last executing test programs:

33m32.496243574s ago: executing program 32 (id=1658):
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)

30m1.991379426s ago: executing program 33 (id=2463):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x4, 0x1ff, 0xffffffff}}, 0x50)
read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, <r3=>0x0}, 0x2020)
truncate(&(0x7f0000000080)='./file0\x00', 0x8)
syz_fuse_handle_req(r0, &(0x7f00000043c0)="02cbda572ec32cf73bdbc52bfa4e157261eb6cbd0d1d50c9d937a19739fcb9f8697bf69c0e2e526012185f1b86989056f9c2d38906e8a47b9b5fde55a777a6357ac40c211de6325f496fd86dac09bb38b62b37d715d06e3c61b172aa4a662cefc7810ba37161c637a9b56a7c7b022426826076f1d2bf3c3b6f92ab6c27d691385c3efc354f1423d01d6a49d534fca3f2bf518cd645cf18b4ac2d2ac4c5c29ba487c9d27bb488a73146d5b9e21427af37dee4a276646eb2519e4f6c76cce2f7bf7e708d5180959f71d3797220101849c5144ef8338a5a2079ecce466000cf290d4df42e82865512fb5fb01fb655613cf1c469682edd86a4bef86aa23240ca6a2ff38b59339f7530e8a8027aee0628e0f81b2f5c661b149d780f20ec54c8d3d42c0c49f83b1c0d4bec94bc9221e6fc7c75ebd3b68081df207721584055baeaf6429616d57cb35d2977d45971d209e4c45dfe3c5c105e0e2b49fc8685b4945f31c9468f3c950fcf70a8f45e5a3be62f73c228a6a34a99b6f584b42c50506a6c14187f44887270011cc98d7e5e258df533411c8d39bfa9e27014912ed9e9696fd4074fbefcd4817a344be5ea348f4a7a34733a5bc5674b1bcd39404d5a458d1e19b6d4bdb4e23403154249b5798dea7b60bbf0c09c25027a4efd49d36cbe65b7450c0bde580d356ad4e3cc7a9a57e6ac0b542592617869e57d9bed28f0590241bdeb51fa775aa8806a55df2c795a61146bdbe38eb7a716180bb9b728696bb0e78ff11f89b17c7e7fe9b14ea976ccd9991f01f5d0c4620053d0b5ce42af76591fd0706494b91a6dfc43560f9a9538ada19825ffe3a7cc7a56b755d46ae1189b1f1ac729d9938ad48a066624c1b28003a9d193b4b34c4ab2609949df96f693389f27dd3e1f42b178eb17079c1448d7e9fac30ddb53ce8e5a157db8296cd3069d332bad0528ae56a6db41ba84699b85f225a78a33879512a5f0b795fc58957ef6766afcf546fe36c8125276eeaac9d647b2459c164aae86a2703e85d4f552a0647cb4bdfaecf6ec3a264a6b6892a9a1ba08a9055e98b49edc4e1f8010f63f601a8251921df70e15011116c471a70a0580b1789bcff471dcc95ad209a44ca2453d58d3ea4c71e0383db68adf332a497a84faada33f18bd3cd79ff9d6809409769b02a66cf524534ab7134e3066eef904d8961195d9cdc396a012bb3bc1b1ccd60317d08cb059174642aa3f60584e58e7417c1736f6863fae9e7103158711167a53d7d5deddacee6958fd4c2e0672b8dd90b41512b1f59fc49099633860dd6902c1df3d5924b1cf81ec848d51129b3eddea619129e961390d65d2243d400a1e30e524eeee1a701da5e21598acf457947bad693892a2989097ecbe9607a33ffb33425ccac5e19ebd1f88bf3acc03331adf9697bed04b33ac9fceaa3bdc9a417b12108e10f9c45b6d36181099056a448689da4ef68beee35f5930ce4a5712cbed98239a674c5883d6a5e0df9c1cbe1eda8dc19d14c4abe896e3b28bb3d4b2a0e9ae31ca07b9819825f3a6ab82c5501becf023a656cbff569dbc3035ae3c585747fb459581629051286b170b679b683a0b2eea6ef3b41a68012e5f4d64f689c2b909cfd06d37c0a802be2d882351bffeddef1373d8cbafa10fefbc28b31a70b6e912fc61257aa76a0f0dc1d3ef72d2f61517a359053c3dcb7d49d8a4da61bcf3b3dafc0528bb037cec0d986b3949fff38a21dab6b8a3a167bacf067c5f7842ebebcc1bd54776b2e54a098303c6331beb16e42d0669a518af2d173405786439d739b813c145c4f9f98a537b1065bf4636c76e38b71943815a6d1227d0a6965dffc37c00444aebd2ec19286b83443902dba1354a69377e97070a79151e64711111bf3e0a755b0fb1a1d5d009fdf61b665b41a3b7dbd0655236360141c52b93bc907b0672743973c30d6c9ece47fa1fe3625cc8acbe305156012ef1c5ea140be70b804887be593f25faa13ee4ea2d9821d23c3e047d74ad4f7de4d95d275ea3e6c87479f1badfcef002ebc7020b581a096abac1a80ef6ff476a01b01f7c0fb1239fcc182f74e5b5965412c0f4170432af15daf457143b1f41422b8a7f9b81c15a156ddef9af95955090d013cd52aa66ebfbc87c8030e7f86b52aadaa2e63c261185eed7c46b5f8d56e8301a9cc1578aff77b42419a5eb2e263207ef259f4da6ca6466ac9326a633b39e005028c07c9aedf17a70e638d7ed84638406e6028be879fd0fe491152e181d5527933950eb67a52cf155d5c845a6425e41a47b44d9905de26e5132c8d594c1bf6d4f12dbcb96d7431a56546800275623679d6c189e0cebd1fb8063140b89d42da60ed06206d329c29841e69c820428bcde53c998bee0380a816d080b36f64574718b84e0ecafbfd2b9981f4886df258dbf1cfdb148b171516500572a7086516fd519bc861878ec2fceb6872229ff1e9782720e590d8ef4691fa9c4c54bfcc843015913a2ed40bf37048151d17b44365f7f8d3b816d1b1cd40dc5dda6ab8f637b5f6bae92580f1c269c9231c9a79d58d43208be7622147db352b1294260eeab12409f5b5ee94d99548640634bc9479a6e6e06cc8838bf85d9bd95452eaf8ad3cf6c070aac36a7d38fe23cebfaba46c74a6c5c98b1b5243edfe405161b8c3ea0cdb1bcb4e1041fc62451a6094b0c56ee2ed29520b87228959bc01a9a9f54d214704bd321b152a0e88d0646e99a92a390dfa6bc2c34d418e5e900a3b641ab34a5fd8de751bfb3253b7aae3948d871892d7b76b351b073a93f3ad82b0c59bc49ed922c8d63f8d12c14ce1912bf877bc7877f619b03d09200836c775675e0614efabfd5665c3bf12e6131a7232639729b79ac1c5e807246d30934b0f63b31a06c4722278299949c7785d796b6d3d4a5f2fa652b7fe8be447cafe93fcb07167f3ef16b94261fc3a9d22a57a7aac56562a231d79dbf3bdc1f436206337ff0f8e019d76b823c5976ee23ba4e553ec62d261bdc7da90fee46d3472cc267a7a74b88112ef765091df03bb59cf303feaa0149b371a7bdd75c0187ce842dd1e4cdaf7fc0f5ef7ffb559c535f19100ba653728cd936987731d5ac99cb9ef772975b17b2aff8b872df0d189c7944d63ed66cfce8ee92e7a1082c2a501007aacbe0011e6c32489bcb888e1c464bec59902d940d81136c543098a60104bcfd0f4e7c27cb114ff42e8d31fe09a4bcc21cae5ef2f8e4890bd8139fff1b1b2a39e29eaf2e5d2fb810ea37a13e6d2105a6c2ccd03fc110c6f9063e2433e1450dc8ebd8ede0445af662cf7ee705003630ab7d9fc6ed30169ed674dda2802d519e3b49016c6f11612ae53230b062281ddf7a678784516c3d177857f8bdbec7910af8c81333e471bd8a973ce858a14756ef6ec85498714fe8e1e6600023804004b968eea42c410bf0f5c5b2471835454f20230a6d342f96f71a2e64f54b838e5cd939d7a651d402fd60a8a2a081de0c536d5b81345d92165e79fa65140b91c23cdb5829db55f1f93b88bb43a355e9304a17355851d52c0d745b611a30eb400044dce6ac742bcce9df9583b827514af8a2ed4a04553817ba6ea22e9beaba65d32189a5c2bf65a09d2c8a8798c0645fb24157a4e71be7889fe65c34869d8852b21661407feed92afb0bfe582693a21c050e5adce1fe97755b0be276c36b81b89700b99d23d315a