last executing test programs:

43m34.844795625s ago: executing program 0 (id=434):
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42)

43m32.645130729s ago: executing program 0 (id=437):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000008680), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000008740)={'wpan0\x00'})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, 0x0, 0x4)

43m30.818489939s ago: executing program 0 (id=442):
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000014c9ee5c2c9d0d18a1f01d02aaa916"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040e070e051400"], 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r5, 0x4b3a, 0x1)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
accept4$alg(r0, 0x0, 0x0, 0x80800)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
accept4(r0, 0x0, 0x0, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905d657", @ANYRES64=r6], 0x0)
socket$inet(0x2, 0x2, 0x1)

43m26.250734672s ago: executing program 0 (id=446):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0)

43m25.514559868s ago: executing program 0 (id=449):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
write$tun(0xffffffffffffffff, 0x0, 0x28)

43m19.718396214s ago: executing program 0 (id=463):
lstat(&(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000040)={0x4, 0x2, 0x9})
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005})
mlock(&(0x7f0000007000/0x3000)=nil, 0x3000)
mlock(&(0x7f0000007000/0x3000)=nil, 0x3000)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480))
mkdirat(0xffffffffffffffff, 0x0, 0x128)
r1 = syz_io_uring_setup(0x1459, &(0x7f0000000080)={0x0, 0x5232, 0x2, 0x1ffd}, &(0x7f0000000240), &(0x7f0000000280)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x941f203917632c71)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x48, 0x0, 0x0, 0xae3, &(0x7f0000000380)=[r0, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x8})
pipe2$9p(&(0x7f0000000240), 0x0)

43m3.531471884s ago: executing program 32 (id=463):
lstat(&(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000040)={0x4, 0x2, 0x9})
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005})
mlock(&(0x7f0000007000/0x3000)=nil, 0x3000)
mlock(&(0x7f0000007000/0x3000)=nil, 0x3000)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480))
mkdirat(0xffffffffffffffff, 0x0, 0x128)
r1 = syz_io_uring_setup(0x1459, &(0x7f0000000080)={0x0, 0x5232, 0x2, 0x1ffd}, &(0x7f0000000240), &(0x7f0000000280)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x941f203917632c71)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x48, 0x0, 0x0, 0xae3, &(0x7f0000000380)=[r0, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x8})
pipe2$9p(&(0x7f0000000240), 0x0)

27m28.019219s ago: executing program 5 (id=2796):
socket$inet(0x2, 0x3, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x80d8, 0x711, 0x1, 0xfffffffc, {{0xd, 0x4, 0x2, 0x6, 0x34, 0x67, 0x0, 0x9, 0x4, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @generic={0xe0264787752fd73e, 0xf, "fd0ef107824fceb7cab12b4b59"}, @ssrr={0x89, 0xb, 0xf9, [@dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010100]}]}}}}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0)

27m26.649116799s ago: executing program 5 (id=2799):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000014c9ee5c2c9d0d18a1f01d02aaa91661f69100000000000022df0ab1d78f7b7886cc97ac13d94592be926b79dfc6ea"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[], 0x14}], 0x1}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xb8}}, 0x4000000)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
getpeername$l2tp6(r6, 0x0, 0x0)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1)
ioctl$TCXONC(0xffffffffffffffff, 0x4b3a, 0x0)

27m24.526426794s ago: executing program 5 (id=2803):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r1 = dup(r0)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x2b, 0x803, 0x0)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000040)={@any, 0x80})

27m23.428893621s ago: executing program 5 (id=2806):
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000b80)=[{&(0x7f00000000c0)="17e4f3", 0x3}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d8", 0xe}], 0x2, 0x8)
r2 = socket$inet(0x2, 0x3, 0x7f)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x8000, 0x0)

27m22.765347032s ago: executing program 5 (id=2809):
socket$inet(0x2, 0x3, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x80d8, 0x711, 0x1, 0xfffffffc, {{0xd, 0x4, 0x2, 0x6, 0x34, 0x67, 0x0, 0x9, 0x4, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @generic={0xe0264787752fd73e, 0xf, "fd0ef107824fceb7cab12b4b59"}, @ssrr={0x89, 0xb, 0xf9, [@dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010100]}]}}}}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0)

27m19.015027578s ago: executing program 5 (id=2815):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x4, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {}, {0x0, 0xfffffffc}], 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x502, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000300)=0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x0)
syz_open_dev$radio(0x0, 0x2, 0x2)
r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, r4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a3100000000"], 0xc8}}, 0x0)
socket(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
futimesat(0xffffffffffffffff, 0x0, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0)

27m3.718680442s ago: executing program 33 (id=2815):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x4, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {}, {0x0, 0xfffffffc}], 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x502, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000300)=0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x0)
syz_open_dev$radio(0x0, 0x2, 0x2)
r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, r4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a3100000000"], 0xc8}}, 0x0)
socket(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
futimesat(0xffffffffffffffff, 0x0, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0)

14.165274079s ago: executing program 2 (id=6051):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r3, r4, r4}, &(0x7f00000013c0)=""/272, 0x110, &(0x7f0000001140)={&(0x7f0000000140)={'sha224-ssse3\x00'}})

12.792673922s ago: executing program 2 (id=6053):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_setup(0xa, 0x0)
io_submit(0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="52c90000128bb331", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r5, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x3c}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"})

11.460218071s ago: executing program 2 (id=6056):
socket(0x2a, 0x2, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$key(0xf, 0x3, 0x2)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe2c84000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x3}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

10.188718183s ago: executing program 2 (id=6059):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r6, @ANYBLOB="01"], 0x20}}, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104, 0x104}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

9.927417054s ago: executing program 1 (id=6061):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

9.66251355s ago: executing program 1 (id=6062):
socket$kcm(0x11, 0xa, 0x300)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x113}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e6", 0xa8}], 0x3}, 0x4008001)

9.353400422s ago: executing program 2 (id=6065):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000300)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@resgid}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@nolazytime}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f00000004c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18)
r9 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r10 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="b02e", 0x2}], 0x1}, 0x0)
recvmmsg(r10, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/120, 0x78}], 0x1, &(0x7f0000000340)=""/213, 0xd5}}], 0x1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xdcb, 0xffff}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x58}}, 0x0)

9.287346518s ago: executing program 1 (id=6066):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

8.797995833s ago: executing program 1 (id=6070):
socket(0x2a, 0x2, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$key(0xf, 0x3, 0x2)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe2c84000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d39703230300000752c636163680f69e0d63d47504c002c6d61736b3d4d49595f415050454e442c6d613d4d41595f455845432c000000"])
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsmount(r5, 0x0, 0x0)
tkill(0x0, 0xb)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

8.611753061s ago: executing program 6 (id=6071):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841)

7.305935329s ago: executing program 2 (id=6073):
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x3, 0x24, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94)
unshare(0x64000600)

6.567370496s ago: executing program 1 (id=6074):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

6.466713781s ago: executing program 3 (id=6075):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r1, &(0x7f00000002c0)="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", 0x1000)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r2, 0x80084523, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000012c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='cdg\x00', 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_pidfd_open(0x0, 0x0)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff)

5.326185772s ago: executing program 6 (id=6076):
socket$kcm(0x11, 0xa, 0x300)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x113}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e6", 0xa8}], 0x3}, 0x4008001)

4.606073914s ago: executing program 6 (id=6078):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$MON_IOCG_STATS(r1, 0xc0109207, &(0x7f0000002100))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$alg(0x26, 0x5, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d70", 0x2c}], 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, 0x0)
setsockopt$packet_buf(r3, 0x107, 0x16, &(0x7f0000000280)="db8600535bc0761e4929f265bd7dae422689ef91b3d69dce04112e650a73d73dc19c26567dd32a7ab702f2917615e7a2b3f434881c45f795c7ccb5342c8dde405c5c74267cab1249332aca4a511a832a0a0a39192c1448a78a85f4a2ae28deabfd925a42cc44f21ac35f7eb3b698f2b95e320425c6a320852db88714f827ea1ac1", 0x81)

3.644585229s ago: executing program 4 (id=6079):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))

3.563773581s ago: executing program 4 (id=6080):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b595", @ANYRES32, @ANYBLOB="14000200fe80"], 0x48}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2.746521458s ago: executing program 4 (id=6081):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x40, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x141200, 0x0)
sendfile(r1, r2, 0x0, 0x80009)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

2.634172022s ago: executing program 3 (id=6082):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x80, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r3, 0x0}])

2.616144595s ago: executing program 6 (id=6083):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101382, 0xa8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}], 0x1, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'vlan0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f00000000c0)="3f030e0033e6120306001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df715", 0x35, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)

1.855867192s ago: executing program 3 (id=6084):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = syz_io_uring_setup(0x231, &(0x7f0000000300)={0x0, 0x3, 0x10101}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r0, 0xffffffffffffffff, 0x0, 0xffffffffffffffea, 0xc})
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x8020000)
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)

1.847629076s ago: executing program 4 (id=6085):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)

1.439408666s ago: executing program 3 (id=6086):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841)

1.433665045s ago: executing program 4 (id=6087):
socket(0x2a, 0x2, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$key(0xf, 0x3, 0x2)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe2c84000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x3}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

1.209306522s ago: executing program 3 (id=6088):
socket$kcm(0x11, 0xa, 0x300)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c7", 0x113}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e6", 0xa8}], 0x3}, 0x4008001)

1.177957959s ago: executing program 1 (id=6089):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getpgrp(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xc5)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000200)='kfree\x00', 0xfffffffffffffffe)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC])
socket(0x10, 0x3, 0x0)
creat(0x0, 0x0)

1.021625448s ago: executing program 6 (id=6090):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))

917.019468ms ago: executing program 3 (id=6091):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r1, 0x0)

240.77787ms ago: executing program 4 (id=6092):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r3, 0x0, 0x0)
fsopen(0x0, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x3}}, 0x10)
r5 = getpgid(0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000240)='children\x00')
readv(r6, 0x0, 0x0)
bind$tipc(r1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
semctl$SETVAL(0x0, 0x2, 0x10, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

0s ago: executing program 6 (id=6093):
r0 = syz_open_dev$vbi(&(0x7f00000012c0), 0x2, 0x2)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000080}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file2\x00', 0x0, 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xfffffffe, 0x64ecaf37, 0xe, 0x8, 0x1, 0x1ff})
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
unshare(0x400)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, 0x0, 0x0)
r2 = eventfd2(0x0, 0x800)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000900)={0x0, 0xd000, 0x1, r2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
open(0x0, 0x2, 0x142)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_open_dev$video(0x0, 0xa7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

kernel console output (not intermixed with test programs):

