last executing test programs:

8m25.70125705s ago: executing program 5 (id=1229):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x806, 0x0)
listen(r1, 0x3)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x24000080, 0x0, 0x0)
listen(r0, 0x2)
shutdown(r0, 0x1)

8m25.334905618s ago: executing program 5 (id=1234):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af24, &(0x7f0000010180))

8m25.057166838s ago: executing program 5 (id=1238):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x10000000, 0x1, 0xa, 0xb}, {0x1, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = userfaultfd(0x801)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
close(r4)
r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000040)={0xa})
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
fsopen(&(0x7f0000000040)='cifs\x00', 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

8m23.104625242s ago: executing program 5 (id=1242):
syz_usb_connect(0x0, 0x43, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)

8m19.355029553s ago: executing program 5 (id=1251):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3800006, 0x4008031, 0xffffffffffffffff, 0xd6d4a000)
rmdir(0x0)

8m16.801340097s ago: executing program 0 (id=1262):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x32a000, 0x1000}, 0x20)

8m14.992824715s ago: executing program 5 (id=1266):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000005840)='./file0\x00', 0x1000806, &(0x7f00000016c0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="2c666d61736b3d30303030b8463c983030303030303030303030303030362c696f6368617273652acf418b743d637e3737352c6769643d00", @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000027,errors=continue,errors=remount-ro,namecase=1,fmask=00000000000000000000003,umask=00000000000000000000003,allow_utime=00000000000000000000200,\x00'], 0x9, 0x1505, &(0x7f0000000180)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x1a00040, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x3, 0x350, &(0x7f0000000ac0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0)
setreuid(0xee01, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000080000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680003)

8m14.992478071s ago: executing program 0 (id=1267):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af24, &(0x7f0000010180))

8m14.567654619s ago: executing program 0 (id=1270):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004900)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40808)

8m13.254445969s ago: executing program 0 (id=1274):
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20200)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
creat(&(0x7f0000000080)='./file0\x00', 0x2a)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[], 0x0)

8m9.67499072s ago: executing program 0 (id=1283):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20e42)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426", 0x28}], 0x1)
read(r0, &(0x7f0000002400)=""/4078, 0xfee)

8m7.323568988s ago: executing program 0 (id=1292):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AEEERV80hdfBD+AIAVffBShoM+KiiLa6oMP2rns7iRN091k226zafb3g8mcc2Zm/+dsmNk5M4eZAAbWOxFxLSIep2l6PiLGsvJcNsV2a2qs9+jh3bnGlESa3vhnEklWtvNZSTY/k212KiK+9uWIbybPxq1tbi3PVirl9Sxfqq+slWqbWxeWVmYXy4vl1enpqcszV2YuzUz2pJ1nI+LqF//6g+/+7EtXf/WZ23+6+fdz32pUazRbvrcdzyl/0MJW0wvN72LvBusvGOw4yjdbmBlpt8bQMyX3XnGdAABor3GO/8GI+GREnI+xGDr4dBYAAAB4DaWfH43/JRFpe8MdygEAAIDXSK45BjbJFbOxAKORyxWLrTG8H47TuUq1Vv/0QnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5C/uy09HxJsR8f2xkWa+OFetzPf74gcAAAAMiDP7+v//GWv1/wEAAIATZrzfFQAAAABeOf1/AAAAOPn0/wEAAOBE+8r1640p3Xn/9fytzY3l6q0L8+XacnFlY644V11fKy5Wq4vNZ/atHPZ5lWp17bOxunGnVC/X6qXa5tbNlerGav3m0lOvwAYAAACO0Jsfv/+HJCK2PzfSnBqGu9u0y9WA4yq/m0qyeZvd+o9vtOZ/OaJKAUdiqN8VAPom3+8KAH1T6HcFgL5LDlnecfDOb7P5J3pbHwAAoPcmPtr5/n/uwC23D14MHHt2Yhhc7v/D4Gre/+92JK+TBThRCs4AYOC99P3/Q6Xpc1UIAADoudHmlOSK2eW90cjlisWIs83XAhSShaVKeTIi3oiI348VPtDITzW3TA7tMwAAAAAAAAAAAAAAAAAAAAAAAAAALWmaRAoAAACcaBG5vyW/bj3Lf2LsvdH91weGk/+ORfaK0Ns/vvHDO7P1+vpUo/xfu+X1H2XlF/txBQMAAAAGwnO9wH+nn77TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXnr08O7cznSUcf/xhYgYbxc/H6ea81NRiIjT/04iv2e7JCKGehB/pPHnI+3iJ41q7YZsF3+kB/G37x0YP8azb2F//OGIONOD+DDI7jeOP9fa7X+5eKc5b7//5SOeyr+ozse/2D3+DXU4/pztMsZbD35R6hj/XsRb+fbHn534SYf473YZ/xtf39rqtCz9ScRE29+f5KlYpfrKWqm2uXVhaWV2sbxYXp2enro8c2Xm0sxkaWGpUs7+to3xvY/98vFB7T/dIf74Ie1/r8v2///BnYcfaiUL7eKfe7dN/N/8NFvj2fi57LfvU1m6sXxiJ73dSu/19s9/9/ZB7Z/v0P7D/v/numz/+a9+589drgoAHIHa5tbybKVSXj+xiUYv/RhUQ+IYJr7d0w9M0zRt7FMv8TlJHIevpZno95EJAADotScn/f2uCQAAAAAAAAAAAAAAAAAAAAyuo3ic2P6Y27uppBeP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6In3AwAA///d8Nla")

7m58.656822574s ago: executing program 32 (id=1266):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000005840)='./file0\x00', 0x1000806, &(0x7f00000016c0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="2c666d61736b3d30303030b8463c983030303030303030303030303030362c696f6368617273652acf418b743d637e3737352c6769643d00", @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000027,errors=continue,errors=remount-ro,namecase=1,fmask=00000000000000000000003,umask=00000000000000000000003,allow_utime=00000000000000000000200,\x00'], 0x9, 0x1505, &(0x7f0000000180)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x1a00040, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x3, 0x350, &(0x7f0000000ac0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0)
setreuid(0xee01, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000080000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680003)

7m50.652232221s ago: executing program 33 (id=1292):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AEEERV80hdfBD+AIAVffBShoM+KiiLa6oMP2rns7iRN091k226zafb3g8mcc2Zm/+dsmNk5M4eZAAbWOxFxLSIep2l6PiLGsvJcNsV2a2qs9+jh3bnGlESa3vhnEklWtvNZSTY/k212KiK+9uWIbybPxq1tbi3PVirl9Sxfqq+slWqbWxeWVmYXy4vl1enpqcszV2YuzUz2pJ1nI+LqF//6g+/+7EtXf/WZ23+6+fdz32pUazRbvrcdzyl/0MJW0wvN72LvBusvGOw4yjdbmBlpt8bQMyX3XnGdAABor3GO/8GI+GREnI+xGDr4dBYAAAB4DaWfH43/JRFpe8MdygEAAIDXSK45BjbJFbOxAKORyxWLrTG8H47TuUq1Vv/0QnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5C/uy09HxJsR8f2xkWa+OFetzPf74gcAAAAMiDP7+v//GWv1/wEAAIATZrzfFQAAAABeOf1/AAAAOPn0/wEAAOBE+8r1640p3Xn/9fytzY3l6q0L8+XacnFlY644V11fKy5Wq4vNZ/atHPZ5lWp17bOxunGnVC/X6qXa5tbNlerGav3m0lOvwAYAAACO0Jsfv/+HJCK2PzfSnBqGu9u0y9WA4yq/m0qyeZvd+o9vtOZ/OaJKAUdiqN8VAPom3+8KAH1T6HcFgL5LDlnecfDOb7P5J3pbHwAAoPcmPtr5/n/uwC23D14MHHt2Yhhc7v/D4Gre/+92JK+TBThRCs4AYOC99P3/Q6Xpc1UIAADoudHmlOSK2eW90cjlisWIs83XAhSShaVKeTIi3oiI348VPtDITzW3TA7tMwAAAAAAAAAAAAAAAAAAAAAAAAAALWmaRAoAAACcaBG5vyW/bj3Lf2LsvdH91weGk/+ORfaK0Ns/vvHDO7P1+vpUo/xfu+X1H2XlF/txBQMAAAAGwnO9wH+nn77TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXnr08O7cznSUcf/xhYgYbxc/H6ea81NRiIjT/04iv2e7JCKGehB/pPHnI+3iJ41q7YZsF3+kB/G37x0YP8azb2F//OGIONOD+DDI7jeOP9fa7X+5eKc5b7//5SOeyr+ozse/2D3+DXU4/pztMsZbD35R6hj/XsRb+fbHn534SYf473YZ/xtf39rqtCz9ScRE29+f5KlYpfrKWqm2uXVhaWV2sbxYXp2enro8c2Xm0sxkaWGpUs7+to3xvY/98vFB7T/dIf74Ie1/r8v2///BnYcfaiUL7eKfe7dN/N/8NFvj2fi57LfvU1m6sXxiJ73dSu/19s9/9/ZB7Z/v0P7D/v/numz/+a9+589drgoAHIHa5tbybKVSXj+xiUYv/RhUQ+IYJr7d0w9M0zRt7FMv8TlJHIevpZno95EJAADotScn/f2uCQAAAAAAAAAAAAAAAAAAAAyuo3ic2P6Y27uppBeP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6In3AwAA///d8Nla")

4m31.432895141s ago: executing program 4 (id=2143):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
close(0x3)

4m27.260208371s ago: executing program 4 (id=2157):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598940224ad54afac11d875397bdb22f0000b420a1a93c5240f45f819e01177d3d458d0f050f584f3268ad00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0xe0, {0xe0, 0x31, "508568ab005355374ecf96dfa89fddf7af2c420d093be0a39c1bb6f826e47f0df28bde982929d97518a8d4ea4058ca17962a0c5c9a2f182e2c6446ee1ad769311210e0dd7bc3661726d376d94b8b8c6a10bb25892ca9bb5e2a9fc170e5474cdfc131ee8d565920d2e6b93f61fcebe216bd3ad5a91b4ae51c7aa7d0f8a0c386006992f1395b0f58ad6b5527294e034b7dd968ed8a8c1e5e15683fc0389d0e5765d5758adb75d0885018576745db78258bffd8109c2c5d5490a65efabc43206e56f71190ddbebcd2bd103820e437422fb6abd0459b15b3335906dea83001a0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f0000000300)=[{0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0x1, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @tick=0x9, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x54)

4m24.934599607s ago: executing program 4 (id=2164):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', &(0x7f0000000180), 0x1012, &(0x7f0000000740)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@smackfsroot={'smackfsroot', 0x3d, 'lowerdir'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@seclabel}, {@uid_gt}, {@uid_gt}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_gt}, {@dont_hash}, {@fowner_gt}, {@appraise_type}]}})
ioctl$VT_ACTIVATE(r1, 0x4b31, 0xffffffffffffffc4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, &(0x7f0000000200)='devtmpfs\x00', 0x20, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r4, 0x0, 0x0)
write$vhost_msg_v2(r4, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000540)=""/219, 0xdb, 0x0, 0x1, 0x2}}, 0x48)
r5 = socket(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4)
setsockopt$inet_int(r5, 0x0, 0x16, 0x0, 0x0)
madvise(&(0x7f0000cfc000/0x2000)=nil, 0x2000, 0x17)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10)
recvfrom$unix(r5, 0x0, 0x0, 0x12122, 0x0, 0x0)

4m19.843024083s ago: executing program 4 (id=2170):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000023c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000009c00110000000000000000000000000000000001ffffffff000000000000000000000000640101010000000000000000000000000a010100000000000000000000000000000000000635000000000a0000000000000000000000000000000001"], 0xec}}, 0x0)

4m19.556984399s ago: executing program 4 (id=2172):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x81, 0x3, 0x4, 0xffffffff}, 0x10)
write(r3, &(0x7f0000000080)="240000001a005f0814f9f407e4080400020000000000010000762fbad121651fd8e3793d", 0x24)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd725}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00')

4m17.940322424s ago: executing program 4 (id=2180):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x24b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

4m8.643487244s ago: executing program 3 (id=2213):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB], 0xe6)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
fsmount(r4, 0x0, 0x0)
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000100)={0x2, 0x6, 0x401})
r5 = socket$inet(0xa, 0x801, 0x84)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

4m7.324834341s ago: executing program 3 (id=2216):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x20000080)

4m6.978893013s ago: executing program 3 (id=2220):
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r0, 0x0, 0x4004010)

4m5.718505586s ago: executing program 3 (id=2222):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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")
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1a158c0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
sendfile(r1, r0, 0x0, 0x80000000)

4m1.770460297s ago: executing program 34 (id=2180):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x24b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

4m1.563274408s ago: executing program 3 (id=2233):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000100)=ANY=[], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={<r1=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x27}, 0x78, r1})
r2 = socket(0xa, 0x1, 0x0)
ioctl(r2, 0x8916, &(0x7f0000000000))
ioctl(r2, 0x8936, 0x0)

3m57.530130085s ago: executing program 3 (id=2243):
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x28002)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000780))

3m54.919193921s ago: executing program 35 (id=2243):
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x28002)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000780))

1m59.44275909s ago: executing program 9 (id=2524):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"})
r5 = syz_open_pts(r4, 0x2)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2)

1m53.695174194s ago: executing program 9 (id=2529):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0, r3}, 0x18)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
rmdir(&(0x7f0000000000)='./file0\x00')

1m47.969026213s ago: executing program 9 (id=2535):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000080)='./control\x00', 0x9)
close(r0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
read$FUSE(r0, &(0x7f0000007b40)={0x2020}, 0x2020)

1m39.822951158s ago: executing program 9 (id=2546):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r0, &(0x7f0000000c00)=[{&(0x7f0000000c40)=""/239, 0xef}, {0x0}], 0x2, 0xffff, 0x5dd073cf)

1m38.417090345s ago: executing program 9 (id=2550):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)
sendto$rxrpc(r1, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000180)=""/109, 0x6d}], 0x2}, 0x2041)

1m33.802512029s ago: executing program 9 (id=2555):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0xffbf)

1m17.445895725s ago: executing program 36 (id=2555):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0xffbf)

1m5.525579289s ago: executing program 7 (id=2606):
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000000100))

1m5.362807746s ago: executing program 7 (id=2607):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004000)
preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f0000000c40)=""/239, 0xef}, {0x0}], 0x2, 0xffff, 0x5dd073cf)

1m2.546565144s ago: executing program 7 (id=2610):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000300)='./file0\x00', 0x1000848, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x385, &(0x7f0000006400)="$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")

1m1.534591451s ago: executing program 7 (id=2613):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x18329, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)

1m0.686829308s ago: executing program 7 (id=2616):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x583cef36d3ea4cc0, 0x800, 0x0, 0x1}, 0x20)
sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x2000000, 0x0, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4}})
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})