64f7e115eacdb3ade725cb3cfe36c27a5e2addad60290b022a9fc26132b5ec3b5f1d884399fd992525a3e17e18e7ee6078a64b7efc3bbd116e5c305d8ad935baff18ed94c7a8720e729132e110f986991a3ad21cc637282f55588b12756895e2d10afce85b1a04fc271b217278f156c7ffb1ed9dd52b18fc8b153802fc329dca81b278d715f6e31fbcc77d8ce5c2786573bacac30791aff5771fece44063d1e84abcd6a4ae016858893605eecf253c79e59c2152efbe9fdfee3c441e4bc9cb14fc96a675aa17bf7d2024d665fe3982b61888bbe7129a1ec8fafc3480170c71d05f5d22ef7ff0e2ca598fd02bbd0ad82e6ab0e775388bf3aa421c20b6a2a5e256386abff1103f46a8b5c54c2d54b81c50d8bd98aea724bda55f99d95956e939b85d59abdc50ea4cf1d44afa3e8dffc9d84c6b7d28b78c40d7498670602b97c5e2a6281c7876dabc1d14d156e827873818bc590644d2a1d084d39c84e78127b087bf2cd9353fd13d4ab12350318aedadaca6a2728267e6f5f16547caadf3ac2fade3c86b516c6ab53d61ea1c148835b9a2c91fd0ded7283ef720086dfc7728968924731715f78915045a69122d8b23a6db47cc6fccf402b9913e46c9a36924327ca9bba6bb8cf7cc80952501fc2181a2ec7ae4364cc6eac0cba0edda68f3b398a249d114702147f8b1cd9c7f8a15345f42a7a50334928eb4e2de974e4ae2ffb796bc640922f7ada0933460e0c0fc06276dfd228da9bfbbe5a3eade6f98594b0226339156022aad7aa8c9650417cb1551b3b988fc410f81e1ae01282f244e70051f1b93644f78af3ef6359d106b291568e1ad00ad6ee102964fb7aaaec9732e43a21ea28cda496e4ae367ea738482e777290cca2ef61c8ff10c1b9546b5d395d21c98542f37578d297c13899247a6fdcdf0b8cba6b498875926a19852f97ef60dc1a0c4069fdd4d1fb87a6cd58b8786210687d644a4bad6f8fee0bc5fb94294cffc323e97597be6a5e457a5dd27fe2ebf5c34aef3bb5c43ba0a7d931e7ab02b7c290c5d04a41c01d14d6fc1ba80bfedf71caa0f7e59b135fad73e28d4861d601f79ad32edc6f8d1978d8ecf787f3c9ac71b2404939827b16f3915c8b1445dd1ec012aaeff88789c396665a50df52b244ce5b100d9a29ce52903b8f7f3662c0d0599fd1a7071798b759be02d58e5c6e4626b477653655fb7f5d7bc0ad94dbfe131c9ba5a994c1605c03b9f5173f8205c580bff685e693b23ab4cc7b2e4b21282b14f65684747ad98c0d855a205a6e17b5bb4c2b07097ae32393690e4e07a7f3e25d6bd01c1fb973a67edfa4e1d4a7a96b68570dd9d3bdfbe8a5a69adbd17167533ddbd2a58d70ca1ccea6428770dbcfeb47ddffa99e8b5e69bd34641c1f1a033e86215447fd2927482b12a85f11ae1d8b2054d7f642a9ba526e5a7d8e3d81bd394c264666f4b4dc3ff9c1584f277ff31a29c1358d9a953e0ae2822a3d174a0ce3da386083ae06f02723aea03931a38116a8e4afbc36fb9c094eb340214881a6f838f8d66141e451b9a1bd250363e591bc4ac566123a379272c08c0511e29e1dd1bc06869f3fd151bada9b28a6a71970ae3580d5bb0ab76b38068f504659bc335be1bb2a285329f749303600211d6ef7e151ad861b946d99f36d20074d65426f68a6758270ff946dd387ed3b150199fd81fd2e76a70a2fe2d7a2f8899079068ce48c5380db7e69a1a91f244ed32400e8d9e3097ec2065570dbde88faaee4a938f0b4cc20f31f175df62bf6cd88968ef7e24912dbbf91869eb9b34498d7f6000ef9a62c9441f4177ab5da1428d647b6e3cea1ca8a91b1a1246c2e048654e350cbf3dd4daaaa2558ff9c505ce0fcbcf93601a725289c38724290cffddf87e5345b43a66eb5f9fef718b0df4bcfe82c466017c3d8f0bbfd5544ff2d834a6e653ae789561df44281c8510b4bad838d04ab4a8e84fc4fc022bbe8454b36273cec843731c1df6fce42947a029f61e030990c0002b6f2c9c552227c8785c0b53683de3e518123b270f595aad389951d1edbb9c6fb14cb4e479acff1ffac191da3d80a696b8be5919710c9137ecc0ca383d8666e30a356759a5299f44c2bfcd03a8df33de0e27d6038a9551cfc5ff43de0d42a6d033bf15f3a44d52f8a71554d1a2efb78042c1c9957256d7ea06b7751b40668feefff205c74f0f947ae0920aa746f17027bbef312708bf72fb23c12d0dcf6493584c1bdd0b5780017c038bc23fb6c25c560bb6da3775cf03502c07b987e64f8a2b84a870b5dd90c6aea7fad3d0a3ee46fda953dc085d272ee5855104b8bab8ed8bfd3338e75eb9ad8118f25c7e580fec613e30cf3eb7059e06d9be015709ba6c9de9dc9b6df8228b13f0439fa8d530aa9a4dc1d44abc3191c159a8816e7368fc5c6a0e57eb881d734c7a5459ba3be1b8a17b5ee6777ee42e962aee199f35ee2c2d4a39275e1dd6a8546daadc7ceab2c90667ad48c75bc7008ec2d7daa57562260d6d4509e67850e988b640569c050d3bedbd6c2de9b4f466e2d0c6f83c3c2392a5adcce1523e89f730a84f8cad28f84d1a0991f44aa4714f93088ec2a2836766d73569c7b0c1f70a067a3f0dff1d01661937aecb39e3d0f8e0ea282cffebbfdac63196eb13c4e53f144fc66a82cc0590f1d6d249c333420c24db92177c89cf0869346c34147dab6c3b94c325ef635d0e6d75c23906e71a7940e13364aef81b97108a4b209d372558d3bb0424ecb6a9a9ee28f7d1585c8af6f1256c812eb48515feda309a08f1a2954039ff0a60a2ab75717d2eb93024586837e552942eb63e0d6735d01258eb4dac6209370c109c1a1763dd742f3551276768648919f9093fd4e0cedff9442ac404e463eaea0ffe58a5085c987c093fd30e121218123457916ced3a7250a796a40451a4729125bce2ba5b6406e6626ecfb1d3f16287ba238feb575f60eba96443c60252d5927b81b73574ff1b7d424623b6cff5ce0d1b31b3d199c85da27f8736d990063f09dfef93402d880b2c5d7a9cdf45cbb4d1baf95be490f3dc9998c2c7ccfcc6e6395e7e09e6c44865834cd3e0968ffcc1d0f54406b55a8952cd8096e8968cdca3632b71546192c76472a66c4a8584eb748c1b3c30d52e8699adbef91329aefbf94d251d0b82bf42a648f73020881a914ea7c529802772b4b60617e9c1d9712a31d0ec3e92af4b97f50ec96e794486101a9e15daf8b7f13078d22767dc3b57bc0431ef39b3ca12b2932aa585bc856e8cf5496d78eaa50f06b483f416b31f78767bd25e260042e84c10e9cf9bb53a3f4fce11d703e90004949b55044907242f8eddef627cfc9642f4a828476074c298ea2d7b07ddb7b4a2b9f8f1e5a32fac7d105c5a12186da19ef5f6475763ee19aa670e7b45f37248fdfa796d6ae761dd77955851faa33675ee22e8174e0a126ac58b9998ccb5e4d12c3e00165533ddf710bf0ab0edf6ba1fecf9548ca1618fd980a4f9a35eeb5c1aa329a288378b9b5ed54b56075810cd22abf0c06ce0f1054805410375d6e41564b71b86cab6929c5c1cedb72e0b1237fdad44edbcfd326312caa49ed0c8f7c5a33986c89245fec75d0f9a34f744bf74d6e0f901c12ea25edd60c43d22f6644fa294534cac1c581b0cbf5d9765fc18fe6c223dcff4a85c7eeaf4cb1a9a889c236778b85e69d50d482743664bdeade11b4ced78c3d0b62ba07f98a898c6e89241ed6522fdfc430b75593673d43d695082b0114b25f231c8a141be953290b1a3855adc0146adee0b784fce2cf8243838bdcdbcf4e0dbcc2a9945deea1d02858a9e9dc54f0e818b81d024bd9b2e052a73fb59d037ab526c78faadfcdecc15f2a1d843e84aabc403e84b2fefbfbec982f22b89a2be560002d45ae12a8a2d00f0a3f55e26789a593fb8bdf20efb8a51e3d0dad9ad2caec39ea7392c58eebebc7201c78276f0127e43d5c8efe0200000022d69586a9e096efe80844c38841640238584936d8a96c0ba41dc0dc96a11623ff1e