che entry [6e4]
[ 2300.133376][T24782] SQUASHFS error: read_indexes: reading block [6e4:0]
[ 2300.140194][T24782] SQUASHFS error: Failed to read block 0x0: -5
[ 2300.148014][T24782] SQUASHFS error: Unable to read metadata cache entry [6e4]
[ 2300.155553][T24782] SQUASHFS error: read_indexes: reading block [6e4:0]
[ 2300.162502][T24782] SQUASHFS error: Failed to read block 0x0: -5
[ 2300.168729][T24782] SQUASHFS error: Unable to read metadata cache entry [6e4]
[ 2300.176063][T24782] SQUASHFS error: read_indexes: reading block [6e4:0]
[ 2300.182903][T24782] SQUASHFS error: Failed to read block 0x0: -5
[ 2300.189192][T24782] SQUASHFS error: Unable to read metadata cache entry [6e4]
[ 2300.196516][T24782] SQUASHFS error: read_indexes: reading block [6e4:0]
[ 2300.203348][T24782] SQUASHFS error: Failed to read block 0x0: -5
[ 2300.209583][T24782] SQUASHFS error: Unable to read metadata cache entry [6e4]
[ 2300.216900][T24782] SQUASHFS error: read_indexes: reading block [6e4:0]
[ 2300.223844][T24782] SQUASHFS error: Failed to read block 0x0: -5
[ 2300.230086][T24782] SQUASHFS error: Unable to read metadata cache entry [6e4]
[ 2300.237542][T24782] SQUASHFS error: read_indexes: reading block [6e4:0]
[ 2300.246603][T24782] SQUASHFS error: Failed to read block 0x0: -5
[ 2300.253254][T24782] SQUASHFS error: Unable to read metadata cache entry [6e4]
[ 2300.260992][T24782] SQUASHFS error: read_indexes: reading block [6e4:0]
[ 2300.267837][T24782] SQUASHFS error: Failed to read block 0x0: -5
[ 2300.274069][T24782] SQUASHFS error: Unable to read metadata cache entry [6e4]
[ 2300.281353][T24782] SQUASHFS error: read_indexes: reading block [6e4:0]
[ 2300.288199][T24782] SQUASHFS error: Failed to read block 0x0: -5
[ 2300.294426][T24782] SQUASHFS error: Unable to read metadata cache entry [6e4]
[ 2300.301691][T24782] SQUASHFS error: read_indexes: reading block [6e4:0]
[ 2300.308571][T24782] SQUASHFS error: Failed to read block 0x0: -5
[ 2300.315187][T24782] SQUASHFS error: Unable to read metadata cache entry [6e4]
[ 2300.322505][T24782] SQUASHFS error: read_indexes: reading block [6e4:0]
[ 2300.329344][T24782] SQUASHFS error: Unable to read metadata cache entry [6e4]
[ 2300.336660][T24782] SQUASHFS error: read_indexes: reading block [6e4:0]
[ 2300.442441][   T30] audit: type=1800 audit(1739020979.279:901): pid=24782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4860" name="file1" dev="loop6" ino=5 res=0 errno=0
[ 2300.613162][T10996] usb usb2-port1: attempt power cycle
[ 2300.914430][T20224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2301.104556][ T5887] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 2301.116886][T24793] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4864'.
[ 2301.145742][T24793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4864'.
[ 2301.182024][T24793] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4864'.
[ 2301.209154][T24793] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4864'.
[ 2301.398815][T24798] siw: device registration error -23
[ 2301.661498][T24803] netlink: 'syz.4.4867': attribute type 1 has an invalid length.
[ 2301.674943][ T5887] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2301.686519][ T5887] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2301.713155][ T5887] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2301.757644][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2301.767280][ T5887] usb 7-1: SerialNumber: syz
[ 2301.860727][T24803] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2302.005337][ T5887] usb 7-1: 0:2 : does not exist
[ 2302.048380][ T5887] usb 7-1: USB disconnect, device number 21
[ 2302.193307][T10996] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 2302.389512][T24319] udevd[24319]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2303.422235][T10996] usb 3-1: Using ep0 maxpacket: 32
[ 2303.451671][T10996] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[ 2303.555554][T10996] usb 3-1: config 0 has no interface number 0
[ 2303.563109][T10996] usb 3-1: config 0 interface 12 has no altsetting 0
[ 2303.600642][T10996] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 2303.609996][T10996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2304.259900][T10996] usb 3-1: Product: syz
[ 2304.264302][T10996] usb 3-1: Manufacturer: syz
[ 2304.268917][T10996] usb 3-1: SerialNumber: syz
[ 2304.338276][T10996] usb 3-1: config 0 descriptor??
[ 2305.024524][ T5973] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1
[ 2305.332403][ T5973] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2306.963706][T16525] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 2307.586448][T24842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4876'.
[ 2307.647632][ T5887] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 2307.660577][T10996] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71
[ 2307.694390][T24842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4876'.
[ 2307.703819][T10996] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[ 2307.712430][T10996] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 2307.724652][T24842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4876'.
[ 2307.735349][T10996] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[ 2307.748642][T24842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4876'.
[ 2307.759582][T10996] usb 3-1: USB disconnect, device number 77
[ 2307.852149][ T5887] usb 5-1: device descriptor read/64, error -71
[ 2307.931510][T24849] loop6: detected capacity change from 0 to 8
[ 2307.940904][T24849] MTD: Attempt to mount non-MTD device "/dev/loop6"
[ 2308.093310][ T5887] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 2308.252063][ T5887] usb 5-1: device descriptor read/64, error -71
[ 2308.574523][ T5887] usb usb5-port1: attempt power cycle
[ 2309.304958][T24863] loop6: detected capacity change from 0 to 128
[ 2309.381018][T24863] affs: No valid root block on device loop6
[ 2309.731273][ T5887] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 2309.981943][ T5887] usb 5-1: device not accepting address 57, error -71
[ 2312.265891][T24892] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2313.229258][T24904] loop3: detected capacity change from 0 to 8
[ 2313.246103][T24902] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[ 2313.589458][T24904] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 2314.722156][T24923] loop4: detected capacity change from 0 to 128
[ 2314.778513][T24923] affs: No valid root block on device loop4
[ 2314.834036][T24923] tmpfs: Unknown parameter 'í^f'
[ 2317.633578][T24949] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2319.068345][T24954] loop2: detected capacity change from 0 to 128
[ 2319.367059][T24954] affs: No valid root block on device loop2
[ 2319.846829][T24962] loop4: detected capacity change from 0 to 8
[ 2319.874115][T24964] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[ 2319.916204][T24962] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 2319.983404][T24965] loop2: detected capacity change from 0 to 8
[ 2320.202169][T24968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4904'.
[ 2322.239630][T24978] netlink: 'syz.4.4912': attribute type 1 has an invalid length.
[ 2322.419005][T24978] bridge3: entered promiscuous mode
[ 2322.742707][T24978] bond2: (slave bridge3): Enslaving as a backup interface with an up link
[ 2323.471818][T24993] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2325.911018][    T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 2326.042241][    T9] usb 7-1: device descriptor read/64, error -71
[ 2326.082699][T25010] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[ 2326.281022][    T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 2326.318028][T25014] loop2: detected capacity change from 0 to 8
[ 2326.347184][T25014] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 2326.431586][    T9] usb 7-1: device descriptor read/64, error -71
[ 2326.565811][T25016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4921'.
[ 2327.140189][    T9] usb usb7-port1: attempt power cycle
[ 2329.017479][T25032] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2332.828558][T25049] loop3: detected capacity change from 0 to 764
[ 2333.536406][T25055] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[ 2333.676265][T25062] loop4: detected capacity change from 0 to 8
[ 2334.632770][T16525] Bluetooth: hci5: unexpected event for opcode 0x1405
[ 2335.956784][T20465] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 2336.258606][T20465] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 2336.316162][T25075] loop2: detected capacity change from 0 to 8
[ 2336.322541][T20465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 2336.371540][T25075] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 2336.576692][T20465] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 2336.639679][T20465] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2337.212208][T20465] usb 2-1: Product: syz
[ 2337.216424][T20465] usb 2-1: Manufacturer: syz
[ 2337.221622][T20465] usb 2-1: SerialNumber: syz
[ 2337.351572][T20465] usb 2-1: config 0 descriptor??
[ 2337.414845][T20465] usb 2-1: can't set config #0, error -71
[ 2337.578301][T20465] usb 2-1: USB disconnect, device number 81
[ 2337.917094][T25088] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2338.830269][ T5831] usb 7-1: new full-speed USB device number 25 using dummy_hcd
[ 2338.950014][T25096] loop3: detected capacity change from 0 to 764
[ 2339.083082][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2339.235303][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2339.416329][ T5831] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2339.601533][ T5831] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2339.609595][ T5831] usb 7-1: Manufacturer: syz
[ 2339.834273][T25105] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[ 2339.863024][ T5831] usb 7-1: config 0 descriptor??
[ 2341.024263][T25115] loop4: detected capacity change from 0 to 2048
[ 2341.057962][T25115] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 2341.172333][T25115] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[ 2341.204050][T25085] sctp: [Deprecated]: syz.6.4940 (pid 25085) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2341.204050][T25085] Use struct sctp_sack_info instead
[ 2341.454293][ T5831] cougar 0003:060B:700A.0017: unknown main item tag 0x0
[ 2341.462522][ T5831] cougar 0003:060B:700A.0017: unknown main item tag 0x0
[ 2341.477005][ T5831] cougar 0003:060B:700A.0017: unknown main item tag 0x0
[ 2341.500226][ T5831] cougar 0003:060B:700A.0017: unknown main item tag 0x0
[ 2341.507242][ T5831] cougar 0003:060B:700A.0017: unknown main item tag 0x0
[ 2341.524168][ T5831] cougar 0003:060B:700A.0017: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[ 2342.392075][T25118] block nbd4: NBD_DISCONNECT
[ 2342.474555][T25118] loop4: detected capacity change from 0 to 128
[ 2342.529121][ T5831] usb 7-1: USB disconnect, device number 25
[ 2342.813750][T25118] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[ 2345.305089][T16525] Bluetooth: hci0: unexpected event for opcode 0x1405
[ 2345.316096][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2345.322968][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2345.930623][T25135] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2346.397079][ T5831] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 2346.782244][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 2346.820040][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 2346.872530][ T5831] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 2347.088247][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2347.277285][ T5831] usb 5-1: Product: syz
[ 2347.609903][ T5831] usb 5-1: Manufacturer: syz
[ 2347.614568][ T5831] usb 5-1: SerialNumber: syz
[ 2347.628746][ T5831] usb 5-1: config 0 descriptor??
[ 2347.693182][ T5831] usb 5-1: can't set config #0, error -71
[ 2347.700377][T25150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4959'.
[ 2347.727944][T25150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4959'.
[ 2347.736266][ T5831] usb 5-1: USB disconnect, device number 59
[ 2347.818808][T25150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4959'.
[ 2348.191579][T25150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4959'.
[ 2348.254073][T25145] pim6reg1: entered promiscuous mode
[ 2348.259465][T25145] pim6reg1: entered allmulticast mode
[ 2348.618152][T25154] loop3: detected capacity change from 0 to 4096
[ 2348.652367][T25154] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[ 2350.141722][T25171] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2350.767986][T25154] ntfs3(loop3): Failed to read $UpCase (-4).
[ 2351.741927][T25176] loop2: detected capacity change from 0 to 8
[ 2351.840040][T25176] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 2351.860650][T25178] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4966'.
[ 2351.895938][T25178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4966'.
[ 2351.910207][T25178] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4966'.
[ 2351.923695][T25181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4968'.
[ 2351.939584][T25178] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4966'.
[ 2352.075699][T25183] loop4: detected capacity change from 0 to 4096
[ 2352.092562][T25183] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[ 2352.162200][T16525] Bluetooth: hci6: unexpected event for opcode 0x1405
[ 2352.184352][ T5831] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 2352.340296][ T5831] usb 7-1: Using ep0 maxpacket: 16
[ 2352.388444][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2352.495154][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2352.595104][ T5831] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2352.739460][ T5831] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2352.828173][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2352.858725][T25183] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[ 2352.887575][T25191] loop3: detected capacity change from 0 to 1764
[ 2352.897531][ T5831] usb 7-1: config 0 descriptor??
[ 2352.910980][T25191] iso9660: Unknown parameter '-'
[ 2353.049471][T23090] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 2353.223305][T23090] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 2353.400411][T23090] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 2353.582702][T23090] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 2353.812206][T23090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2354.109022][T23090] usb 3-1: Product: syz
[ 2354.431961][T23090] usb 3-1: Manufacturer: syz
[ 2354.436588][T23090] usb 3-1: SerialNumber: syz
[ 2354.462372][T23090] usb 3-1: config 0 descriptor??
[ 2354.509813][ T5831] usbhid 7-1:0.0: can't add hid device: -71
[ 2354.546811][ T5831] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 2354.581014][ T5831] usb 7-1: USB disconnect, device number 26
[ 2355.917086][T23090] powermate: unknown product id 0240
[ 2355.939377][T23090] powermate: Expected payload of 3--6 bytes, found 11 bytes!
[ 2356.281139][T25213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2357.208178][T23090] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input43
[ 2358.098089][T25221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4981'.
[ 2358.327453][    C0] powermate: config urb returned -71
[ 2358.333147][    C0] powermate: config urb returned -71
[ 2358.338712][    C0] powermate: config urb returned -71
[ 2358.344307][    C0] powermate: config urb returned -71
[ 2358.356189][T23090] usb 3-1: USB disconnect, device number 78
[ 2358.356254][    C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[ 2358.784969][T25234] loop3: detected capacity change from 0 to 1764
[ 2358.803184][T25234] iso9660: Unknown parameter '-'
[ 2359.031954][T25237] siw: device registration error -23
[ 2362.956308][T16525] Bluetooth: hci1: unexpected event for opcode 0x1405
[ 2364.607859][T25278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4994'.
[ 2367.346125][T25302] loop4: detected capacity change from 0 to 512
[ 2367.468224][T25302] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2367.598690][T25302] System zones: 0-2, 18-18, 34-35
[ 2367.846600][T25302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2367.998811][T25302] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2368.100064][T25302] Quota error (device loop4): do_check_range: Getting block 9 out of range 0-5
[ 2368.419741][T25286] 9pnet: Unknown protocol version 9p200
[ 2368.436886][T25286] siw: device registration error -23
[ 2368.738999][T19375] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2368.888400][T25318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5008'.
[ 2369.858778][T25322] fuse: Bad value for 'fd'