53.809259416s ago: executing program 7 (id=2625):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
setfsuid(0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r1}, 0x18)
write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0x12)

37.221562278s ago: executing program 37 (id=2625):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
setfsuid(0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r1}, 0x18)
write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0x12)

26.234872863s ago: executing program 2 (id=2671):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x4, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x6, 0xeaf2, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x649, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x10000, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x1000007, 0x9, 0x2, 0x5, 0x3d, 0x8f, 0x9, 0x2, 0x4, 0x8, 0x5, 0x5, 0x20000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x80010002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x1, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0x6, 0x6, 0x4, 0x5, 0x5, 0x400, 0x0, 0x6, 0x0, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xe4, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x103, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xfc], [0x7, 0x1, 0x2, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x8, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x1, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x8, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x6, 0x2, 0x8004, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4004, 0x54fe12da, 0xbf, 0x4, 0x3, 0x400000, 0xfffffff9, 0x0, 0x0, 0x5, 0x0, 0x6, 0x8, 0x120000, 0x3, 0x6, 0x9, 0x4, 0xfffffffa], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x46, 0x10000000, 0x5, 0xce7, 0x9, 0x8, 0x7, 0x5, 0x3, 0x104, 0x7ffffffe, 0x2, 0x7fff, 0x80, 0xa620, 0x2, 0x5, 0x0, 0x2, 0x8000014c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x9, 0xffffffff, 0x3, 0x3, 0xffff, 0x1, 0x8, 0x100, 0x9602, 0xa, 0x1, 0x4, 0x106, 0x1, 0x4, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x2, 0x672, 0x6c03, 0x0, 0x2, 0x5, 0x81, 0x1, 0x6, 0xfff, 0x9]}, 0x45c)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

22.32323266s ago: executing program 2 (id=2676):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000008840)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x1c, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x4000000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
openat$drirender128(0xffffff9c, &(0x7f00000001c0), 0x1c000, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r5 = fcntl$dupfd(r4, 0x0, r4)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000900)=""/4096, &(0x7f0000000340)=0x1000)
write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d)
write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d)
write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0x10810020, 0x9, 0x4, 0xffff8572, 0x9, 0x0, 0x0, 0x2, 0x7}}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, 0x0, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}})

20.684926616s ago: executing program 1 (id=2677):
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0, &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}}], 0x2c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

19.658825606s ago: executing program 1 (id=2680):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x2840, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x51)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x49e, &(0x7f0000000e00)="$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")
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)

18.443776101s ago: executing program 2 (id=2681):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x1000000, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

16.437122701s ago: executing program 1 (id=2684):
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x11, 0x3}}}}}]}}]}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240)={'#! ', '', [{0x20, '#! '}, {0x20, '%^'}]}, 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
listen(r6, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8b040400000000002800128008000100736974001c000280060008003f000000080002006401010108000300e0000001"], 0x48}}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r8, 0x0, 0x10, &(0x7f0000000080)="170000000400020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
sendto$inet(r8, 0x0, 0x0, 0x20064854, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x1c}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "0000006b5611d161202a7b00"}}}]}, 0x48}}, 0x0)

15.146937928s ago: executing program 2 (id=2686):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x4, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x6, 0xeaf2, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x649, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x10000, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x1000007, 0x9, 0x2, 0x5, 0x3d, 0x8f, 0x9, 0x2, 0x4, 0x8, 0x5, 0x5, 0x20000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x80010002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x1, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0x6, 0x6, 0x4, 0x5, 0x5, 0x400, 0x0, 0x6, 0x0, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xe4, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x103, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xfc], [0x7, 0x1, 0x2, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x8, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x1, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x8, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x6, 0x2, 0x8004, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4004, 0x54fe12da, 0xbf, 0x4, 0x3, 0x400000, 0xfffffff9, 0x0, 0x0, 0x5, 0x0, 0x6, 0x8, 0x120000, 0x3, 0x6, 0x9, 0x4, 0xfffffffa], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x46, 0x10000000, 0x5, 0xce7, 0x9, 0x8, 0x7, 0x5, 0x3, 0x104, 0x7ffffffe, 0x2, 0x7fff, 0x80, 0xa620, 0x2, 0x5, 0x0, 0x2, 0x8000014c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x9, 0xffffffff, 0x3, 0x3, 0xffff, 0x1, 0x8, 0x100, 0x9602, 0xa, 0x1, 0x4, 0x106, 0x1, 0x4, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x2, 0x672, 0x6c03, 0x0, 0x2, 0x5, 0x81, 0x1, 0x6, 0xfff, 0x9]}, 0x45c)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

10.843521678s ago: executing program 2 (id=2693):
open(0x0, 0x4c37e, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$tipc(r0, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)={0x70, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x70}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40})

10.514058411s ago: executing program 8 (id=2694):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000300)='./file0\x00', 0x1000848, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x385, &(0x7f0000006400)="$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")

9.973473064s ago: executing program 6 (id=2695):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x8, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x6c}}, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
recvmsg(r2, 0x0, 0x40000060)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4000)

9.60804044s ago: executing program 8 (id=2696):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000005840)='./file0\x00', 0x1000806, &(0x7f00000016c0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="2c666d61736b3d30303030b8463c983030303030303030303030303030362c696f6368617273652acf418b743d637e3737352c6769643d00", @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000027,errors=continue,errors=remount-ro,namecase=1,fmask=00000000000000000000003,umask=00000000000000000000003,allow_utime=00000000000000000000200,\x00'], 0x9, 0x1505, &(0x7f0000000180)="$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")
bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)

9.234890961s ago: executing program 1 (id=2697):
r0 = syz_pidfd_open(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
r6 = userfaultfd(0x80801)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x100)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}]})
lseek(r0, 0x10, 0x2)
sendto$inet6(r7, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)

8.655241957s ago: executing program 6 (id=2698):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x1008800, &(0x7f0000001980)=ANY=[@ANYBLOB='iocharset=iso8859-9,utf8,dmask=00000000000000000000011,utf8,errors=remount-ro,utf8,\x00\x00ask=00000000000000000000001,\arrors=remount-ro,iocharset=iso8859-5,gid=', @ANYRESDEC, @ANYRESHEX], 0x4, 0x1548, &(0x7f0000000380)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./bus\x00', 0x800000, &(0x7f0000002100)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d6370313235352c756e695f786c6174653d302c636865636b3d7374726963742c757466383d302c756e695f786c6174653d302c757466383d302c636f6465706167653d3835302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e740000686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c616c6c6f775f7574696d653d30303030303030303030303030303030303030303737372c00e538c4429751129962c6914b5e2733d317826ead41620031c578783f9b03d878c48e244667e512473c01a56eb932434e0eb0e669a689072481538d368b483c77bc206c266abcddc75c78c30a222f2bbc3efd0540c472bfc3a1b4035dd67698ef90344ee4a0c7b62a811e61c008a209adac014bf42543b7e352cfbbc41b30c93a467e6a31096a6ae858", @ANYRES16=0x0], 0x1, 0x36c, &(0x7f00000005c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x20)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

8.293733715s ago: executing program 6 (id=2699):
rt_sigtimedwait(&(0x7f0000001d40)={[0x5]}, 0x0, 0x0, 0x8)

7.126500698s ago: executing program 1 (id=2700):
sysinfo(&(0x7f0000000b40)=""/4096)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
read$FUSE(0xffffffffffffffff, &(0x7f0000020940)={0x2020}, 0x2020)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
fdatasync(r1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0)
mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x18)

6.915785839s ago: executing program 8 (id=2701):
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
faccessat2(r0, &(0x7f0000000000)='\x00', 0x2, 0x1100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, 0x0)
ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000040)={0xfbfffff7, 0x0, 0xd, 0xf7d, 0x18, "010100"})
ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x53)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d95703836352c696f636861727365743d63703836302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c636f6465706167653d3836322c726f6469722c756e695f786c6174653d312c696f636861727365743d63703837344573686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c696f636861727365743d63703933322c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c757466383d312c757466383d312c00"], 0x25, 0x353, &(0x7f0000000840)="$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")
syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c46f3d08a90540261255824a000109022700010000000009040000000e0100df09"], 0x0)
socket$packet(0x11, 0x3, 0x300)

6.582837574s ago: executing program 6 (id=2702):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x0)
mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r7, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'dvmrp1\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x8, 0xfffffffffffffeff, [0x4]}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

3.286803661s ago: executing program 1 (id=2703):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x4, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x6, 0xeaf2, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x649, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x10000, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x1000007, 0x9, 0x2, 0x5, 0x3d, 0x8f, 0x9, 0x2, 0x4, 0x8, 0x5, 0x5, 0x20000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x80010002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x1, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0x6, 0x6, 0x4, 0x5, 0x5, 0x400, 0x0, 0x6, 0x0, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xe4, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x103, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xfc], [0x7, 0x1, 0x2, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x8, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x1, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x8, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x6, 0x2, 0x8004, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4004, 0x54fe12da, 0xbf, 0x4, 0x3, 0x400000, 0xfffffff9, 0x0, 0x0, 0x5, 0x0, 0x6, 0x8, 0x120000, 0x3, 0x6, 0x9, 0x4, 0xfffffffa], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x46, 0x10000000, 0x5, 0xce7, 0x9, 0x8, 0x7, 0x5, 0x3, 0x104, 0x7ffffffe, 0x2, 0x7fff, 0x80, 0xa620, 0x2, 0x5, 0x0, 0x2, 0x8000014c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x9, 0xffffffff, 0x3, 0x3, 0xffff, 0x1, 0x8, 0x100, 0x9602, 0xa, 0x1, 0x4, 0x106, 0x1, 0x4, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x2, 0x672, 0x6c03, 0x0, 0x2, 0x5, 0x81, 0x1, 0x6, 0xfff, 0x9]}, 0x45c)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

2.439038824s ago: executing program 8 (id=2704):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')

1.482940006s ago: executing program 2 (id=2705):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000008840)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x1c, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x4000000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
openat$drirender128(0xffffff9c, &(0x7f00000001c0), 0x1c000, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r5 = fcntl$dupfd(r4, 0x0, r4)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000900)=""/4096, &(0x7f0000000340)=0x1000)
write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d)
write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d)
write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0x10810020, 0x9, 0x4, 0xffff8572, 0x9, 0x0, 0x0, 0x2, 0x7}}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}})

1.385884596s ago: executing program 6 (id=2706):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4)
getsockopt$packet_int(r0, 0x107, 0x15, 0x0, 0x0)

1.366992571s ago: executing program 8 (id=2707):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000200)={0x80})
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
r5 = dup(r4)
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0)

1.054856765s ago: executing program 6 (id=2708):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
close_range(r0, r3, 0x0)

0s ago: executing program 8 (id=2709):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c726f6469722c756e695f786c6174653d302c757466383d302c61040000005f7574696d643d30303030303030303030303030303030303031303337332c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c757466383d302c757466383d302c636865636b3d7374726963742c6e6f6e756d7461696c3d302c696f636861727365743d63703836342c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c00"], 0x6, 0x2b8, &(0x7f0000000640)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

kernel console output (not intermixed with test programs):