70ef54a9c43ec3cd0359dfdf55c8f8c306110d833d7de7a35f015369bf6d92b3b6f0f7dc717c84e51ce475df451b9a6a91c8d564aeb389267082b9cea77f09c6c6490084da3820f80d3e62bbd41a6540591c6c5cf2a18e4e829b82a6780b6b1f66d96fcfb1639a335a78f8c3ecf381148b2625859e514d35eb8c4acc98f7f8220e1827d7745f1f054691eeb1625e2d238ae03c93991058c1567be4938de2e60537749ee81f327f1f1e586ee3af4ccf53b29741c1bb0e774a1d27672ec27b43719d3710e9fd8634213738d98844717c8b1f707bd42f4077c9e59eb539f9cb32c11b47bcb7cb3efd3bf4994e90166a5ae380c821d2640fa99df59978e9b7e50f0b830943de787b1bf99e14edcdfe8565556ae2a8c0552d67898fd13551c007eb779edb60e85210a418cf0a4a41764fe9ece74f5d8000d168fab61588c5549113e8d8a059f17699d976fc7dc68cfd0ec404ef0c7eca459fbad1c40317d81b95a94b037cf96ba677697cfdce4c2c4e02cea296f25e556c02381ca891ddb6adcb0535e262b26290000c542e7616d63b211c16f86048079ca5167598aece3288f86658249e939cb6b59b6cdd3fce0e9ea81a3bb3f88908c600ea031b0028f12632d7ac2f81e54f7e7eb70ba70bc937571b242c4ef228f801b6a4376d11eabadaebb1322823eb30faf6cf21a8b38a769824e8b7009ff278f80ac2af39f0943a29458d127eabae81d2915557b09e3c49f8c22564edea93e8717306fb198dcc92eb3c9212f03dac94fa3fa1fa4e1dbd2119e024639f0ddc87cd906d3317c6ebc6e698257f73912ff46fe8d9adbd3f57ecc78cea5c1eb04ac5fd1bb79a53921fddaffd2d34f444b54208096cbd2aa3e26ca01359b05c10ff36e98e1ac97d51380c99e1b685928eced0d2f1e754001e7023d2473596feb7c7601619277dd7e844bd5544e7e360f8e4223fbd9e24b3fb69a34ced39bf7590fb853e44031d075fe647190ac7811522c73a6c6033457c14c415e4a84663d2540784a1cbb4a398f1d8612f4f3d334576c99d5721bbeac95cc34d18080e3b1365b6844152b8259c8d4618597f291f2b9e8812ab7729e108a8d44487f8993faabf6c6a8f49db727f17cdfec43b34c39cfdd3916fa6953e34f316100368c7b2836c11dcd4710986980356b7ec4ba23fab5cc5a8c6cacb61cc65570231407ca647946393031986cf4736280ed2d7976d66618fc240191455ae405f1d62145297179c040a707093fb8f60f5a3738b8bf78bbdf952478da7e9d3c892af5b83cd9dd4f00fcfa13beb9e6988e3c4b4e5300e3757a93efaef9023fb9d7442cb1a49d7efdec32ac1f98e6227cad38538f6383c3b6efca2fda7c101ec548c3549e7ac5e737478343ca47cdcd65acb71e0eade28c684b69785ae1fe31aaec713834b6635938d7d66426e965498978e4b467f6132daa6026c39dcbf95656b9be5c074badc18b5a74e12967b45e23099fa765ea5c8c18f0feae94755827e494f251ae96882b5c5f6d54713de02501faef1fcb59bf0d66f9d0cd3a493b139237aefdbd402a3df9dd5beb2887a055261a08047be52fa51f61636255870366e837f20d0f83b8557fa4a003647152ee27bd34b5af52743d4c431ff4a116ae1184c810e8397ef2a056845c6e3b5c0beafbf8f78488102412e04e47fb87be9a9ddc075ab519f424ebf821da659b18ae3b61a7b243ff94e3d1ba420cb342db7b8060937749892a7954d3ba5e63017703f5224602616ff6d3fec42444b2524f97dfa467d9db91681dce08de5ccb1ac2bf6cb5e6c1d586b2fc62e78b0bc23e1924a4f023adb39803fd6c3d52c40b13df9c6f54bb2b4ef88f5d0ffdfef13ae46dbf75aa6457da3bdc1781dc814b0b69debee7456aa7f75571caef87f624ef703fea75f136cc7f90af0ae558cf3de5e8cc92f3e803bd46e05f42e4167af8136db6982ad26a52778e1fefcbabe61a57f00cbf04e3c82445c04bbd8832b8bb9a7cb854a22f98cd7b422a7abafe6a00571539802e56f036d5a26d79a86cb100b90ae168d2406c2c0b9c5274ad69298e7983f4b30e006cf4882e90ca8af4e445dc06d0639231638dd39929065d920af913cc7284619fcacab0023893352468eec73d7014407e5d4bca9e49d412ffb12e68610c26206de0b3282e925b83389cbdfbc41cf279440a13838a1431ea4f1a371b6b143b914238773d171bc7b44c07729e8723fe51b8180fc9c9be6694477132cb82b22b2512518266781e687fcd460995ed581059d3c692ecbdc8daf3c76e5a5bc8e57973fed5fb3465a3dcb5557f92dba1e212f9bda66fc4829e10ce3e8b6c117b1214cb246211c861eaabf8ccaa94aedd58349399e619c2dc587719d7901d2cd85ced669d0ea898c4f127d1a4cf274aa0405d225605edf425dc9b7375c8ac2940bb369eec586097f0cc07940ecc8bd400976b9b36027a040be6e64a2fa4f7ba5d59ce9b4f76192d260d665290b20faa3a6a941939a0b3042ef4d8f9b980c71a13496b104965e1c3dab25cb46147bca6b70baa0237c8a5cd1c437e43a50302490462585410f65e03186df5fc2c5bcd89f6d6a4ac34ca6a84159b2910a7ba797fb09dbd3ab88c23951b1a91df8cfc2d13de85dc715e2a111458acc4d640a59c199faa2bb28ec3309864fd8a6997ac89833853101a08198aa6ab3e5167b4e8e55843efae1ecd3fc6507f3a97bf2f8c4c4da4896c788a17a5fe8d8c3f79fe41dd7f4497380f1ffc8f8d6cc2c2dead697e4947cfe680a0e2b5100743444536134cde4378b0b1fe6ddc09dfe8d618f93edffeb7d097a37a19248be0bf9c4f536a484a5fc96f18f2eb4f6462b20bee241ce16b4790c854bca10914e3ba98eb0970765571a8ad45baba39d20b8c1bbb7c65717e265f5fc5edefb130aada09aa7f2c50c45de6de7327faef192977f499b7aed9e73c2ecb97f7256f89fc8b4834670f798438fac5a5045d61a7f429eba77de37517b984b0acfbd6f494a1414b0fc040244bb62a19150e0c15e5315b2618d05429263dd1847accc5de9baca08edc921ed9a0af00175c118ab801da9980098fc4a2bf16ba73e580000b49129a5fba00a1f2c45c0d0939be83ad93569dd61330913e8b381f9aff6d6a584862d636c1a4989dd3fd14853bf033be56f21a3cf1eb95d7df7c6436ff3d5a8f472bf4a3fa8b0b0741d953d9644e0ec801d4154336357d2d1492c6d336b9101827c1401898ecdca5a66c6f727d23d3ebb95530ecfee0f7649c221d2c131e56d37a8d422b0803ed0d623a2de36e9279c3c1c806654fbce9305cbb44210e282fa53c72f813440fd0cbfff492716c4a06cf99f4809481d51a03a88911f48f25db6784e16f3a251d5fb75fca164911e4a88d1b904b5372d8660d309f347dce2000552a4789af371f3e67418433cdb0d69a4fc562514cb396141f31312fab85f68c1ecd9d03ba37b40934535cc3e53c71a3a51663a479eca63dc5c15a387e5753cfa806402b6426b8dcaace2553d219b2ae02bd45fd4fde6e3e1bd6370d3e8d558aea69854381f1dad0fe2bbf1a73043f03aafe81c3a3d386c758abcb45cc537bf40d459e138f418802ec61abcad5e333389d74ea941eb5f26b25ed7642e0135fd8e3e2fc998613023dd5b804e2cf1a80ea60b353535b1446e3ebb542c1c15d87c6f5a4716455c8a9f52380161a5d23e9678417fe7ed64760e14c1390bcf73e1d531bb3548d7b9df25b6f85512667af396fad73110d1ab69a8ecdddaf29dc3701a5d927e599f5c2af293a6b276da7a5c917298ea24c2366d5e91593605fcbc4d646200", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x2, {0x1, 0x1, 0x0, {0x6, 0x8, 0x8, 0x7, 0x7, 0x1ffffffffffe, 0x1004, 0x7, 0x7ffc, 0x2000, 0x8, r2, 0xee01, 0x7f, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000006500)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