[ 2370.018534][T16525] Bluetooth: hci3: unexpected event for opcode 0x1405
[ 2370.559125][ T5887] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 2370.862892][ T5887] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 2371.043101][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 2371.077341][ T5887] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 2371.148473][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2371.166852][ T5887] usb 7-1: Product: syz
[ 2371.172797][ T5887] usb 7-1: Manufacturer: syz
[ 2371.177518][ T5887] usb 7-1: SerialNumber: syz
[ 2371.189289][ T5887] usb 7-1: config 0 descriptor??
[ 2373.555935][ T5887] powermate: unknown product id 0240
[ 2373.588401][ T5887] powermate: Expected payload of 3--6 bytes, found 11 bytes!
[ 2373.628390][    T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 2373.647780][ T5887] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input44
[ 2373.714966][    C1] powermate: config urb returned -71
[ 2373.720585][    C1] powermate: config urb returned -71
[ 2373.726793][    C1] powermate: config urb returned -71
[ 2373.732590][    C1] powermate: config urb returned -71
[ 2373.768066][ T5887] usb 7-1: USB disconnect, device number 27
[ 2373.774107][    C1] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[ 2373.884841][    T9] usb 3-1: Using ep0 maxpacket: 32
[ 2374.002316][    T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[ 2374.035087][    T9] usb 3-1: config 0 has no interface number 0
[ 2374.041929][    T9] usb 3-1: config 0 interface 12 has no altsetting 0
[ 2374.116506][    T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 2374.133948][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2374.163946][    T9] usb 3-1: Product: syz
[ 2374.270991][    T9] usb 3-1: Manufacturer: syz
[ 2374.281324][    T9] usb 3-1: SerialNumber: syz
[ 2374.413093][    T9] usb 3-1: config 0 descriptor??
[ 2374.620785][T25357] loop6: detected capacity change from 0 to 512
[ 2374.724976][T25357] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2374.747307][T25357] System zones: 0-2, 18-18, 34-35
[ 2374.814434][T25357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2374.869715][T25357] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2374.963227][T25356] Quota error (device loop6): do_check_range: Getting block 9 out of range 0-5
[ 2375.354523][T25368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5019'.
[ 2375.744932][    T9] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 2376.681602][    T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[ 2376.750243][    T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 2376.757948][    T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[ 2376.850102][    T9] usb 3-1: USB disconnect, device number 79
[ 2376.877791][T25378] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5023'.
[ 2376.914206][T19446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2378.200714][T16525] Bluetooth: hci0: unexpected event for opcode 0x1405
[ 2378.762542][T23090] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 2379.802714][T23090] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 2379.840923][T23090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 2379.865524][T23090] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 2379.876422][T23090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2379.886146][T23090] usb 5-1: Product: syz
[ 2380.278296][T23090] usb 5-1: Manufacturer: syz
[ 2380.453464][T23090] usb 5-1: SerialNumber: syz
[ 2380.492300][T23090] usb 5-1: config 0 descriptor??
[ 2380.498593][T23090] usb 5-1: can't set config #0, error -71
[ 2380.535574][T23090] usb 5-1: USB disconnect, device number 60
[ 2380.627194][T25407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5032'.
[ 2380.638075][T14684] usb 4-1: new full-speed USB device number 69 using dummy_hcd
[ 2380.831046][T14684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2380.879497][T14684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2380.910111][T25411] loop4: detected capacity change from 0 to 2048
[ 2380.938502][T14684] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2380.938919][T21538] usb 7-1: new full-speed USB device number 28 using dummy_hcd
[ 2380.980936][T25411] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 2380.991923][T14684] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2381.005519][T25411] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[ 2381.112117][T25413] loop2: detected capacity change from 0 to 128
[ 2381.161311][T21538] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2381.236050][T25413] affs: No valid root block on device loop2
[ 2381.266100][T25413] tmpfs: Unknown parameter 'í^f'
[ 2381.419248][T21538] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2381.759954][T14684] usb 4-1: Manufacturer: syz
[ 2381.822795][T14684] usb 4-1: config 0 descriptor??
[ 2381.896839][T21538] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2381.915879][T21538] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2381.937769][T21538] usb 7-1: Manufacturer: syz
[ 2381.945380][T21538] usb 7-1: config 0 descriptor??
[ 2382.036714][T25416] block nbd4: NBD_DISCONNECT
[ 2382.057381][T25416] loop4: detected capacity change from 0 to 128
[ 2382.081857][T25416] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[ 2382.650611][T25420] 9pnet: Unknown protocol version 9p200
[ 2382.696009][T25422] loop2: detected capacity change from 0 to 512
[ 2382.824456][T25422] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2382.926081][T25422] System zones: 0-2, 18-18, 34-35
[ 2382.959862][T25401] sctp: [Deprecated]: syz.3.5031 (pid 25401) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2382.959862][T25401] Use struct sctp_sack_info instead
[ 2382.986140][T25405] sctp: [Deprecated]: syz.6.5030 (pid 25405) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2382.986140][T25405] Use struct sctp_sack_info instead
[ 2383.020159][T25422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2383.055997][T14684] cougar 0003:060B:700A.0018: unknown main item tag 0x0
[ 2383.071513][T21538] cougar 0003:060B:700A.0019: unknown main item tag 0x0
[ 2383.073453][T25422] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2383.090145][T21538] cougar 0003:060B:700A.0019: unknown main item tag 0x0
[ 2383.090180][T21538] cougar 0003:060B:700A.0019: unknown main item tag 0x0
[ 2383.090208][T21538] cougar 0003:060B:700A.0019: unknown main item tag 0x0
[ 2383.090234][T21538] cougar 0003:060B:700A.0019: unknown main item tag 0x0
[ 2383.118944][T21538] cougar 0003:060B:700A.0019: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[ 2383.179430][T14684] cougar 0003:060B:700A.0018: unknown main item tag 0x0
[ 2383.286517][T14684] cougar 0003:060B:700A.0018: unknown main item tag 0x0
[ 2383.414256][T14684] cougar 0003:060B:700A.0018: unknown main item tag 0x0
[ 2383.549555][T14684] cougar 0003:060B:700A.0018: unknown main item tag 0x0
[ 2383.640841][T25419] Quota error (device loop2): do_check_range: Getting block 9 out of range 0-5
[ 2383.691580][T14684] cougar 0003:060B:700A.0018: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[ 2383.715577][ T5933] usb 7-1: USB disconnect, device number 28
[ 2383.743598][T24319] udevd[24319]: setting mode of /dev/hidraw0 to 020600 failed: No such file or directory
[ 2383.800471][T24319] udevd[24319]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: No such file or directory
[ 2383.911292][T14684] usb 4-1: USB disconnect, device number 69
[ 2384.627701][T14684] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[ 2385.003226][T14684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2385.057932][T14684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2385.552193][T14684] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2385.575230][T14684] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2385.727707][T14684] usb 5-1: Manufacturer: syz
[ 2385.766944][T14684] usb 5-1: config 0 descriptor??
[ 2386.998351][T16525] Bluetooth: hci5: unexpected event for opcode 0x1405
[ 2387.864084][ T5933] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 2387.864708][T25435] sctp: [Deprecated]: syz.4.5037 (pid 25435) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2387.864708][T25435] Use struct sctp_sack_info instead
[ 2388.024668][T20714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2388.081879][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 2388.209372][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 2388.214123][T14684] cougar 0003:060B:700A.001A: unknown main item tag 0x0
[ 2388.290706][ T5933] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 2388.307878][T14684] cougar 0003:060B:700A.001A: unknown main item tag 0x0
[ 2388.314929][T14684] cougar 0003:060B:700A.001A: unknown main item tag 0x0
[ 2388.319607][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2388.353129][ T5933] usb 2-1: Product: syz
[ 2388.360507][ T5933] usb 2-1: Manufacturer: syz
[ 2388.379691][T25464] loop2: detected capacity change from 0 to 8
[ 2388.382553][ T5933] usb 2-1: SerialNumber: syz
[ 2388.385910][T14684] cougar 0003:060B:700A.001A: unknown main item tag 0x0
[ 2388.437110][T14684] cougar 0003:060B:700A.001A: unknown main item tag 0x0
[ 2388.444817][ T5933] usb 2-1: config 0 descriptor??
[ 2388.472849][T14684] cougar 0003:060B:700A.001A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[ 2388.538895][T14684] usb 5-1: USB disconnect, device number 61
[ 2389.853984][ T5933] powermate: unknown product id 0240
[ 2389.921969][ T5933] powermate: Expected payload of 3--6 bytes, found 11 bytes!
[ 2389.974009][ T5933] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input45
[ 2390.039540][    C0] powermate: config urb returned -71
[ 2390.045115][    C0] powermate: config urb returned -71
[ 2390.053293][    C0] powermate: config urb returned -71
[ 2390.059308][    C0] powermate: config urb returned -71
[ 2390.097568][ T5933] usb 2-1: USB disconnect, device number 82
[ 2390.103582][    C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[ 2397.376220][T25521] 9pnet: Unknown protocol version 9p200
[ 2398.224332][T20465] usb 7-1: new full-speed USB device number 29 using dummy_hcd
[ 2398.258471][T25524] pim6reg1: entered promiscuous mode
[ 2398.263843][T25524] pim6reg1: entered allmulticast mode
[ 2398.369513][T20465] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2398.410663][T20465] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2398.433918][T20465] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2398.455863][T20465] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2398.576300][T20465] usb 7-1: Manufacturer: syz
[ 2398.597721][T20465] usb 7-1: config 0 descriptor??
[ 2399.279113][T25522] sctp: [Deprecated]: syz.6.5059 (pid 25522) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2399.279113][T25522] Use struct sctp_sack_info instead
[ 2399.370253][T20465] cougar 0003:060B:700A.001B: unknown main item tag 0x0
[ 2399.399397][T20465] cougar 0003:060B:700A.001B: unknown main item tag 0x0
[ 2399.427838][T20465] cougar 0003:060B:700A.001B: unknown main item tag 0x0
[ 2399.445234][T20465] cougar 0003:060B:700A.001B: unknown main item tag 0x0
[ 2399.476325][T20465] cougar 0003:060B:700A.001B: unknown main item tag 0x0
[ 2399.572575][T20465] cougar 0003:060B:700A.001B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[ 2399.630182][T25540] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 2399.762363][T25541] loop4: detected capacity change from 0 to 4096
[ 2399.787911][T25541] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[ 2400.283896][T20465] usb 7-1: USB disconnect, device number 29
[ 2400.496504][T25545] loop6: detected capacity change from 0 to 8
[ 2402.666028][T25566] loop2: detected capacity change from 0 to 32768
[ 2402.816463][T25566] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[ 2402.872257][T25566] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 2403.923048][T25566] syz.2.5072 (25566) used greatest stack depth: 17496 bytes left
[ 2404.664727][T25577] block nbd1: NBD_DISCONNECT
[ 2406.327677][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2406.334051][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2406.429975][T20714] ocfs2: Unmounting device (7,2) on (node local)
[ 2409.294301][T25612] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 2409.428058][T25613] loop2: detected capacity change from 0 to 4096
[ 2409.469053][T25613] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[ 2410.450451][T25617] loop4: detected capacity change from 0 to 8
[ 2413.557604][T25647] pim6reg1: entered promiscuous mode
[ 2413.557658][T25647] pim6reg1: entered allmulticast mode
[ 2418.886997][T14684] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[ 2419.444661][T25681] 9pnet: Unknown protocol version 9p200
[ 2419.452182][T25681] siw: device registration error -23
[ 2419.728911][T14684] usb 7-1: device descriptor read/64, error -71
[ 2420.412110][T14684] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 2422.827004][T25699] loop6: detected capacity change from 0 to 2048
[ 2422.959475][T25699] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 2423.188220][T25699] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[ 2423.887909][T10996] usb 4-1: new full-speed USB device number 70 using dummy_hcd
[ 2425.087546][T25715] fuse: Bad value for 'fd'
[ 2425.248089][T10996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2425.259452][T10996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2425.273202][T10996] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2425.368508][T25716] block nbd6: NBD_DISCONNECT
[ 2425.692684][T25714] loop6: detected capacity change from 0 to 128
[ 2425.785578][T25714] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[ 2425.807655][T10996] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2425.838562][T10996] usb 4-1: Manufacturer: syz
[ 2425.855821][T10996] usb 4-1: config 0 descriptor??
[ 2426.015462][T10996] usb 4-1: can't set config #0, error -71
[ 2426.038698][T10996] usb 4-1: USB disconnect, device number 70
[ 2427.118179][T25726] loop3: detected capacity change from 0 to 64
[ 2429.745972][T25753] loop4: detected capacity change from 0 to 8
[ 2432.508286][T25774] fuse: Bad value for 'fd'
[ 2433.726477][T25776] loop6: detected capacity change from 0 to 4096
[ 2436.147779][T25806] 9pnet: Unknown protocol version 9p200
[ 2436.211062][T25806] siw: device registration error -23
[ 2438.115005][ T5887] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 2438.385049][ T5887] usb 2-1: device descriptor read/64, error -71
[ 2438.644750][ T5887] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 2438.821299][ T5887] usb 2-1: device descriptor read/64, error -71
[ 2438.944708][ T5887] usb usb2-port1: attempt power cycle
[ 2439.314874][ T5887] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 2439.346326][ T5887] usb 2-1: device descriptor read/8, error -71
[ 2440.245779][ T5887] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 2440.381791][ T5887] usb 2-1: device descriptor read/8, error -71
[ 2440.648549][ T5887] usb usb2-port1: unable to enumerate USB device
[ 2441.095840][T25838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5147'.
[ 2442.035863][T25846] 9pnet: Unknown protocol version 9p200
[ 2442.045829][T25846] siw: device registration error -23
[ 2442.125255][T25849] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2443.989750][T25865] loop6: detected capacity change from 0 to 512
[ 2444.209040][T25865] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2444.224951][T25865] System zones: 0-2, 18-18, 34-35
[ 2444.261558][T25871] netlink: 'syz.1.5156': attribute type 1 has an invalid length.
[ 2444.333494][T25865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2444.347116][T25865] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2444.384801][T25863] Quota error (device loop6): do_check_range: Getting block 9 out of range 0-5
[ 2444.637197][T25875] bridge1: entered promiscuous mode
[ 2445.238301][T19446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2445.379428][T25881] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5158'.
[ 2445.617576][T25886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5159'.
[ 2445.671880][T25886] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2445.701596][T25886] batadv_slave_0: entered promiscuous mode
[ 2448.128601][T25908] loop3: detected capacity change from 0 to 1024
[ 2448.173604][T25908] EXT4-fs: Ignoring removed nobh option
[ 2448.282288][T25908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2448.429234][T25914] loop4: detected capacity change from 0 to 512
[ 2449.395416][T20224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2449.407659][T25914] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2449.419912][T25914] System zones: 0-2, 18-18, 34-35