nvalid maxpacket 47
[  577.630633][ T5982] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  577.791288][    T8] usb 2-1: USB disconnect, device number 19
[  577.947718][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.968912][T12036] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  577.984671][ T5982] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  578.227281][ T5982] usb 4-1: USB disconnect, device number 24
[  578.781713][T11576] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  578.952815][T11576] usb 2-1: Using ep0 maxpacket: 8
[  578.952851][    T8] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  578.961431][T11576] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  578.980429][T11576] usb 2-1: config 179 has no interface number 0
[  578.986940][T11576] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  578.998216][T11576] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  579.017600][T11576] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  579.030750][T11576] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  579.044123][T11576] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  579.053267][T11576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.067348][T12059] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  579.081063][ T5982] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  579.139657][    T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  579.151597][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  579.164861][    T8] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  579.174309][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.182404][    T8] usb 5-1: Product: syz
[  579.186825][    T8] usb 5-1: Manufacturer: syz
[  579.191551][    T8] usb 5-1: SerialNumber: syz
[  579.198211][    T8] usb 5-1: config 0 descriptor??
[  579.204722][T12061] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  579.216635][    T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  579.258207][ T5982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  579.294557][ T5982] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  579.304116][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.305537][ T5896] usb 2-1: USB disconnect, device number 20
[  579.338917][ T5982] usb 3-1: config 0 descriptor??
[  579.347945][ T5982] pwc: Askey VC010 type 2 USB webcam detected.
[  579.468443][    T8] usb 5-1: USB disconnect, device number 33
[  579.569333][ T5982] pwc: send_video_command error -71
[  579.583708][ T5982] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  579.608873][ T5982] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  579.637584][ T5982] usb 3-1: USB disconnect, device number 23
[  579.674814][ T6051] udevd[6051]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  580.129225][ T5982] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  580.323372][ T5982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  580.401244][ T5982] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  580.462236][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.513289][ T5982] usb 3-1: config 0 descriptor??
[  580.566793][ T5982] pwc: Askey VC010 type 2 USB webcam detected.
[  580.981419][ T5982] pwc: recv_control_msg error -32 req 02 val 2b00
[  580.991352][ T5982] pwc: recv_control_msg error -32 req 02 val 2700
[  581.208835][ T5982] pwc: recv_control_msg error -32 req 02 val 2c00
[  581.223988][ T5982] pwc: recv_control_msg error -32 req 04 val 1000
[  581.244183][ T5982] pwc: recv_control_msg error -32 req 04 val 1300
[  581.263406][ T5982] pwc: recv_control_msg error -32 req 04 val 1400
[  581.285036][ T5982] pwc: recv_control_msg error -32 req 02 val 2000
[  581.295847][ T5982] pwc: recv_control_msg error -71 req 02 val 2100
[  581.302993][ T5982] pwc: recv_control_msg error -71 req 04 val 1500
[  581.333580][ T5982] pwc: recv_control_msg error -71 req 02 val 2500
[  581.351922][ T5982] pwc: recv_control_msg error -71 req 02 val 2400
[  581.373565][ T5982] pwc: recv_control_msg error -71 req 02 val 2600
[  581.395145][ T5982] pwc: recv_control_msg error -71 req 02 val 2900
[  581.425630][ T5982] pwc: recv_control_msg error -71 req 02 val 2800
[  581.454904][ T5982] pwc: recv_control_msg error -71 req 04 val 1100
[  581.482035][ T5982] pwc: recv_control_msg error -71 req 04 val 1200
[  581.507783][T11576] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  581.523305][ T5982] pwc: Registered as video103.
[  581.550303][ T5982] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input43
[  581.576053][ T5982] usb 3-1: USB disconnect, device number 24
[  581.862000][T11576] usb 4-1: Using ep0 maxpacket: 32
[  581.890144][T11576] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  582.715770][T11576] usb 4-1: config 0 has no interface number 0
[  582.726755][T11576] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  582.735849][T11576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.779946][T11576] usb 4-1: Product: syz
[  582.784187][T11576] usb 4-1: Manufacturer: syz
[  582.788822][T11576] usb 4-1: SerialNumber: syz
[  582.834477][T11576] usb 4-1: config 0 descriptor??
[  582.843507][T11576] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  582.960086][T12098] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2035'.
[  583.066518][T12089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  583.116505][T12089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  583.195630][T11576] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  583.287507][T11576] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  583.603249][T12115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2041'.
[  583.615538][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  583.652595][T11576] usb 4-1: USB disconnect, device number 25
[  583.682629][T11576] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  583.729280][T11576] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  583.772770][T11576] quatech2 4-1:0.51: device disconnected
[  583.929395][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'.
[  584.445428][T12140] veth3: entered allmulticast mode
[  586.986707][T12168] pim6reg1: entered promiscuous mode
[  587.068896][T12168] pim6reg1: entered allmulticast mode
[  587.309106][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  587.315994][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  588.192371][T12184] trusted_key: syz.6.2066 sent an empty control message without MSG_MORE.
[  590.409836][T11576] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  590.632915][T11576] usb 5-1: Using ep0 maxpacket: 32
[  590.856890][T11576] usb 5-1: config 0 has an invalid interface number: 241 but max is 0
[  590.872714][T11576] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  590.903141][T11576] usb 5-1: config 0 has no interface number 0
[  590.926326][T11720] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  591.696924][T11576] usb 5-1: config 0 interface 241 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  591.718693][T11576] usb 5-1: config 0 interface 241 has no altsetting 0
[  591.747984][T11576] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a6f, bcdDevice=c1.86
[  591.768689][T11576] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.804458][T11576] usb 5-1: Product: syz
[  591.808944][T11576] usb 5-1: Manufacturer: syz
[  591.834334][T11576] usb 5-1: SerialNumber: syz
[  591.854527][T11576] usb 5-1: config 0 descriptor??
[  591.922260][T11720] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  591.991215][T11720] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  592.079130][T11720] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  592.123069][T11720] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  592.153002][T11720] usb 7-1: Manufacturer: syz
[  592.182808][T11720] usb 7-1: config 0 descriptor??
[  592.227661][T11720] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  593.380954][T11576] usb 5-1: USB disconnect, device number 34
[  594.701902][T11720] usb 7-1: USB disconnect, device number 10
[  599.264876][   T25] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[  599.578259][   T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  599.604496][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  600.559275][   T25] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  600.593558][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.907559][   T25] usb 5-1: Product: syz
[  600.912402][   T25] usb 5-1: Manufacturer: syz
[  600.917083][   T25] usb 5-1: SerialNumber: syz
[  600.950030][   T25] usb 5-1: config 0 descriptor??
[  600.979115][T12314] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  602.048272][   T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  603.049765][   T25] usb 5-1: USB disconnect, device number 35
[  603.748549][ T6051] udevd[6051]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  604.618379][T12340] pim6reg1: entered promiscuous mode
[  604.675147][T12340] pim6reg1: entered allmulticast mode
[  607.486143][   T25] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  607.667675][   T25] usb 7-1: device descriptor read/64, error -71
[  607.948470][   T25] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  607.988474][ T5921] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  608.117744][   T25] usb 7-1: device descriptor read/64, error -71
[  608.191686][ T5921] usb 5-1: Using ep0 maxpacket: 32
[  608.224329][ T5921] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  608.263105][ T5921] usb 5-1: config 0 has no interface number 0
[  608.270492][   T25] usb usb7-port1: attempt power cycle
[  608.311630][ T5921] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  608.345690][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.386692][ T5921] usb 5-1: Product: syz
[  608.417215][ T5921] usb 5-1: Manufacturer: syz
[  608.446795][ T5921] usb 5-1: SerialNumber: syz
[  608.476068][ T5921] usb 5-1: config 0 descriptor??
[  608.511637][ T5921] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  608.694583][   T25] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  608.728089][   T25] usb 7-1: device descriptor read/8, error -71
[  608.739120][T12381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.790491][T12381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.846177][ T5921] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  608.903954][ T5921] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  609.046871][   T25] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  609.082504][   T25] usb 7-1: device descriptor read/8, error -71
[  609.228906][   T25] usb usb7-port1: unable to enumerate USB device
[  609.276595][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  609.277667][T11720] usb 5-1: USB disconnect, device number 36
[  609.312911][T11720] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  609.352055][T11720] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  609.380597][T11720] quatech2 5-1:0.51: device disconnected
[  609.401221][T12399] loop1: detected capacity change from 0 to 256
[  609.420430][T12399] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  609.439392][T12399] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  609.463424][T12399] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  609.858718][T12408] syzkaller0: entered promiscuous mode
[  609.864579][T12408] syzkaller0: entered allmulticast mode
[  610.280862][T12415] syz.7.2144: attempt to access beyond end of device
[  610.280862][T12415] loop15: rw=0, sector=0, nr_sectors = 1 limit=0
[  610.317075][T12415] FAT-fs (loop15): unable to read boot sector
[  613.066493][T11720] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  613.285628][T11720] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  613.310210][T11720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  613.337587][T11720] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  613.346967][T11720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.367740][T11720] usb 4-1: Product: syz
[  613.372037][T11720] usb 4-1: Manufacturer: syz
[  613.384053][T11720] usb 4-1: SerialNumber: syz
[  613.428130][T11720] usb 4-1: config 0 descriptor??
[  613.459875][T12433] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  613.471160][T11720] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  613.750288][T11720] usb 4-1: USB disconnect, device number 26
[  614.013273][T11220] udevd[11220]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  614.189598][T12443] loop1: detected capacity change from 0 to 512
[  614.252868][T12443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  614.314343][T12443] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  616.280147][T12464] netlink: 'syz.2.2160': attribute type 3 has an invalid length.
[  616.402208][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'.
[  616.498641][T12454] loop6: detected capacity change from 0 to 8192
[  621.419789][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.488756][T12509] loop4: detected capacity change from 0 to 512
[  623.518148][T12504] veth3: entered allmulticast mode
[  623.627354][T12509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  623.722632][T12509] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  625.162876][T12532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2185'.
[  628.872229][T12567] veth3: entered allmulticast mode
[  629.552077][T12582] netlink: 'syz.7.2201': attribute type 3 has an invalid length.
[  629.565149][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2201'.
[  629.942229][T12591] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2205'.
[  630.354838][T12598] overlayfs: failed to resolve './file0': -2
[  632.930791][T12619] loop6: detected capacity change from 0 to 16
[  633.041611][T12619] erofs (device loop6): mounted with root inode @ nid 36.
[  634.581577][T12635] loop6: detected capacity change from 0 to 512
[  634.726148][T12635] EXT4-fs (loop6): blocks per group (255) and clusters per group (8192) inconsistent
[  638.374443][ T5921] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  638.573068][ T5921] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  638.584743][ T5921] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  638.607570][ T5921] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  638.616715][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  638.647071][ T5921] usb 7-1: SerialNumber: syz
[  638.901937][ T5921] usb 7-1: 0:2 : does not exist
[  638.955250][ T5921] usb 7-1: USB disconnect, device number 15
[  639.112160][T12643] loop3: detected capacity change from 0 to 40427
[  639.202019][T12643] F2FS-fs (loop3): Found nat_bits in checkpoint
[  639.231651][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  639.391512][T12643] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  639.489714][T12643] syz.3.2222: attempt to access beyond end of device
[  639.489714][T12643] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  639.699555][ T5833] F2FS-fs (loop3): access invalid blkaddr:2048
[  639.706039][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller #0
[  639.706067][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  639.706083][ T5833] Call Trace:
[  639.706092][ T5833]  <TASK>
[  639.706102][ T5833]  dump_stack_lvl+0x241/0x360
[  639.706138][ T5833]  ? __pfx_dump_stack_lvl+0x10/0x10
[  639.706166][ T5833]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  639.706207][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.706266][ T5833]  __f2fs_is_valid_blkaddr+0xe16/0x1460
[  639.706308][ T5833]  f2fs_map_blocks+0xd98/0x4e80
[  639.706337][ T5833]  ? mark_lock+0x9a/0x360
[  639.706437][ T5833]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  639.706477][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.706516][ T5833]  ? xa_load+0x2dd/0x350
[  639.706558][ T5833]  ? __pfx_xa_load+0x10/0x10
[  639.706607][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.706654][ T5833]  ? folio_unlock+0x10e/0x170
[  639.706687][ T5833]  f2fs_mpage_readpages+0xf5d/0x20f0
[  639.706765][ T5833]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[  639.706805][ T5833]  ? rcu_is_watching+0x15/0xb0
[  639.706831][ T5833]  ? __filemap_add_folio+0xeeb/0x1320
[  639.706880][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.706923][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.706962][ T5833]  ? f2fs_readahead+0x184/0x340
[  639.706999][ T5833]  read_pages+0x17b/0x570
[  639.707032][ T5833]  ? filemap_add_folio+0x24e/0x380
[  639.707058][ T5833]  ? __pfx_read_pages+0x10/0x10
[  639.707100][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.707145][ T5833]  page_cache_ra_unbounded+0x708/0x820
[  639.707196][ T5833]  f2fs_readdir+0x5b9/0xbe0
[  639.707235][ T5833]  ? __pfx___might_resched+0x10/0x10
[  639.707288][ T5833]  ? __pfx_f2fs_readdir+0x10/0x10
[  639.707332][ T5833]  ? iterate_dir+0x4a6/0x760
[  639.707373][ T5833]  ? __pfx___mutex_lock+0x10/0x10
[  639.707413][ T5833]  ? end_current_label_crit_section+0x151/0x180
[  639.707451][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.707491][ T5833]  ? common_file_perm+0x1a6/0x210
[  639.707536][ T5833]  iterate_dir+0x5ab/0x760
[  639.707578][ T5833]  __se_sys_getdents64+0x1e2/0x4b0
[  639.707626][ T5833]  ? __pfx___se_sys_getdents64+0x10/0x10
[  639.707665][ T5833]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  639.707699][ T5833]  ? __pfx_filldir64+0x10/0x10
[  639.707738][ T5833]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  639.707775][ T5833]  ? exc_page_fault+0x590/0x8b0
[  639.707806][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  639.707850][ T5833]  ? do_syscall_64+0xb6/0x230
[  639.707889][ T5833]  do_syscall_64+0xf3/0x230
[  639.707931][ T5833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.707966][ T5833] RIP: 0033:0x7f33431bf753
[  639.707987][ T5833] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[  639.708009][ T5833] RSP: 002b:00007ffccdfcc228 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  639.708035][ T5833] RAX: ffffffffffffffda RBX: 0000555562348600 RCX: 00007f33431bf753
[  639.708055][ T5833] RDX: 0000000000008000 RSI: 0000555562348600 RDI: 0000000000000005
[  639.708072][ T5833] RBP: 00005555623485d4 R08: 0000000000000000 R09: 0000000000000000
[  639.708089][ T5833] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[  639.708107][ T5833] R13: 0000000000000010 R14: 00005555623485d0 R15: 00007ffccdfce4e0
[  639.708143][ T5833]  </TASK>
[  640.035844][    C1] vkms_vblank_simulate: vblank timer overrun
[  640.163712][ T5833] syz-executor: attempt to access beyond end of device
[  640.163712][ T5833] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  640.227577][T12651] loop1: detected capacity change from 0 to 40427
[  640.235654][T12651] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  640.243628][T12651] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  640.257142][ T5833] syz-executor: attempt to access beyond end of device
[  640.257142][ T5833] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  640.389175][T12671] loop6: detected capacity change from 0 to 1024