28m52.740650567s ago: executing program 34 (id=2705):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffa0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc00000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)

28m16.27118439s ago: executing program 35 (id=2779):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814)
close(r4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB="0100000000000000000017000000540006803c0004"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50)
r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c)

26m54.735988725s ago: executing program 36 (id=3112):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfa, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

26m15.973047787s ago: executing program 37 (id=3193):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0418"], 0x1a)

25m31.948432556s ago: executing program 38 (id=3425):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)

22m26.653820311s ago: executing program 39 (id=3973):
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x208800, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

17m7.623575938s ago: executing program 40 (id=4693):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x3, 0x1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5400002a1341a11374f28f0496e5603537aec8c5c5790aa839cf81aff93fb4591c4a85a67c7d248212e9553c3f1acedbeca0ba7ce3b6648a4a9f37cea3a921e648f7926f1d48326790bcc7afb494caf0b1d2c560818024e8c3b4573b7e1157fe2f253e0cfb7f6e36c1f539256642413437d3f9348f374fdb2011f89479f692ff2dabf1394258f86c8a6c4021997e59dfd807cab3ab741bcc021b9db71e00fadf4324784d894aa1bf9e65e6bf649d49252a8e9cd5829607108fa919ad69935b20b1bfe1b0254e3f8eff", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00400000000600110006000000080015000c000000"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x8000004)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="c4010000", @ANYRES16, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x28, 0x4, 0x5c}, 0x2c)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000500)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44)
pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84000)
getpid()
write$P9_RGETLOCK(r4, 0x0, 0x2d)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000600)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14}}], 0x18}, 0x4040004)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680))
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)

11m0.722773978s ago: executing program 41 (id=5472):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a0000000200"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

10m54.453302694s ago: executing program 42 (id=5487):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000d40)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9m41.048109347s ago: executing program 2 (id=5660):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

9m39.712098568s ago: executing program 2 (id=5664):
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10)

9m37.446980835s ago: executing program 2 (id=5668):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, r4, 0x0, 0x8, &(0x7f0000000080))

9m35.111199266s ago: executing program 2 (id=5671):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, r0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0)

9m34.029173408s ago: executing program 2 (id=5674):
socket$phonet_pipe(0x23, 0x5, 0x2)
r0 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r0, 0x0, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x20, 0x4, 0x31384142, 0x3234564e, [0x10001, 0x4], [0x1000, 0x8], 0x13a}})
syz_init_net_socket$ax25(0x3, 0x3, 0xcd)
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000180)="8982afa718e799f0c47419086bd06ebb839436", 0x13}], 0x1, 0x0, 0x0, 0x8800}], 0x1, 0x20004014)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50)
socket$inet6_mptcp(0xa, 0x1, 0x106)

9m33.495980376s ago: executing program 2 (id=5677):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=@newqdisc={0x24, 0x15, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xfff1, 0x1}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008814}, 0x24004850)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x7)
getsockopt$ax25_int(r3, 0x101, 0x6, 0x0, &(0x7f00000002c0))

9m32.776015267s ago: executing program 43 (id=5677):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=@newqdisc={0x24, 0x15, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xfff1, 0x1}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008814}, 0x24004850)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x7)
getsockopt$ax25_int(r3, 0x101, 0x6, 0x0, &(0x7f00000002c0))

4m38.277787634s ago: executing program 9 (id=6306):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000003c0)={0x40, 0x10, 0x5, "7792a2a010"}, 0x0, 0x0, 0x0, 0x0})

4m35.268412657s ago: executing program 0 (id=6314):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8bf, 0x10008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x11, 0x11, &(0x7f0000000380)={{{@in6=@local, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xfffffffffffffe36)
writev(r0, 0x0, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffd)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x138, &(0x7f0000000480)})
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r6, r8, 0x0, 0x20000023892)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x9, '\x00', r5, r8, 0x1, 0x1}, 0x50)

4m33.911837208s ago: executing program 9 (id=6318):
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000002100080008000d000000", 0x24)
connect$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000080000000000000000000003000200000400000450e71000000000000300000000000007000000000000000000000003000000000300000003000000000000000400000000000008020000000000005f2e610000c90bcc9f980ab9f8e2281c794dc02635b5d5c45aa58c5ffb3b21ddeba9ef59063036297765e59cf50b587f5d51fe9baa79b5426dd49c06025e3d03982def35e3097d7bc16e830ca04b2692593f6b0efccf2090a559ccf7c47dca02a7156dc8f3e1c3fbbc19c3"], 0x0, 0x68}, 0x28)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0)

4m33.755355931s ago: executing program 0 (id=6319):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_submit(0x0, 0x0, 0x0)
getpid()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x5)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x40000000042201, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000000)=0x1)

4m32.490214996s ago: executing program 9 (id=6323):
socket$phonet_pipe(0x23, 0x5, 0x2)
r0 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r0, 0x0, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x20, 0x4, 0x31384142, 0x3234564e, [0x10001, 0x4], [0x1000, 0x8], 0x13a}})
syz_init_net_socket$ax25(0x3, 0x3, 0xcd)
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000180)="8982afa718e799f0c47419086bd06ebb839436", 0x13}], 0x1, 0x0, 0x0, 0x8800}], 0x1, 0x20004014)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50)
socket$inet6_mptcp(0xa, 0x1, 0x106)

4m32.078333109s ago: executing program 0 (id=6326):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
futex(&(0x7f00000001c0)=0x4, 0x80000000000b, 0x8000004, 0x0, &(0x7f0000048000), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0xfdf3, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={0x0, 0x30})
close(0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000))
ioctl$TIOCGPTPEER(r5, 0x5441, 0x6)

4m30.228613881s ago: executing program 0 (id=6327):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0)

4m29.530383119s ago: executing program 0 (id=6331):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8bf, 0x10008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x11, 0x11, &(0x7f0000000380)={{{@in6=@local, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xfffffffffffffe36)
writev(r0, 0x0, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffd)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x138, &(0x7f0000000480)})
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r6, r8, 0x0, 0x20000023892)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x9, '\x00', r5, r8, 0x1, 0x1}, 0x50)

4m28.691446929s ago: executing program 0 (id=6336):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x626)

4m27.292823428s ago: executing program 44 (id=6336):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x626)

4m26.77891416s ago: executing program 9 (id=6343):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0)

4m26.339112248s ago: executing program 9 (id=6344):
openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setresgid(0x0, 0xee01, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000040)={@remote, 0x0, 0x2, 0x0, 0x9, 0xc, 0xfffd}, 0x20)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1, 0x4782, 0x7)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2c, 0x71, 0xa6, 0x20, 0x2020, 0x2031, 0x3b23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x38, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0xe0, 0x0, 0xff, 0xd7, 0x10, 0x9}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})

4m25.448382073s ago: executing program 1 (id=6347):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f0000000500)="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", 0xf000}, {0x0, 0x55}], 0x2)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

4m23.523846147s ago: executing program 1 (id=6349):
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

4m21.973512335s ago: executing program 1 (id=6352):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000e00))

4m21.796796176s ago: executing program 9 (id=6353):
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8)
write$binfmt_aout(r1, 0x0, 0xff2e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"})
r2 = syz_open_pts(r1, 0x103100)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0)

4m20.860787749s ago: executing program 45 (id=6353):
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8)
write$binfmt_aout(r1, 0x0, 0xff2e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"})
r2 = syz_open_pts(r1, 0x103100)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0)

4m20.854663605s ago: executing program 1 (id=6355):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
r1 = open(0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0)

4m20.180048099s ago: executing program 1 (id=6360):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

4m17.636118546s ago: executing program 1 (id=6364):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x2d, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x38, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x4000000000000000, 0x1, 0x26}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

4m16.113292134s ago: executing program 46 (id=6364):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x2d, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x38, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x4000000000000000, 0x1, 0x26}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

29.679562483s ago: executing program 8 (id=6917):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0xa3, &(0x7f0000000640)={0x0, 0xe8cf, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f00000020c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1})
io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0)

22.069809144s ago: executing program 8 (id=6940):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
syz_open_dev$vim2m(0x0, 0x6, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x3, 0x8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xe0, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x1000003, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fda={0x66646185, 0x4, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@handle={0x73682a85, 0x100, 0x3}, @flat=@handle={0x73682a85, 0x1100, 0x3}, @fda={0x66646185, 0xfffffffffffffff9, 0x2, 0x35}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @register_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000900)={@flat=@binder={0x73622a85, 0x14, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x33}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}}, @increfs], 0x0, 0x0, 0x0})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})

21.206838231s ago: executing program 3 (id=6941):
r0 = socket(0x10, 0x3, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0xa)
fchdir(r2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)

21.007571766s ago: executing program 8 (id=6946):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb, 0x181501)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(r1, 0xd, 0x0, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
getpid()
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x20048084)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000180)=""/4)

19.804264759s ago: executing program 3 (id=6949):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
fchmod(0xffffffffffffffff, 0x101)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = fanotify_init(0x200, 0x0)
fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0)
r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000004)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x64, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x5, 0x9, 0x2f, 0x7}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x60}]}, 0x64}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

18.527149843s ago: executing program 7 (id=6953):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2)

14.898144991s ago: executing program 3 (id=6957):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000200)}, 0x0)

14.800146445s ago: executing program 7 (id=6958):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0)