[ 2449.449536][T25914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2449.482779][T25914] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2449.634841][T25913] Quota error (device loop4): do_check_range: Getting block 9 out of range 0-5
[ 2449.672105][T25922] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 2450.428077][T19375] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2451.942452][T25939] Can't find ip_set type hash:net,por
[ 2460.728649][T26013] bridge1: entered promiscuous mode
[ 2463.123119][T26029] loop6: detected capacity change from 0 to 512
[ 2463.462507][T26029] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5196: bg 0: block 393: padding at end of block bitmap is not set
[ 2463.502994][T26029] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem
[ 2463.524379][T26029] EXT4-fs (loop6): 2 truncates cleaned up
[ 2463.538852][T26029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2463.906428][T19446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2464.553426][T14684] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 2465.012362][T14684] usb 3-1: Using ep0 maxpacket: 32
[ 2465.172069][T14684] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[ 2465.443245][T14684] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 2465.483159][T14684] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 2465.492196][T14684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2465.655991][T14684] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2465.698970][T14684] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2465.718256][T14684] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 2465.727756][T14684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2465.754668][T14684] usb 3-1: config 0 descriptor??
[ 2466.450054][T14684] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 80 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 2467.204286][ T5887] usb 3-1: USB disconnect, device number 80
[ 2467.266828][ T5887] usblp0: removed
[ 2467.904500][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2467.911080][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2471.652211][T26102] block nbd1: NBD_DISCONNECT
[ 2474.422383][T26120] loop4: detected capacity change from 0 to 512
[ 2474.544399][T26120] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5221: bg 0: block 393: padding at end of block bitmap is not set
[ 2474.561153][T26120] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[ 2474.572693][T26120] EXT4-fs (loop4): 2 truncates cleaned up
[ 2474.586374][T26120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2475.228534][T19375] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2476.660782][T26136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5224'.
[ 2477.667338][T26147] fuse: Bad value for 'fd'
[ 2482.662913][T26181] input: syz0 as /devices/virtual/input/input46
[ 2483.942161][ T5933] usb 7-1: new full-speed USB device number 32 using dummy_hcd
[ 2484.640025][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2484.708840][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2484.779651][ T5933] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2484.812054][ T5933] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2484.832304][ T5933] usb 7-1: Manufacturer: syz
[ 2484.872854][ T5933] usb 7-1: config 0 descriptor??
[ 2485.748738][T26184] sctp: [Deprecated]: syz.6.5238 (pid 26184) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2485.748738][T26184] Use struct sctp_sack_info instead
[ 2485.846562][ T5933] usbhid 7-1:0.0: can't add hid device: -71
[ 2485.862041][ T5933] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 2485.933939][ T5933] usb 7-1: USB disconnect, device number 32
[ 2488.864287][T26224] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 2489.419536][ T5933] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 2489.922024][ T5933] usb 7-1: Using ep0 maxpacket: 16
[ 2489.934891][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2489.971564][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2490.006434][ T5933] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2490.043962][ T5933] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2490.160858][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2490.195416][ T5933] usb 7-1: config 0 descriptor??
[ 2490.840825][ T5933] microsoft 0003:045E:07DA.001C: ignoring exceeding usage max
[ 2490.852449][ T5933] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0
[ 2490.862212][ T5933] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0
[ 2490.869482][ T5933] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0
[ 2490.893202][ T5933] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0
[ 2490.915212][ T5933] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0
[ 2490.953240][ T5933] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0
[ 2490.966243][ T5933] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0
[ 2491.035843][ T5933] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0
[ 2491.166208][ T5933] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.001C/input/input47
[ 2491.229742][ T5933] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[ 2491.425963][ T5933] usb 7-1: USB disconnect, device number 33
[ 2494.953782][T26279] bridge1: entered promiscuous mode
[ 2499.554971][T26330] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 2499.924912][T26321] loop6: detected capacity change from 0 to 2048
[ 2500.078756][T26329] loop3: detected capacity change from 0 to 512
[ 2500.146088][T26321] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 2500.158248][T26329] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2500.174789][T26329] System zones: 0-2, 18-18, 34-35
[ 2500.217323][T26329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2500.243814][T26321] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[ 2500.362252][T26329] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2500.666740][T24825] Bluetooth: hci5: unexpected event for opcode 0x1405
[ 2500.830641][T26343] block nbd6: NBD_DISCONNECT
[ 2500.858384][T26343] loop6: detected capacity change from 0 to 128
[ 2501.370813][T26343] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[ 2501.723173][T26323] Quota error (device loop3): do_check_range: Getting block 9 out of range 0-5
[ 2502.775961][T23090] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 2502.944094][T23090] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 2503.219029][T23090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 2503.256096][T23090] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 2504.228317][T23090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2504.236876][T23090] usb 2-1: Product: syz
[ 2504.241366][T23090] usb 2-1: Manufacturer: syz
[ 2504.245973][T23090] usb 2-1: SerialNumber: syz
[ 2504.854908][T23090] usb 2-1: config 0 descriptor??
[ 2504.881291][T26255] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 2504.888714][T23090] usb 2-1: can't set config #0, error -71
[ 2504.934843][T23090] usb 2-1: USB disconnect, device number 87
[ 2505.273257][T26255] usb 3-1: too many configurations: 9, using maximum allowed: 8
[ 2505.303477][T26255] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2505.314861][T26255] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2506.150652][T26255] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[ 2506.162453][T26255] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2506.329171][T26255] usb 3-1: unable to read config index 1 descriptor/start: -71
[ 2506.345158][T26376] loop6: detected capacity change from 0 to 512
[ 2506.351741][T26255] usb 3-1: can't read configurations, error -71
[ 2506.606567][T26377] loop6: detected capacity change from 0 to 8
[ 2507.608155][T26388] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 2508.813328][T26392] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5296'.
[ 2508.891484][T26392] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5296'.
[ 2509.358707][T20224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2511.569788][T26414] loop4: detected capacity change from 0 to 512
[ 2511.933472][T26418] loop4: detected capacity change from 0 to 8
[ 2512.210258][T26420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5304'.
[ 2512.331115][T26420] erspan0: entered promiscuous mode
[ 2512.340787][T26420] macvtap1: entered promiscuous mode
[ 2512.368046][T26420] macvtap1: entered allmulticast mode
[ 2512.373777][T26420] erspan0: entered allmulticast mode
[ 2512.459003][T26421] erspan0: left allmulticast mode
[ 2512.464819][T26421] erspan0: left promiscuous mode
[ 2516.491225][T26451] fuse: Bad value for 'fd'
[ 2517.109173][ T5933] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 2517.286695][T26453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5314'.
[ 2517.286903][ T5933] usb 3-1: Using ep0 maxpacket: 16
[ 2517.312869][T26453] erspan0: entered promiscuous mode
[ 2517.318283][T26453] macvtap1: entered promiscuous mode
[ 2517.345742][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82
[ 2517.378766][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2517.381078][T26453] macvtap1: entered allmulticast mode
[ 2517.400239][T26453] erspan0: entered allmulticast mode
[ 2517.410861][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2517.441300][ T5933] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[ 2517.467434][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2517.502930][T26454] erspan0: left allmulticast mode
[ 2517.508354][ T5933] usb 3-1: config 0 descriptor??
[ 2517.520756][T26454] erspan0: left promiscuous mode
[ 2518.663797][ T5933] cougar 0003:060B:500A.001D: unexpected long global item
[ 2518.672758][ T5933] cougar 0003:060B:500A.001D: parse failed
[ 2518.678738][ T5933] cougar 0003:060B:500A.001D: probe with driver cougar failed with error -22
[ 2518.692050][ T5933] usb 3-1: USB disconnect, device number 83
[ 2518.854231][T26470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5319'.
[ 2518.927020][T26470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5319'.
[ 2519.819741][T26476] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[ 2519.912166][T26479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5322'.
[ 2519.995426][T26479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5322'.
[ 2520.585777][T26489] fuse: Bad value for 'fd'
[ 2522.827652][T26500] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 2524.048171][T26504] loop3: detected capacity change from 0 to 16
[ 2524.724804][T26504] erofs (device loop3): mounted with root inode @ nid 36.
[ 2525.973643][T26516] loop3: detected capacity change from 0 to 128
[ 2526.052793][T26516] affs: No valid root block on device loop3
[ 2529.184867][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2529.192089][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2530.659547][    T8] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 2530.967783][T10996] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 2531.049653][    T8] usb 4-1: Using ep0 maxpacket: 32
[ 2531.084744][T26561] hub 2-0:1.0: USB hub found
[ 2531.091028][T26561] hub 2-0:1.0: 1 port detected
[ 2532.052921][    T8] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[ 2532.081921][T26564] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.5350'.
[ 2532.149392][T10996] usb 7-1: Using ep0 maxpacket: 32
[ 2532.163309][T10996] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[ 2532.180038][T10996] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 2532.220124][T10996] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 2532.229167][T10996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2532.282529][T10996] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2532.442162][    T8] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 2532.622960][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 2532.721325][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2532.733953][    T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2532.749313][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2532.756363][T10996] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2532.779345][    T8] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 2532.794241][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2532.960194][    T8] usb 4-1: config 0 descriptor??
[ 2533.033355][T10996] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 2533.149815][T10996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2533.240033][T10996] usb 7-1: config 0 descriptor??
[ 2533.696348][    T8] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 2533.773865][T10996] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 2533.806801][    T8] usb 4-1: USB disconnect, device number 71
[ 2533.834027][    T8] usblp0: removed
[ 2533.909846][T10996] usb 7-1: USB disconnect, device number 34
[ 2533.941657][T10996] usblp1: removed
[ 2534.363345][T26586] 9pnet: Unknown protocol version 9p200
[ 2534.372520][T26586] siw: device registration error -23
[ 2535.493431][T26600] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.5362'.
[ 2536.549123][    T8] IPVS: starting estimator thread 0...
[ 2537.032910][T26614] IPVS: using max 20 ests per chain, 48000 per kthread
[ 2537.897006][T26617] tty tty1: ldisc open failed (-12), clearing slot 0
[ 2537.905890][T26620] tty tty29: ldisc open failed (-12), clearing slot 28
[ 2539.171861][T26635] 9pnet: Unknown protocol version 9p200
[ 2540.774599][T26652] loop4: detected capacity change from 0 to 512
[ 2542.807532][T26652] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5372: bg 0: block 393: padding at end of block bitmap is not set
[ 2542.826538][T26652] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[ 2542.836455][T26652] EXT4-fs (loop4): 2 truncates cleaned up
[ 2542.843923][T26652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2543.202604][T19375] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2544.706298][T26671] loop3: detected capacity change from 0 to 512
[ 2544.872947][T26673] loop3: detected capacity change from 0 to 8
[ 2545.794425][T26682] 9pnet: Unknown protocol version 9p200
[ 2545.802373][T26682] siw: device registration error -23
[ 2547.395760][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5385'.
[ 2551.488477][T10996] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 2551.768294][T10996] usb 3-1: Using ep0 maxpacket: 16
[ 2551.967983][T10996] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82
[ 2552.147355][T10996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2552.208475][T10996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2552.258329][T10996] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[ 2552.280146][T10996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2552.449565][T10996] usb 3-1: config 0 descriptor??
[ 2552.774573][T26732] 9pnet: Unknown protocol version 9p200
[ 2552.782391][T26732] siw: device registration error -23
[ 2552.927143][T10996] usbhid 3-1:0.0: can't add hid device: -71
[ 2552.940634][T10996] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2552.961968][T10996] usb 3-1: USB disconnect, device number 84
[ 2553.727035][T26743] bridge1: entered promiscuous mode
[ 2553.949054][T26748] fuse: Bad value for 'fd'
[ 2557.185267][T26763] loop2: detected capacity change from 0 to 32768
[ 2558.614305][T26763] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[ 2558.632183][T26763] invalid journal entry, version=1.7: mi_btree_bitmap type=btree_root in superblock: invalid btree root journal entry: wrong number of keys, shutting down
[ 2558.650099][T26763] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 0
[ 2558.659810][T26763] bcachefs (loop2): bch2_fs_recovery(): error fsck_errors_not_fixed
[ 2558.668297][T26763] bcachefs (loop2): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed
[ 2558.677769][T26763] bcachefs (loop2): shutting down
[ 2558.750973][T26763] bcachefs (loop2): shutdown complete
[ 2559.416034][T26783] pim6reg1: entered promiscuous mode
[ 2559.421763][T26783] pim6reg1: entered allmulticast mode
[ 2560.198653][T26784] 9pnet: Unknown protocol version 9p200
[ 2560.206101][T26784] siw: device registration error -23
[ 2565.226594][T26821] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5422'.
[ 2565.737748][T26825] 9pnet: Unknown protocol version 9p200
[ 2565.893340][T26825] siw: device registration error -23
[ 2566.791579][T26827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5424'.
[ 2566.815801][T26827] bridge4: entered promiscuous mode
[ 2568.543807][T26838] loop6: detected capacity change from 0 to 16
[ 2569.126534][T26838] erofs (device loop6): mounted with root inode @ nid 36.
[ 2569.164124][T26837] erofs (device loop6): read error -117 @ 8200 of nid 36
[ 2569.174297][T26763] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed
[ 2569.932525][T26844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5431'.
[ 2571.130170][T26844] bridge4: entered promiscuous mode
[ 2571.415170][T26859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5436'.
