.886104][ T9091] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  347.945537][ T9091] XFS (loop3): Ending clean mount
[  348.003995][ T9091] XFS (loop3): Quotacheck needed: Please wait.
[  348.390212][ T9091] XFS (loop3): Quotacheck: Done.
[  348.479327][ T9106] loop0: detected capacity change from 0 to 32768
[  348.665788][ T9106] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  348.935435][ T9119] overlayfs: missing 'lowerdir'
[  348.962852][   T37] audit: type=1800 audit(1780430689.968:49): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.784" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  349.226096][ T9106] XFS (loop0): Ending clean mount
[  349.236328][ T9106] XFS (loop0): Quotacheck needed: Please wait.
[  349.510804][ T9104] loop1: detected capacity change from 0 to 32768
[  349.527079][ T9104] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.786 (9104)
[  349.553777][ T9106] XFS (loop0): Quotacheck: Done.
[  349.654819][ T5617] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  349.797792][ T9104] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  349.797965][ T9104] BTRFS info (device loop1): using crc32c checksum algorithm
[  349.835124][   T37] audit: type=1800 audit(1780430691.018:50): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.788" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0
[  349.872170][ T9124] overlayfs: failed to resolve './bus': -2
[  350.163911][ T9104] BTRFS info (device loop1): enabling ssd optimizations
[  350.163960][ T9104] BTRFS info (device loop1): turning on flush-on-commit
[  350.164003][ T9104] BTRFS info (device loop1): turning on async discard
[  350.164020][ T9104] BTRFS info (device loop1): enabling free space tree
[  350.164057][ T9104] BTRFS info (device loop1): enabling auto defrag
[  350.197944][ T9104] BTRFS info (device loop1): force zlib compression, level 3
[  350.197973][ T9104] BTRFS info (device loop1): max_inline set to 4096
[  350.304914][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'.
[  350.306671][   T37] audit: type=1800 audit(1780430691.488:51): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.786" name="file1" dev="loop1" ino=260 res=0 errno=0
[  350.387437][ T5618] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  350.799030][ T5614] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  351.057859][ T5635] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  351.207844][ T5635] usb 3-1: Using ep0 maxpacket: 16
[  351.209861][ T5635] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  351.209905][ T5635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  351.209931][ T5635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  351.209950][ T5635] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  351.209970][ T5635] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  351.211175][ T5635] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  351.211199][ T5635] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  351.211218][ T5635] usb 3-1: Manufacturer: syz
[  351.264942][ T5635] usb 3-1: config 0 descriptor??
[  351.509210][ T9160] macvtap3: entered allmulticast mode
[  351.658837][ T9162] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5617] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9162]
[  351.659212][ T5635] rc_core: IR keymap rc-hauppauge not found
[  351.659228][ T5635] Registered IR keymap rc-empty
[  351.659530][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  351.678678][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  351.730939][ T5635] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  351.739763][ T5635] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29
[  351.764546][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  351.778133][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  351.797949][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  351.817873][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  351.838514][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  351.862546][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  351.877900][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  351.902856][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  351.919277][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  351.937910][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  352.020376][ T5635] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  352.020400][ T5635] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  352.068535][ T5635] usb 3-1: USB disconnect, device number 17
[  352.097820][ T5723] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  352.303311][ T5723] usb 2-1: Using ep0 maxpacket: 8
[  352.314168][ T5723] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  352.314216][ T5723] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  352.314241][ T5723] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  352.314264][ T5723] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  352.314306][ T5723] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  352.314330][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.608407][ T5723] usb 2-1: GET_CAPABILITIES returned 0
[  352.608455][ T5723] usbtmc 2-1:16.0: can't read capabilities
[  352.909344][ T5723] usb 2-1: USB disconnect, device number 4
[  353.031952][ T9177] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5615] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9177]
[  353.547881][ T5723] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  353.717856][ T5723] usb 5-1: Using ep0 maxpacket: 16
[  353.719724][ T5723] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  353.719754][ T5723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  353.719769][ T5723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  353.719780][ T5723] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  353.719792][ T5723] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  353.720795][ T5723] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  353.720811][ T5723] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  353.720821][ T5723] usb 5-1: Manufacturer: syz
[  353.723705][ T5723] usb 5-1: config 0 descriptor??
[  354.019526][ T5723] rc_core: IR keymap rc-hauppauge not found
[  354.019547][ T5723] Registered IR keymap rc-empty
[  354.019692][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  354.047942][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  354.072317][ T5723] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  354.093540][ T5723] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input30
[  354.114511][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  354.139442][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  354.167972][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  354.188077][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  354.211560][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  354.227908][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  354.228197][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  354.247894][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  354.277953][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  354.297878][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  354.328363][ T5723] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  354.358150][ T5723] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  354.358172][ T5723] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  354.389197][   T10] usb 1-1: Using ep0 maxpacket: 16
[  354.414442][ T5723] usb 5-1: USB disconnect, device number 9
[  354.431121][   T10] usb 1-1: config 251 has an invalid interface number: 202 but max is 0
[  354.431148][   T10] usb 1-1: config 251 has no interface number 0
[  354.431191][   T10] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  354.431215][   T10] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  354.431238][   T10] usb 1-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  354.431259][   T10] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  354.431284][   T10] usb 1-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  354.431310][   T10] usb 1-1: config 251 interface 202 altsetting 1 has a duplicate endpoint with address 0x81, skipping
[  354.431332][   T10] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  354.431359][   T10] usb 1-1: config 251 interface 202 has no altsetting 0
[  354.439129][   T10] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  354.439156][   T10] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  354.439189][   T10] usb 1-1: Product: syz
[  354.439203][   T10] usb 1-1: SerialNumber: syz
[  354.733123][   T10] cxacru 1-1:251.202: usbatm_usb_probe: bind failed: -19!
[  354.774807][   T10] usb 1-1: USB disconnect, device number 8
[  355.238464][ T5723] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  355.397904][ T5723] usb 5-1: Using ep0 maxpacket: 16
[  355.400539][ T5723] usb 5-1: config 251 has an invalid interface number: 202 but max is 0
[  355.400563][ T5723] usb 5-1: config 251 has no interface number 0
[  355.400618][ T5723] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  355.400630][ T5723] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  355.400642][ T5723] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  355.400655][ T5723] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  355.400668][ T5723] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  355.400681][ T5723] usb 5-1: config 251 interface 202 altsetting 1 has a duplicate endpoint with address 0x81, skipping
[  355.400693][ T5723] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  355.400707][ T5723] usb 5-1: config 251 interface 202 has no altsetting 0
[  355.402428][ T5723] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  355.402455][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  355.402475][ T5723] usb 5-1: Product: syz
[  355.402488][ T5723] usb 5-1: SerialNumber: syz
[  355.999341][ T5723] cxacru 5-1:251.202: usbatm_usb_probe: bind failed: -19!