13.804471971s ago: executing program 8 (id=6959):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_io_uring_setup(0x95, &(0x7f0000000140)={0x0, 0x204, 0x0, 0x0, 0x4}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x20102, 0x0, 0x28}, &(0x7f0000000500)='./file0\x00', 0x18})
io_uring_enter(r2, 0x4536, 0x6aaf, 0x0, 0x0, 0x0)

12.744115821s ago: executing program 7 (id=6962):
r0 = socket(0x10, 0x3, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0xa)
fchdir(r2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)

11.959854221s ago: executing program 3 (id=6964):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0)

10.066897037s ago: executing program 7 (id=6965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x104b)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
acct(&(0x7f00000001c0)='./file0\x00')
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084)
acct(0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000300)={@vsock={0x28, 0x0, 0x2711, @my=0x0}, {0x0, 0x6}, 0x0}, 0xa0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b3"], 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r7, 0x0, 0x0, 0x91, 0x2)
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x9, 0x15, 0x8, "3e5876e7b1077d3eea1c243d448b3c6320831ed8338708f7e7329ebb9a750b4d58197cf5d678705fbcd43eb784c36a8f1d5c2652b59e53f939f2d6d22ddc4532", "e79c16dfe9da3e67a9ec561d1b757f6f28d79a854ac7a51eeab38a4df4552cb98dc4c4da8f34c8bd13dad60b8edb074c07269fa5725cfbb3cb00ffe5b62f5da0", "d9ae4eb77de43148d5346142cb8c6b81e301778e8629c2931f45240a10d5df62", [0x8, 0x6]})

10.049278245s ago: executing program 3 (id=6966):
r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r4, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1})
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30)

10.03524252s ago: executing program 5 (id=6967):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x100000007, 0x220200)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x280000, @mcast1, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}, 0x4000010)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000})
r2 = syz_io_uring_setup(0x7418, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x80001000, 0x5cc}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
eventfd(0x80000b)
mknod$loop(0x0, 0x1000, 0x1)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000700)={0x1a})
unshare(0x64000600)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2})
io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

8.519172471s ago: executing program 5 (id=6969):
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40090)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[], 0x50}}, 0x2)

8.501150374s ago: executing program 4 (id=6970):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
syz_open_dev$vim2m(0x0, 0x6, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x3, 0x8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xe0, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x1000003, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fda={0x66646185, 0x4, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@handle={0x73682a85, 0x100, 0x3}, @flat=@handle={0x73682a85, 0x1100, 0x3}, @fda={0x66646185, 0xfffffffffffffff9, 0x2, 0x35}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @register_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000900)={@flat=@binder={0x73622a85, 0x14, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x33}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}}, @increfs], 0x0, 0x0, 0x0})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})

7.876421535s ago: executing program 7 (id=6971):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb, 0x181501)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(r1, 0xd, 0x0, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
getpid()
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x20048084)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000180)=""/4)

7.651972204s ago: executing program 5 (id=6972):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

7.375333203s ago: executing program 6 (id=6973):
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r2})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks'])
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0xb, 0x0, 0x0)
getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f00000002c0)=""/17, &(0x7f0000000240)=0x11)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1)

6.607950507s ago: executing program 4 (id=6974):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
getrusage(0x0, &(0x7f0000000100))
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8932, 0x0)
chdir(0x0)
open(0x0, 0x14937e, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.490776748s ago: executing program 5 (id=6975):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0)
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000001840), 0x3b, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

6.431482462s ago: executing program 6 (id=6976):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r4, &(0x7f00000004c0)}, 0x20)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, 0x0, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

4.975654077s ago: executing program 6 (id=6977):
r0 = socket(0x10, 0x3, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0xa)
fchdir(r2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)

4.908789927s ago: executing program 5 (id=6978):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, &(0x7f0000000000)='discard')
connect$inet6(r0, 0x0, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
inotify_init()
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
tkill(0x0, 0xb)

4.799503619s ago: executing program 4 (id=6979):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)

3.246616477s ago: executing program 6 (id=6980):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
getpid()
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000100)=0x1, 0x12)

3.246180286s ago: executing program 8 (id=6981):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000000108000a00", @ANYRES32], 0x48}}, 0x0)

3.207858555s ago: executing program 5 (id=6982):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x100000007, 0x220200)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x280000, @mcast1, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}, 0x4000010)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000})
r2 = syz_io_uring_setup(0x7418, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x80001000, 0x5cc}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
eventfd(0x80000b)
mknod$loop(0x0, 0x1000, 0x1)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000700)={0x1a})
unshare(0x64000600)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2})
io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

3.119650152s ago: executing program 4 (id=6983):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket(0x10, 0x3, 0x0)
ptrace(0x10, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x18)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xf, &(0x7f0000000400)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000080)='GPL\x00', 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x34, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0xffffffffffffffb8, 0x18, &(0x7f0000000200)={0x0, 0xffffffff}, 0x10}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)

2.770145734s ago: executing program 7 (id=6984):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000001c0)='P')

1.944935529s ago: executing program 4 (id=6985):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbcb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000180), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180))

1.524950265s ago: executing program 8 (id=6986):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$rds(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

1.469954902s ago: executing program 6 (id=6987):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r4, &(0x7f00000004c0)}, 0x20)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

898.805277ms ago: executing program 3 (id=6988):
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r2})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks'])
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0xb, 0x0, 0x0)
getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f00000002c0)=""/17, &(0x7f0000000240)=0x11)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1)

24.013983ms ago: executing program 4 (id=6989):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)

0s ago: executing program 6 (id=6990):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r4, &(0x7f00000004c0)}, 0x20)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, 0x0, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)

kernel console output (not intermixed with test programs):