[ 2571.521903][T26860] 9pnet: Unknown protocol version 9p200
[ 2571.537907][T26860] siw: device registration error -23
[ 2576.648103][T26885] loop4: detected capacity change from 0 to 16
[ 2577.377578][T26885] erofs (device loop4): mounted with root inode @ nid 36.
[ 2577.404246][T26884] erofs (device loop4): read error -117 @ 8200 of nid 36
[ 2578.930055][T26899] loop2: detected capacity change from 0 to 16
[ 2578.938444][T26899] erofs (device loop2): mounted with root inode @ nid 36.
[ 2580.969543][T26910] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5450'.
[ 2581.437310][T26916] loop3: detected capacity change from 0 to 16
[ 2582.121759][T26916] erofs (device loop3): mounted with root inode @ nid 36.
[ 2582.168259][T26914] erofs (device loop3): read error -117 @ 8200 of nid 36
[ 2582.482309][T26920] loop4: detected capacity change from 0 to 512
[ 2582.500329][T26922] loop6: detected capacity change from 0 to 512
[ 2582.576937][T23324] usb 2-1: new full-speed USB device number 88 using dummy_hcd
[ 2582.940724][T23324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2582.963425][T26925] loop4: detected capacity change from 0 to 8
[ 2583.152732][T23324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2583.236090][T26928] loop6: detected capacity change from 0 to 8
[ 2583.760228][T23324] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2583.887328][T26932] loop3: detected capacity change from 0 to 16
[ 2583.936434][T26932] erofs (device loop3): mounted with root inode @ nid 36.
[ 2584.552039][T23324] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2584.613361][T23324] usb 2-1: Manufacturer: syz
[ 2584.688486][T23324] usb 2-1: config 0 descriptor??
[ 2587.341074][T23324] usbhid 2-1:0.0: can't add hid device: -71
[ 2587.358610][T23324] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2587.398773][T23324] usb 2-1: USB disconnect, device number 88
[ 2590.621529][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2590.648332][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2595.750722][T21538] usb 2-1: new full-speed USB device number 89 using dummy_hcd
[ 2595.954896][T21538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2595.978842][T21538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2596.013179][T21538] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2596.043486][T21538] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2596.076577][T21538] usb 2-1: Manufacturer: syz
[ 2596.095246][T21538] usb 2-1: config 0 descriptor??
[ 2596.306838][T23090] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 2596.972761][T23090] usb 4-1: too many configurations: 89, using maximum allowed: 8
[ 2597.010997][T23090] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2597.020986][T23090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2597.055791][T23090] usb 4-1: Product: syz
[ 2597.077584][T23090] usb 4-1: Manufacturer: syz
[ 2597.082264][T23090] usb 4-1: SerialNumber: syz
[ 2597.125622][T23090] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2597.233048][    T8] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2597.264511][T21538] cougar 0003:060B:700A.001E: unknown main item tag 0x0
[ 2597.320038][T21538] cougar 0003:060B:700A.001E: unknown main item tag 0x0
[ 2597.345413][T21538] cougar 0003:060B:700A.001E: unknown main item tag 0x0
[ 2597.376446][T21538] cougar 0003:060B:700A.001E: unknown main item tag 0x0
[ 2597.383518][T21538] cougar 0003:060B:700A.001E: unknown main item tag 0x0
[ 2597.405278][T21538] cougar 0003:060B:700A.001E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[ 2597.455774][T21538] usb 2-1: USB disconnect, device number 89
[ 2597.728615][T23324] usb 4-1: USB disconnect, device number 72
[ 2599.113936][    T8] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 2599.124756][    T8] ath9k_htc: Failed to initialize the device
[ 2599.179311][T23324] usb 4-1: ath9k_htc: USB layer deinitialized
[ 2599.741292][T27033] fuse: Bad value for 'fd'
[ 2601.555660][T23324] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 2601.855678][T23324] usb 4-1: device descriptor read/64, error -71
[ 2602.228420][T23324] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 2602.405787][T23324] usb 4-1: device descriptor read/64, error -71
[ 2602.535849][T23324] usb usb4-port1: attempt power cycle
[ 2602.905439][T23324] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 2602.936370][T23324] usb 4-1: device descriptor read/8, error -71
[ 2603.219605][T23324] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 2603.371232][T23324] usb 4-1: device descriptor read/8, error -71
[ 2603.608130][T23324] usb usb4-port1: unable to enumerate USB device
[ 2606.423271][T27076] loop2: detected capacity change from 0 to 4096
[ 2606.735685][T27085] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 2606.870724][T27086] loop6: detected capacity change from 0 to 4096
[ 2607.331152][T27086] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[ 2609.655343][ T5831] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 2609.866798][ T5831] usb 5-1: Using ep0 maxpacket: 16
[ 2610.347994][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2610.369568][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2610.385481][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2610.402491][ T5831] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2610.412098][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2610.456194][T24825] Bluetooth: hci6: command 0x0406 tx timeout
[ 2610.482673][ T5831] usb 5-1: config 0 descriptor??
[ 2611.003934][ T5831] microsoft 0003:045E:07DA.001F: ignoring exceeding usage max
[ 2611.201053][T21538] usb 3-1: new full-speed USB device number 85 using dummy_hcd
[ 2611.336114][ T5831] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 2611.395420][ T5831] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 2611.456051][ T5831] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 2611.464608][ T5831] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 2611.473395][ T5831] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 2611.481712][ T5831] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 2611.489791][ T5831] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 2611.498191][ T5831] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[ 2611.503140][T21538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2611.535666][ T5831] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001F/input/input48
[ 2611.558567][ T5831] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[ 2611.560358][T21538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2612.150258][T21538] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2612.303129][T21538] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2612.357552][T21538] usb 3-1: Manufacturer: syz
[ 2612.383239][T23090] usb 5-1: USB disconnect, device number 62
[ 2612.396148][T21538] usb 3-1: config 0 descriptor??
[ 2612.421534][T27125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5510'.
[ 2612.468614][T27125] bridge0: entered promiscuous mode
[ 2612.511350][T27125] macvtap2: entered promiscuous mode
[ 2612.530064][T27125] macvtap2: entered allmulticast mode
[ 2612.537332][T27127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5511'.
[ 2612.561138][T27125] bridge0: entered allmulticast mode
[ 2612.603371][T27127] bridge0: entered promiscuous mode
[ 2612.626018][T27127] macvtap1: entered promiscuous mode
[ 2612.639565][T27127] macvtap1: entered allmulticast mode
[ 2612.660038][T27127] bridge0: entered allmulticast mode
[ 2612.986824][T21538] usbhid 3-1:0.0: can't add hid device: -71
[ 2612.993066][T21538] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2613.011792][T21538] usb 3-1: USB disconnect, device number 85
[ 2614.463932][T27157] sctp: [Deprecated]: syz.2.5518 (pid 27157) Use of int in max_burst socket option deprecated.
[ 2614.463932][T27157] Use struct sctp_assoc_value instead
[ 2614.600381][T27157] loop2: detected capacity change from 0 to 64
[ 2616.253555][T27170] loop6: detected capacity change from 0 to 16
[ 2616.418674][T27170] erofs (device loop6): mounted with root inode @ nid 36.
[ 2616.449720][T27170] erofs (device loop6): read error -117 @ 8200 of nid 36
[ 2618.502965][T27186] loop4: detected capacity change from 0 to 16
[ 2619.470609][T27186] erofs (device loop4): mounted with root inode @ nid 36.
[ 2619.675801][T27186] erofs (device loop4): read error -117 @ 8200 of nid 36
[ 2620.060626][T23324] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 2620.307004][T23324] usb 7-1: device descriptor read/64, error -71
[ 2622.706137][T23324] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 2623.849598][T27206] fuse: Bad value for 'fd'
[ 2627.836709][T27230] hub 2-0:1.0: USB hub found
[ 2627.841686][T27230] hub 2-0:1.0: 1 port detected
[ 2631.029746][ T5887] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[ 2631.247643][ T5887] usb 3-1: Using ep0 maxpacket: 16
[ 2631.299203][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2631.375713][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2631.506085][T27257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5547'.
[ 2631.568513][T27257] syz_tun: entered promiscuous mode
[ 2631.576867][T27257] macvtap2: entered promiscuous mode
[ 2631.582556][T27257] macvtap2: entered allmulticast mode
[ 2631.600896][T27257] syz_tun: entered allmulticast mode
[ 2631.663225][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2631.687383][ T5887] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2631.698319][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2631.818294][ T5887] usb 3-1: config 0 descriptor??
[ 2631.892082][T27260] syz_tun: left allmulticast mode
[ 2632.037203][T27260] syz_tun: left promiscuous mode
[ 2632.593612][ T5887] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max
[ 2632.606223][ T5887] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0
[ 2632.613499][ T5887] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0
[ 2632.657480][ T5887] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0
[ 2632.666903][T27272] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5552'.
[ 2632.674054][ T5887] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0
[ 2632.701696][ T5887] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0
[ 2632.750431][ T5887] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0
[ 2632.760386][T27272] syz_tun: entered promiscuous mode
[ 2632.804041][T27272] macvtap2: entered promiscuous mode
[ 2632.823063][T27272] macvtap2: entered allmulticast mode
[ 2632.860326][T27272] syz_tun: entered allmulticast mode
[ 2632.955066][T27274] syz_tun: left allmulticast mode
[ 2632.960633][T27274] syz_tun: left promiscuous mode
[ 2633.013552][ T5887] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0
[ 2633.022643][ T5887] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0
[ 2633.053758][ T5887] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0020/input/input49
[ 2633.083524][ T5887] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 2634.311871][T27291] siw: device registration error -23
[ 2635.975819][ T5887] usb 3-1: USB disconnect, device number 86
[ 2639.889583][T27325] pim6reg1: entered promiscuous mode
[ 2640.723667][T27325] pim6reg1: entered allmulticast mode
[ 2640.813740][T23090] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 2640.993443][T23090] usb 2-1: device descriptor read/64, error -71
[ 2641.497871][T27342] input: syz0 as /devices/virtual/input/input50
[ 2641.975525][T23090] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 2642.153852][T23090] usb 2-1: device descriptor read/64, error -71
[ 2642.224584][T27345] loop6: detected capacity change from 0 to 4096
[ 2642.275576][T23090] usb usb2-port1: attempt power cycle
[ 2642.543041][T24825] Bluetooth: hci6: unexpected event for opcode 0x1405
[ 2643.413426][ T5831] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[ 2643.454734][T23090] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 2644.234159][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 2644.407232][T23090] usb 2-1: device not accepting address 92, error -71
[ 2644.524884][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 2644.795392][ T5831] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 2644.935487][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2645.062420][ T5831] usb 3-1: Product: syz
[ 2645.094925][ T5831] usb 3-1: Manufacturer: syz
[ 2645.102409][ T5831] usb 3-1: SerialNumber: syz
[ 2645.254736][ T5831] usb 3-1: config 0 descriptor??
[ 2645.411232][ T5831] powermate: unknown product id 0240
[ 2645.419436][T27362] fuse: Unknown parameter 'grou00000000000000000000'
[ 2645.428834][ T5831] powermate: Expected payload of 3--6 bytes, found 11 bytes!
[ 2645.484089][ T5831] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input51
[ 2645.583751][    C1] powermate: config urb returned -71
[ 2645.589291][    C1] powermate: config urb returned -71
[ 2645.594789][    C1] powermate: config urb returned -71
[ 2645.603212][    C1] powermate: config urb returned -71
[ 2645.673524][ T5831] usb 3-1: USB disconnect, device number 87
[ 2645.679532][    C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[ 2645.892848][T27368] loop2: detected capacity change from 0 to 512
[ 2646.036293][T27373] loop6: detected capacity change from 0 to 1024
[ 2646.054348][T27373] EXT4-fs: Ignoring removed nobh option
[ 2646.065371][T27368] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2646.110893][T27368] System zones: 0-2, 18-18, 34-35
[ 2646.248902][T27368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2646.298277][T27373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2646.325248][T27368] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2646.382643][T27365] Quota error (device loop2): do_check_range: Getting block 9 out of range 0-5
[ 2646.401572][T27378] loop3: detected capacity change from 0 to 512
[ 2647.475013][T27378] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5577: bg 0: block 393: padding at end of block bitmap is not set
[ 2647.599022][T27378] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[ 2647.618971][T19446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2647.677963][T27378] EXT4-fs (loop3): 2 truncates cleaned up
[ 2647.702719][T27378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2647.931410][T27391] netlink: 'syz.6.5581': attribute type 4 has an invalid length.
[ 2648.720458][T27395] loop6: detected capacity change from 0 to 512
[ 2648.868191][T27395] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5582: bg 0: block 393: padding at end of block bitmap is not set
[ 2648.886500][T27395] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem
[ 2648.947576][T27395] EXT4-fs (loop6): 2 truncates cleaned up
[ 2648.964360][T27395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2649.459520][T19446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2650.550727][   T30] audit: type=1800 audit(1739021330.229:902): pid=27407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5585" name="/" dev="9p" ino=2 res=0 errno=0
[ 2650.717183][T20714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2650.947105][T27413] fuse: Unknown parameter 'grou00000000000000000000'
[ 2650.982769][T23090] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[ 2651.165600][T27415] fuse: Bad value for 'fd'
[ 2651.871102][T23090] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 2651.886152][T23090] usb 5-1: config 0 has no interface number 0
[ 2651.922771][T23090] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2652.066714][T20224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2652.072521][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2652.082512][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2652.111030][T23090] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2652.123202][T23090] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[ 2652.132346][T23090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2652.188762][T23090] usb 5-1: config 0 descriptor??
[ 2652.229279][T27421] loop6: detected capacity change from 0 to 8
[ 2653.086559][T27428] loop3: detected capacity change from 0 to 16
[ 2653.887957][T27428] erofs (device loop3): mounted with root inode @ nid 36.
[ 2654.065748][T23090] usbhid 5-1:0.1: can't add hid device: -71
[ 2654.071929][T23090] usbhid 5-1:0.1: probe with driver usbhid failed with error -71
[ 2654.255710][T23090] usb 5-1: USB disconnect, device number 63
[ 2656.202636][    T9] usb 5-1: new full-speed USB device number 64 using dummy_hcd
[ 2656.504098][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2656.518154][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2656.541276][    T9] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2656.551876][    T9] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2656.567345][    T9] usb 5-1: Manufacturer: syz