[  640.399386][T12671] EXT4-fs: Ignoring removed nomblk_io_submit option
[  640.565098][T12651] F2FS-fs (loop1): Found nat_bits in checkpoint
[  640.591264][T12671] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  640.652473][T12671] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  641.852616][ T5833] syz-executor: attempt to access beyond end of device
[  641.852616][ T5833] loop3: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[  642.040907][ T5833] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  642.155729][ T5833] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  642.998450][ T9766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  643.063211][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  643.074364][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  643.083843][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  643.094684][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  643.102716][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  643.110661][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  643.729093][T12517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.475238][T12705] loop7: detected capacity change from 0 to 512
[  644.629260][T12705] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  644.642939][T12705] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  644.804694][T12705] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #12: comm syz.7.2242: invalid size
[  645.375699][ T5845] Bluetooth: hci4: command tx timeout
[  646.738945][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  646.766715][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  646.775029][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  646.793075][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  646.800922][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  646.813312][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  647.602800][ T5845] Bluetooth: hci4: command tx timeout
[  648.411631][ T9815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  648.466343][T12718] loop6: detected capacity change from 0 to 256
[  648.579179][T12718] FAT-fs (loop6): Directory bread(block 64) failed
[  648.613514][T12718] FAT-fs (loop6): Directory bread(block 65) failed
[  648.620215][T12718] FAT-fs (loop6): Directory bread(block 66) failed
[  648.697444][T12718] FAT-fs (loop6): Directory bread(block 67) failed
[  648.741210][T12718] FAT-fs (loop6): Directory bread(block 68) failed
[  648.911087][T12727] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2246'.
[  648.920972][T12718] FAT-fs (loop6): Directory bread(block 69) failed
[  648.988837][T12718] FAT-fs (loop6): Directory bread(block 70) failed
[  649.052900][ T5845] Bluetooth: hci2: command tx timeout
[  649.191008][T12718] FAT-fs (loop6): Directory bread(block 71) failed
[  649.352703][T12718] FAT-fs (loop6): Directory bread(block 72) failed
[  649.461622][T12718] FAT-fs (loop6): Directory bread(block 73) failed
[  649.723581][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.828591][ T5845] Bluetooth: hci4: command tx timeout
[  650.096256][T12738] loop7: detected capacity change from 0 to 256
[  650.143706][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.160613][T12738] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  650.224058][T12738] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  650.260310][T12738] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  650.491672][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.069030][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.297457][ T5845] Bluetooth: hci2: command tx timeout
[  651.337929][T12758] loop1: detected capacity change from 0 to 256
[  651.360914][T12758] exfat: Invalid uid '0x00000000ffffffff'
[  652.066089][ T5845] Bluetooth: hci4: command tx timeout
[  652.626281][T12715] chnl_net:caif_netlink_parms(): no params data found
[  652.643672][   T11] bridge_slave_1: left allmulticast mode
[  652.649359][   T11] bridge_slave_1: left promiscuous mode
[  652.686559][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.766987][   T11] bridge_slave_0: left allmulticast mode
[  652.779551][   T11] bridge_slave_0: left promiscuous mode
[  652.792900][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.991371][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  652.998027][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  653.497463][T12786] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2262'.
[  653.568182][ T5845] Bluetooth: hci2: command tx timeout
[  654.776263][T12799] fuse: Bad value for 'fd'
[  654.994342][   T11] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  655.007595][   T11] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  655.024723][   T11] 
 (unregistering): Released all slaves
[  655.050366][   T11] bond0 (unregistering): (slave veth3): Releasing backup interface
[  655.059859][   T11] veth3: left promiscuous mode
[  655.066514][   T11] bond0 (unregistering): Released all slaves
[  655.095643][T12686] chnl_net:caif_netlink_parms(): no params data found
[  655.304999][   T11] tipc: Disabling bearer <eth:vlan0>
[  655.351868][   T11] tipc: Left network mode
[  655.722139][ T5845] Bluetooth: hci2: command tx timeout
[  656.087384][T12820] loop1: detected capacity change from 0 to 256
[  656.985294][T12820] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  657.004361][T12820] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff)
[  658.483737][T12686] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.504941][T12686] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.520840][T12686] bridge_slave_0: entered allmulticast mode
[  658.528001][T12686] bridge_slave_0: entered promiscuous mode
[  658.671482][T12686] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.700654][T12686] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.723627][T12686] bridge_slave_1: entered allmulticast mode
[  658.744392][T12686] bridge_slave_1: entered promiscuous mode
[  659.008156][T12832] fuse: Bad value for 'fd'
[  659.994918][T12715] bridge0: port 1(bridge_slave_0) entered blocking state
[  660.031718][T12715] bridge0: port 1(bridge_slave_0) entered disabled state
[  660.078767][T12715] bridge_slave_0: entered allmulticast mode
[  660.103308][T12715] bridge_slave_0: entered promiscuous mode
[  660.134139][T12715] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.134284][T12715] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.134469][T12715] bridge_slave_1: entered allmulticast mode
[  660.137011][T12715] bridge_slave_1: entered promiscuous mode
[  660.260091][T12686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  660.444713][T12686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  660.569276][T12715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  661.087195][T12715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  661.450859][T12686] team0: Port device team_slave_0 added
[  661.471398][T12686] team0: Port device team_slave_1 added
[  661.630605][   T11] hsr_slave_0: left promiscuous mode
[  661.645603][   T11] hsr_slave_1: left promiscuous mode
[  661.667369][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  661.674923][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  661.744672][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  661.894732][   T11] veth1_macvtap: left promiscuous mode
[  661.990416][   T11] veth0_macvtap: left promiscuous mode
[  662.017277][   T11] veth1_vlan: left promiscuous mode
[  662.058699][   T11] veth0_vlan: left promiscuous mode
[  662.113825][T12869] loop6: detected capacity change from 0 to 512
[  662.162495][T12869] EXT4-fs: Ignoring removed mblk_io_submit option
[  662.225542][ T5896] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  662.245638][T12869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b856c118, mo2=0002]
[  662.280487][T12869] System zones: 1-12
[  662.300833][T12869] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.2286: corrupted in-inode xattr: e_value size too large
[  662.397436][T12869] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2286: couldn't read orphan inode 15 (err -117)
[  662.460903][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  662.524897][T12869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  662.545190][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  662.618858][ T5896] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  662.639141][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.647186][ T5896] usb 3-1: Product: syz
[  662.671002][ T5896] usb 3-1: Manufacturer: syz
[  662.675815][ T5896] usb 3-1: SerialNumber: syz
[  662.688529][ T5896] usb 3-1: config 0 descriptor??
[  662.911749][T12866] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  663.799508][ T5896] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  663.887732][ T5896] usb 3-1: USB disconnect, device number 25
[  664.016704][ T9766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  665.358339][T11220] udevd[11220]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  665.739889][   T11] team0 (unregistering): Port device team_slave_1 removed
[  665.803802][   T11] team0 (unregistering): Port device team_slave_0 removed
[  666.290234][T12715] team0: Port device team_slave_0 added
[  666.351330][T12715] team0: Port device team_slave_1 added
[  666.401928][T12889] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  666.411305][T12889] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  666.506776][T12686] batman_adv: batadv0: Adding interface: batadv_slave_0
[  666.520547][T12889] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  666.541145][T12686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  666.573162][T12889] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  666.599122][T12686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  666.620040][T12889] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  666.626379][T12889] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  666.642475][T12889] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  666.666338][T12889] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  666.679069][T12889] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  666.696270][T12889] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  666.858781][T12686] batman_adv: batadv0: Adding interface: batadv_slave_1
[  666.871890][T12686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  666.899334][T12686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  666.916257][T12715] batman_adv: batadv0: Adding interface: batadv_slave_0
[  666.923487][T12715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  666.949367][    C1] vkms_vblank_simulate: vblank timer overrun
[  666.992134][T12715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  667.094801][T12715] batman_adv: batadv0: Adding interface: batadv_slave_1
[  667.127379][T12916] loop6: detected capacity change from 0 to 512
[  667.129065][T12715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  667.159620][    C1] vkms_vblank_simulate: vblank timer overrun
[  667.162730][T12916] EXT4-fs: Ignoring removed mblk_io_submit option
[  667.231108][T12916] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b856c118, mo2=0002]
[  667.255110][T12916] System zones: 1-12
[  667.351290][T12916] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.2299: corrupted in-inode xattr: e_value size too large
[  667.365997][T12715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.415006][T12916] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2299: couldn't read orphan inode 15 (err -117)
[  667.484308][T12916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  667.497561][T12686] hsr_slave_0: entered promiscuous mode
[  667.514319][T12686] hsr_slave_1: entered promiscuous mode
[  667.556192][   T11] IPVS: stop unused estimator thread 0...
[  668.614934][ T5849] Bluetooth: hci6: command 0x0406 tx timeout
[  668.714880][ T9766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  668.728795][ T5849] Bluetooth: hci1: command 0x0406 tx timeout
[  668.807367][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout
[  668.814520][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout
[  668.895672][ T5845] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  669.000434][T12715] hsr_slave_0: entered promiscuous mode
[  669.006890][T12715] hsr_slave_1: entered promiscuous mode
[  669.017463][T12715] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  669.047431][T12715] Cannot create hsr debugfs directory
[  669.355927][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2303'.
[  669.437111][T12945] vlan2: entered promiscuous mode
[  669.489003][T12945] hsr0: entered promiscuous mode
[  669.545699][T12945] hsr0: left promiscuous mode
[  670.036729][  T969] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  670.218504][  T969] usb 3-1: device descriptor read/64, error -71
[  670.869530][ T5845] Bluetooth: hci6: command 0x0406 tx timeout
[  670.948911][ T5845] Bluetooth: hci1: command 0x0406 tx timeout
[  671.034741][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout
[  671.034759][T12927] Bluetooth: hci2: command 0x0c1a tx timeout
[  671.116792][  T969] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  671.276788][  T969] usb 3-1: device descriptor read/64, error -71
[  671.382961][T12686] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  671.406463][  T969] usb usb3-port1: attempt power cycle
[  671.618403][T12686] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  671.655913][T12686] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  672.434277][T12686] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  672.463669][  T969] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  672.503935][  T969] usb 3-1: device descriptor read/8, error -71
[  672.662891][T12715] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  672.705046][T12715] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  672.743157][T12979] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2312'.
[  672.771299][  T969] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  672.793259][T12715] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  672.837942][  T969] usb 3-1: device descriptor read/8, error -71
[  672.861070][T12715] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  672.990469][  T969] usb usb3-port1: unable to enumerate USB device
[  673.067516][T12686] 8021q: adding VLAN 0 to HW filter on device bond0
[  673.124501][T12686] 8021q: adding VLAN 0 to HW filter on device team0
[  673.193594][ T7403] bridge0: port 1(bridge_slave_0) entered blocking state
[  673.200756][ T7403] bridge0: port 1(bridge_slave_0) entered forwarding state
[  673.227043][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.234244][ T7403] bridge0: port 2(bridge_slave_1) entered forwarding state
[  673.254906][T12927] Bluetooth: hci4: command 0x0c1a tx timeout
[  673.261017][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout
[  673.342296][T11720] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  673.366972][T12715] 8021q: adding VLAN 0 to HW filter on device bond0
[  673.424836][T12686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  673.454286][T12686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  673.534802][T12715] 8021q: adding VLAN 0 to HW filter on device team0
[  673.560846][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  673.568069][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  673.576283][T11720] usb 7-1: no configurations
[  673.580915][T11720] usb 7-1: can't read configurations, error -22
[  673.663956][T12766] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.671126][T12766] bridge0: port 2(bridge_slave_1) entered forwarding state
[  673.746401][T11720] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  673.929192][T11720] usb 7-1: no configurations
[  673.933859][T11720] usb 7-1: can't read configurations, error -22
[  673.963245][T12686] 8021q: adding VLAN 0 to HW filter on device batadv0
[  674.002996][T11720] usb usb7-port1: attempt power cycle
[  674.334456][  T969] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  674.377114][T11720] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  674.400019][T11720] usb 7-1: no configurations
[  674.404868][T11720] usb 7-1: can't read configurations, error -22
[  674.473575][  T969] usb 3-1: device descriptor read/64, error -71
[  674.477346][T12715] 8021q: adding VLAN 0 to HW filter on device batadv0
[  674.652096][T11720] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  674.723463][T11720] usb 7-1: no configurations
[  674.728121][T11720] usb 7-1: can't read configurations, error -22
[  674.751257][T11720] usb usb7-port1: unable to enumerate USB device
[  674.826194][  T969] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  675.021727][  T969] usb 3-1: device descriptor read/64, error -71
[  675.147549][  T969] usb usb3-port1: attempt power cycle
[  675.227110][T12686] veth0_vlan: entered promiscuous mode
[  675.259681][T12686] veth1_vlan: entered promiscuous mode
[  675.386913][T12715] veth0_vlan: entered promiscuous mode
[  675.408068][T12686] veth0_macvtap: entered promiscuous mode
[  675.433773][T12686] veth1_macvtap: entered promiscuous mode
[  675.479501][T12715] veth1_vlan: entered promiscuous mode
[  675.520271][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.542385][  T969] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  675.564210][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.595783][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.617873][  T969] usb 3-1: device descriptor read/8, error -71
[  675.624426][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.651966][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.672866][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.699387][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.715266][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.725445][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.737622][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.748029][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.759064][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.778941][T12686] batman_adv: batadv0: Interface activated: batadv_slave_0
[  675.833862][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  675.877797][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.895989][  T969] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  675.909076][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  675.948510][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.975805][  T969] usb 3-1: device descriptor read/8, error -71
[  675.988753][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  676.011119][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  676.029852][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  676.062437][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  676.087634][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  676.099459][  T969] usb usb3-port1: unable to enumerate USB device