[  356.015119][ T5723] usb 5-1: USB disconnect, device number 10
[  356.732014][ T9229] loop4: detected capacity change from 0 to 512
[  356.743966][ T9229] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  356.744653][ T9229] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal
[  357.780754][ T5737] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  357.984529][ T5737] usb 2-1: Using ep0 maxpacket: 8
[  357.997465][ T5737] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  357.997485][ T5737] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  357.997499][ T5737] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  357.997511][ T5737] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  357.997535][ T5737] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  357.997546][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.317058][ T5737] usb 2-1: GET_CAPABILITIES returned 0
[  358.317121][ T5737] usbtmc 2-1:16.0: can't read capabilities
[  358.560363][ T5737] usb 2-1: USB disconnect, device number 5
[  358.929925][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.824'.
[  359.009954][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'.
[  359.009975][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'.
[  359.063738][   T57] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  359.063984][   T57] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  359.064021][   T57] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  359.064056][   T57] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  359.064539][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'.
[  359.064557][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'.
[  359.194250][ T9265] loop1: detected capacity change from 0 to 512
[  359.201093][ T9265] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  359.228848][ T9265] EXT4-fs (loop1): invalid journal inode
[  360.919726][   T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  361.070953][   T10] usb 3-1: Using ep0 maxpacket: 16
[  361.076985][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  361.077014][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  361.077029][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  361.077049][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  361.077062][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  361.079318][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  361.079344][   T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  361.079364][   T10] usb 3-1: Manufacturer: syz
[  361.100319][   T10] usb 3-1: config 0 descriptor??
[  361.208328][ T9301] loop4: detected capacity change from 0 to 512
[  361.229985][ T9301] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  361.267877][   T32] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  361.323559][ T9301] EXT4-fs (loop4): invalid journal inode
[  361.427874][   T32] usb 2-1: Using ep0 maxpacket: 8
[  361.499979][   T32] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  361.500014][   T32] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  361.500039][   T32] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  361.500063][   T32] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  361.500104][   T32] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  361.500127][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.567825][   T10] rc_core: IR keymap rc-hauppauge not found
[  361.567842][   T10] Registered IR keymap rc-empty
[  361.567981][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  361.592331][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  362.110262][   T32] usb 2-1: GET_CAPABILITIES returned 0
[  362.110312][   T32] usbtmc 2-1:16.0: can't read capabilities
[  362.277477][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  362.342614][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31
[  362.364342][   T32] usb 2-1: USB disconnect, device number 6
[  362.391336][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  362.410098][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  362.441955][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  362.457937][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  362.479666][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  362.498210][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  362.518137][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  362.539027][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  362.558647][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  362.579142][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  362.714680][   T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  362.714707][   T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  362.730354][   T10] usb 3-1: USB disconnect, device number 18
[  363.079706][ T9330] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5614] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9330]
[  364.746333][ T9334] bridge_slave_0: left allmulticast mode
[  364.746366][ T9334] bridge_slave_0: left promiscuous mode
[  364.752335][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.048915][ T9351] loop1: detected capacity change from 0 to 128
[  365.050607][ T9351] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  365.141742][ T9351] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  365.797683][ T9334] bridge_slave_1: left allmulticast mode
[  365.798074][ T9334] bridge_slave_1: left promiscuous mode
[  365.798636][ T9334] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.884596][ T9355] loop1: detected capacity change from 0 to 512
[  365.886690][ T9355] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  365.887031][ T9355] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal
[  366.129260][ T9334] bond0: (slave bond_slave_0): Releasing backup interface
[  366.969213][ T9334] bond0: (slave bond_slave_1): Releasing backup interface
[  367.015723][ T9334] team_slave_0: left promiscuous mode
[  367.015875][ T9334] team_slave_0: left allmulticast mode
[  367.029895][ T9334] team0: Port device team_slave_0 removed
[  367.036386][ T9334] team_slave_1: left promiscuous mode
[  367.036490][ T9334] team_slave_1: left allmulticast mode
[  367.069003][ T9334] team0: Port device team_slave_1 removed
[  367.073194][ T9334] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  367.075924][ T9334] batman_adv: batadv0: Removing interface: batadv_slave_1
[  367.120590][ T9334] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  367.179776][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  367.327929][    T9] usb 2-1: Using ep0 maxpacket: 8
[  367.334454][    T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  367.334504][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  367.334525][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  367.334546][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  367.334567][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  367.334589][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  367.334627][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  367.334650][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.441246][    T9] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22
[  367.547983][ T5751] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  367.698759][ T5751] usb 5-1: Using ep0 maxpacket: 8
[  367.703992][ T5751] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  367.704026][ T5751] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  367.704052][ T5751] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  367.704084][ T5751] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  367.704126][ T5751] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  367.704149][ T5751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.935949][ T9380] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5617] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9380]
[  367.999790][ T5751] usb 5-1: GET_CAPABILITIES returned 0
[  368.000573][ T5751] usbtmc 5-1:16.0: can't read capabilities
[  368.203293][   T32] usb 5-1: USB disconnect, device number 11
[  368.229394][ T9382] usbtmc: can not find device for minor 0
[  369.279431][ T9401] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5616] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9401]
[  369.848006][  T822] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  369.946250][    T9] usb 2-1: USB disconnect, device number 7
[  370.019380][  T822] usb 3-1: Using ep0 maxpacket: 16
[  370.022097][  T822] usb 3-1: config 251 has an invalid interface number: 202 but max is 0
[  370.022120][  T822] usb 3-1: config 251 has no interface number 0
[  370.022145][  T822] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  370.022158][  T822] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  370.022170][  T822] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  370.022181][  T822] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  370.022195][  T822] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  370.022208][  T822] usb 3-1: config 251 interface 202 altsetting 1 has a duplicate endpoint with address 0x81, skipping
[  370.022220][  T822] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  370.022234][  T822] usb 3-1: config 251 interface 202 has no altsetting 0
[  370.025409][  T822] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  370.025425][  T822] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  370.025436][  T822] usb 3-1: Product: syz
[  370.025443][  T822] usb 3-1: SerialNumber: syz
[  370.429154][  T822] cxacru 3-1:251.202: usbatm_usb_probe: bind failed: -19!