[ 2656.639940][    T9] usb 5-1: config 0 descriptor??
[ 2657.105300][T27459] loop6: detected capacity change from 0 to 16
[ 2658.041244][T27459] erofs (device loop6): mounted with root inode @ nid 36.
[ 2658.326602][    T9] usbhid 5-1:0.0: can't add hid device: -71
[ 2658.367126][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 2658.442120][    T9] usb 5-1: USB disconnect, device number 64
[ 2660.162297][T21538] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 2660.247009][T27474] loop4: detected capacity change from 0 to 512
[ 2660.392726][T21538] usb 2-1: Using ep0 maxpacket: 8
[ 2660.547603][T21538] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2661.391578][T21538] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2661.606145][T27481] loop4: detected capacity change from 0 to 8
[ 2661.825556][T21538] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 2661.902234][T21538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2661.910302][T21538] usb 2-1: Product: syz
[ 2661.963938][T21538] usb 2-1: Manufacturer: syz
[ 2661.981503][T21538] usb 2-1: SerialNumber: syz
[ 2662.040201][T21538] usb 2-1: config 0 descriptor??
[ 2662.135024][T21538] usb 2-1: USB disconnect, device number 94
[ 2662.181622][T27489] loop3: detected capacity change from 0 to 512
[ 2664.852205][T27489] loop3: detected capacity change from 0 to 8
[ 2666.892098][ T5887] usb 3-1: new full-speed USB device number 88 using dummy_hcd
[ 2667.143386][T27514] netlink: 'syz.4.5620': attribute type 1 has an invalid length.
[ 2667.332620][T27518] loop6: detected capacity change from 0 to 16
[ 2667.387693][T27518] erofs (device loop6): mounted with root inode @ nid 36.
[ 2668.060832][ T5887] usb 3-1: unable to read config index 0 descriptor/all
[ 2668.090798][ T5887] usb 3-1: can't read configurations, error -71
[ 2668.138931][T27520] 8021q: adding VLAN 0 to HW filter on device bond3
[ 2668.479489][T27522] bridge4: entered promiscuous mode
[ 2668.504413][T27522] bond3: (slave bridge4): Enslaving as an active interface with an up link
[ 2671.110697][T27556] loop4: detected capacity change from 0 to 1024
[ 2671.147999][T27556] EXT4-fs: Ignoring removed nobh option
[ 2671.241675][ T5831] usb 7-1: new full-speed USB device number 37 using dummy_hcd
[ 2671.273815][T27556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2671.364388][T27562] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 456: padding at end of block bitmap is not set
[ 2671.624172][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2672.441651][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2672.459514][ T5831] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2672.480602][ T5831] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2672.492146][ T5831] usb 7-1: Manufacturer: syz
[ 2672.550817][ T5831] usb 7-1: config 0 descriptor??
[ 2672.597992][T19375] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2673.241669][T21538] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 2673.277930][T27576] fuse: Unknown parameter 'group_i00000000000000000000'
[ 2673.417151][ T5831] cougar 0003:060B:700A.0021: unknown main item tag 0x0
[ 2673.431622][T21538] usb 4-1: Using ep0 maxpacket: 16
[ 2673.431727][ T5831] cougar 0003:060B:700A.0021: unknown main item tag 0x0
[ 2673.443759][T21538] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2673.443784][T21538] usb 4-1: config 0 has no interfaces?
[ 2673.446988][T21538] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[ 2673.462284][ T5831] cougar 0003:060B:700A.0021: unknown main item tag 0x0
[ 2673.511961][T21538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2673.531458][T21538] usb 4-1: Product: syz
[ 2673.534086][ T5831] cougar 0003:060B:700A.0021: unknown main item tag 0x0
[ 2673.535648][T21538] usb 4-1: Manufacturer: syz
[ 2673.535667][T21538] usb 4-1: SerialNumber: syz
[ 2673.553587][T21538] usb 4-1: config 0 descriptor??
[ 2673.561755][ T5933] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 2673.571905][ T5831] cougar 0003:060B:700A.0021: unknown main item tag 0x0
[ 2673.608228][ T5831] cougar 0003:060B:700A.0021: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[ 2673.656987][ T5831] usb 7-1: USB disconnect, device number 37
[ 2673.743854][ T5933] usb 5-1: too many configurations: 89, using maximum allowed: 8
[ 2673.796188][ T5933] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2673.836941][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2673.862460][ T5933] usb 5-1: Product: syz
[ 2673.869080][ T5933] usb 5-1: Manufacturer: syz
[ 2673.877341][    T8] usb 4-1: USB disconnect, device number 77
[ 2673.900686][ T5933] usb 5-1: SerialNumber: syz
[ 2673.926165][ T5933] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2673.949720][T21538] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2674.629542][ T5887] usb 5-1: USB disconnect, device number 65
[ 2674.925977][T27597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5645'.
[ 2674.973285][T27597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5645'.
[ 2675.153122][T21538] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2675.160279][T21538] ath9k_htc: Failed to initialize the device
[ 2676.101376][ T5887] usb 5-1: ath9k_htc: USB layer deinitialized
[ 2676.437256][T27612] siw: device registration error -23
[ 2677.321774][T27613] fuse: Unknown parameter 'group_id00000000000000000000'
[ 2677.637414][T27625] loop4: detected capacity change from 0 to 512
[ 2677.746811][T27625] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2677.769988][T27625] System zones: 0-2, 18-18, 34-35
[ 2677.796548][T27625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2677.840486][T27625] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2679.775420][T27654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5659'.
[ 2679.795485][T27653] netlink: 'syz.3.5660': attribute type 4 has an invalid length.
[ 2679.977353][T19375] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2680.085342][T27661] fuse: Unknown parameter 'group_id00000000000000000000'
[ 2682.352472][ T5831] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[ 2682.586628][T27683] Can't find ip_set type hash:net,
[ 2682.731230][ T5831] usb 3-1: device descriptor read/64, error -71
[ 2683.640297][T27697] : entered promiscuous mode
[ 2684.080944][ T5831] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[ 2686.161304][T27720] fuse: Unknown parameter 'group_id00000000000000000000'
[ 2688.651424][T23090] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[ 2688.841058][T27739] netlink: 'syz.1.5686': attribute type 4 has an invalid length.
[ 2688.864576][T27741] loop3: detected capacity change from 0 to 8
[ 2688.891382][T23090] usb 3-1: device descriptor read/64, error -71
[ 2688.908840][    T8] lo speed is unknown, defaulting to 1000
[ 2689.451580][T23090] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[ 2692.110452][T23090] usb 3-1: new full-speed USB device number 94 using dummy_hcd
[ 2692.194311][T27763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5695'.
[ 2692.530529][T23090] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2692.712302][T23090] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2692.764995][T27763] ip6gretap0: entered promiscuous mode
[ 2692.772262][T23090] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2692.800997][T23090] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2692.812011][T27763] macvtap3: entered promiscuous mode
[ 2692.819866][T27763] macvtap3: entered allmulticast mode
[ 2692.851055][T23090] usb 3-1: Manufacturer: syz
[ 2692.855743][T27763] ip6gretap0: entered allmulticast mode
[ 2692.867011][T23090] usb 3-1: config 0 descriptor??
[ 2694.943092][T23090] cougar 0003:060B:700A.0022: unknown main item tag 0x0
[ 2695.003330][T23090] cougar 0003:060B:700A.0022: unknown main item tag 0x0
[ 2695.024084][T23090] cougar 0003:060B:700A.0022: unknown main item tag 0x0
[ 2695.031301][T23090] cougar 0003:060B:700A.0022: unknown main item tag 0x0
[ 2695.038557][T23090] cougar 0003:060B:700A.0022: unknown main item tag 0x0
[ 2695.052770][T23090] cougar 0003:060B:700A.0022: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[ 2695.074293][T23090] usb 3-1: USB disconnect, device number 94
[ 2695.772465][T27795] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 2695.904613][T27796] loop4: detected capacity change from 0 to 4096
[ 2696.394484][T27796] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[ 2699.446688][T27811] loop3: detected capacity change from 0 to 512
[ 2699.894712][T27811] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5705: bg 0: block 393: padding at end of block bitmap is not set
[ 2699.953372][T27811] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[ 2699.969828][T27811] EXT4-fs (loop3): 2 truncates cleaned up
[ 2699.977303][T27811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2700.333062][T27819] loop6: detected capacity change from 0 to 512
[ 2700.668466][T20224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2701.043220][T27819] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2701.119711][T27819] System zones: 0-2, 18-18, 34-35
[ 2701.172422][T27819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2701.253699][T27819] ext4 filesystem being mounted at /449/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2702.176347][T27817] Quota error (device loop6): do_check_range: Getting block 9 out of range 0-5
[ 2703.435933][T19446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2703.828712][T27841] sctp: [Deprecated]: syz.2.5711 (pid 27841) Use of int in max_burst socket option deprecated.
[ 2703.828712][T27841] Use struct sctp_assoc_value instead
[ 2704.128367][T27845] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5714'.
[ 2706.061162][T27841] loop2: detected capacity change from 0 to 64
[ 2706.095812][T27845] syz_tun: entered promiscuous mode
[ 2706.164848][T27845] macvtap4: entered promiscuous mode
[ 2706.214925][T27845] macvtap4: entered allmulticast mode
[ 2706.227506][T27841] hfs: unable to open catalog tree
[ 2706.234147][T27845] syz_tun: entered allmulticast mode
[ 2706.270484][T27841] hfs: can't find a HFS filesystem on dev loop2
[ 2707.533486][T27871] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 2709.956873][T27888] : entered promiscuous mode
[ 2712.663141][T27900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5729'.
[ 2712.905462][T27910] netlink: 'syz.1.5731': attribute type 4 has an invalid length.
[ 2713.590322][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2713.615275][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2715.636975][   T30] audit: type=1800 audit(1739021395.322:903): pid=27931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5736" name="file1" dev="tmpfs" ino=2594 res=0 errno=0
[ 2716.186729][T27938] fuse: Bad value for 'fd'
[ 2716.831781][T27941] fuse: Bad value for 'fd'
[ 2717.946430][T27955] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 2722.031209][T27973] loop3: detected capacity change from 0 to 512
[ 2723.649768][T27974] loop2: detected capacity change from 0 to 512
[ 2723.782048][T27973] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5747: bg 0: block 393: padding at end of block bitmap is not set
[ 2723.831421][T27973] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[ 2723.842586][T27973] EXT4-fs (loop3): 2 truncates cleaned up
[ 2723.852569][T27973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2723.931819][T27974] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5749: bg 0: block 393: padding at end of block bitmap is not set
[ 2723.947302][T27974] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[ 2723.971850][T27974] EXT4-fs (loop2): 2 truncates cleaned up
[ 2723.979530][T27974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2724.419237][T20714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2724.448188][T20224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2724.702379][T27985] fuse: Bad value for 'fd'
[ 2724.745655][   T30] audit: type=1800 audit(1739021404.413:904): pid=27985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5753" name="/" dev="9p" ino=2 res=0 errno=0
[ 2725.025005][T27989] hub 2-0:1.0: USB hub found
[ 2725.032723][T27989] hub 2-0:1.0: 1 port detected
[ 2728.349025][T14684] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 2728.807835][T28019] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2728.904444][T28020] loop4: detected capacity change from 0 to 512
[ 2728.938427][T14684] usb 2-1: device descriptor read/64, error -71
[ 2729.006297][T28020] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2729.098037][T28020] System zones: 0-2, 18-18, 34-35
[ 2729.156531][T28020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2729.315403][T28020] ext4 filesystem being mounted at /466/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2729.318644][T14684] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 2729.486099][T28018] Quota error (device loop4): do_check_range: Getting block 9 out of range 0-5
[ 2731.702878][T28042] loop2: detected capacity change from 0 to 16
[ 2732.474596][T28042] erofs (device loop2): mounted with root inode @ nid 36.
[ 2734.900017][T28058] netlink: 'syz.2.5772': attribute type 1 has an invalid length.
[ 2735.010172][T28061] input: syz0 as /devices/virtual/input/input52
[ 2735.163600][T19375] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2735.798624][T28058] bridge2: entered promiscuous mode
[ 2735.824896][T28058] bond2: (slave bridge2): Enslaving as a backup interface with an up link
[ 2736.428003][ T5887] usb 4-1: new full-speed USB device number 78 using dummy_hcd
[ 2737.937900][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2737.989525][ T5887] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2738.187677][ T5887] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2738.198062][ T5887] usb 4-1: Manufacturer: syz
[ 2738.205661][ T5887] usb 4-1: config 0 descriptor??
[ 2738.953402][ T5887] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2739.172246][T28086] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5779'.
[ 2739.666445][T28087] loop6: detected capacity change from 0 to 512
[ 2739.733335][T23090] usb 4-1: USB disconnect, device number 78
[ 2739.941923][T28087] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2739.977985][T28087] System zones: 0-2, 18-18, 34-35
[ 2740.275032][T28087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2740.341824][T28097] fuse: Bad value for 'rootmode'
[ 2740.425659][T28087] ext4 filesystem being mounted at /463/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2740.677477][T28082] Quota error (device loop6): do_check_range: Getting block 9 out of range 0-5
[ 2740.705624][T28100] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2740.731590][T28100] bridge2: entered promiscuous mode
[ 2740.741251][T28100] bond2: (slave bridge2): Enslaving as an active interface with an up link
[ 2741.312270][T19446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2741.710735][T28113] fuse: Bad value for 'fd'
[ 2744.082741][T28119] pim6reg1: entered promiscuous mode
[ 2744.088227][T28119] pim6reg1: entered allmulticast mode
[ 2745.355605][T28132] loop6: detected capacity change from 0 to 1024
[ 2745.386638][T28132] EXT4-fs: Ignoring removed nobh option
[ 2745.498930][T28132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2747.600961][T19446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2748.903039][T28151] pim6reg1: entered promiscuous mode
[ 2748.908590][T28151] pim6reg1: entered allmulticast mode
[ 2750.840194][T28157] : entered promiscuous mode
[ 2753.278385][T28173] loop6: detected capacity change from 0 to 16
[ 2753.314627][T28173] erofs (device loop6): mounted with root inode @ nid 36.
[ 2756.385692][T28193] loop3: detected capacity change from 0 to 4096
[ 2757.450900][T28199] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5807'.
[ 2758.973496][T28211] loop4: detected capacity change from 0 to 512
[ 2759.033124][T21538] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 2760.148383][T28211] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2760.167165][T21538] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 2760.176428][T21538] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2760.185145][T21538] usb 7-1: Product: syz
[ 2760.192318][T21538] usb 7-1: Manufacturer: syz
[ 2760.197452][T21538] usb 7-1: SerialNumber: syz
[ 2760.207508][T28211] System zones: 0-2, 18-18, 34-35
[ 2760.214066][T21538] usb 7-1: config 0 descriptor??
[ 2760.239121][T28211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2760.251959][T28211] ext4 filesystem being mounted at /473/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2760.267616][T28211] Quota error (device loop4): do_check_range: Getting block 9 out of range 0-5
[ 2761.359463][T21538] usb 7-1: Firmware version (0.0) predates our first public release.
[ 2761.378449][T21538] usb 7-1: Please update to version 0.2 or newer