0.939904][T24687] tipc: Enabled bearer <udp:syz2>, priority 10
[ 2010.952824][T24684] EXT4-fs: Ignoring removed bh option
[ 2011.096421][T24692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5959'.
[ 2011.799872][T24684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2012.078071][T21498] tipc: Node number set to 1
[ 2012.374783][T24698] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4192: comm syz.1.5958: Allocating blocks 497-513 which overlap fs metadata
[ 2012.484143][T24698] EXT4-fs (loop1): pa ffff888032504cb0: logic 256, phys. 385, len 8
[ 2012.492337][T24698] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5443: group 0, free 0, pa_free 1
[ 2015.533662][T12929] usb 1-1: USB disconnect, device number 23
[ 2018.312476][T24739] openvswitch: netlink: Unknown key attributes 1
[ 2019.192323][T18162] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2019.365147][T24750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5973'.
[ 2022.215310][T24776] overlayfs: missing 'lowerdir'
[ 2022.328099][T24777] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2022.544496][T24777] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2022.555980][T24777] overlayfs: failed to look up (tracing) for ino (-66)
[ 2027.816114][T24814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5988'.
[ 2028.979470][T24825] bond1 (unregistering): Released all slaves
[ 2029.289220][T21498] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 2030.393749][T21498] usb 2-1: Using ep0 maxpacket: 16
[ 2030.434808][T21498] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2030.570163][T21498] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2030.657417][T21498] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2030.727486][T21498] usb 2-1: Product: syz
[ 2030.743143][T21498] usb 2-1: Manufacturer: syz
[ 2030.752586][T21498] usb 2-1: SerialNumber: syz
[ 2030.781140][T21498] usb 2-1: config 0 descriptor??
[ 2030.833067][T21498] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2030.871474][T21498] em28xx 2-1:0.0: DVB interface 0 found: bulk
[ 2032.297971][T21498] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 2033.757568][T21498] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2033.805926][T24853] loop0: detected capacity change from 0 to 1024
[ 2033.851679][T21498] em28xx 2-1:0.0: board has no eeprom
[ 2033.941992][T21498] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2033.995083][T24868] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6006'.
[ 2034.811470][T21498] em28xx 2-1:0.0: dvb set to bulk mode.
[ 2034.821477][   T24] em28xx 2-1:0.0: Binding DVB extension
[ 2034.867387][T21498] usb 2-1: USB disconnect, device number 18
[ 2034.882709][T21498] em28xx 2-1:0.0: Disconnecting em28xx
[ 2034.938167][T24876] loop1: detected capacity change from 0 to 1024
[ 2034.963101][T24876] EXT4-fs: Ignoring removed bh option
[ 2034.982630][T24876] EXT4-fs: Ignoring removed nobh option
[ 2034.988263][T24876] EXT4-fs: Ignoring removed bh option
[ 2035.019660][   T24] em28xx 2-1:0.0: Registering input extension
[ 2035.036896][T21498] em28xx 2-1:0.0: Closing input extension
[ 2035.050357][T24876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2035.219054][T21498] em28xx 2-1:0.0: Freeing device
[ 2035.686895][T24882] vivid-007: disconnect
[ 2035.943063][T24878] vivid-007: reconnect
[ 2037.409098][T24890] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2037.479297][T24890] syzkaller0: entered promiscuous mode
[ 2037.485105][T24890] syzkaller0: entered allmulticast mode
[ 2037.750970][T24891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6010'.
[ 2037.969425][T24890] tipc: Resetting bearer <eth:syzkaller0>
[ 2038.279650][T24888] tipc: Resetting bearer <eth:syzkaller0>
[ 2038.372333][T24888] tipc: Disabling bearer <eth:syzkaller0>
[ 2040.524672][T21498] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 2040.693648][T21498] usb 1-1: Using ep0 maxpacket: 16
[ 2040.722231][T21498] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2040.754751][T21498] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2040.772073][T21498] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2040.787384][T21498] usb 1-1: Product: syz
[ 2040.794896][T21498] usb 1-1: Manufacturer: syz
[ 2040.799514][T21498] usb 1-1: SerialNumber: syz
[ 2040.807737][T21498] usb 1-1: config 0 descriptor??
[ 2040.817817][T21498] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2040.840385][T21498] em28xx 1-1:0.0: DVB interface 0 found: bulk
[ 2041.651969][T24933] ubi: mtd0 is already attached to ubi31
[ 2042.057254][T18162] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2042.322565][T21498] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 2042.483802][T21498] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2042.667430][T21498] em28xx 1-1:0.0: board has no eeprom
[ 2042.904759][T21498] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2042.990603][T21498] em28xx 1-1:0.0: dvb set to bulk mode.
[ 2043.054666][   T24] em28xx 1-1:0.0: Binding DVB extension
[ 2043.721281][T24948] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2043.826156][T24948] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 2043.930872][T21498] usb 1-1: USB disconnect, device number 24
[ 2043.955358][T24948] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2044.028141][T21498] em28xx 1-1:0.0: Disconnecting em28xx
[ 2044.042569][T24948] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 2044.053835][   T24] em28xx 1-1:0.0: Registering input extension
[ 2044.109180][T21498] em28xx 1-1:0.0: Closing input extension
[ 2044.257944][T21498] em28xx 1-1:0.0: Freeing device
[ 2046.601807][T21498] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[ 2046.994479][T21498] usb 1-1: config 150 has an invalid interface number: 204 but max is 2
[ 2047.009412][T21498] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[ 2047.069890][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 2047.093919][T24987] ubi: mtd0 is already attached to ubi31
[ 2047.133029][T21498] usb 1-1: config 150 has no interface number 0
[ 2047.157249][T21498] usb 1-1: config 150 interface 204 has no altsetting 0
[ 2047.188618][T21498] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[ 2047.217836][T21498] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2047.245329][T21498] usb 1-1: Product: syz
[ 2047.258480][T21498] usb 1-1: Manufacturer: syz
[ 2047.529071][T21498] usb 1-1: SerialNumber: syz
[ 2048.598568][T24972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6033'.
[ 2048.821571][T12929] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 2048.911338][T25008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6044'.
[ 2049.171537][T12929] usb 9-1: Using ep0 maxpacket: 16
[ 2049.647435][T12929] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2049.662525][T12929] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2049.691583][T12929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2049.719970][T12929] usb 9-1: Product: syz
[ 2049.724465][T12929] usb 9-1: Manufacturer: syz
[ 2049.729079][T12929] usb 9-1: SerialNumber: syz
[ 2049.752515][T12929] usb 9-1: config 0 descriptor??
[ 2049.793273][T12929] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2049.847539][T12929] em28xx 9-1:0.0: DVB interface 0 found: bulk
[ 2050.017733][T21498] xr_serial 1-1:150.204: skipping garbage
[ 2050.034000][T21498] xr_serial 1-1:150.204: xr_serial converter detected
[ 2050.244751][T21498] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[ 2050.272162][T21498] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[ 2051.041717][T21498] usb 1-1: USB disconnect, device number 25
[ 2053.274363][T21498] xr_serial 1-1:150.204: device disconnected
[ 2053.787575][T12929] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 2054.691766][T12929] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2054.715276][T12929] em28xx 9-1:0.0: board has no eeprom
[ 2054.801548][T12929] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2054.893786][T25030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2055.713403][T12929] em28xx 9-1:0.0: dvb set to bulk mode.
[ 2055.729820][ T5979] em28xx 9-1:0.0: Binding DVB extension
[ 2055.778673][T12929] usb 9-1: USB disconnect, device number 4
[ 2055.829608][T12929] em28xx 9-1:0.0: Disconnecting em28xx
[ 2056.183947][ T5979] em28xx 9-1:0.0: Registering input extension
[ 2056.222484][T12929] em28xx 9-1:0.0: Closing input extension
[ 2056.616456][T12929] em28xx 9-1:0.0: Freeing device
[ 2058.606224][T25060] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6057'.
[ 2059.345176][T25067] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2059.409115][T25068] ubi: mtd0 is already attached to ubi31
[ 2061.906048][T25085] loop7: detected capacity change from 0 to 1024
[ 2061.933263][T25085] EXT4-fs: Ignoring removed bh option
[ 2061.938893][T25085] EXT4-fs: Ignoring removed nobh option
[ 2061.991522][T25085] EXT4-fs: Ignoring removed bh option
[ 2062.104697][T25085] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2062.631615][T25091] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 2063.298315][T25096] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4192: comm syz.7.6063: Allocating blocks 497-513 which overlap fs metadata
[ 2063.432128][T25096] EXT4-fs (loop7): pa ffff88803adc01d0: logic 256, phys. 385, len 8
[ 2063.440332][T25096] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5443: group 0, free 0, pa_free 1
[ 2064.010582][T25107] vivid-007: disconnect
[ 2064.506796][T25103] vivid-007: reconnect
[ 2066.692303][T25125] x_tables: duplicate underflow at hook 1
[ 2067.798824][T25128] binder: 25126:25128 unknown command 0
[ 2067.841918][T25128] binder: 25126:25128 ioctl c0306201 200000000080 returned -22
[ 2067.860974][T25131] binder: 25126:25131 ioctl c0306201 2000000003c0 returned -14
[ 2068.212286][T24338] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2068.442022][T25140] autofs: Unknown parameter 'fd0x0000000000000000'
[ 2068.682020][T25147] fuse: Bad value for 'group_id'
[ 2068.688272][T25147] fuse: Bad value for 'group_id'
[ 2069.321335][T25154] vivid-007: disconnect
[ 2069.779469][T25148] vivid-007: reconnect
[ 2072.781796][T25175] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[ 2075.152421][T25185] loop8: detected capacity change from 0 to 1024
[ 2075.207536][T25185] EXT4-fs: Ignoring removed bh option
[ 2075.252323][T25185] EXT4-fs: Ignoring removed nobh option
[ 2075.291604][T25185] EXT4-fs: Ignoring removed bh option
[ 2075.392176][T25185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2076.069749][T25197] loop1: detected capacity change from 0 to 1024
[ 2076.072875][T25195] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4192: comm syz.8.6090: Allocating blocks 497-513 which overlap fs metadata
[ 2076.156179][T25195] EXT4-fs (loop8): pa ffff888032504bc8: logic 256, phys. 385, len 8
[ 2076.164333][T25195] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5443: group 0, free 0, pa_free 1
[ 2078.092458][T25209] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6095'.
[ 2078.800220][T25222] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2078.808962][T25222] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 2078.821554][T25222] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2078.829555][T25222] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 2078.935036][T23967] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 2079.313631][T23967] usb 5-1: Using ep0 maxpacket: 8
[ 2079.361741][T23967] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 2079.395860][T23967] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[ 2079.426581][T23967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2079.462528][T23967] usb 5-1: config 0 descriptor??
[ 2079.625089][T22902] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2079.682801][T25228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2079.698525][T25228] syzkaller0: entered promiscuous mode
[ 2079.707691][T25228] syzkaller0: entered allmulticast mode
[ 2079.754084][T25229] ubi: mtd0 is already attached to ubi31
[ 2079.763699][T25228] tipc: Resetting bearer <eth:syzkaller0>
[ 2079.817296][T25227] tipc: Resetting bearer <eth:syzkaller0>
[ 2080.101277][T25227] tipc: Disabling bearer <eth:syzkaller0>