[  370.470781][  T822] usb 3-1: USB disconnect, device number 19
[  370.934819][ T9428] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5618] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9428]
[  371.039489][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  371.180031][ T9433] syzkaller0: entered promiscuous mode
[  371.180049][ T9433] syzkaller0: entered allmulticast mode
[  371.191447][    T9] usb 2-1: Using ep0 maxpacket: 8
[  371.205843][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  371.205863][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  371.205877][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  371.205889][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  371.205912][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  371.205924][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.531942][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  371.531990][    T9] usbtmc 2-1:16.0: can't read capabilities
[  371.735527][  T822] usb 2-1: USB disconnect, device number 8
[  372.056879][ T9438] loop4: detected capacity change from 0 to 32768
[  372.084712][ T9438] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  372.160930][ T9438] XFS (loop4): Ending clean mount
[  372.351917][ T9438] XFS (loop4): Quotacheck needed: Please wait.
[  373.565444][ T9464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.882'.
[  373.566115][ T9464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.882'.
[  373.864439][ T9438] XFS (loop4): Quotacheck: Done.
[  374.354196][   T37] audit: type=1800 audit(1780430715.538:52): pid=9479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.877" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0
[  374.406782][ T9479] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  374.406815][ T9479] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  375.071374][ T5616] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  375.100502][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  375.177494][ T5751] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  375.248222][    T9] usb 4-1: Using ep0 maxpacket: 16
[  375.271570][ T9487] loop0: detected capacity change from 0 to 32768
[  375.291379][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  375.291430][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  375.291458][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  375.291478][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  375.291500][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  375.292793][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  375.292817][    T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  375.292827][    T9] usb 4-1: Manufacturer: syz
[  375.307000][    T9] usb 4-1: config 0 descriptor??
[  375.357197][ T9487] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  375.358443][ T5751] usb 3-1: Using ep0 maxpacket: 16
[  375.361616][ T5751] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  375.361666][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  375.361746][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  375.361768][ T5751] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  375.361790][ T5751] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  375.365461][ T5751] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  375.365487][ T5751] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  375.365507][ T5751] usb 3-1: Manufacturer: syz
[  375.382012][ T5751] usb 3-1: config 0 descriptor??
[  375.425515][ T9487] XFS (loop0): Ending clean mount
[  375.430915][ T9487] XFS (loop0): Quotacheck needed: Please wait.
[  375.609077][    T9] rc_core: IR keymap rc-hauppauge not found
[  375.609094][    T9] Registered IR keymap rc-empty
[  375.609216][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  375.627901][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  375.651698][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  375.654859][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input32
[  375.720577][ T5751] rc_core: IR keymap rc-hauppauge not found
[  375.720590][ T5751] Registered IR keymap rc-empty
[  375.720677][ T5751] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  375.761747][ T5751] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  375.794275][ T5751] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1
[  375.795986][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  375.805986][ T5751] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input33
[  375.808029][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  375.828574][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  375.847863][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  375.867953][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  375.890297][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  375.909437][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  375.927955][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  375.947908][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  375.988375][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  376.082669][    T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  376.082695][    T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  376.095351][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'.
[  376.135296][ T5751] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  376.158570][ T5751] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  376.186683][ T5751] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  376.203801][ T5751] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  376.217927][ T5751] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  376.240661][ T5751] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  376.245846][    T9] usb 4-1: USB disconnect, device number 9
[  376.258498][ T5751] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  376.261383][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.889'.
[  376.278807][ T5751] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  376.300221][ T5751] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  376.317906][ T5751] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  376.379924][ T5751] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  376.379974][ T5751] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  376.466437][ T5751] usb 3-1: USB disconnect, device number 20
[  376.508057][ T9487] XFS (loop0): Quotacheck: Done.
[  377.257158][   T37] audit: type=1800 audit(1780430718.068:53): pid=9509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.890" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0
[  377.569313][ T9516] loop1: detected capacity change from 0 to 512
[  377.575184][ T9516] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  377.589193][ T9516] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal
[  378.527661][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  378.551408][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  378.836616][ T9518] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5616] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9518]
[  378.924582][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'.
[  379.100068][ T5618] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  379.234012][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'.
[  379.568111][   T32] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  379.748037][   T32] usb 4-1: Using ep0 maxpacket: 8
[  379.749645][   T32] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  379.749664][   T32] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  379.749677][   T32] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  379.749697][   T32] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  379.749720][   T32] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  379.749760][   T32] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  379.749775][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.760549][   T32] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22
[  380.575185][ T9553] loop2: detected capacity change from 0 to 32768
[  380.581409][ T9553] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.904 (9553)
[  380.610356][ T9553] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  380.610377][ T9553] BTRFS info (device loop2): using crc32c checksum algorithm
[  380.750848][ T9553] BTRFS info (device loop2): enabling ssd optimizations
[  380.750864][ T9553] BTRFS info (device loop2): turning on flush-on-commit
[  380.750874][ T9553] BTRFS info (device loop2): turning on async discard
[  380.750882][ T9553] BTRFS info (device loop2): enabling free space tree
[  380.750891][ T9553] BTRFS info (device loop2): enabling auto defrag
[  380.750900][ T9553] BTRFS info (device loop2): force zlib compression, level 3
[  380.750911][ T9553] BTRFS info (device loop2): max_inline set to 4096
[  380.836073][   T37] audit: type=1800 audit(1780430722.018:54): pid=9553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.904" name="file1" dev="loop2" ino=260 res=0 errno=0
[  381.454212][ T5615] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  381.538552][   T32] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  381.707842][   T32] usb 5-1: Using ep0 maxpacket: 16
[  381.722675][   T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  381.722826][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  381.722855][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  381.722876][   T32] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  381.722899][   T32] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  381.738247][   T32] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  381.738273][   T32] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  381.738292][   T32] usb 5-1: Manufacturer: syz
[  381.764503][ T9588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.906'.
[  381.767167][ T9588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.906'.
[  381.865763][   T32] usb 5-1: config 0 descriptor??