[ 2761.827818][T19375] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2761.857821][T21538] usb 7-1: USB disconnect, device number 38
[ 2762.056064][   T30] audit: type=1800 audit(1739021441.735:905): pid=28237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5815" name="file1" dev="tmpfs" ino=2671 res=0 errno=0
[ 2764.500606][T28256] loop4: detected capacity change from 0 to 16
[ 2765.152599][T28256] erofs (device loop4): mounted with root inode @ nid 36.
[ 2765.183998][T28254] erofs (device loop4): read error -117 @ 8200 of nid 36
[ 2767.696901][T28275] loop6: detected capacity change from 0 to 512
[ 2767.751707][T28275] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2767.836926][T28275] System zones: 0-2, 18-18, 34-35
[ 2768.164567][T28275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2768.532111][T28275] ext4 filesystem being mounted at /474/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2768.636582][T28271] Quota error (device loop6): do_check_range: Getting block 9 out of range 0-5
[ 2770.143323][T28291] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5830'.
[ 2771.532417][T28303] fuse: Bad value for 'fd'
[ 2771.596603][   T30] audit: type=1800 audit(1739021451.285:906): pid=28303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5835" name="/" dev="9p" ino=2 res=0 errno=0
[ 2771.620347][T19446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2771.774274][T24825] Bluetooth: hci1: unexpected event for opcode 0x0041
[ 2771.846649][T28308] loop6: detected capacity change from 0 to 512
[ 2771.891156][T28308] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2772.096061][T28308] System zones: 0-2, 18-18, 34-35
[ 2772.397949][T28308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2772.446613][T28308] ext4 filesystem being mounted at /475/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2772.501797][T28308] Quota error (device loop6): do_check_range: Getting block 9 out of range 0-5
[ 2773.355341][T19446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2774.393325][T28334] pim6reg1: entered promiscuous mode
[ 2774.398769][T28334] pim6reg1: entered allmulticast mode
[ 2774.986787][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2774.993147][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2775.475100][T28344] loop4: detected capacity change from 0 to 512
[ 2775.610801][T28344] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2775.670856][T28344] System zones: 0-2, 18-18, 34-35
[ 2775.757481][T28344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2775.772327][T28344] ext4 filesystem being mounted at /482/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2775.824572][T24825] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 2775.833985][T24825] Bluetooth: hci1: Injecting HCI hardware error event
[ 2775.844791][T24825] Bluetooth: hci1: hardware error 0x00
[ 2777.033490][T28359] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5848'.
[ 2777.428524][T19375] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2777.656703][T28364] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5851'.
[ 2777.723157][T28364] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5851'.
[ 2779.015406][T28374] loop3: detected capacity change from 0 to 128
[ 2779.125053][T28374] affs: No valid root block on device loop3
[ 2779.368064][T28382] loop6: detected capacity change from 0 to 512
[ 2779.414747][T24825] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 2780.451552][T28391] fuse: Bad value for 'fd'
[ 2780.493572][   T30] audit: type=1800 audit(1739021460.156:907): pid=28391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5856" name="file1" dev="tmpfs" ino=2138 res=0 errno=0
[ 2781.117142][T28382] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2781.125294][T28382] System zones: 0-2, 18-18, 34-35
[ 2781.162558][T28382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2781.234086][T28382] ext4 filesystem being mounted at /479/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2781.263726][T28378] Quota error (device loop6): do_check_range: Getting block 9 out of range 0-5
[ 2781.461982][T28398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5858'.
[ 2782.982508][T28413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5863'.
[ 2783.003546][T28413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5863'.
[ 2783.175474][T21538] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 2783.350840][T21538] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 2783.370420][T21538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2783.399088][T21538] usb 4-1: Product: syz
[ 2783.403303][T21538] usb 4-1: Manufacturer: syz
[ 2783.414714][ T5887] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 2783.465550][T21538] usb 4-1: SerialNumber: syz
[ 2783.478975][T21538] usb 4-1: config 0 descriptor??
[ 2783.580300][ T5887] usb 5-1: Using ep0 maxpacket: 32
[ 2783.638722][ T5887] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 2783.722079][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2783.990215][ T5887] usb 5-1: config 0 descriptor??
[ 2784.298275][T21538] usb 4-1: Firmware version (0.0) predates our first public release.
[ 2784.325522][T21538] usb 4-1: Please update to version 0.2 or newer
[ 2784.403612][ T5887] as10x_usb: device has been detected
[ 2784.410799][ T5887] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 2784.454714][ T5887] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[ 2784.501093][T21538] usb 4-1: USB disconnect, device number 79
[ 2785.100957][ T5887] as10x_usb: error during firmware upload part1
[ 2785.180401][ T5887] Registered device nBox DVB-T Dongle
[ 2785.184209][ T5887] usb 5-1: USB disconnect, device number 66
[ 2785.323759][T19446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2785.541608][T28434] fuse: Unknown parameter 'grou00000000000000000000'
[ 2785.601632][ T5887] Unregistered device nBox DVB-T Dongle
[ 2785.646711][ T5887] as10x_usb: device has been disconnected
[ 2786.175141][T21538] usb 2-1: new full-speed USB device number 97 using dummy_hcd
[ 2786.995126][T28448] loop3: detected capacity change from 0 to 1024
[ 2787.003090][T28448] EXT4-fs: Ignoring removed nobh option
[ 2787.016038][T21538] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 2787.377028][T21538] usb 2-1: config 0 has no interface number 0
[ 2787.405984][T21538] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2787.419909][T21538] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[ 2787.463483][T28448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2787.486546][T21538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2787.499115][T21538] usb 2-1: config 0 descriptor??
[ 2787.517651][T21538] usbhid 2-1:0.1: couldn't find an input interrupt endpoint
[ 2788.589541][T20224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2788.629521][ T5887] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 2788.998933][ T5887] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 2789.767446][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 2789.788572][ T5887] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[ 2789.846960][T14684] usb 2-1: USB disconnect, device number 97
[ 2789.859326][ T5887] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 2789.918414][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2789.985274][ T5887] usb 7-1: Product: syz
[ 2790.002328][ T5887] usb 7-1: Manufacturer: syz
[ 2790.028544][ T5887] usb 7-1: SerialNumber: syz
[ 2790.050857][ T5887] usb 7-1: config 0 descriptor??
[ 2790.365101][ T5831] usb 4-1: new full-speed USB device number 80 using dummy_hcd
[ 2791.002335][ T5887] usb 7-1: can't set config #0, error -71
[ 2791.017159][ T5887] usb 7-1: USB disconnect, device number 39
[ 2791.205395][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2791.256236][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2791.337946][ T5831] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2791.390371][ T5831] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2791.436157][ T5831] usb 4-1: Manufacturer: syz
[ 2791.514619][ T5831] usb 4-1: config 0 descriptor??
[ 2792.220662][T28481] loop2: detected capacity change from 0 to 1024
[ 2792.260374][T28481] EXT4-fs: Ignoring removed nobh option
[ 2792.314035][T28481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2792.360443][T28488] fuse: Unknown parameter 'grou00000000000000000000'
[ 2792.758869][T28489] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 456: padding at end of block bitmap is not set
[ 2793.452420][T20714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2793.586099][T28464] sctp: [Deprecated]: syz.3.5875 (pid 28464) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2793.586099][T28464] Use struct sctp_sack_info instead
[ 2793.738077][ T5831] cougar 0003:060B:700A.0023: unknown main item tag 0x0
[ 2793.756140][ T5831] cougar 0003:060B:700A.0023: unknown main item tag 0x0
[ 2793.763174][ T5831] cougar 0003:060B:700A.0023: unknown main item tag 0x0
[ 2793.774817][ T5831] cougar 0003:060B:700A.0023: unknown main item tag 0x0
[ 2793.781829][ T5831] cougar 0003:060B:700A.0023: unknown main item tag 0x0
[ 2794.060567][ T5831] cougar 0003:060B:700A.0023: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[ 2794.408306][ T5831] usb 4-1: USB disconnect, device number 80
[ 2794.652306][T28502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5884'.
[ 2794.749936][T28502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5884'.
[ 2796.125882][T28512] loop4: detected capacity change from 0 to 1024
[ 2796.145818][T14684] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 2796.371651][T28512] EXT4-fs: Ignoring removed nobh option
[ 2796.485071][T14684] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 2796.815308][T14684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 2796.844665][T14684] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[ 2796.864846][T14684] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 2796.873936][T14684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2796.873950][T28512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2797.054168][T14684] usb 2-1: Product: syz
[ 2797.171901][T14684] usb 2-1: Manufacturer: syz
[ 2797.615132][T14684] usb 2-1: SerialNumber: syz
[ 2797.633460][T14684] usb 2-1: config 0 descriptor??
[ 2797.679449][T14684] powermate 2-1:0.0: probe with driver powermate failed with error -5
[ 2799.420979][T14684] usb 2-1: USB disconnect, device number 98
[ 2799.472512][T19375] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2799.576227][T28537] fuse: Unknown parameter 'group_i00000000000000000000'
[ 2799.605960][T28531] loop3: detected capacity change from 0 to 4096
[ 2801.305756][T28531] ntfs3(loop3): Failed to read $UpCase (-4).
[ 2801.491123][T28550] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5899'.
[ 2801.707181][T28550] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5899'.
[ 2803.878484][T28578] loop4: detected capacity change from 0 to 16
[ 2804.486984][T28578] erofs (device loop4): mounted with root inode @ nid 36.
[ 2805.055604][ T5887] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 2805.385191][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 2805.494145][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 2805.503939][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[ 2805.520991][T28582] loop2: detected capacity change from 0 to 128
[ 2805.545086][ T5887] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 2805.584627][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2805.592676][ T5887] usb 4-1: Product: syz
[ 2805.627561][ T5887] usb 4-1: Manufacturer: syz
[ 2805.632222][ T5887] usb 4-1: SerialNumber: syz
[ 2805.675368][ T5887] usb 4-1: config 0 descriptor??
[ 2805.706815][ T5887] powermate 4-1:0.0: probe with driver powermate failed with error -5
[ 2805.942407][T28582] affs: No valid root block on device loop2
[ 2806.614378][T14684] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 2806.864213][T14684] usb 2-1: device descriptor read/64, error -71
[ 2806.979300][ T5887] usb 4-1: USB disconnect, device number 81
[ 2807.868472][T14684] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 2808.035286][T14684] usb 2-1: device descriptor read/64, error -71
[ 2808.157023][T28607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5915'.
[ 2808.174821][T14684] usb usb2-port1: attempt power cycle
[ 2808.198565][T28607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5915'.
[ 2808.290314][T28610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5916'.
[ 2808.873185][T28618] fuse: Bad value for 'fd'
[ 2809.570706][T28610] syz_tun: entered promiscuous mode
[ 2810.024174][T14684] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 2810.233839][T14684] usb 2-1: device not accepting address 101, error -71
[ 2810.414312][T28610] macvtap1: entered promiscuous mode
[ 2810.419737][T28610] macvtap1: entered allmulticast mode
[ 2810.478595][T28610] syz_tun: entered allmulticast mode
[ 2811.846112][ T5887] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 2812.176983][    T8] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 2812.363961][ T5887] usb 3-1: device descriptor read/64, error -71
[ 2812.739741][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2812.863939][ T5887] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 2812.883662][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 2812.919771][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2813.103912][ T5887] usb 3-1: device descriptor read/64, error -71
[ 2813.104245][    T8] usb 4-1: New USB device found, idVendor=256c, idProduct=0001, bcdDevice= 0.00
[ 2813.233713][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2813.283756][    T8] usb 4-1: config 0 descriptor??
[ 2813.344935][ T5887] usb usb3-port1: attempt power cycle
[ 2813.694297][ T5887] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 2813.735283][ T5887] usb 3-1: device descriptor read/8, error -71
[ 2813.762967][T28656] loop6: detected capacity change from 0 to 1024
[ 2813.771082][T28656] EXT4-fs: Ignoring removed nobh option
[ 2813.868014][T28656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2813.883746][    T8] usbhid 4-1:0.0: can't add hid device: -71
[ 2813.889827][    T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 2813.906148][    T8] usb 4-1: USB disconnect, device number 82
[ 2813.973875][ T5887] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 2813.996773][ T5887] usb 3-1: device descriptor read/8, error -71
[ 2814.016276][T28662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5929'.
[ 2814.275195][ T5887] usb usb3-port1: unable to enumerate USB device
[ 2815.521326][T19446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2815.547342][T28668] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5931'.
[ 2816.757460][T28685] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 2817.423455][T23090] usb 7-1: new full-speed USB device number 40 using dummy_hcd
[ 2817.622768][T28692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5938'.
[ 2817.651458][T23090] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 2817.677594][T23090] usb 7-1: config 0 has no interface number 0
[ 2817.723402][T23090] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2817.764012][T28692] bridge5: entered promiscuous mode
[ 2817.789951][T23090] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2817.854410][T23090] usb 7-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[ 2817.874437][T23090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2817.914103][T23090] usb 7-1: config 0 descriptor??
[ 2818.380858][T28701] loop4: detected capacity change from 0 to 512
[ 2818.786979][T28707] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 2819.473805][T23090] usbhid 7-1:0.1: can't add hid device: -71
[ 2819.479882][T23090] usbhid 7-1:0.1: probe with driver usbhid failed with error -71
[ 2819.498457][T23090] usb 7-1: USB disconnect, device number 40
[ 2819.665420][T28701] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2819.704544][T28701] System zones: 0-2, 18-18, 34-35
[ 2819.752985][T28701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2819.910010][T28701] ext4 filesystem being mounted at /509/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2820.038711][T28700] Quota error (device loop4): do_check_range: Getting block 9 out of range 0-5
[ 2821.825752][T19375] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2821.945106][T28729] loop2: detected capacity change from 0 to 128
[ 2821.962901][T28732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5949'.
[ 2822.019803][T28729] affs: No valid root block on device loop2
[ 2822.057186][T28732] bridge3: entered promiscuous mode
[ 2822.253481][T23090] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 2822.470443][T28740] pim6reg1: entered promiscuous mode