[  676.128990][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  676.158367][T12686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  676.194473][T12686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  676.228166][T12686] batman_adv: batadv0: Interface activated: batadv_slave_1
[  676.255395][T12715] veth0_macvtap: entered promiscuous mode
[  676.292652][T12686] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  676.312968][T12686] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  676.321739][T12686] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  676.386869][T12686] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  676.426771][T12715] veth1_macvtap: entered promiscuous mode
[  677.615722][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  677.657314][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  677.729437][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  677.770178][T13067] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2323'.
[  677.794516][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  677.831072][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  677.849847][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  677.861138][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  677.897808][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  677.969609][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.011684][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.047839][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.059036][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.069601][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.080283][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.091523][T12715] batman_adv: batadv0: Interface activated: batadv_slave_0
[  678.104255][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.115543][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.125741][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.136618][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.146594][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.157323][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.167724][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.178346][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.441321][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.610328][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.745342][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.802287][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.848845][T12715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.884611][T12715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.932830][T12715] batman_adv: batadv0: Interface activated: batadv_slave_1
[  678.951883][T12715] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  678.960766][T12715] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  678.969657][T12715] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  678.979133][T12715] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  679.090589][T12766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  679.099001][T13077] loop6: detected capacity change from 0 to 2048
[  679.109319][T12766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  679.244904][T13077]  loop6: p2 p3 p7
[  679.311489][T12711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  679.312287][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  679.349971][T12711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  679.386885][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  680.119446][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  680.381684][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  681.187045][   T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  681.358866][ T5982] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  681.377496][   T25] usb 3-1: no configurations
[  681.390530][  T969] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  681.394423][   T25] usb 3-1: can't read configurations, error -22
[  681.550876][T11576] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  681.574263][ T5982] usb 7-1: Using ep0 maxpacket: 16
[  681.583611][   T25] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  681.584198][  T969] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  681.592256][ T5982] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  681.630641][  T969] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  681.644865][ T5982] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  681.670381][  T969] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  681.672218][ T5982] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  681.688418][  T969] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  681.701758][T11576] usb 9-1: device descriptor read/64, error -71
[  681.708233][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.730287][  T969] usb 10-1: SerialNumber: syz
[  681.740824][ T5982] usb 7-1: Product: syz
[  681.760023][ T5982] usb 7-1: Manufacturer: syz
[  681.772767][ T5982] usb 7-1: SerialNumber: syz
[  681.786944][   T25] usb 3-1: no configurations
[  681.793103][   T25] usb 3-1: can't read configurations, error -22
[  681.824483][   T25] usb usb3-port1: attempt power cycle
[  682.191125][T11576] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  682.201127][ T5982] usb 7-1: 0:2 : does not exist
[  682.209673][ T5982] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  682.249226][   T25] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  682.255757][  T969] usb 10-1: 0:2 : does not exist
[  682.259048][ T5982] usb 7-1: USB disconnect, device number 20
[  682.293118][   T25] usb 3-1: no configurations
[  682.297803][   T25] usb 3-1: can't read configurations, error -22
[  682.341632][T11576] usb 9-1: device descriptor read/64, error -71
[  682.465433][T11576] usb usb9-port1: attempt power cycle
[  682.502036][   T25] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  682.778099][   T25] usb 3-1: no configurations
[  682.901848][   T25] usb 3-1: can't read configurations, error -22
[  682.941176][   T25] usb usb3-port1: unable to enumerate USB device
[  683.011653][T11576] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  683.104959][  T969] usb 10-1: USB disconnect, device number 2
[  683.114152][T11576] usb 9-1: device descriptor read/8, error -71
[  683.191446][T13134] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2337'.
[  683.248651][T13134] vlan2: entered promiscuous mode
[  683.290722][T13134] hsr0: entered promiscuous mode
[  683.338208][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  683.482700][T13134] hsr0: left promiscuous mode
[  683.615095][T11576] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  683.694053][T11576] usb 9-1: device descriptor read/8, error -71
[  683.846287][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  684.211202][T11576] usb usb9-port1: unable to enumerate USB device
[  684.448350][T13128] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  684.675491][T13128] usb 7-1: Using ep0 maxpacket: 32
[  685.716006][T13128] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  685.984317][T13128] usb 7-1: config 0 has no interface number 0
[  686.342387][T13164] overlayfs: missing 'lowerdir'
[  686.750332][T13128] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  686.761878][T13128] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.779965][T13128] usb 7-1: Product: syz
[  686.786447][T13128] usb 7-1: Manufacturer: syz
[  687.177776][T13128] usb 7-1: SerialNumber: syz
[  687.191733][T13128] usb 7-1: config 0 descriptor??
[  687.258422][T13128] usb 7-1: can't set config #0, error -71
[  687.287320][   T29] audit: type=1326 audit(1739209356.993:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13166 comm="syz.7.2345" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4aa318cde9 code=0x0
[  687.309004][    C1] vkms_vblank_simulate: vblank timer overrun
[  687.379446][T13128] usb 7-1: USB disconnect, device number 21
[  687.650438][T13163] loop9: detected capacity change from 0 to 512
[  687.776446][T13128] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  687.910757][T13163] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  688.874951][T13163] EXT4-fs (loop9): orphan cleanup on readonly fs
[  688.985596][T13163] Quota error (device loop9): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  689.280499][ T5982] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  689.333218][T13163] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  689.369798][T13128] usb 7-1: Using ep0 maxpacket: 32
[  689.389362][T13128] usb 7-1: config 0 has an invalid interface number: 241 but max is 0
[  689.432348][T13128] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  689.461756][ T5982] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  689.477365][T13163] EXT4-fs (loop9): Cannot turn on quotas: error -117
[  689.502876][ T5982] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  689.520623][T13128] usb 7-1: config 0 has no interface number 0
[  689.545827][T13128] usb 7-1: config 0 interface 241 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  689.548546][T13163] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2344: bg 0: block 40: padding at end of block bitmap is not set
[  689.578121][T13128] usb 7-1: config 0 interface 241 has no altsetting 0
[  689.578283][ T5982] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  689.620747][T13128] usb 7-1: New USB device found, idVendor=0bb4, idProduct=0a6f, bcdDevice=c1.86
[  689.640895][T13128] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.649279][ T5982] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  689.662426][T13128] usb 7-1: Product: syz
[  689.669090][ T5982] usb 9-1: SerialNumber: syz
[  689.676170][T13128] usb 7-1: Manufacturer: syz
[  689.692661][T13128] usb 7-1: SerialNumber: syz
[  689.706841][T13128] usb 7-1: config 0 descriptor??
[  689.735181][T13163] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  689.773832][T13163] EXT4-fs (loop9): 1 truncate cleaned up
[  689.784895][T13204] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2353'.
[  689.816963][T13163] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  689.828629][T13204] vlan2: entered promiscuous mode
[  689.850171][T13204] hsr0: entered promiscuous mode
[  689.906042][T13204] hsr0: left promiscuous mode
[  689.913003][ T5982] usb 9-1: 0:2 : does not exist
[  689.954315][T13128] usb 7-1: USB disconnect, device number 22
[  690.005117][ T5982] usb 9-1: USB disconnect, device number 6
[  690.170009][T12715] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  690.235149][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  692.230112][T13228] overlayfs: missing 'lowerdir'
[  693.273756][ T5895] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  693.500826][ T5895] usb 9-1: Using ep0 maxpacket: 32
[  693.534746][ T5895] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[  693.573670][ T5895] usb 9-1: config 0 has no interface number 0
[  693.633677][ T5895] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  693.663323][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.724801][ T5895] usb 9-1: Product: syz
[  693.742029][ T5895] usb 9-1: Manufacturer: syz
[  693.746662][ T5895] usb 9-1: SerialNumber: syz
[  693.805692][ T5895] usb 9-1: config 0 descriptor??
[  693.841001][ T5895] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  694.076151][T13227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  694.168040][T13227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  694.219132][ T5895] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  694.295195][ T5895] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  695.373868][    C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71
[  695.417453][ T5895] usb 9-1: USB disconnect, device number 7
[  695.489373][ T5895] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  695.552421][ T5895] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  695.608156][ T5895] quatech2 9-1:0.51: device disconnected
[  696.400142][ T5982] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  697.582378][ T5896] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  697.760734][ T5982] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  697.778958][ T5896] usb 7-1: Using ep0 maxpacket: 32
[  697.785600][ T5896] usb 7-1: config 0 has an invalid interface number: 241 but max is 0
[  697.831341][ T5982] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  697.856324][ T5896] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  697.884883][ T5982] usb 10-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  697.896458][ T5896] usb 7-1: config 0 has no interface number 0
[  697.902593][ T5896] usb 7-1: config 0 interface 241 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  697.928450][ T5982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.961425][ T5982] usb 10-1: config 0 descriptor??
[  698.003411][ T5896] usb 7-1: config 0 interface 241 has no altsetting 0
[  698.012800][ T5896] usb 7-1: New USB device found, idVendor=0bb4, idProduct=0a6f, bcdDevice=c1.86
[  698.029135][ T5895] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  698.056874][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.086330][ T5896] usb 7-1: Product: syz
[  698.091414][ T5896] usb 7-1: Manufacturer: syz
[  698.096026][ T5896] usb 7-1: SerialNumber: syz
[  698.133617][ T5896] usb 7-1: config 0 descriptor??
[  698.240907][ T5895] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  698.279413][ T5895] usb 9-1: config 0 has no interfaces?
[  698.301074][ T5895] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  698.346490][ T5895] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.424381][ T5896] usb 7-1: USB disconnect, device number 23
[  698.462967][ T5895] usb 9-1: config 0 descriptor??
[  698.480733][T13128] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  698.492478][ T5982] cypress 0003:04B4:DE61.0007: unknown main item tag 0x0
[  698.500585][ T5982] cypress 0003:04B4:DE61.0007: unknown main item tag 0x0
[  698.508284][ T5982] cypress 0003:04B4:DE61.0007: item fetching failed at offset 2/7
[  698.516771][ T5982] cypress 0003:04B4:DE61.0007: parse failed
[  698.522732][ T5982] cypress 0003:04B4:DE61.0007: probe with driver cypress failed with error -22
[  699.701609][T13128] usb 3-1: device descriptor read/64, error -71
[  699.995787][T13128] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  700.160906][   T25] usb 10-1: USB disconnect, device number 3
[  700.219213][T13128] usb 3-1: device descriptor read/64, error -71
[  700.628217][T13128] usb usb3-port1: attempt power cycle
[  701.106009][T13128] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  702.191094][ T5982] usb 9-1: USB disconnect, device number 8
[  702.216983][T13128] usb 3-1: device descriptor read/8, error -71
[  702.842104][T13346] loop9: detected capacity change from 0 to 256
[  705.157146][T13356] tty tty33: ldisc open failed (-12), clearing slot 32
[  706.295023][T13362] netlink: 'syz.2.2385': attribute type 3 has an invalid length.
[  706.302973][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2385'.
[  709.911003][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2395'.
[  711.019880][T13399] serio: Serial port ptm0
[  711.206384][T13128] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  711.388019][ T5982] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  711.420104][T13128] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  711.460404][T13128] usb 9-1: config 0 has no interfaces?
[  711.471064][T13128] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  711.677251][T13128] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.698723][T13128] usb 9-1: config 0 descriptor??
[  711.761124][ T5982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  711.828415][ T5982] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  711.865131][T13414] overlayfs: failed to resolve './file0': -2
[  711.901432][ T5982] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  711.962998][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.182195][ T5982] usb 3-1: config 0 descriptor??
[  713.533532][ T5895] usb 9-1: USB disconnect, device number 9
[  713.872066][T13457] program syz.9.2409 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  713.903888][T13457] netlink: zone id is out of range
[  713.919046][T13457] netlink: zone id is out of range
[  713.975305][T13457] netlink: zone id is out of range
[  713.993994][T13457] netlink: zone id is out of range
[  714.030499][T13457] netlink: zone id is out of range
[  714.038979][T13457] netlink: zone id is out of range
[  714.046046][T13457] netlink: zone id is out of range
[  714.052767][T13457] netlink: zone id is out of range
[  714.088534][T13457] netlink: zone id is out of range
[  714.095717][T13457] netlink: zone id is out of range
[  714.679198][ T5982] usb 3-1: USB disconnect, device number 42
[  718.679359][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  718.685907][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  719.627515][T13531] loop7: detected capacity change from 0 to 1024
[  719.640955][T13531] EXT4-fs: Ignoring removed orlov option
[  720.415495][T13531] EXT4-fs (loop7): Test dummy encryption mode enabled
[  720.455894][T13531] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  720.678892][T13531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  721.584597][ T5895] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  722.165943][ T9815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  722.517444][T13542] loop2: detected capacity change from 0 to 16
[  722.591325][T13542] erofs (device loop2): mounted with root inode @ nid 36.
[  722.629732][T13542] erofs (device loop2): bogus dirent @ nid 36
[  722.678275][T13542] overlayfs: failed to get metacopy (-117)
[  723.609826][ T5895] usb 9-1: unable to read config index 0 descriptor/start: -71
[  724.689457][ T5895] usb 9-1: can't read configurations, error -71
[  726.287947][T13556] overlayfs: failed to resolve './file0': -2
[  727.182304][T13561] loop1: detected capacity change from 0 to 8192
[  727.284999][T13561] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  729.508524][ T5895] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  729.723952][ T5895] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  729.743662][ T5895] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  729.774753][ T5895] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  729.807889][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.849259][ T5895] usb 7-1: config 0 descriptor??
[  730.217241][T13593] sch_fq: defrate 0 ignored.
[  730.515899][T13624] netlink: 'syz.8.2449': attribute type 9 has an invalid length.
[  731.060631][T13128] usb 9-1: new full-speed USB device number 12 using dummy_hcd
[  731.990403][T13128] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  732.010108][T13128] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  732.019936][T13128] usb 9-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00
[  732.040432][T13128] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.055396][T13128] usb 9-1: config 0 descriptor??