[  381.988861][ T9585] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5618] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9585]
[  382.257882][   T32] rc_core: IR keymap rc-hauppauge not found
[  382.257901][   T32] Registered IR keymap rc-empty
[  382.258042][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  382.292744][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  382.336493][   T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  382.342318][   T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input34
[  382.476676][ T5737] usb 4-1: USB disconnect, device number 10
[  382.620335][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  382.645101][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  382.668338][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  382.703530][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  382.728124][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  382.757954][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  382.778037][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  382.797987][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  382.818426][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  382.838093][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  382.867025][   T32] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  382.867045][   T32] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  382.892391][   T32] usb 5-1: USB disconnect, device number 12
[  383.453157][ T9610] loop1: detected capacity change from 0 to 512
[  383.463804][ T9610] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  383.464159][ T9610] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal
[  384.466985][ T9606] loop2: detected capacity change from 0 to 32768
[  384.518858][ T9606] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.916 (9606)
[  384.604945][ T9606] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  384.604966][ T9606] BTRFS info (device loop2): using crc32c checksum algorithm
[  384.607111][ T9616] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5616] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9616]
[  384.662774][ T9619] loop1: detected capacity change from 0 to 512
[  384.681390][ T9619] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  384.682901][ T9619] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal
[  384.886752][ T9606] BTRFS info (device loop2): enabling ssd optimizations
[  384.886789][ T9606] BTRFS info (device loop2): turning on flush-on-commit
[  384.886805][ T9606] BTRFS info (device loop2): turning on async discard
[  384.886820][ T9606] BTRFS info (device loop2): enabling free space tree
[  384.886835][ T9606] BTRFS info (device loop2): enabling auto defrag
[  384.886851][ T9606] BTRFS info (device loop2): force zlib compression, level 3
[  384.886871][ T9606] BTRFS info (device loop2): max_inline set to 4096
[  385.731841][   T37] audit: type=1800 audit(1780430726.918:55): pid=9606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.916" name="file1" dev="loop2" ino=260 res=0 errno=0
[  386.339723][ T5615] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  386.440152][  T822] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  386.617862][  T822] usb 1-1: Using ep0 maxpacket: 8
[  386.620172][  T822] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  386.620211][  T822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  386.620236][  T822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  386.620260][  T822] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  386.620302][  T822] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  386.620324][  T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.921137][ T5635] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  387.000998][  T822] usb 1-1: usb_control_msg returned -71
[  387.001043][  T822] usbtmc 1-1:16.0: can't read capabilities
[  387.096947][  T822] usb 1-1: USB disconnect, device number 9
[  387.110991][ T5635] usb 3-1: Using ep0 maxpacket: 16
[  387.113034][ T5635] usb 3-1: config 251 has an invalid interface number: 202 but max is 0
[  387.113058][ T5635] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  387.113077][ T5635] usb 3-1: config 251 has no interface number 0
[  387.113121][ T5635] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  387.113143][ T5635] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  387.113164][ T5635] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  387.113185][ T5635] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  387.113211][ T5635] usb 3-1: config 251 interface 202 has no altsetting 0
[  387.129328][ T5635] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  387.129354][ T5635] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  387.129374][ T5635] usb 3-1: Product: syz
[  387.129387][ T5635] usb 3-1: SerialNumber: syz
[  388.814216][ T5635] cxacru 3-1:251.202: usbatm_usb_probe: bind failed: -19!
[  388.847855][ T5635] usb 3-1: USB disconnect, device number 21
[  389.275293][ T9650] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.668308][ T9650] team0: left allmulticast mode
[  390.668322][ T9650] team_slave_0: left allmulticast mode
[  390.668336][ T9650] team_slave_1: left allmulticast mode
[  390.668351][ T9650] team0: left promiscuous mode
[  390.668357][ T9650] team_slave_0: left promiscuous mode
[  390.668494][ T9650] team_slave_1: left promiscuous mode
[  390.754052][   T69] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.754081][   T69] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.756343][   T69] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.756372][   T69] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.756412][   T69] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.756437][   T69] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.756471][   T69] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.756495][   T69] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.868595][ T9673] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  390.887031][ T9673] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  391.824805][ T9700] loop2: detected capacity change from 0 to 32768
[  391.888817][ T9700] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  391.987944][ T9700] XFS (loop2): Ending clean mount
[  391.991173][ T9700] XFS (loop2): Quotacheck needed: Please wait.
[  392.129861][ T9693] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5618] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9693]
[  392.292770][ T9689] loop1: detected capacity change from 0 to 32768
[  392.296565][ T9689] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.934 (9689)
[  392.362268][ T9689] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  392.362298][ T9689] BTRFS info (device loop1): using crc32c checksum algorithm
[  392.730597][ T9700] XFS (loop2): Quotacheck: Done.
[  392.927861][ T5621] Bluetooth: hci3: command 0x0406 tx timeout
[  393.060816][ T9730] overlayfs: missing 'lowerdir'
[  393.359544][   T37] audit: type=1800 audit(1780430734.228:56): pid=9730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.936" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0
[  393.441698][ T9689] BTRFS info (device loop1): enabling ssd optimizations
[  393.441739][ T9689] BTRFS info (device loop1): turning on flush-on-commit
[  393.441756][ T9689] BTRFS info (device loop1): turning on async discard
[  393.441772][ T9689] BTRFS info (device loop1): enabling free space tree
[  393.441788][ T9689] BTRFS info (device loop1): enabling auto defrag
[  393.441806][ T9689] BTRFS info (device loop1): force zlib compression, level 3
[  393.441826][ T9689] BTRFS info (device loop1): max_inline set to 4096
[  393.640889][ T9733] loop3: detected capacity change from 0 to 512
[  393.688138][ T5615] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  393.717852][   T37] audit: type=1800 audit(1780430734.898:57): pid=9689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.934" name="file1" dev="loop1" ino=260 res=0 errno=0
[  393.797599][ T9733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  393.799955][ T9733] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal
[  394.845095][ T5614] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  395.016532][ T5621] Bluetooth: hci3: command 0x0406 tx timeout
[  397.775884][ T9775] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5616] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9775]
[  397.857881][ T5751] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  398.056437][ T5751] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  398.056456][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.056466][ T5751] usb 4-1: Product: syz
[  398.056473][ T5751] usb 4-1: Manufacturer: syz
[  398.056481][ T5751] usb 4-1: SerialNumber: syz
[  398.110224][ T5751] usb 4-1: config 0 descriptor??
[  398.121626][ T5751] hub 4-1:0.0: bad descriptor, ignoring hub
[  398.122297][ T5751] hub 4-1:0.0: probe with driver hub failed with error -5
[  398.328270][ T9773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  398.329213][ T9773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  398.383565][ T9788] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5616] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9788]
[  398.460274][ T9793] trusted_key: encrypted_key: insufficient parameters specified
[  398.562255][ T5751] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  398.712164][ T5751] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  398.712358][ T5751] dib0700: firmware download failed at 7 with -22
[  398.779539][ T5751] usb 4-1: USB disconnect, device number 11
[  398.821503][ T9801] loop4: detected capacity change from 0 to 512
[  398.825844][ T9801] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  398.830448][ T9801] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal
[  398.908068][ T9802] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5618] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9802]
[  399.169162][ T9805] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5614] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9805]
[  399.972125][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'.
[  401.137934][    T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  401.290124][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  401.290860][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  401.292840][    T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4
[  401.327164][    T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[  401.327192][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.327212][    T9] usb 2-1: Product: syz
[  401.327225][    T9] usb 2-1: Manufacturer: syz
[  401.327239][    T9] usb 2-1: SerialNumber: syz
[  401.528165][ T5635] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  401.597887][   T32] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  401.603966][ T9817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  401.604645][ T9817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  401.653147][ T9817] batadv_slave_1: entered promiscuous mode
[  401.694872][ T5635] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  401.694902][ T5635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.694974][ T5635] usb 4-1: Product: syz
[  401.694990][ T5635] usb 4-1: Manufacturer: syz
[  401.695003][ T5635] usb 4-1: SerialNumber: syz
[  401.702329][ T9816] batadv_slave_1: left promiscuous mode
[  401.740845][ T5635] usb 4-1: config 0 descriptor??