[ 2080.851238][T23967] usbhid 5-1:0.0: can't add hid device: -71
[ 2080.871583][T23967] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 2080.900130][T23967] usb 5-1: USB disconnect, device number 13
[ 2080.969649][T25236] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2080.977022][T25236] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2081.041037][T25236] bridge0: entered allmulticast mode
[ 2081.085160][T25237] bridge_slave_1: left allmulticast mode
[ 2081.098299][T25237] bridge_slave_1: left promiscuous mode
[ 2081.122097][T25237] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2081.177023][T25237] bridge_slave_0: left allmulticast mode
[ 2081.186241][T25237] bridge_slave_0: left promiscuous mode
[ 2081.199048][T25237] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2081.671955][T23967] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[ 2082.116444][T23967] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[ 2082.139273][T23967] usb 10-1: config 0 has no interface number 0
[ 2082.152606][T23967] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2082.214825][T23967] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 2082.241758][T23967] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 2082.268981][T23967] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 2082.290339][T23967] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2082.311947][T23967] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 2082.321699][T23967] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2082.338770][T25252] loop8: detected capacity change from 0 to 1024
[ 2082.346874][T23967] usb 10-1: config 0 descriptor??
[ 2082.698925][T23967] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 2082.931213][T23967] usb 10-1: USB disconnect, device number 6
[ 2083.460566][T23967] ldusb 10-1:0.55: LD USB Device #0 now disconnected
[ 2084.981862][T25257] Bluetooth: hci2: command 0x0406 tx timeout
[ 2085.008830][T25268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6112'.
[ 2085.155001][T25276] loop1: detected capacity change from 0 to 1024
[ 2085.163009][T25276] EXT4-fs: Ignoring removed bh option
[ 2085.168715][T25276] EXT4-fs: Ignoring removed nobh option
[ 2085.175350][T25276] EXT4-fs: Ignoring removed bh option
[ 2085.402948][T25279] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[ 2086.123952][T25276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2086.793715][T25291] IPVS: nq: FWM 3 0x00000003 - no destination available
[ 2086.800900][    C1] IPVS: nq: FWM 3 0x00000003 - no destination available
[ 2087.043689][   T24] IPVS: starting estimator thread 0...
[ 2087.093247][T25293] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2087.101465][T25293] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 2087.118808][T25293] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2087.127789][T25293] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 2087.201925][T25296] IPVS: using max 23 ests per chain, 55200 per kthread
[ 2089.431109][T25310] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2091.188426][T18162] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2092.597578][T25339] loop1: detected capacity change from 0 to 1024
[ 2092.817974][T25344] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6133'.
[ 2094.480120][T25369] loop7: detected capacity change from 0 to 1024
[ 2094.499413][T25369] EXT4-fs: Ignoring removed bh option
[ 2094.511291][T25369] EXT4-fs: Ignoring removed nobh option
[ 2094.538319][T25369] EXT4-fs: Ignoring removed bh option
[ 2094.616229][T25369] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2095.196448][T25375] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4192: comm syz.7.6141: Allocating blocks 497-513 which overlap fs metadata
[ 2095.309192][T25375] EXT4-fs (loop7): pa ffff8880325049f8: logic 256, phys. 385, len 8
[ 2095.317312][T25375] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5443: group 0, free 0, pa_free 1
[ 2095.805167][T25383] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 2095.951504][ T5909] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 2096.124230][ T5909] usb 9-1: Using ep0 maxpacket: 8
[ 2096.150211][ T5909] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 2096.220542][ T5909] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[ 2096.264319][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2096.302491][ T5909] usb 9-1: config 0 descriptor??
[ 2096.806487][T25386] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[ 2097.136951][ T5909] usbhid 9-1:0.0: can't add hid device: -71
[ 2097.151540][ T5909] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 2097.182253][ T5909] usb 9-1: USB disconnect, device number 5
[ 2097.227263][T24338] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2097.558570][T25392] binder_alloc: 25391: binder_alloc_buf, no vma
[ 2099.335414][T25410] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6151'.
[ 2101.870957][T25435] netlink: 'syz.8.6149': attribute type 3 has an invalid length.
[ 2101.878970][T25435] netlink: 'syz.8.6149': attribute type 3 has an invalid length.
[ 2101.886809][T25435] netlink: 'syz.8.6149': attribute type 3 has an invalid length.
[ 2101.894670][T25435] netlink: 'syz.8.6149': attribute type 3 has an invalid length.
[ 2101.902736][T25435] netlink: 'syz.8.6149': attribute type 3 has an invalid length.
[ 2101.971803][T25435] netlink: 'syz.8.6149': attribute type 3 has an invalid length.
[ 2102.010337][T25435] netlink: 'syz.8.6149': attribute type 3 has an invalid length.
[ 2102.268605][T25435] netlink: 'syz.8.6149': attribute type 3 has an invalid length.
[ 2102.296790][T25435] netlink: 'syz.8.6149': attribute type 3 has an invalid length.
[ 2102.319335][T25435] netlink: 'syz.8.6149': attribute type 3 has an invalid length.
[ 2102.791226][T25446] ubi: mtd0 is already attached to ubi31
[ 2102.861502][T12929] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 2103.037023][T12929] usb 1-1: Using ep0 maxpacket: 8
[ 2103.071630][T12929] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 2103.131473][T12929] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[ 2103.196843][T12929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2103.700450][T12929] usb 1-1: config 0 descriptor??
[ 2104.551637][T12929] usbhid 1-1:0.0: can't add hid device: -71
[ 2104.557720][T12929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 2104.578895][T12929] usb 1-1: USB disconnect, device number 26
[ 2104.848399][T25439] tipc: Started in network mode
[ 2104.900942][T25439] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 2105.028955][T25439] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000
[ 2105.082228][T25439] tipc: Enabled bearer <udp:syz2>, priority 10
[ 2106.211753][ T5909] tipc: Node number set to 1
[ 2106.814668][T25467] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6169'.
[ 2108.511217][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 2111.573937][T25513] ubi: mtd0 is already attached to ubi31
[ 2111.881521][   T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 2112.091522][   T24] usb 10-1: Using ep0 maxpacket: 8
[ 2112.116626][   T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 2112.177336][   T24] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[ 2112.205921][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2112.241620][   T24] usb 10-1: config 0 descriptor??
[ 2113.523450][   T24] usbhid 10-1:0.0: can't add hid device: -71
[ 2113.669055][   T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 2113.680229][   T24] usb 10-1: USB disconnect, device number 7
[ 2113.991217][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6188'.
[ 2113.991255][T25540] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 2114.819391][T25553] loop2: detected capacity change from 0 to 7
[ 2115.115766][T25553] Dev loop2: unable to read RDB block 7
[ 2115.131466][T25553]  loop2: unable to read partition table
[ 2115.137332][T25553] loop2: partition table beyond EOD, truncated
[ 2115.171590][T25553] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2115.469478][T25558] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 2116.838879][T25573] ubi: mtd0 is already attached to ubi31
[ 2118.322472][T25579] ALSA: mixer_oss: invalid OSS volume ''
[ 2119.651509][ T5979] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 2120.023155][ T5979] usb 2-1: Using ep0 maxpacket: 8
[ 2120.079949][ T5979] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 2120.098331][ T5979] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[ 2120.109701][ T5979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2120.120004][T25600] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6206'.
[ 2120.200805][ T5979] usb 2-1: config 0 descriptor??
[ 2121.486866][ T5979] usbhid 2-1:0.0: can't add hid device: -71
[ 2121.495776][ T5979] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2121.518430][ T5979] usb 2-1: USB disconnect, device number 19
[ 2122.209921][T25615] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6211'.
[ 2124.690659][T25630] orangefs_devreq_write_iter: total:0: must be at least:8240:
[ 2128.318218][   T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 2128.582402][   T24] usb 2-1: Using ep0 maxpacket: 16
[ 2128.658577][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2128.781502][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2128.837423][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2128.872873][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2128.904821][   T24] usb 2-1: Product: syz
[ 2128.909021][   T24] usb 2-1: Manufacturer: syz
[ 2128.941816][   T24] usb 2-1: SerialNumber: syz
[ 2128.962769][   T24] usb 2-1: config 0 descriptor??
[ 2128.991577][T25668] overlayfs: failed to resolve './file1/file0': -2
[ 2128.992292][T11165] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[ 2129.014043][   T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2129.078246][   T24] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[ 2129.181475][T11165] usb 8-1: Using ep0 maxpacket: 8
[ 2129.207835][T11165] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 2129.234565][T11165] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[ 2129.721088][T11165] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2129.938307][   T24] em28xx 2-1:0.0: chip ID is em2874
[ 2129.940696][T11165] usb 8-1: config 0 descriptor??
[ 2130.352722][T25673] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2130.365916][T25673] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 2130.462630][T25680] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2130.491110][T25680] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2130.677127][T25680] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2130.697028][T25680] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2131.192794][T11165] usbhid 8-1:0.0: can't add hid device: -71
[ 2131.198844][T11165] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 2131.217429][T11165] usb 8-1: USB disconnect, device number 18
[ 2133.763543][T25711] vivid-007: disconnect
[ 2134.003378][T25700] vivid-007: reconnect
[ 2134.723080][T23282] usb 2-1: USB disconnect, device number 20
[ 2134.750649][T23282] em28xx 2-1:0.0: Disconnecting em28xx
[ 2134.842867][T23282] em28xx 2-1:0.0: Freeing device
[ 2135.046615][T25725] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6247'.
[ 2136.188221][   T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 2136.353713][   T24] usb 1-1: Using ep0 maxpacket: 8
[ 2136.377273][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 2136.440261][   T24] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[ 2136.492027][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2136.535176][   T24] usb 1-1: config 0 descriptor??
[ 2137.151733][   T24] corsair 0003:1B1C:1B09.000E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.0-1/input0
[ 2137.921719][   T24] usb 1-1: USB disconnect, device number 27
[ 2142.335443][T25793] loop8: detected capacity change from 0 to 1024
[ 2142.346845][T25793] EXT4-fs: Ignoring removed bh option
[ 2142.352540][T25793] EXT4-fs: Ignoring removed nobh option
[ 2142.358229][T25793] EXT4-fs: Ignoring removed bh option
[ 2142.561670][ T5909] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 2142.592040][T25793] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2142.742652][ T5909] usb 10-1: Using ep0 maxpacket: 8