[ 2822.476166][T28740] pim6reg1: entered allmulticast mode
[ 2823.123352][T23090] usb 7-1: Using ep0 maxpacket: 16
[ 2823.147931][T23090] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2823.168259][T23090] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2823.184188][T23090] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2823.211176][T23090] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2823.221469][T23090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2823.243706][T23090] usb 7-1: config 0 descriptor??
[ 2823.569247][T28748] fuse: Unknown parameter 'group_id00000000000000000000'
[ 2823.670920][T23090] microsoft 0003:045E:07DA.0024: ignoring exceeding usage max
[ 2823.692240][T23090] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[ 2824.442984][T23090] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[ 2824.450368][T23090] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[ 2824.463333][T23090] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[ 2824.483034][T23090] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[ 2824.490334][T23090] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[ 2824.504844][    T8] usb 4-1: new full-speed USB device number 83 using dummy_hcd
[ 2824.536813][T23090] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[ 2824.580250][T23090] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0
[ 2824.679233][T28762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5958'.
[ 2824.862212][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2825.694222][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2825.712075][    T8] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2825.728978][T23090] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0024/input/input54
[ 2825.748488][    T8] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2825.757059][    T8] usb 4-1: Manufacturer: syz
[ 2825.778234][T28765] bridge3: entered promiscuous mode
[ 2825.788452][T23090] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[ 2825.803837][    T8] usb 4-1: config 0 descriptor??
[ 2825.855112][T23090] usb 7-1: USB disconnect, device number 41
[ 2826.837646][T28777] loop2: detected capacity change from 0 to 512
[ 2826.854923][T28747] sctp: [Deprecated]: syz.3.5954 (pid 28747) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2826.854923][T28747] Use struct sctp_sack_info instead
[ 2826.942523][T28777] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002]
[ 2826.954017][    T8] cougar 0003:060B:700A.0025: unknown main item tag 0x0
[ 2826.983956][T28777] System zones: 0-2, 18-18, 34-35
[ 2827.005469][    T8] cougar 0003:060B:700A.0025: unknown main item tag 0x0
[ 2827.029045][T28777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2827.052690][    T8] cougar 0003:060B:700A.0025: unknown main item tag 0x0
[ 2827.079417][    T8] cougar 0003:060B:700A.0025: unknown main item tag 0x0
[ 2827.098135][T28777] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2827.115444][T28782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5962'.
[ 2827.124511][    T8] cougar 0003:060B:700A.0025: unknown main item tag 0x0
[ 2827.160206][    T8] cougar 0003:060B:700A.0025: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[ 2827.183904][T28774] Quota error (device loop2): do_check_range: Getting block 9 out of range 0-5
[ 2827.196306][    T8] usb 4-1: USB disconnect, device number 83
[ 2827.238712][T28782] bridge5: entered promiscuous mode
[ 2827.948332][T20714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2827.968315][T28785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5963'.
[ 2829.539120][T28801] nvme_fabrics: missing parameter 'transport=%s'
[ 2829.545614][T28801] nvme_fabrics: missing parameter 'nqn=%s'
[ 2829.729825][T28805] fuse: Unknown parameter 'group_id00000000000000000000'
[ 2831.582690][   T30] audit: type=1800 audit(1739021510.669:908): pid=28820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5970" name="file1" dev="tmpfs" ino=2790 res=0 errno=0
[ 2836.382362][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2836.388770][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2836.426968][T28850] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 2837.157431][T28856] fuse: Unknown parameter 'user_i00000000000000000000'
[ 2837.284074][T28858] sd 0:0:1:0: device reset
[ 2837.552437][T21538] usb 2-1: new full-speed USB device number 103 using dummy_hcd
[ 2838.844380][T21538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2838.877158][T28865] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5986'.
[ 2838.896813][T21538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2838.981364][T21538] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 2839.000029][T21538] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 2839.018493][T21538] usb 2-1: Manufacturer: syz
[ 2839.031490][T21538] usb 2-1: config 0 descriptor??
[ 2841.122766][T28860] sctp: [Deprecated]: syz.1.5984 (pid 28860) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2841.122766][T28860] Use struct sctp_sack_info instead
[ 2841.263067][T21538] cougar 0003:060B:700A.0026: unknown main item tag 0x0
[ 2841.314563][T21538] cougar 0003:060B:700A.0026: unknown main item tag 0x0
[ 2841.321587][T21538] cougar 0003:060B:700A.0026: unknown main item tag 0x0
[ 2841.361921][T21538] cougar 0003:060B:700A.0026: unknown main item tag 0x0
[ 2841.370271][T21538] cougar 0003:060B:700A.0026: unknown main item tag 0x0
[ 2841.389090][T21538] cougar 0003:060B:700A.0026: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[ 2841.416385][T28891] fuse: Unknown parameter 'group_i00000000000000000000'
[ 2841.448711][T21538] usb 2-1: USB disconnect, device number 103
[ 2842.204519][T28900] fuse: Unknown parameter 'user_i00000000000000000000'
[ 2842.367660][T28902] team0: Device gtp0 is of different type
[ 2842.963679][T28905] netlink: 'syz.1.5997': attribute type 1 has an invalid length.
[ 2844.110342][T28911] bridge3: entered promiscuous mode
[ 2844.236260][T28911] bond3: (slave bridge3): Enslaving as a backup interface with an up link
[ 2844.523085][T28923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6002'.
[ 2844.541657][T28923] ip6gretap0: entered promiscuous mode
[ 2844.552591][T28923] macvtap3: entered promiscuous mode
[ 2844.558097][T28923] macvtap3: entered allmulticast mode
[ 2844.615051][T28923] ip6gretap0: entered allmulticast mode
[ 2845.154422][T28930] fuse: Bad value for 'group_id'
[ 2845.159427][T28930] fuse: Bad value for 'group_id'
[ 2845.165756][T28928] ip6gretap0: left allmulticast mode
[ 2845.186699][T28928] ip6gretap0: left promiscuous mode
[ 2845.694040][T28941] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6008'.
[ 2846.471245][T28946] team0: Device gtp0 is of different type
[ 2846.588309][T28944] fuse: Unknown parameter 'user_id00000000000000000000'
[ 2849.274755][T28360] Bluetooth: hci6: command 0x0406 tx timeout
[ 2849.653289][T28968] netlink: 'syz.2.6016': attribute type 1 has an invalid length.
[ 2851.220189][T28968] bridge3: entered promiscuous mode
[ 2851.238771][T28978] loop3: detected capacity change from 0 to 1024
[ 2851.281152][T28968] bond3: (slave bridge3): Enslaving as a backup interface with an up link
[ 2851.313970][T28978] EXT4-fs: Ignoring removed nobh option
[ 2851.928226][T28978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2853.551693][T28995] fuse: Unknown parameter 'user_id00000000000000000000'
[ 2853.673040][T28998] loop4: detected capacity change from 0 to 16
[ 2853.725805][T28998] erofs (device loop4): mounted with root inode @ nid 36.
[ 2853.876930][T20224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2854.738076][T29006] netlink: 'syz.4.6025': attribute type 1 has an invalid length.
[ 2855.194093][T29013] loop3: detected capacity change from 0 to 512
[ 2855.397348][T29013] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6024: bg 0: block 393: padding at end of block bitmap is not set
[ 2855.433832][T29013] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[ 2855.447225][T29013] EXT4-fs (loop3): 2 truncates cleaned up
[ 2855.461260][T29013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2856.125284][T29006] bridge5: entered promiscuous mode
[ 2856.176533][T29006] bond4: (slave bridge5): Enslaving as a backup interface with an up link
[ 2856.193052][T20224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2857.395840][T29027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6030'.
[ 2857.499016][T29027] ip6gretap0: entered promiscuous mode
[ 2857.522669][T29027] macvtap4: entered promiscuous mode
[ 2857.528176][T29027] macvtap4: entered allmulticast mode
[ 2857.563319][T29027] ip6gretap0: entered allmulticast mode
[ 2857.621598][T29031] ip6gretap0: left allmulticast mode
[ 2857.671394][T29031] ip6gretap0: left promiscuous mode
[ 2858.262039][T29043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2859.200584][T29053] fuse: Unknown parameter 'user_id00000000000000000000'
[ 2860.395168][T29061] netlink: 'syz.3.6042': attribute type 1 has an invalid length.
[ 2860.448704][T29061] bridge1: entered promiscuous mode
[ 2860.570258][T29061] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[ 2861.785420][   T30] audit: type=1800 audit(1739021541.450:909): pid=29072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6044" name="file1" dev="tmpfs" ino=2925 res=0 errno=0
[ 2864.813685][T29098] fuse: Bad value for 'fd'
[ 2866.172955][T29108] loop4: detected capacity change from 0 to 512
[ 2866.244034][T29108] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6055: bg 0: block 393: padding at end of block bitmap is not set
[ 2866.258926][T29108] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[ 2866.269608][T29108] EXT4-fs (loop4): 2 truncates cleaned up
[ 2866.287393][T29108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2867.475504][T29119] netlink: 'syz.6.6058': attribute type 1 has an invalid length.
[ 2867.552860][T29120] bridge1: entered promiscuous mode
[ 2867.595969][T29123] netlink: 'syz.2.6059': attribute type 1 has an invalid length.
[ 2867.939974][T29126] 8021q: adding VLAN 0 to HW filter on device bond4
[ 2868.044307][T29127] bridge4: entered promiscuous mode
[ 2868.405269][T29138] loop2: detected capacity change from 0 to 1024
[ 2868.452416][T29138] EXT4-fs: Ignoring removed nobh option
[ 2868.495536][T29140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6066'.
[ 2868.496416][T29138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2868.581464][T29144] fuse: Bad value for 'fd'
[ 2868.699810][T19375] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2870.233243][T29152] 9pnet: Unknown protocol version 9p200
[ 2870.881497][T20714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2875.585128][T29196] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2875.608884][T29198] fuse: Bad value for 'fd'
[ 2875.897333][T29168] lo speed is unknown, defaulting to 1000
[ 2878.797934][T29225]  non-paged memory
[ 2878.824806][T29225] list_del corruption, ffff88807ba69800->prev is LIST_POISON2 (dead000000000122)
[ 2878.835705][T29225] ------------[ cut here ]------------
[ 2878.841610][T29225] kernel BUG at lib/list_debug.c:61!
[ 2878.850461][T29225] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[ 2878.857413][T29225] CPU: 1 UID: 0 PID: 29225 Comm: syz.4.6092 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0
[ 2878.867660][T29225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 2878.877742][T29225] RIP: 0010:__list_del_entry_valid_or_report+0x12c/0x190
[ 2878.884787][T29225] Code: 8c 4c 89 fe 48 89 da e8 a2 63 36 fc 90 0f 0b 48 89 df e8 27 e0 13 fd 48 c7 c7 60 ce 60 8c 4c 89 fe 48 89 da e8 85 63 36 fc 90 <0f> 0b 4c 89 e7 e8 0a e0 13 fd 42 80 3c 2b 00 74 08 4c 89 e7 e8 db
[ 2878.904381][T29225] RSP: 0018:ffffc90002f27878 EFLAGS: 00010246
[ 2878.910444][T29225] RAX: 000000000000004e RBX: dead000000000122 RCX: cae980bf3ae6bf00
[ 2878.918413][T29225] RDX: ffffc9000c53b000 RSI: 0000000000006691 RDI: 0000000000006692
[ 2878.926370][T29225] RBP: dffffc0000000000 R08: ffffffff819f3f6c R09: fffffbfff1cfa5b8
[ 2878.934324][T29225] R10: dffffc0000000000 R11: fffffbfff1cfa5b8 R12: dead000000000122
[ 2878.942278][T29225] R13: dffffc0000000000 R14: ffff88806d3308d8 R15: ffff88807ba69800
[ 2878.950237][T29225] FS:  00007f4a307f66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 2878.959171][T29225] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2878.965739][T29225] CR2: 0000001b31610ff8 CR3: 000000006acc2000 CR4: 00000000003526f0
[ 2878.973703][T29225] Call Trace:
[ 2878.976981][T29225]  <TASK>
[ 2878.979910][T29225]  ? __die_body+0x5f/0xb0
[ 2878.984240][T29225]  ? die+0x9e/0xc0
[ 2878.987948][T29225]  ? do_trap+0x15a/0x3a0
[ 2878.992174][T29225]  ? __list_del_entry_valid_or_report+0x12c/0x190
[ 2878.998587][T29225]  ? do_error_trap+0x1dc/0x2c0
[ 2879.003341][T29225]  ? __list_del_entry_valid_or_report+0x12c/0x190
[ 2879.009755][T29225]  ? __pfx_do_error_trap+0x10/0x10
[ 2879.014881][T29225]  ? handle_invalid_op+0x34/0x40
[ 2879.019805][T29225]  ? __list_del_entry_valid_or_report+0x12c/0x190
[ 2879.026216][T29225]  ? exc_invalid_op+0x38/0x50
[ 2879.030901][T29225]  ? asm_exc_invalid_op+0x1a/0x20
[ 2879.035919][T29225]  ? __wake_up_klogd+0xcc/0x110
[ 2879.040766][T29225]  ? __list_del_entry_valid_or_report+0x12c/0x190
[ 2879.047172][T29225]  ? __list_del_entry_valid_or_report+0x12b/0x190
[ 2879.053575][T29225]  hci_chan_del+0x70/0x1b0
[ 2879.057981][T29225]  l2cap_conn_put+0x70/0xe0
[ 2879.062476][T29225]  l2cap_sock_shutdown+0xa8a/0x1020
[ 2879.067675][T29225]  ? l2cap_sock_release+0x6c/0x1d0
[ 2879.072772][T29225]  ? __pfx_lock_release+0x10/0x10
[ 2879.077786][T29225]  ? __pfx_l2cap_sock_shutdown+0x10/0x10
[ 2879.083420][T29225]  ? bt_accept_dequeue+0x3ac/0x570
[ 2879.088527][T29225]  l2cap_sock_release+0x79/0x1d0
[ 2879.093455][T29225]  sock_close+0xbc/0x240
[ 2879.097685][T29225]  ? __pfx_sock_close+0x10/0x10
[ 2879.102532][T29225]  __fput+0x3e9/0x9f0
[ 2879.106523][T29225]  task_work_run+0x24f/0x310
[ 2879.111137][T29225]  ? __pfx_task_work_run+0x10/0x10
[ 2879.116262][T29225]  get_signal+0x15f7/0x1750
[ 2879.120750][T29225]  ? __pfx_task_work_add+0x10/0x10
[ 2879.125849][T29225]  ? __pfx_l2cap_sock_connect+0x10/0x10
[ 2879.131400][T29225]  ? __pfx_get_signal+0x10/0x10
[ 2879.136252][T29225]  arch_do_signal_or_restart+0x96/0x860
[ 2879.141786][T29225]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 2879.147932][T29225]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 2879.153907][T29225]  ? syscall_exit_to_user_mode+0xa3/0x340
[ 2879.159620][T29225]  syscall_exit_to_user_mode+0xce/0x340
[ 2879.165173][T29225]  do_syscall_64+0x100/0x230
[ 2879.169750][T29225]  ? clear_bhb_loop+0x35/0x90
[ 2879.174422][T29225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2879.180342][T29225] RIP: 0033:0x7f4a3298cde9
[ 2879.184762][T29225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2879.204353][T29225] RSP: 002b:00007f4a307f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 2879.212754][T29225] RAX: fffffffffffffffc RBX: 00007f4a32ba6080 RCX: 00007f4a3298cde9
[ 2879.220710][T29225] RDX: 000000000000000e RSI: 0000400000000080 RDI: 0000000000000004
[ 2879.228683][T29225] RBP: 00007f4a32a0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 2879.236641][T29225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2879.244598][T29225] R13: 0000000000000000 R14: 00007f4a32ba6080 R15: 00007fff818faf98
[ 2879.252559][T29225]  </TASK>
[ 2879.255558][T29225] Modules linked in:
[ 2879.260814][T29225] ---[ end trace 0000000000000000 ]---
[ 2879.326398][T29225] RIP: 0010:__list_del_entry_valid_or_report+0x12c/0x190
[ 2879.343889][T29225] Code: 8c 4c 89 fe 48 89 da e8 a2 63 36 fc 90 0f 0b 48 89 df e8 27 e0 13 fd 48 c7 c7 60 ce 60 8c 4c 89 fe 48 89 da e8 85 63 36 fc 90 <0f> 0b 4c 89 e7 e8 0a e0 13 fd 42 80 3c 2b 00 74 08 4c 89 e7 e8 db
[ 2880.519405][T29225] RSP: 0018:ffffc90002f27878 EFLAGS: 00010246
[ 2880.549258][T29225] RAX: 000000000000004e RBX: dead000000000122 RCX: cae980bf3ae6bf00
[ 2880.639104][T29225] RDX: ffffc9000c53b000 RSI: 0000000000006691 RDI: 0000000000006692
[ 2880.670501][T29225] RBP: dffffc0000000000 R08: ffffffff819f3f6c R09: fffffbfff1cfa5b8
[ 2880.683984][T29225] R10: dffffc0000000000 R11: fffffbfff1cfa5b8 R12: dead000000000122
[ 2880.706066][T29225] R13: dffffc0000000000 R14: ffff88806d3308d8 R15: ffff88807ba69800
[ 2880.715685][T29225] FS:  00007f4a307f66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 2880.726264][T29225] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2880.733432][T29225] CR2: 00007f1296f79178 CR3: 000000006acc2000 CR4: 00000000003526f0
[ 2880.741781][T29225] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2880.750137][T29225] DR3: 0000000000008044 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 2880.758231][T29225] Kernel panic - not syncing: Fatal exception
[ 2880.764517][T29225] Kernel Offset: disabled
[ 2880.768842][T29225] Rebooting in 86400 seconds..