[  401.752380][   T32] usb 5-1: Using ep0 maxpacket: 16
[  401.759255][ T5736] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[  401.759401][   T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  401.759421][   T32] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  401.759753][   T32] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  401.759778][   T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.794207][   T32] usb 5-1: config 0 descriptor??
[  401.837415][ T5635] hub 4-1:0.0: bad descriptor, ignoring hub
[  401.837450][ T5635] hub 4-1:0.0: probe with driver hub failed with error -5
[  401.912925][    T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  401.928433][    T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  401.930555][    T9] usb 2-1: unit 3 not found!
[  401.955250][ T9830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  401.955746][ T9830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  401.984745][ T5736] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  401.984769][ T5736] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  401.984789][ T5736] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  401.984806][ T5736] usb 1-1: config 0 has no interface number 0
[  401.984852][ T5736] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  401.984876][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.032331][ T9830] trusted_key: encrypted_key: insufficient parameters specified
[  402.071652][ T5635] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  402.094378][ T5635] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  402.094423][ T5635] dib0700: firmware download failed at 7 with -22
[  402.131419][ T5736] usb 1-1: config 0 descriptor??
[  402.161636][ T5635] usb 4-1: USB disconnect, device number 12
[  402.484984][    T9] usb 2-1: USB disconnect, device number 9
[  402.626396][ T9843] loop2: detected capacity change from 0 to 32768
[  402.689016][ T9843] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  402.790506][ T9843] XFS (loop2): Ending clean mount
[  402.804475][ T9843] XFS (loop2): Quotacheck needed: Please wait.
[  403.126281][ T7756] udevd[7756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  403.225210][    T9] usb 1-1: USB disconnect, device number 10
[  403.270796][ T9843] XFS (loop2): Quotacheck: Done.
[  403.654656][ T9865] overlayfs: failed to resolve './bus': -2
[  404.121287][ T5615] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  404.409582][    T9] usb 5-1: USB disconnect, device number 13
[  405.077902][  T822] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  405.230107][  T822] usb 3-1: Using ep0 maxpacket: 16
[  405.235737][  T822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  405.235791][  T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  405.235821][  T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  405.235844][  T822] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  405.235869][  T822] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  405.247023][  T822] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  405.247049][  T822] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  405.247069][  T822] usb 3-1: Manufacturer: syz
[  405.273298][  T822] usb 3-1: config 0 descriptor??
[  405.599133][  T822] rc_core: IR keymap rc-hauppauge not found
[  405.599153][  T822] Registered IR keymap rc-empty
[  405.599296][  T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  405.622397][  T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  405.640913][  T822] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  405.652716][  T822] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35
[  405.674257][  T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  405.688444][  T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  405.721692][  T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  405.737941][  T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  405.768827][  T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  405.788426][  T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  405.808370][  T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  405.838286][  T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  405.858270][  T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  405.877922][  T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  405.879293][ T9900] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  405.879310][ T9900] IPv6: NLM_F_CREATE should be set when creating new route
[  405.901392][ T5736] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  405.925391][  T822] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  405.925970][  T822] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  405.986373][  T822] usb 3-1: USB disconnect, device number 22
[  406.021338][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'.
[  406.091904][ T5736] usb 4-1: unable to get BOS descriptor or descriptor too short
[  406.092851][ T5736] usb 4-1: not running at top speed; connect to a high speed hub
[  406.095310][ T5736] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4
[  406.100319][ T5736] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[  406.100346][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.100365][ T5736] usb 4-1: Product: syz
[  406.100386][ T5736] usb 4-1: Manufacturer: syz
[  406.100400][ T5736] usb 4-1: SerialNumber: syz
[  406.337222][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.342876][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.679466][ T5736] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  406.699131][ T5736] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  406.703295][ T5736] usb 4-1: unit 3 not found!
[  406.902920][ T5736] usb 4-1: USB disconnect, device number 13
[  407.035054][ T7756] udevd[7756]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  407.067936][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  407.219668][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  407.219697][    T9] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  407.219716][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  407.219744][    T9] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  407.219757][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  407.219770][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  407.221403][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  407.221431][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  407.221450][    T9] usb 5-1: Product: syz
[  407.221465][    T9] usb 5-1: Manufacturer: syz
[  407.260000][ T9919] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  407.275319][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  407.275336][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  407.295775][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  407.295864][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[  407.533937][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  407.536491][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  407.536735][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  407.536754][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  407.536997][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  407.537015][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  407.537234][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  407.537253][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  407.537468][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  407.537487][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  407.537740][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  407.537759][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  407.537984][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  407.538002][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  407.538218][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  407.538236][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  407.538457][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  407.538474][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  407.538687][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  407.538705][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  407.641854][    T9] usb 5-1: USB disconnect, device number 14
[  407.641971][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  408.334445][ T9943] loop4: detected capacity change from 0 to 32768
[  408.378622][ T9943] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  408.411365][ T9943] XFS (loop4): Ending clean mount
[  408.416617][ T9943] XFS (loop4): Quotacheck needed: Please wait.
[  408.460371][ T5635] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  408.631396][ T9943] XFS (loop4): Quotacheck: Done.
[  408.647883][    T9] usb 4-1: new low-speed USB device number 14 using dummy_hcd
[  408.648069][ T5635] usb 3-1: Using ep0 maxpacket: 16
[  408.712585][ T5635] usb 3-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config
[  408.712640][ T5635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  408.712668][ T5635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  408.712689][ T5635] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  408.712713][ T5635] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  408.715929][ T5635] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  408.715956][ T5635] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  408.715977][ T5635] usb 3-1: Manufacturer: syz
[  408.800071][    T9] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  408.800099][    T9] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  408.800118][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  408.800137][    T9] usb 4-1: config 0 has no interface number 0
[  408.800182][    T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  408.800205][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.875902][    T9] usb 4-1: config 0 descriptor??
[  408.898799][ T5635] usb 3-1: config 0 descriptor??