[  733.062103][ T5982] usb 7-1: USB disconnect, device number 24
[  733.336132][T13128] hid-led 0003:1D34:0004.0008: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.8-1/input0
[  733.406140][T13128] hid-led 0003:1D34:0004.0008: Dream Cheeky Webmail Notifier initialized
[  733.588473][T13128] usb 9-1: USB disconnect, device number 12
[  735.933038][  T969] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  736.127532][  T969] usb 7-1: device descriptor read/64, error -71
[  736.558319][T13673] loop1: detected capacity change from 0 to 256
[  737.248674][  T969] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  737.499267][T13673] FAT-fs (loop1): Directory bread(block 64) failed
[  737.506062][T13673] FAT-fs (loop1): Directory bread(block 65) failed
[  737.513334][T13673] FAT-fs (loop1): Directory bread(block 66) failed
[  737.520145][T13673] FAT-fs (loop1): Directory bread(block 67) failed
[  737.527314][T13673] FAT-fs (loop1): Directory bread(block 68) failed
[  737.534026][T13673] FAT-fs (loop1): Directory bread(block 69) failed
[  737.541201][T13673] FAT-fs (loop1): Directory bread(block 70) failed
[  737.548283][T13673] FAT-fs (loop1): Directory bread(block 71) failed
[  737.555456][T13673] FAT-fs (loop1): Directory bread(block 72) failed
[  737.562194][T13673] FAT-fs (loop1): Directory bread(block 73) failed
[  738.464094][T13682] loop7: detected capacity change from 0 to 256
[  738.571201][T13684] loop6: detected capacity change from 0 to 512
[  738.707692][ T5896] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  738.759863][T13684] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  738.788411][T13034] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  738.800455][T13682] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  738.913968][T13684] EXT4-fs (loop6): 1 truncate cleaned up
[  738.932652][T13682] exFAT-fs (loop7): start_clu is invalid cluster(0xffffffff)
[  738.955032][T13684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  739.003141][ T5896] usb 3-1: Using ep0 maxpacket: 8
[  739.023715][T13034] usb 9-1: Using ep0 maxpacket: 32
[  739.035713][ T5896] usb 3-1: unable to get BOS descriptor or descriptor too short
[  739.046330][T13034] usb 9-1: config 0 has an invalid interface number: 219 but max is 0
[  739.124213][T13034] usb 9-1: config 0 has no interface number 0
[  739.130529][ T5896] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0
[  739.164493][T13034] usb 9-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  739.176532][ T5896] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0
[  739.275135][ T5896] usb 3-1: config 8 interface 0 has no altsetting 0
[  739.282396][T13034] usb 9-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  739.350855][ T5896] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  739.418534][T13034] usb 9-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  739.445837][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.525613][ T5896] usb 3-1: Product: syz
[  739.533215][T13034] usb 9-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  739.549199][ T5896] usb 3-1: Manufacturer: syz
[  739.553835][ T5896] usb 3-1: SerialNumber: syz
[  739.587420][T13034] usb 9-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  739.628949][T13034] usb 9-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  739.678892][T13034] usb 9-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  739.688930][T13034] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.717693][T13034] usb 9-1: Product: syz
[  739.771853][T13034] usb 9-1: Manufacturer: syz
[  739.787445][T13706] loop7: detected capacity change from 0 to 1024
[  739.794779][T13706] EXT4-fs: Ignoring removed oldalloc option
[  739.811758][T13706] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  739.977540][T13706] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  740.305704][T13034] usb 9-1: SerialNumber: syz
[  740.708326][T13128] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  740.763295][T13034] usb 9-1: config 0 descriptor??
[  740.771434][ T5896] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  740.787278][ T5896] usb 3-1: selecting invalid altsetting 0
[  740.806330][T13680] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  740.871802][T13680] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  740.987731][ T5896] snd-usb-audio 3-1:8.0: probe with driver snd-usb-audio failed with error -12
[  741.079536][ T5896] usb 3-1: USB disconnect, device number 43
[  741.204243][ T9766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  741.213796][T13034] etas_es58x 9-1:0.219: Starting syz syz (Serial Number syz)
[  741.441958][ T9390] udevd[9390]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  741.466411][T13034] etas_es58x 9-1:0.219: could not retrieve the product info string
[  741.573153][T13034] usb 9-1: USB disconnect, device number 13
[  741.618631][T13034] etas_es58x 9-1:0.219: Disconnecting syz syz
[  741.858028][T13128] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  741.868643][T13128] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  742.387483][T13128] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  742.427504][T13722] loop2: detected capacity change from 0 to 1024
[  742.434801][T13722] EXT4-fs: Ignoring removed oldalloc option
[  742.735228][T13722] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  743.768865][T13128] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  744.310710][T13128] usb 10-1: config 0 descriptor??
[  744.318954][ T9815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  744.381168][T13722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  744.605285][T13128] usb 10-1: can't set config #0, error -71
[  744.620059][T13128] usb 10-1: USB disconnect, device number 4
[  744.866527][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  744.895979][T13734] loop9: detected capacity change from 0 to 128
[  745.053585][   T29] audit: type=1326 audit(1739209411.022:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16edd8cde9 code=0x7ffc0000
[  745.130699][   T29] audit: type=1326 audit(1739209411.022:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16edd8cde9 code=0x7ffc0000
[  745.181086][   T29] audit: type=1326 audit(1739209411.022:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f16edd8cde9 code=0x7ffc0000
[  745.259094][   T29] audit: type=1326 audit(1739209411.022:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16edd8cde9 code=0x7ffc0000
[  745.289606][T13746] program syz.8.2483 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  745.310360][T13746] netlink: zone id is out of range
[  745.365366][   T29] audit: type=1326 audit(1739209411.022:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16edd8cde9 code=0x7ffc0000
[  745.388647][T13746] netlink: zone id is out of range
[  745.393794][T13746] netlink: zone id is out of range
[  745.950250][T13746] netlink: zone id is out of range
[  745.971657][T13746] netlink: zone id is out of range
[  746.388746][   T29] audit: type=1326 audit(1739209411.022:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f16edd8cde9 code=0x7ffc0000
[  746.431862][T10915] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  746.589097][T13752] loop7: detected capacity change from 0 to 16
[  746.635993][T13746] netlink: zone id is out of range
[  746.641238][T13746] netlink: zone id is out of range
[  746.670717][T10915] usb 7-1: device descriptor read/64, error -71
[  746.923689][T10915] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  747.478378][   T29] audit: type=1326 audit(1739209411.022:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16edd8cde9 code=0x7ffc0000
[  747.494301][T13746] netlink: zone id is out of range
[  747.508404][T13752] erofs (device loop7): mounted with root inode @ nid 36.
[  747.549979][T13752] erofs (device loop7): bogus dirent @ nid 36
[  747.620544][T13752] overlayfs: failed to get metacopy (-117)
[  748.167724][T10915] usb 7-1: device descriptor read/64, error -71
[  748.565671][T13753] syz.9.2480: attempt to access beyond end of device
[  748.565671][T13753] loop9: rw=2049, sector=145, nr_sectors = 184 limit=128
[  748.583091][   T29] audit: type=1326 audit(1739209411.022:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16edd8cde9 code=0x7ffc0000
[  748.677221][T10915] usb usb7-port1: attempt power cycle
[  749.174652][T13746] netlink: zone id is out of range
[  749.185715][T13746] netlink: zone id is out of range
[  749.249563][   T29] audit: type=1326 audit(1739209411.022:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f16edd8cde9 code=0x7ffc0000
[  749.500511][   T29] audit: type=1326 audit(1739209411.022:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16edd8cde9 code=0x7ffc0000
[  749.522886][    C1] vkms_vblank_simulate: vblank timer overrun
[  750.657148][T13764] loop7: detected capacity change from 0 to 128
[  750.703474][T13766] loop2: detected capacity change from 0 to 512
[  750.743457][T13766] EXT4-fs: quotafile must be on filesystem root
[  750.751409][T13764] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  750.875426][T13764] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  751.062874][   T29] kauditd_printk_skb: 20 callbacks suppressed
[  751.062897][   T29] audit: type=1800 audit(1739209416.653:129): pid=13764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2487" name="file1" dev="loop7" ino=13 res=0 errno=0
[  751.313836][ T9815] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  751.541984][T10915] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  751.586486][T10915] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  751.942725][T13785] loop8: detected capacity change from 0 to 1024
[  751.954097][T13785] EXT4-fs: Ignoring removed orlov option
[  751.959971][T13785] EXT4-fs: Ignoring removed orlov option
[  751.965751][T13785] EXT4-fs: Ignoring removed oldalloc option
[  752.402202][T13785] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  752.413331][T13785] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  752.490187][T13785] EXT4-fs (loop8): invalid journal inode
[  752.496588][T13785] EXT4-fs (loop8): can't get journal size
[  752.534317][T13785] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  752.617166][T10915] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  752.664658][T10915] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  752.674132][T10915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  753.084604][T10915] usb 7-1: config 0 descriptor??
[  753.154624][T10915] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  754.776941][T12686] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  754.876696][T10915] usb 7-1: USB disconnect, device number 29
[  755.144679][ T5896] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  755.294632][ T5896] usb 9-1: device descriptor read/64, error -71
[  755.381658][T13804] hub 2-0:1.0: USB hub found
[  755.392513][T13804] hub 2-0:1.0: 1 port detected
[  755.572457][T10915] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  756.122924][T10915] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  756.154950][T10915] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  756.207672][T10915] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  756.261940][T10915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.290604][T10915] usb 7-1: config 0 descriptor??
[  756.384035][T13806] loop1: detected capacity change from 0 to 512
[  756.413394][T13806] ext4: Unknown parameter 'smackfstransmute'
[  756.460063][ T5896] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  756.610034][    T8] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  756.641805][ T5896] usb 9-1: device descriptor read/64, error -71
[  756.780971][ T5896] usb usb9-port1: attempt power cycle
[  756.804041][    T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  756.848764][    T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  756.887131][    T8] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  756.956282][    T8] usb 10-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00
[  757.197973][T13825] overlayfs: failed to resolve './file1': -2
[  757.220607][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.310484][ T5896] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  757.520746][ T5896] usb 9-1: device descriptor read/8, error -71
[  757.637018][    T8] usb 10-1: config 0 descriptor??
[  757.924325][ T5896] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  757.983410][ T5896] usb 9-1: device descriptor read/8, error -71
[  758.123548][ T5896] usb usb9-port1: unable to enumerate USB device
[  758.183552][T13832] syz.7.2511 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  758.197587][    T8] betop 0003:11C0:5506.0009: unbalanced collection at end of report description
[  758.233088][    T8] betop 0003:11C0:5506.0009: parse failed
[  758.268560][    T8] betop 0003:11C0:5506.0009: probe with driver betop failed with error -22
[  758.435788][    T8] usb 10-1: USB disconnect, device number 5
[  758.493777][ T5896] usb 7-1: USB disconnect, device number 30
[  759.641490][T13848] loop9: detected capacity change from 0 to 1024
[  759.699535][T13848] EXT4-fs: Ignoring removed orlov option
[  759.793649][T13848] EXT4-fs: Ignoring removed nomblk_io_submit option
[  760.914923][T13848] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  761.133404][T13862] loop2: detected capacity change from 0 to 128
[  761.159978][T13862] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  761.210073][T13862] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  761.732338][ T5839] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  761.840605][T13868] overlayfs: failed to resolve './file1': -2
[  762.159580][T12715] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  762.637703][T13873] loop8: detected capacity change from 0 to 16
[  762.667250][T13873] erofs (device loop8): mounted with root inode @ nid 36.
[  762.809126][T13873] erofs (device loop8): read error -117 @ 0 of nid 36
[  762.816084][T13873] erofs (device loop8): fail to readdir of logical block 0 of nid 36
[  762.831985][T13873] erofs (device loop8): read error -117 @ 8200 of nid 36
[  765.123261][T13883] loop7: detected capacity change from 0 to 16
[  767.382929][T13883] erofs (device loop7): mounted with root inode @ nid 36.
[  769.560578][T13902] loop8: detected capacity change from 0 to 16
[  770.424980][T13902] erofs (device loop8): mounted with root inode @ nid 36.
[  771.234054][T13904] loop9: detected capacity change from 0 to 256
[  773.195109][T13904] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  774.742387][T13919] pim6reg1: entered promiscuous mode
[  774.781490][T13925] loop8: detected capacity change from 0 to 512
[  774.794193][T13919] pim6reg1: entered allmulticast mode
[  774.822828][T13925] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  775.617338][T13128] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  775.904611][  T969] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  775.939948][T13128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  775.974942][T13128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  776.005966][T13128] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  776.047862][T13128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  776.088576][T13128] usb 3-1: config 0 descriptor??
[  776.121159][  T969] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  776.146846][  T969] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  776.192544][  T969] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  776.230265][  T969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  776.262104][  T969] usb 7-1: config 0 descriptor??
[  776.317250][  T969] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  776.370108][T12686] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  776.587702][T13936] loop7: detected capacity change from 0 to 256
[  777.623108][T13128] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0
[  778.445485][T13942] loop8: detected capacity change from 0 to 512
[  780.887720][T13942] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  780.889885][T13942] EXT4-fs: failed to create workqueue
[  780.922050][T13942] EXT4-fs (loop8): mount failed
[  781.396731][ T5896] usb 7-1: USB disconnect, device number 31
[  781.666967][T13128] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device
[  781.691206][T13128] pyra 0003:1E7D:2CF6.000A: couldn't install mouse
[  781.699313][T13128] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71
[  781.712818][T13128] usb 3-1: USB disconnect, device number 44
[  784.362474][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  784.368816][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  784.552976][T13974] loop7: detected capacity change from 0 to 1024
[  784.560231][T13974] EXT4-fs: Ignoring removed oldalloc option
[  784.865730][T13978] loop2: detected capacity change from 0 to 16
[  784.949046][T13974] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  785.060607][T13978] erofs (device loop2): mounted with root inode @ nid 36.
[  787.599796][T13974] EXT4-fs warning (device loop7): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop7.
[  787.701501][T13983] netem: incorrect gi model size
[  787.744672][T13983] netem: change failed
[  788.629943][T14000] loop1: detected capacity change from 0 to 2048
[  788.697745][T14000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  788.698723][T14005] loop7: detected capacity change from 0 to 1024
[  788.725039][T14005] EXT4-fs: Ignoring removed i_version option
[  788.731097][T14005] EXT4-fs: inline encryption not supported
[  788.741896][T14005] EXT4-fs: Ignoring removed mblk_io_submit option
[  788.749448][T14005] EXT4-fs (loop7): Test dummy encryption mode enabled
[  788.764160][T14005] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  788.800703][ T5896] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  788.872592][T14005] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  789.050589][T13999] loop6: detected capacity change from 0 to 16
[  789.208420][ T5896] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  789.263197][T13999] erofs (device loop6): mounted with root inode @ nid 36.
[  789.325326][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  789.413784][ T5896] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  789.480884][T13999] erofs (device loop6): bogus dirent @ nid 36
[  789.721133][ T5896] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  789.763520][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.854601][T14014] overlayfs: failed to get metacopy (-117)
[  789.875254][ T5896] usb 9-1: config 0 descriptor??
[  789.986139][ T5896] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  790.113038][T14005] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  790.264989][T14011] fscrypt (loop7): Error allocating 'xts(aes)' transform: -4
[  790.588443][ T9815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  790.652919][ T5896] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  790.820293][ T5896] usb 2-1: device descriptor read/64, error -71