[  409.150221][ T9962] overlayfs: missing 'lowerdir'
[  409.250040][   T37] audit: type=1800 audit(1780430750.198:58): pid=9962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1001" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0
[  409.488501][ T5635] rc_core: IR keymap rc-hauppauge not found
[  409.488520][ T5635] Registered IR keymap rc-empty
[  409.488708][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  409.593519][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  409.609894][ T5635] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  409.613484][ T5635] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36
[  409.654603][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  409.669033][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  409.688052][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  409.710722][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  409.727972][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  409.747927][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  409.773377][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  409.788568][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  409.807944][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  409.827911][ T5635] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  409.838405][ T5616] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  409.884729][ T5635] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  409.884755][ T5635] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  409.967998][ T5635] usb 3-1: USB disconnect, device number 23
[  411.249232][ T5736] usb 4-1: USB disconnect, device number 14
[  412.392829][ T5751] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  412.493631][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1016'.
[  412.550329][ T5751] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  412.550346][ T5751] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  412.550357][ T5751] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  412.550383][ T5751] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  412.550400][ T5751] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  412.550413][ T5751] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  412.552274][ T5751] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  412.552296][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  412.552307][ T5751] usb 4-1: Product: syz
[  412.552314][ T5751] usb 4-1: Manufacturer: syz
[  412.663398][T10001] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  412.678653][ T5751] cdc_wdm 4-1:1.0: skipping garbage
[  412.678665][ T5751] cdc_wdm 4-1:1.0: skipping garbage
[  412.774389][ T5751] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  412.774411][ T5751] cdc_wdm 4-1:1.0: Unknown control protocol
[  412.871519][    C0] wdm_int_callback: 340 callbacks suppressed
[  412.871544][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  412.871562][    C0] wdm_int_callback: 340 callbacks suppressed
[  412.871578][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  412.871821][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  412.871847][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  412.872071][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  412.872090][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  412.872335][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  412.872353][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  412.872588][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  412.872607][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  412.872867][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  412.872886][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  412.873128][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  412.873142][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  412.873354][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  412.873375][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  412.873596][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  412.873614][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  412.873851][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  412.873870][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  413.325946][ T5736] usb 4-1: USB disconnect, device number 15
[  413.326042][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  413.327032][T10001] cdc_wdm 4-1:1.0: Tx URB error: -19
[  413.765580][T10013] loop2: detected capacity change from 0 to 32768
[  413.810212][T10013] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  413.862133][T10013] XFS (loop2): Ending clean mount
[  413.870231][T10013] XFS (loop2): Quotacheck needed: Please wait.
[  414.385885][T10013] XFS (loop2): Quotacheck: Done.
[  414.817145][T10023] overlayfs: missing 'lowerdir'
[  415.085643][   T37] audit: type=1800 audit(1780430755.868:59): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1017" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0
[  415.399019][ T5615] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  415.607947][   T32] usb 4-1: new low-speed USB device number 16 using dummy_hcd
[  415.819611][   T32] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  415.819630][   T32] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  415.819641][   T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  415.819651][   T32] usb 4-1: config 0 has no interface number 0
[  415.819676][   T32] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  415.819689][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.904654][   T32] usb 4-1: config 0 descriptor??
[  416.380481][ T5751] usb 4-1: USB disconnect, device number 16
[  416.778650][   T32] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  417.667817][   T32] usb 3-1: Using ep0 maxpacket: 16
[  417.670172][   T32] usb 3-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config
[  417.670222][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  417.670251][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  417.670272][   T32] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  417.670295][   T32] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  417.671575][   T32] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  417.671603][   T32] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  417.671623][   T32] usb 3-1: Manufacturer: syz
[  417.802338][   T32] usb 3-1: config 0 descriptor??
[  418.078335][   T10] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[  418.257933][   T32] rc_core: IR keymap rc-hauppauge not found
[  418.257954][   T32] Registered IR keymap rc-empty
[  418.258161][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  418.341690][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  418.359877][   T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  418.363378][   T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input37
[  418.393109][   T10] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  418.393214][   T10] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  418.393234][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  418.393251][   T10] usb 4-1: config 0 has no interface number 0
[  418.393294][   T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  418.393316][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.393586][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  418.404011][   T10] usb 4-1: config 0 descriptor??
[  418.554885][T10061] overlayfs: overlapping lowerdir path
[  418.626371][T10062] overlayfs: overlapping lowerdir path
[  419.260956][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  419.406025][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  419.425001][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  419.439414][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  419.457932][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  419.477963][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  419.499413][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  419.517874][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  419.547909][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  419.579535][   T32] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  419.579558][   T32] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  419.608202][   T32] usb 3-1: USB disconnect, device number 24
[  419.895212][T10065] loop4: detected capacity change from 0 to 32768
[  419.962401][T10065] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  420.030131][T10065] XFS (loop4): Ending clean mount
[  420.042871][T10065] XFS (loop4): Quotacheck needed: Please wait.
[  420.197876][   T10] usb 2-1: new low-speed USB device number 10 using dummy_hcd
[  420.306959][    T9] usb 4-1: USB disconnect, device number 17
[  420.356193][T10065] XFS (loop4): Quotacheck: Done.
[  420.403689][   T10] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  420.403717][   T10] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[  420.403737][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  420.403755][   T10] usb 2-1: config 0 has no interface number 0
[  420.403798][   T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  420.403821][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.432615][   T10] usb 2-1: config 0 descriptor??
[  420.865711][T10085] overlayfs: missing 'lowerdir'
[  421.502894][T10086] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  421.550133][   T37] audit: type=1800 audit(1780430762.028:60): pid=10085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1029" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0
[  422.381579][ T5616] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  422.407949][   T32] usb 3-1: new low-speed USB device number 25 using dummy_hcd
[  422.591130][   T10] usb 2-1: USB disconnect, device number 10
[  422.598887][   T32] usb 3-1: device descriptor read/all, error -71
[  423.031343][ T5737] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  423.191298][ T5737] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  423.191326][ T5737] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  423.191345][ T5737] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  423.191364][ T5737] usb 1-1: config 0 has no interface number 0
[  423.191391][ T5737] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  423.191403][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.195058][ T5737] usb 1-1: config 0 descriptor??
[  423.634847][ T5751] usb 1-1: USB disconnect, device number 11
[  423.947820][   T32] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  424.027951][   T10] usb 3-1: new low-speed USB device number 27 using dummy_hcd
[  424.108595][   T32] usb 4-1: Using ep0 maxpacket: 16
[  424.110628][   T32] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config
[  424.110677][   T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  424.110698][   T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  424.110709][   T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  424.110721][   T32] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  424.111745][   T32] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  424.111771][   T32] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  424.111787][   T32] usb 4-1: Manufacturer: syz
[  424.124526][   T32] usb 4-1: config 0 descriptor??
[  424.222361][   T10] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[  424.222388][   T10] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[  424.222408][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  424.222426][   T10] usb 3-1: config 0 has no interface number 0
[  424.222470][   T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  424.222492][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.286303][   T10] usb 3-1: config 0 descriptor??
[  425.288703][   T32] rc_core: IR keymap rc-hauppauge not found
[  425.288723][   T32] Registered IR keymap rc-empty
[  425.288859][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.308306][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.339938][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1043'.
[  425.344130][   T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  425.361071][   T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38
[  425.381108][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.411500][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.430126][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.451624][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.468170][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.498235][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.519486][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.538297][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.567973][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.592241][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.623982][   T32] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  425.623999][   T32] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  425.666581][   T32] usb 4-1: USB disconnect, device number 18
[  425.762822][  T822] usb 3-1: USB disconnect, device number 27
[  425.848146][ T5736] IPVS: starting estimator thread 0...
[  425.958030][T10135] IPVS: using max 15 ests per chain, 36000 per kthread
[  426.158700][   T10] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  426.330504][   T10] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  426.330523][   T10] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[  426.330534][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  426.330544][   T10] usb 2-1: config 0 has no interface number 0
[  426.330581][   T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  426.330604][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.390733][   T10] usb 2-1: config 0 descriptor??
[  426.626212][   T32] IPVS: starting estimator thread 0...
[  426.644249][T10149] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  426.719046][T10150] IPVS: using max 10 ests per chain, 24000 per kthread
[  426.862332][   T10] usb 2-1: USB disconnect, device number 11
[  426.994401][T10158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1056'.
[  427.027876][   T32] usb 3-1: new low-speed USB device number 28 using dummy_hcd
[  427.194857][   T32] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[  427.194886][   T32] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[  427.194906][   T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  427.194925][   T32] usb 3-1: config 0 has no interface number 0
[  427.194968][   T32] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  427.194992][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.210257][   T32] usb 3-1: config 0 descriptor??
[  427.930188][ T5751] usb 3-1: USB disconnect, device number 28
[  428.108677][   T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  428.257876][   T10] usb 4-1: Using ep0 maxpacket: 16
[  428.267180][   T10] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config
[  428.267231][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  428.267260][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  428.267281][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  428.267304][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  428.301150][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  428.301178][   T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  428.301197][   T10] usb 4-1: Manufacturer: syz
[  428.301399][T10182] overlayfs: failed to resolve './file1/file0': -2
[  428.357232][   T10] usb 4-1: config 0 descriptor??
[  428.456776][T10185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1065'.
[  428.637861][   T10] rc_core: IR keymap rc-hauppauge not found
[  428.637883][   T10] Registered IR keymap rc-empty
[  428.638031][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  428.669241][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  428.696872][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  428.700512][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input39
[  428.729551][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  428.748029][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  428.768345][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  428.787977][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  428.808062][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  428.828016][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  428.848041][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  428.867907][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  428.889425][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  428.907879][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  428.942783][   T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  428.942807][   T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  429.041599][   T10] usb 4-1: USB disconnect, device number 19
[  429.877899][ T5736] usb 4-1: new low-speed USB device number 20 using dummy_hcd
[  430.030514][ T5736] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  430.030545][ T5736] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  430.030572][ T5736] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  430.030592][ T5736] usb 4-1: config 0 has no interface number 0
[  430.030635][ T5736] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  430.030659][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.040183][ T5736] usb 4-1: config 0 descriptor??
[  430.510042][T10221] overlayfs: failed to resolve './file1/file0': -2
[  430.611428][   T32] usb 4-1: USB disconnect, device number 20
[  431.369290][T10237] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  431.369734][T10237] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  433.258607][ T5751] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  433.420349][ T5751] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  433.420377][ T5751] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[  433.420397][ T5751] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  433.420417][ T5751] usb 5-1: config 0 has no interface number 0
[  433.420462][ T5751] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  433.420486][ T5751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.425523][ T5751] usb 5-1: config 0 descriptor??
[  434.412062][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'.
[  434.474689][T10273] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1092'.
[  434.571831][ T5736] usb 5-1: USB disconnect, device number 15
[  436.613874][T10285] ==================================================================
[  436.613956][T10285] BUG: KASAN: slab-use-after-free in clear_tfile_check_list+0x114/0x380
[  436.614041][T10285] Read of size 8 at addr ffff88803eab1928 by task syz.3.1093/10285
[  436.614058][T10285] 
[  436.614083][T10285] CPU: 0 UID: 0 PID: 10285 Comm: syz.3.1093 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  436.614110][T10285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  436.614126][T10285] Call Trace:
[  436.614164][T10285]  <TASK>
[  436.614219][T10285]  dump_sta[  436.614219][T10285]  dump_stack_lvl+0xe8/0x150
[  436.614292][T10285]  print_address_description+0x55/0x1e0
[  436.614318][T10285]  ? clear_tfile_check_list+0x114/0x380
[  436.614371][T10285]  print_report+0x58/0x70
[  436.614394][T10285]  kasan_report+0x117/0x150
[  436.614424][T10285]  ? clear_tfile_check_list+0x114/0x380
[  436.614447][T10285]  clear_tfile_check_list+0x114/0x380
[  436.614467][T10285]  ? clear_tfile_check_list+0x22/0x380