[  791.123490][ T5896] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  791.300246][ T5896] usb 2-1: device descriptor read/64, error -71
[  791.485069][ T5896] usb usb2-port1: attempt power cycle
[  791.650170][T14035] loop7: detected capacity change from 0 to 512
[  791.692610][T14035] EXT4-fs (loop7): blocks per group (71) and clusters per group (20800) inconsistent
[  791.795393][T14035] loop7: detected capacity change from 0 to 1024
[  791.804493][T14035] EXT4-fs: Ignoring removed oldalloc option
[  791.899436][ T5896] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  791.980192][T14035] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  792.084797][T14035] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  792.288895][   T29] audit: type=1800 audit(1739209455.098:130): pid=14035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2565" name="file1" dev="loop7" ino=15 res=0 errno=0
[  792.623985][T14041] loop2: detected capacity change from 0 to 256
[  792.648565][ T5896] usb 2-1: device descriptor read/8, error -71
[  792.757130][T13034] usb 9-1: USB disconnect, device number 18
[  793.277166][T14044] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  793.287909][T14044] FAT-fs (loop2): Filesystem has been set read-only
[  793.295293][T14044] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  793.305654][T14044] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  793.791528][   T29] audit: type=1800 audit(1739209456.173:131): pid=14044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2566" name="file1" dev="loop2" ino=446 res=0 errno=0
[  793.822181][T14044] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  794.111929][ T5896] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  794.603247][ T5896] usb 2-1: device descriptor read/8, error -71
[  794.679913][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2568'.
[  795.344780][T14055] loop1: detected capacity change from 0 to 512
[  795.345597][ T5896] usb usb2-port1: unable to enumerate USB device
[  795.359481][T14055] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent
[  795.401730][ T9815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  795.967834][T14062] loop1: detected capacity change from 0 to 128
[  796.299212][T14066] loop6: detected capacity change from 0 to 256
[  797.057600][T14071] loop1: detected capacity change from 0 to 512
[  797.571263][T14072] loop1: detected capacity change from 0 to 512
[  799.412594][T14066] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  799.478537][T14072] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent
[  805.224704][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  805.271542][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  805.294641][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  805.305865][T13128] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  805.325576][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  805.341092][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  805.351740][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  805.478706][T13128] usb 2-1: device descriptor read/64, error -71
[  805.734034][T13128] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  805.882376][T13128] usb 2-1: device descriptor read/64, error -71
[  805.929980][T14048] netem: change failed
[  806.020516][T13128] usb usb2-port1: attempt power cycle
[  806.418009][T13128] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  806.524403][T13128] usb 2-1: device descriptor read/8, error -71
[  806.877314][T13128] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  807.219267][T14101] loop2: detected capacity change from 0 to 16
[  807.243507][T14101] erofs (device loop2): mounted with root inode @ nid 36.
[  808.184290][T12927] Bluetooth: hci3: command tx timeout
[  808.212809][T13128] usb 2-1: device descriptor read/8, error -71
[  808.872821][T14112] loop7: detected capacity change from 0 to 512
[  808.953909][T14114] loop6: detected capacity change from 0 to 256
[  808.961906][T14112] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  809.177069][T14112] EXT4-fs: error: could not find journal device path
[  809.469457][T13128] usb usb2-port1: unable to enumerate USB device
[  810.354198][T12927] Bluetooth: hci3: command tx timeout
[  812.579079][ T5845] Bluetooth: hci3: command tx timeout
[  812.862821][T14137] netem: change failed
[  812.934949][T14145] loop7: detected capacity change from 0 to 512
[  813.014959][T14145] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent
[  813.934579][T12711] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  814.202768][T14166] loop1: detected capacity change from 0 to 1024
[  814.209948][T14166] EXT4-fs: Ignoring removed oldalloc option
[  814.328388][ T5895] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  814.563412][ T5895] usb 3-1: device descriptor read/64, error -71
[  814.629856][T12711] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  814.798316][ T5845] Bluetooth: hci3: command tx timeout
[  814.927110][ T5895] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  815.116189][T14166] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  815.215285][ T5895] usb 3-1: device descriptor read/64, error -71
[  815.310644][T14166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  815.383705][ T5895] usb usb3-port1: attempt power cycle
[  815.889134][ T5895] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  815.943096][ T5895] usb 3-1: device descriptor read/8, error -71
[  816.213244][T13034] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  817.310726][ T5895] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  817.365946][T13034] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  817.396124][T13034] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  817.649882][T13034] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  817.677264][ T5895] usb 3-1: device descriptor read/8, error -71
[  817.703195][T13034] usb 9-1: config 0 descriptor??
[  817.743641][T13034] pwc: Askey VC010 type 2 USB webcam detected.
[  817.763575][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  817.856484][ T5895] usb usb3-port1: unable to enumerate USB device
[  818.185534][T12711] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  818.915929][T13034] pwc: recv_control_msg error -32 req 02 val 2b00
[  818.925737][T14168] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  818.934467][T14168] tipc: Enabled bearer <udp:syz1>, priority 10
[  819.266649][T13034] pwc: recv_control_msg error -32 req 02 val 2700
[  819.309927][T13034] pwc: recv_control_msg error -32 req 02 val 2c00
[  819.403560][T14191] loop7: detected capacity change from 0 to 256
[  819.609705][T14191] FAT-fs (loop7): Directory bread(block 64) failed
[  819.616298][T14191] FAT-fs (loop7): Directory bread(block 65) failed
[  819.622977][T14191] FAT-fs (loop7): Directory bread(block 66) failed
[  819.629516][T14191] FAT-fs (loop7): Directory bread(block 67) failed
[  819.636145][T14191] FAT-fs (loop7): Directory bread(block 68) failed
[  819.642739][T14191] FAT-fs (loop7): Directory bread(block 69) failed
[  819.650123][T14191] FAT-fs (loop7): Directory bread(block 70) failed
[  819.656726][T14191] FAT-fs (loop7): Directory bread(block 71) failed
[  819.663391][T14191] FAT-fs (loop7): Directory bread(block 72) failed
[  819.669934][T14191] FAT-fs (loop7): Directory bread(block 73) failed
[  819.792195][T12711] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.042683][T14096] chnl_net:caif_netlink_parms(): no params data found
[  820.233782][ T5895] tipc: Node number set to 10005162
[  820.241240][T13034] pwc: recv_control_msg error -32 req 04 val 1000
[  820.279840][T13034] pwc: recv_control_msg error -32 req 04 val 1300
[  820.333346][T13034] pwc: recv_control_msg error -32 req 04 val 1400
[  820.365763][T13034] pwc: recv_control_msg error -32 req 02 val 2000
[  820.414338][T13034] pwc: recv_control_msg error -32 req 02 val 2100
[  820.446081][T14209] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  820.459304][T13034] pwc: recv_control_msg error -32 req 04 val 1500
[  820.514031][T13034] pwc: recv_control_msg error -32 req 02 val 2500
[  820.525070][T13034] pwc: recv_control_msg error -32 req 02 val 2400
[  820.549927][T13034] pwc: recv_control_msg error -71 req 02 val 2600
[  820.579378][T14096] bridge0: port 1(bridge_slave_0) entered blocking state
[  820.593908][T13034] pwc: recv_control_msg error -71 req 02 val 2900
[  820.615403][T14096] bridge0: port 1(bridge_slave_0) entered disabled state
[  820.615684][T13034] pwc: recv_control_msg error -71 req 02 val 2800
[  820.641664][T13034] pwc: recv_control_msg error -71 req 04 val 1100
[  820.646213][T14096] bridge_slave_0: entered allmulticast mode
[  820.657360][T13034] pwc: recv_control_msg error -71 req 04 val 1200
[  820.668354][T13034] pwc: Registered as video103.
[  820.668608][T14096] bridge_slave_0: entered promiscuous mode
[  820.674736][T13034] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input48
[  820.702587][T14096] bridge0: port 2(bridge_slave_1) entered blocking state
[  820.720036][T14096] bridge0: port 2(bridge_slave_1) entered disabled state
[  820.722097][T13034] usb 9-1: USB disconnect, device number 19
[  820.731812][T14096] bridge_slave_1: entered allmulticast mode
[  820.789057][T14096] bridge_slave_1: entered promiscuous mode
[  821.009870][T12711] bridge_slave_1: left allmulticast mode
[  821.015602][T12711] bridge_slave_1: left promiscuous mode
[  821.064281][T12711] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.091838][T12711] bridge_slave_0: left allmulticast mode
[  821.116373][T12711] bridge_slave_0: left promiscuous mode
[  821.123439][T12711] bridge0: port 1(bridge_slave_0) entered disabled state
[  822.792229][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2619'.
[  822.839589][T14230] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  826.851151][T12711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  826.949314][T12711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  827.045433][T12711] bond0 (unregistering): Released all slaves
[  827.333884][T14221] veth0_to_team: entered promiscuous mode
[  827.340113][T14221] veth0_to_team: entered allmulticast mode
[  827.722064][T14226] vlan0: entered promiscuous mode
[  827.776754][T14226] hsr0: entered promiscuous mode
[  828.900488][T14096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  828.953401][T14255] block device autoloading is deprecated and will be removed.
[  829.172657][T10915] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  829.189246][T14096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  829.514925][T10915] usb 9-1: Using ep0 maxpacket: 8
[  829.557171][T10915] usb 9-1: unable to get BOS descriptor or descriptor too short
[  829.594897][T10915] usb 9-1: config 4 has an invalid interface number: 147 but max is 0
[  829.643363][T10915] usb 9-1: config 4 has an invalid descriptor of length 9, skipping remainder of the config
[  829.730738][T10915] usb 9-1: config 4 has no interface number 0
[  829.756737][T10915] usb 9-1: string descriptor 0 read error: -22
[  829.763024][T10915] usb 9-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  829.814797][T14096] team0: Port device team_slave_0 added
[  829.832442][T10915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  830.057809][T14096] team0: Port device team_slave_1 added
[  830.147238][T10915] usb 9-1: Found UVC 0.02 device <unnamed> (04f2:b746)
[  830.171392][T10915] usb 9-1: No valid video chain found.
[  831.785250][T10915] usb 9-1: USB disconnect, device number 20
[  832.243859][T14096] batman_adv: batadv0: Adding interface: batadv_slave_0
[  832.288504][T14096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  832.468400][T14096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  832.557542][T14096] batman_adv: batadv0: Adding interface: batadv_slave_1
[  832.611944][T14096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  832.637995][    C1] vkms_vblank_simulate: vblank timer overrun
[  832.722656][T14096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  832.751636][T12711] hsr_slave_0: left promiscuous mode
[  832.759439][T12711] hsr_slave_1: left promiscuous mode
[  832.765452][T12711] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  832.795778][T12711] batman_adv: batadv0: Removing interface: batadv_slave_0
[  832.834947][T12711] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  832.853503][T12711] batman_adv: batadv0: Removing interface: batadv_slave_1
[  832.911206][T12711] veth1_macvtap: left promiscuous mode
[  832.916803][T12711] veth0_macvtap: left promiscuous mode
[  832.923714][T12711] veth1_vlan: left promiscuous mode
[  832.929301][T12711] veth0_vlan: left promiscuous mode
[  832.961732][T10915] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  833.132772][T10915] usb 9-1: Using ep0 maxpacket: 8
[  833.171741][T10915] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  833.186915][T10915] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  833.233421][T10915] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  833.257081][T10915] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  833.324122][T10915] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  833.361991][T10915] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  833.440334][T10915] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.535655][T10915] usb 9-1: usb_control_msg returned -32
[  834.541293][T10915] usbtmc 9-1:16.0: can't read capabilities
[  834.558981][T10915] usb 9-1: USB disconnect, device number 21
[  837.554807][T14336] loop1: detected capacity change from 0 to 16
[  837.687415][T14336] erofs (device loop1): mounted with root inode @ nid 36.
[  837.779589][T14337] erofs (device loop1): read error -117 @ 0 of nid 36
[  837.786921][T14337] erofs (device loop1): fail to readdir of logical block 0 of nid 36
[  837.796642][T14337] erofs (device loop1): read error -117 @ 8200 of nid 36
[  838.408385][T12711] team0 (unregistering): Port device team_slave_1 removed
[  838.497463][T12711] team0 (unregistering): Port device team_slave_0 removed
[  839.914109][T14096] hsr_slave_0: entered promiscuous mode
[  839.938609][T14096] hsr_slave_1: entered promiscuous mode
[  840.001109][T14096] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  840.049393][T14096] Cannot create hsr debugfs directory
[  840.094887][T14344] xt_bpf: check failed: parse error
[  844.321344][T14096] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  844.507501][T13128] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  844.814421][T14096] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  844.881774][T13128] usb 3-1: Using ep0 maxpacket: 8
[  844.888556][T13128] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  844.900995][T13128] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  844.954220][T13128] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  845.250657][T13128] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  845.624936][T13128] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  846.149391][T14395] loop8: detected capacity change from 0 to 256
[  846.323072][T14393] loop1: detected capacity change from 0 to 256
[  846.921646][T13128] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  846.934543][T13128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.892406][T14395] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  847.911092][T14395] exFAT-fs (loop8): start_clu is invalid cluster(0xffffffff)
[  848.286919][T14393] FAT-fs (loop1): Directory bread(block 64) failed
[  848.293980][T14393] FAT-fs (loop1): Directory bread(block 65) failed
[  848.301181][T14393] FAT-fs (loop1): Directory bread(block 66) failed
[  848.308188][T14393] FAT-fs (loop1): Directory bread(block 67) failed
[  848.315459][T14393] FAT-fs (loop1): Directory bread(block 68) failed
[  848.322213][T14393] FAT-fs (loop1): Directory bread(block 69) failed
[  848.329546][T14393] FAT-fs (loop1): Directory bread(block 70) failed
[  848.336625][T14393] FAT-fs (loop1): Directory bread(block 71) failed
[  848.343884][T14393] FAT-fs (loop1): Directory bread(block 72) failed
[  848.350684][T14393] FAT-fs (loop1): Directory bread(block 73) failed
[  848.924957][T13128] usb 3-1: can't set config #16, error -71
[  848.944469][T13128] usb 3-1: USB disconnect, device number 49
[  850.037553][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  850.046732][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  850.437900][T12927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  850.474211][T12927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  850.483680][T12927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  850.499403][T12927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  850.510271][T12927] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  850.603023][T12927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  851.049376][T14096] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.085200][   T29] audit: type=1326 audit(1739209510.211:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865ef8cde9 code=0x7ffc0000
[  851.135386][   T29] audit: type=1326 audit(1739209510.211:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865ef8cde9 code=0x7ffc0000
[  851.158088][   T29] audit: type=1326 audit(1739209510.211:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865ef8cde9 code=0x7ffc0000
[  851.268365][   T29] audit: type=1326 audit(1739209510.211:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865ef8cde9 code=0x7ffc0000
[  851.496434][   T29] audit: type=1326 audit(1739209510.211:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865ef8cde9 code=0x7ffc0000
[  851.884661][T14096] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.895822][   T29] audit: type=1326 audit(1739209510.211:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865ef8cde9 code=0x7ffc0000
[  852.022948][   T29] audit: type=1326 audit(1739209510.211:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865ef8cde9 code=0x7ffc0000
[  852.132257][   T29] audit: type=1326 audit(1739209510.211:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f865ef8cde9 code=0x7ffc0000
[  852.282690][   T29] audit: type=1326 audit(1739209510.211:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865ef8cde9 code=0x7ffc0000
[  852.361055][   T29] audit: type=1326 audit(1739209510.211:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.1.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865ef8cde9 code=0x7ffc0000
[  853.379986][T12927] Bluetooth: hci1: command tx timeout
[  854.338462][T14424] loop2: detected capacity change from 0 to 512
[  854.346402][T14424] ext4: Unknown parameter 'rootcontext'
[  854.639775][ T3003] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  854.970189][ T3003] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  855.066652][T14096] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  855.150182][T14096] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  855.209233][T14096] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  855.265231][T14096] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  855.391785][ T3003] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  855.644869][T12927] Bluetooth: hci1: command tx timeout