[  436.614487][T10285]  do_epoll_ctl_file+0x8fd/0xed0
[  436.614519][T10285]  ? do_epoll_ctl_file+0xac3/0xed0
[  436.614548][T10285]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  436.614577][T10285]  ? __fget_files+0x3a6/0x420
[  436.614603][T10285]  ? __fget_files+0x2a/0x420
[  436.614631][T10285]  __se_sys_epoll_ctl+0x14e/0x210
[  436.614663][T10285]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  436.614693][T10285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.614712][T10285]  do_syscall_64+0x174/0x580
[  436.614730][T10285]  ? trace_irq_disable+0x3b/0x140
[  436.614756][T10285]  ? clear_bhb_loop+0x40/0x90
[  436.614777][T10285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.614797][T10285] RIP: 0033:0x7f2689e2ce59
[  436.614858][T10285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.614876][T10285] RSP: 002b:00007f2687c19028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  436.614927][T10285] RAX: ffffffffffffffda RBX: 00007f268a0a6270 RCX: 00007f2689e2ce59
[  436.614943][T10285] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006
[  436.614956][T10285] RBP: 00007f2689ec2d6f R08: 0000000000000000 R09: 0000000000000000
[  436.614970][T10285] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  436.614983][T10285] R13: 00007f268a0a6308 R14: 00007f268a0a6270 R15: 00007ffd72b1b478
[  436.615007][T10285]  </TASK>
[  436.615014][T10285] 
[  436.615020][T10285] Allocated by task 10278:
[  436.615062][T10285]  kasan_save_track+0x3e/0x80
[  436.615087][T10285]  __kasan_slab_alloc+0x6c/0x80
[  436.615111][T10285]  kmem_cache_alloc_noprof+0x33b/0x680
[  436.615134][T10285]  ep_insert+0x512/0x1820
[  436.615159][T10285]  do_epoll_ctl_file+0x8bb/0xed0
[  436.615185][T10285]  __se_sys_epoll_ctl+0x14e/0x210
[  436.615211][T10285]  do_syscall_64+0x174/0x580
[  436.615228][T10285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.615246][T10285] 
[  436.615250][T10285] Freed by task 10272:
[  436.615259][T10285]  kasan_save_track+0x3e/0x80
[  436.615281][T10285]  kasan_save_free_info+0x46/0x50
[  436.615299][T10285]  __kasan_slab_free+0x5c/0x80
[  436.615323][T10285]  kmem_cache_free+0x187/0x6c0
[  436.615358][T10285]  eventpoll_release_file+0xc2/0x240
[  436.615384][T10285]  __fput+0x83c/0xa70
[  436.615407][T10285]  task_work_run+0x1d9/0x270
[  436.615431][T10285]  get_signal+0x11eb/0x1330
[  436.615458][T10285]  arch_do_signal_or_restart+0xbc/0x840
[  436.615480][T10285]  exit_to_user_mode_loop+0xa9/0x680
[  436.615503][T10285]  do_syscall_64+0x353/0x580
[  436.615520][T10285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.615538][T10285] 
[  436.615542][T10285] The buggy address belongs to the object at ffff88803eab1920
[  436.615542][T10285]  which belongs to the cache ep_head of size 16
[  436.615558][T10285] The buggy address is located 8 bytes inside of
[  436.615558][T10285]  freed 16-byte region [ffff88803eab1920, ffff88803eab1930)
[  436.615579][T10285] 
[  436.615584][T10285] The buggy address belongs to the physical page:
[  436.615634][T10285] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803eab1960 pfn:0x3eab1
[  436.615654][T10285] memcg:ffff88805f97b801
[  436.615664][T10285] flags: 0x80000000000200(workingset|node=0|zone=1)
[  436.615685][T10285] page_type: f5(slab)
[  436.615709][T10285] raw: 0080000000000200 ffff888140422dc0 ffff88801b3ad088 ffffea0000dc5bd0
[  436.615729][T10285] raw: ffff88803eab1960 0000000800800035 00000000f5000000 ffff88805f97b801
[  436.615740][T10285] page dumped because: kasan: bad access detected
[  436.615750][T10285] page_owner tracks the page as allocated
[  436.615757][T10285] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4993, tgid 4993 (udevd), ts 35471940572, free_ts 0
[  436.615791][T10285]  post_alloc_hook+0x1f9/0x250
[  436.615814][T10285]  get_page_from_freelist+0x265c/0x26e0
[  436.615842][T10285]  __alloc_frozen_pages_noprof+0x18d/0x380
[  436.615869][T10285]  allocate_slab+0x74/0x5e0
[  436.615886][T10285]  refill_objects+0x33c/0x3d0
[  436.615902][T10285]  __pcs_replace_empty_main+0x373/0x720
[  436.615922][T10285]  kmem_cache_alloc_noprof+0x433/0x680
[  436.615946][T10285]  ep_insert+0x512/0x1820
[  436.615971][T10285]  do_epoll_ctl_file+0x8bb/0xed0
[  436.615997][T10285]  __se_sys_epoll_ctl+0x14e/0x210
[  436.616024][T10285]  do_syscall_64+0x174/0x580
[  436.616041][T10285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.616060][T10285] page_owner free stack trace missing
[  436.616066][T10285] 
[  436.616070][T10285] Memory state around the buggy address:
[  436.616108][T10285]  ffff88803eab1800: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  436.616122][T10285]  ffff88803eab1880: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  436.616135][T10285] >ffff88803eab1900: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  436.616144][T10285]                                   ^
[  436.616154][T10285]  ffff88803eab1980: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  436.616167][T10285]  ffff88803eab1a00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  436.616178][T10285] ==================================================================
[  436.647911][   T10] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[  436.685602][T10285] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  436.685629][T10285] CPU: 1 UID: 0 PID: 10285 Comm: syz.3.1093 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  436.685654][T10285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  436.685667][T10285] Call Trace:
[  436.685675][T10285]  <TASK>
[  436.685683][T10285]  vpanic+0x56c/0xa60
[  436.685718][T10285]  ? __pfx_vpanic+0x10/0x10
[  436.685745][T10285]  ? __pfx___schedule+0x10/0x10
[  436.685777][T10285]  panic+0xc5/0xd0
[  436.685804][T10285]  ? __pfx_panic+0x10/0x10
[  436.685831][T10285]  ? preempt_schedule_thunk+0x16/0x40
[  436.685866][T10285]  ? clear_tfile_check_list+0x114/0x380
[  436.685886][T10285]  check_panic_on_warn+0x89/0xb0
[  436.685915][T10285]  ? clear_tfile_check_list+0x114/0x380
[  436.685934][T10285]  end_report+0x73/0x170
[  436.685961][T10285]  ? clear_tfile_check_list+0x114/0x380
[  436.685980][T10285]  kasan_report+0x128/0x150
[  436.686008][T10285]  ? clear_tfile_check_list+0x114/0x380
[  436.686030][T10285]  clear_tfile_check_list+0x114/0x380
[  436.686050][T10285]  ? clear_tfile_check_list+0x22/0x380
[  436.686070][T10285]  do_epoll_ctl_file+0x8fd/0xed0
[  436.686101][T10285]  ? do_epoll_ctl_file+0xac3/0xed0
[  436.686131][T10285]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  436.686185][T10285]  ? __fget_files+0x3a6/0x420
[  436.686211][T10285]  ? __fget_files+0x2a/0x420
[  436.686241][T10285]  __se_sys_epoll_ctl+0x14e/0x210
[  436.686272][T10285]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  436.686306][T10285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.686329][T10285]  do_syscall_64+0x174/0x580
[  436.686348][T10285]  ? trace_irq_disable+0x3b/0x140
[  436.686374][T10285]  ? clear_bhb_loop+0x40/0x90
[  436.686396][T10285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.686416][T10285] RIP: 0033:0x7f2689e2ce59
[  436.686435][T10285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.686453][T10285] RSP: 002b:00007f2687c19028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  436.686475][T10285] RAX: ffffffffffffffda RBX: 00007f268a0a6270 RCX: 00007f2689e2ce59
[  436.686491][T10285] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006
[  436.686504][T10285] RBP: 00007f2689ec2d6f R08: 0000000000000000 R09: 0000000000000000
[  436.686517][T10285] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  436.686531][T10285] R13: 00007f268a0a6308 R14: 00007f268a0a6270 R15: 00007ffd72b1b478
[  436.686554][T10285]  </TASK>
[  436.686815][T10285] Kernel Offset: disabled