[  855.718047][T11576] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  855.724256][T14096] 8021q: adding VLAN 0 to HW filter on device bond0
[  855.895779][T11576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  856.067115][T11576] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  856.263944][T11576] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  856.457938][T11576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  856.494192][T11576] usb 3-1: config 0 descriptor??
[  856.504994][T11576] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  856.766622][T14442] loop1: detected capacity change from 0 to 256
[  856.793043][T14442] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  856.816023][T14442] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff)
[  857.817266][T12927] Bluetooth: hci1: command tx timeout
[  858.053458][T14450] loop1: detected capacity change from 0 to 256
[  858.167767][T14450] FAT-fs (loop1): Directory bread(block 64) failed
[  858.174687][T14450] FAT-fs (loop1): Directory bread(block 65) failed
[  858.182357][T14450] FAT-fs (loop1): Directory bread(block 66) failed
[  858.189426][T14450] FAT-fs (loop1): Directory bread(block 67) failed
[  858.196507][T14450] FAT-fs (loop1): Directory bread(block 68) failed
[  858.204014][T14450] FAT-fs (loop1): Directory bread(block 69) failed
[  858.211155][T14450] FAT-fs (loop1): Directory bread(block 70) failed
[  858.217916][T14450] FAT-fs (loop1): Directory bread(block 71) failed
[  858.225058][T14450] FAT-fs (loop1): Directory bread(block 72) failed
[  858.231787][T14450] FAT-fs (loop1): Directory bread(block 73) failed
[  858.936509][ T5896] usb 3-1: USB disconnect, device number 50
[  860.041366][T12927] Bluetooth: hci1: command tx timeout
[  861.318512][ T3003] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  861.570001][T14096] 8021q: adding VLAN 0 to HW filter on device team0
[  864.412829][T14466] loop1: detected capacity change from 0 to 512
[  864.423096][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  864.430262][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  864.457672][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  864.464771][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  864.501889][T14466] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.2680: corrupted xattr block 95: invalid header
[  864.518485][T14466] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  864.533484][T14466] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2680: bg 0: block 7: invalid block bitmap
[  864.557439][T14466] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  864.594485][T14466] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.2680: corrupted xattr block 95: invalid header
[  864.617767][T14466] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117)
[  864.626886][T14466] EXT4-fs (loop1): 1 orphan inode deleted
[  864.630422][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2681'.
[  864.633873][T14466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  864.877024][T14477] loop8: detected capacity change from 0 to 2048
[  864.945179][T14477] EXT4-fs: Ignoring removed mblk_io_submit option
[  864.952165][T14477] /dev/loop8: Can't open blockdev
[  864.997508][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  866.075402][ T3003] bridge_slave_1: left allmulticast mode
[  866.082230][ T3003] bridge_slave_1: left promiscuous mode
[  866.087965][ T3003] bridge0: port 2(bridge_slave_1) entered disabled state
[  866.200910][ T3003] bridge_slave_0: left allmulticast mode
[  866.206648][ T3003] bridge_slave_0: left promiscuous mode
[  866.236443][ T3003] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.278155][T14504] loop8: detected capacity change from 0 to 512
[  866.325857][T14504] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  866.354334][T14504] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it
[  866.377113][T14504] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2687: Corrupt directory, running e2fsck is recommended
[  866.403242][T14504] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[  866.421001][T14504] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.2687: bad orphan inode 32
[  866.432516][T14504] ext4_test_bit(bit=31, block=4) = 0
[  866.434664][T10915] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  866.441758][T14504] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  866.543300][T14504] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  866.583478][T14504] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it
[  866.626032][T14504] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2687: Corrupt directory, running e2fsck is recommended
[  866.628979][T10915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  866.661552][T10915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  866.684887][T10915] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  866.694455][T10915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  866.736412][T10915] usb 3-1: config 0 descriptor??
[  866.755564][T12686] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  866.768911][T10915] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  867.122992][ T3003] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  867.161362][ T3003] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  867.183907][ T3003] 
 (unregistering): Released all slaves
[  867.420341][T14514] loop6: detected capacity change from 0 to 1024
[  867.450948][T14400] chnl_net:caif_netlink_parms(): no params data found
[  867.475626][T14514] EXT4-fs: Ignoring removed orlov option
[  867.492354][T14514] EXT4-fs: Ignoring removed orlov option
[  867.513636][T14514] EXT4-fs: Ignoring removed oldalloc option
[  867.557464][T14514] EXT4-fs (loop6): bad geometry: block count 33554432 exceeds size of device (512 blocks)
[  868.074387][T14096] 8021q: adding VLAN 0 to HW filter on device batadv0
[  870.438859][T10915] usb 3-1: USB disconnect, device number 51
[  870.550981][T14400] bridge0: port 1(bridge_slave_0) entered blocking state
[  870.586482][T14400] bridge0: port 1(bridge_slave_0) entered disabled state
[  870.618466][T14400] bridge_slave_0: entered allmulticast mode
[  870.671169][T14400] bridge_slave_0: entered promiscuous mode
[  871.049088][T14555] loop8: detected capacity change from 0 to 256
[  871.162249][T14555] FAT-fs (loop8): Directory bread(block 64) failed
[  871.188513][T14555] FAT-fs (loop8): Directory bread(block 65) failed
[  871.212774][T14555] FAT-fs (loop8): Directory bread(block 66) failed
[  871.237565][T14555] FAT-fs (loop8): Directory bread(block 67) failed
[  871.259912][T14555] FAT-fs (loop8): Directory bread(block 68) failed
[  871.283622][T14555] FAT-fs (loop8): Directory bread(block 69) failed
[  871.352952][T14555] FAT-fs (loop8): Directory bread(block 70) failed
[  871.383861][T14555] FAT-fs (loop8): Directory bread(block 71) failed
[  871.426453][T14555] FAT-fs (loop8): Directory bread(block 72) failed
[  871.437061][ T3003] hsr_slave_0: left promiscuous mode
[  871.443519][T14555] FAT-fs (loop8): Directory bread(block 73) failed
[  871.469368][ T3003] hsr_slave_1: left promiscuous mode
[  871.495632][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  871.518550][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  871.756018][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  871.800511][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  872.535778][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  872.545653][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  872.557321][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  872.570992][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  872.584515][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  872.592060][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  872.797927][T14568] loop6: detected capacity change from 0 to 256
[  872.817097][T14568] exfat: Deprecated parameter 'utf8'
[  872.848293][T14568] exfat: Deprecated parameter 'utf8'
[  872.853663][T14568] exfat: Deprecated parameter 'utf8'
[  872.888523][T14568] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  873.349911][T14570] overlayfs: failed to resolve './file1': -2
[  874.059379][T14571] loop8: detected capacity change from 0 to 256
[  874.073917][T14571] exFAT-fs (loop8): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  874.098624][ T3003] veth1_macvtap: left promiscuous mode
[  874.108894][ T3003] veth0_macvtap: left promiscuous mode
[  874.115605][ T3003] veth1_vlan: left promiscuous mode
[  874.125605][ T3003] veth0_vlan: left promiscuous mode
[  874.427595][T14576] loop1: detected capacity change from 0 to 128
[  874.546383][T14579] syz.1.2700: attempt to access beyond end of device
[  874.546383][T14579] loop1: rw=2049, sector=145, nr_sectors = 344 limit=128
[  874.636202][T14579] syz.1.2700: attempt to access beyond end of device
[  874.636202][T14579] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128
[  874.709872][T14576] syz.1.2700: attempt to access beyond end of device
[  874.709872][T14576] loop1: rw=0, sector=145, nr_sectors = 8 limit=128
[  874.772367][T14579] syz.1.2700: attempt to access beyond end of device
[  874.772367][T14579] loop1: rw=0, sector=145, nr_sectors = 8 limit=128
[  874.814251][T14576] syz.1.2700: attempt to access beyond end of device
[  874.814251][T14576] loop1: rw=0, sector=145, nr_sectors = 8 limit=128
[  874.836829][ T5845] Bluetooth: hci2: command tx timeout
[  875.078296][T14579] syz.1.2700: attempt to access beyond end of device
[  875.078296][T14579] loop1: rw=0, sector=145, nr_sectors = 8 limit=128
[  875.080337][T14579] syz.1.2700: attempt to access beyond end of device
[  875.080337][T14579] loop1: rw=0, sector=145, nr_sectors = 8 limit=128
[  875.081424][T14579] syz.1.2700: attempt to access beyond end of device
[  875.081424][T14579] loop1: rw=0, sector=145, nr_sectors = 8 limit=128
[  875.082322][T14579] syz.1.2700: attempt to access beyond end of device
[  875.082322][T14579] loop1: rw=0, sector=145, nr_sectors = 8 limit=128
[  875.084629][T14579] syz.1.2700: attempt to access beyond end of device
[  875.084629][T14579] loop1: rw=0, sector=145, nr_sectors = 8 limit=128
[  875.996420][T14589] loop8: detected capacity change from 0 to 256
[  876.521099][T14589] FAT-fs (loop8): Directory bread(block 64) failed
[  876.527963][T14589] FAT-fs (loop8): Directory bread(block 65) failed
[  876.535127][T14589] FAT-fs (loop8): Directory bread(block 66) failed
[  876.541946][T14589] FAT-fs (loop8): Directory bread(block 67) failed
[  876.549330][T14589] FAT-fs (loop8): Directory bread(block 68) failed
[  876.556067][T14589] FAT-fs (loop8): Directory bread(block 69) failed
[  876.563363][T14589] FAT-fs (loop8): Directory bread(block 70) failed
[  876.570717][T14589] FAT-fs (loop8): Directory bread(block 71) failed
[  876.578414][T14589] FAT-fs (loop8): Directory bread(block 72) failed
[  876.585231][T14589] FAT-fs (loop8): Directory bread(block 73) failed
[  877.060647][ T5845] Bluetooth: hci2: command tx timeout
[  877.124777][ T5982] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  877.424798][ T5982] usb 9-1: Using ep0 maxpacket: 8
[  877.587930][ T5982] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  877.795771][ T5982] usb 9-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12
[  877.919777][ T5982] usb 9-1: New USB device strings: Mfr=130, Product=74, SerialNumber=0
[  877.970340][ T5982] usb 9-1: Product: syz
[  877.983341][ T5982] usb 9-1: Manufacturer: syz
[  878.013160][ T5982] usb 9-1: config 0 descriptor??
[  878.749761][ T5982] usb 9-1: can't set config #0, error -71
[  878.768781][ T5982] usb 9-1: USB disconnect, device number 22
[  879.151489][ T3003] team0 (unregistering): Port device team_slave_1 removed
[  879.213568][ T3003] team0 (unregistering): Port device team_slave_0 removed
[  879.294773][ T5845] Bluetooth: hci2: command tx timeout
[  879.629292][T14400] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.637889][T14400] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.645027][T14400] bridge_slave_1: entered allmulticast mode
[  879.652174][T14400] bridge_slave_1: entered promiscuous mode
[  879.662794][T14549] tipc: Enabled bearer <eth:vlan0>, priority 10
[  879.670571][T14551] tipc: Resetting bearer <eth:vlan0>
[  879.677736][T14551] hsr0: left promiscuous mode
[  879.692913][T14551] tipc: Disabling bearer <eth:vlan0>
[  880.039638][T14400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  880.289197][T14400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  881.257321][T14400] team0: Port device team_slave_0 added
[  881.306291][T14606] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  881.314066][T14400] team0: Port device team_slave_1 added
[  881.319096][T14606] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]
[  881.319119][T14606] CPU: 0 UID: 0 PID: 14606 Comm: syz.6.2708 Not tainted 6.14.0-rc2-syzkaller #0
[  881.319147][T14606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  881.319163][T14606] RIP: 0010:__lock_acquire+0x6a/0x2100
[  881.357578][T14606] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb de 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 78 38 8b 00 48 be 00 00 00 00 00 fc
[  881.377196][T14606] RSP: 0018:ffffc90003387770 EFLAGS: 00010016
[  881.383271][T14606] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000
[  881.391243][T14606] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018
[  881.399213][T14606] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001
[  881.407181][T14606] R10: dffffc0000000000 R11: fffffbfff2036b8f R12: ffff88802e8abc00
[  881.415152][T14606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018
[  881.423123][T14606] FS:  00007fc3bcbf66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  881.432048][T14606] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  881.438627][T14606] CR2: 00007f25616d56c0 CR3: 000000004c036000 CR4: 0000000000350ef0
[  881.446599][T14606] Call Trace:
[  881.449877][T14606]  <TASK>
[  881.452805][T14606]  ? __die_body+0x5f/0xb0
[  881.457150][T14606]  ? die_addr+0xb0/0xe0
[  881.461317][T14606]  ? exc_general_protection+0x3dd/0x5d0
[  881.466891][T14606]  ? asm_exc_general_protection+0x26/0x30
[  881.472666][T14606]  ? __lock_acquire+0x6a/0x2100
[  881.477541][T14606]  ? srso_alias_return_thunk+0x5/0xfbef5
[  881.483188][T14606]  ? mark_lock+0x9a/0x360
[  881.487529][T14606]  ? srso_alias_return_thunk+0x5/0xfbef5
[  881.493177][T14606]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  881.499170][T14606]  lock_acquire+0x1ed/0x550
[  881.503682][T14606]  ? add_wait_queue+0x46/0x180
[  881.508462][T14606]  ? __pfx_lock_acquire+0x10/0x10
[  881.513503][T14606]  ? queue_work_on+0x25f/0x380
[  881.518280][T14606]  ? __local_bh_enable_ip+0x168/0x200
[  881.523654][T14606]  ? __pfx_queue_work_on+0x10/0x10
[  881.528788][T14606]  ? __local_bh_enable_ip+0x168/0x200
[  881.534159][T14606]  ? vsock_loopback_send_pkt+0xb6/0x100
[  881.539709][T14606]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  881.545456][T14606]  ? do_raw_spin_unlock+0x13c/0x8b0
[  881.550660][T14606]  ? srso_alias_return_thunk+0x5/0xfbef5
[  881.556307][T14606]  _raw_spin_lock_irqsave+0xd5/0x120
[  881.561596][T14606]  ? add_wait_queue+0x46/0x180
[  881.566364][T14606]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  881.572256][T14606]  ? virtio_transport_send_pkt_info+0xd13/0x10b0
[  881.578595][T14606]  add_wait_queue+0x46/0x180
[  881.583199][T14606]  virtio_transport_release+0x4c4/0xce0
[  881.588747][T14606]  ? srso_alias_return_thunk+0x5/0xfbef5
[  881.594395][T14606]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  881.600384][T14606]  ? __pfx_virtio_transport_release+0x10/0x10
[  881.606457][T14606]  ? __pfx_woken_wake_function+0x10/0x10
[  881.612103][T14606]  ? srso_alias_return_thunk+0x5/0xfbef5
[  881.617746][T14606]  ? __local_bh_enable_ip+0x168/0x200
[  881.623120][T14606]  ? __vsock_release+0xa4/0x4f0
[  881.627975][T14606]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  881.633694][T14606]  ? __vsock_release+0x2c/0x4f0
[  881.638554][T14606]  ? srso_alias_return_thunk+0x5/0xfbef5
[  881.644196][T14606]  ? do_raw_spin_unlock+0x13c/0x8b0
[  881.649398][T14606]  ? __vsock_release+0x3b/0x4f0
[  881.654255][T14606]  __vsock_release+0xf3/0x4f0
[  881.658943][T14606]  vsock_release+0x97/0x100
[  881.663448][T14606]  sock_close+0xbe/0x240
[  881.667692][T14606]  ? __pfx_sock_close+0x10/0x10
[  881.672548][T14606]  __fput+0x3eb/0x9f0
[  881.676536][T14606]  task_work_run+0x251/0x310
[  881.681136][T14606]  ? srso_alias_return_thunk+0x5/0xfbef5
[  881.686779][T14606]  ? _raw_spin_unlock+0x28/0x50
[  881.691634][T14606]  ? __pfx_task_work_run+0x10/0x10
[  881.696758][T14606]  ? syscall_exit_to_user_mode+0xa3/0x340
[  881.702485][T14606]  syscall_exit_to_user_mode+0x13f/0x340
[  881.708129][T14606]  do_syscall_64+0x100/0x230
[  881.712733][T14606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  881.718634][T14606] RIP: 0033:0x7fc3bed8cde9
[  881.723050][T14606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  881.742658][T14606] RSP: 002b:00007fc3bcbf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  881.751079][T14606] RAX: 0000000000000000 RBX: 00007fc3befa5fa0 RCX: 00007fc3bed8cde9
[  881.759132][T14606] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  881.767100][T14606] RBP: 00007fc3bee0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  881.775072][T14606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  881.783041][T14606] R13: 0000000000000000 R14: 00007fc3befa5fa0 R15: 00007ffe0a6fc818
[  881.791021][T14606]  </TASK>
[  881.794032][T14606] Modules linked in:
[  881.797925][T14606] ---[ end trace 0000000000000000 ]---
[  881.803374][T14606] RIP: 0010:__lock_acquire+0x6a/0x2100
[  881.808846][T14606] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb de 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 78 38 8b 00 48 be 00 00 00 00 00 fc
[  881.828459][T14606] RSP: 0018:ffffc90003387770 EFLAGS: 00010016
[  881.834530][T14606] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000
[  881.842495][T14606] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018
[  881.850463][T14606] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001
[  881.858428][T14606] R10: dffffc0000000000 R11: fffffbfff2036b8f R12: ffff88802e8abc00
[  881.866396][T14606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018
[  881.874363][T14606] FS:  00007fc3bcbf66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  881.883290][T14606] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  881.889866][T14606] CR2: 00007f25616d56c0 CR3: 000000004c036000 CR4: 0000000000350ef0
[  881.897836][T14606] Kernel panic - not syncing: Fatal exception
[  881.904119][T14606] Kernel Offset: disabled
[  881.908441][T14606] Rebooting in 86400 seconds..