[ 2142.833647][ T5909] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 2143.016737][ T5909] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[ 2143.301538][ T5909] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2143.541137][ T5909] usb 10-1: config 0 descriptor??
[ 2144.825660][ T5909] corsair 0003:1B1C:1B09.000F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.9-1/input0
[ 2145.079650][ T5909] usb 10-1: USB disconnect, device number 8
[ 2145.099244][T25815] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4192: comm syz.8.6266: Allocating blocks 497-513 which overlap fs metadata
[ 2145.362579][T25823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6272'.
[ 2145.425211][T25815] EXT4-fs (loop8): pa ffff8880325043a0: logic 256, phys. 385, len 8
[ 2145.433399][T25815] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5443: group 0, free 0, pa_free 1
[ 2146.322265][T25834] binder_alloc: 25833: binder_alloc_buf, no vma
[ 2147.113625][T25844] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6280'.
[ 2147.991792][   T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 2148.354707][   T24] usb 5-1: Using ep0 maxpacket: 32
[ 2148.437642][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2148.557176][   T24] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2148.651507][   T24] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2149.000408][   T24] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2149.013587][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2149.020221][   T24] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 2149.029312][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2149.040414][   T24] usb 5-1: config 0 descriptor??
[ 2149.172885][T22902] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2149.854713][   T24] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0
[ 2149.867546][   T24] hid-thrustmaster 0003:044F:B65D.0010: item fetching failed at offset 4/5
[ 2149.885321][   T24] hid-thrustmaster 0003:044F:B65D.0010: parse failed with error -22
[ 2149.894578][   T24] hid-thrustmaster 0003:044F:B65D.0010: probe with driver hid-thrustmaster failed with error -22
[ 2149.908695][   T24] usb 5-1: USB disconnect, device number 14
[ 2150.113746][T25868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6288'.
[ 2151.271621][T25879] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2151.462239][ T5979] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 2151.634430][ T5979] usb 10-1: Using ep0 maxpacket: 8
[ 2151.666916][ T5979] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 2151.712303][ T5979] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[ 2151.729576][ T5979] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2151.814124][ T5979] usb 10-1: config 0 descriptor??
[ 2151.857972][T25892] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6295'.
[ 2152.855539][ T5979] corsair 0003:1B1C:1B09.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.9-1/input0
[ 2152.897936][ T5979] usb 10-1: USB disconnect, device number 9
[ 2153.094051][T25905] loop4: detected capacity change from 0 to 1024
[ 2153.631849][T25905] EXT4-fs: Ignoring removed bh option
[ 2153.637607][T25905] EXT4-fs: Ignoring removed nobh option
[ 2153.650727][T25905] EXT4-fs: Ignoring removed bh option
[ 2153.727822][T25905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2155.362811][T25925] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2155.507523][T25926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6303'.
[ 2156.141689][ T5979] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 2156.321503][ T5979] usb 10-1: Using ep0 maxpacket: 32
[ 2156.386194][ T5979] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2157.223442][ T5979] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2157.251856][ T5979] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2157.261020][ T5979] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2157.284384][ T5979] usb 10-1: config 0 descriptor??
[ 2157.303533][ T5979] hub 10-1:0.0: USB hub found
[ 2157.434603][T25947] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6310'.
[ 2157.531530][ T5979] hub 10-1:0.0: 1 port detected
[ 2158.401517][T23282] hub 10-1:0.0: activate --> -90
[ 2158.847030][T23671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2159.085331][T23282] usb 10-1-port1: config error
[ 2159.086078][ T5909] usb 10-1: USB disconnect, device number 10
[ 2159.826054][T25966] binder_alloc: 25963: binder_alloc_buf, no vma
[ 2160.808089][   T30] audit: type=1800 audit(2000001971.421:2111): pid=25981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6317" name="SYSV798dd818" dev="tmpfs" ino=0 res=0 errno=0
[ 2160.828491][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2162.844093][T26000] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6325'.
[ 2164.581589][T26015] binder_alloc: 26014: binder_alloc_buf, no vma
[ 2165.977168][T15083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2166.273418][T15083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2166.429372][T15083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2166.650573][T15083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2167.131979][T15083] bridge_slave_1: left allmulticast mode
[ 2167.151524][T15083] bridge_slave_1: left promiscuous mode
[ 2167.198861][T15083] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2167.378062][T15083] bridge_slave_0: left allmulticast mode
[ 2167.403693][T15083] bridge_slave_0: left promiscuous mode
[ 2167.439498][T15083] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2167.639640][T26055] vivid-007: disconnect
[ 2168.365935][T26039] vivid-007: reconnect
[ 2168.629214][T25257] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2168.638881][T25257] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2168.646657][T25257] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2168.655551][T25257] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2168.666744][T25257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2168.681845][T20247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2168.909992][T20247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2168.917515][T20247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2168.925927][T20247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2168.933753][T20247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2170.008344][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 2170.838138][T15083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2170.873026][T15083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2170.985922][T15083] bond0 (unregistering): Released all slaves
[ 2171.002887][T25257] Bluetooth: hci3: command tx timeout
[ 2171.971233][T15083] tipc: Disabling bearer <udp:syz2>
[ 2171.976822][T15083] tipc: Left network mode
[ 2173.061668][T25257] Bluetooth: hci3: command tx timeout
[ 2173.236352][T15083] hsr_slave_0: left promiscuous mode
[ 2173.539566][T15083] hsr_slave_1: left promiscuous mode
[ 2173.540116][T20247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2173.550078][T15083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2173.561965][T20247] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2173.570528][T15083] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2173.570581][T20247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2173.588956][T20247] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2173.598685][T26102] ubi: mtd0 is already attached to ubi31
[ 2173.615089][T15083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2173.623368][T20247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2173.631301][T15083] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2173.671459][T23967] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[ 2173.699586][T15083] veth1_macvtap: left promiscuous mode
[ 2173.707249][T15083] veth0_macvtap: left promiscuous mode
[ 2173.713298][T15083] veth1_vlan: left promiscuous mode
[ 2173.718994][T15083] veth0_vlan: left promiscuous mode
[ 2173.851774][T23967] usb 8-1: Using ep0 maxpacket: 16
[ 2173.867939][T23967] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2173.879647][T23967] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2173.895217][T23967] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2173.919311][T23967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2173.951021][T23967] usb 8-1: Product: syz
[ 2173.967162][T23967] usb 8-1: Manufacturer: syz
[ 2173.984749][T23967] usb 8-1: SerialNumber: syz
[ 2174.019201][T23967] usb 8-1: config 0 descriptor??
[ 2174.171880][T23967] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2174.181290][T23967] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[ 2175.143441][T20247] Bluetooth: hci3: command tx timeout
[ 2175.282531][T23967] em28xx 8-1:0.0: chip ID is em2874
[ 2175.427425][T15083] team0 (unregistering): Port device team_slave_1 removed
[ 2175.481949][T15083] team0 (unregistering): Port device team_slave_0 removed
[ 2175.701900][T20247] Bluetooth: hci5: command tx timeout
[ 2176.106058][T26112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2176.142901][T26112] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2176.179847][T26112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2176.192018][T26112] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2176.917535][   T24] usb 8-1: USB disconnect, device number 19
[ 2176.958184][   T24] em28xx 8-1:0.0: Disconnecting em28xx
[ 2177.230574][   T24] em28xx 8-1:0.0: Freeing device
[ 2177.238247][T20247] Bluetooth: hci3: command tx timeout
[ 2177.686761][T26062] chnl_net:caif_netlink_parms(): no params data found
[ 2177.782819][T20247] Bluetooth: hci5: command tx timeout
[ 2178.742497][T15083] IPVS: stop unused estimator thread 0...
[ 2179.078784][T26062] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2179.114906][T26062] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2179.154412][T26062] bridge_slave_0: entered allmulticast mode
[ 2179.174863][T26062] bridge_slave_0: entered promiscuous mode
[ 2179.203502][T26062] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2179.210854][T26062] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2179.219707][T26062] bridge_slave_1: entered allmulticast mode
[ 2179.242619][T26062] bridge_slave_1: entered promiscuous mode
[ 2179.564037][T26147] loop6: detected capacity change from 0 to 524287487
[ 2179.581860][T26147] buffer_io_error: 5 callbacks suppressed
[ 2179.581884][T26147] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2179.611599][T26147] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2179.623141][T26145] ubi: mtd0 is already attached to ubi31
[ 2179.639476][T26147] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2179.669920][T26147] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2179.701416][T26147] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2179.712374][T25257] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2179.731439][T25257] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2179.740479][T25257] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2179.750657][T25257] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2179.761251][T25257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2179.778560][T26147] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2179.791126][T26147] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2179.804694][T26147] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2179.819543][T26062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2179.839548][T26147] ldm_validate_partition_table(): Disk read failed.
[ 2179.847006][T26147] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2179.856172][T26147] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2179.864584][T25257] Bluetooth: hci5: command tx timeout
[ 2179.871183][T26147] Dev loop6: unable to read RDB block 0
[ 2179.878466][T26147]  loop6: unable to read partition table
[ 2179.884497][T26147] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 2179.934617][T15083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2179.998447][T26062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2180.333262][T26162] loop2: detected capacity change from 0 to 7
[ 2180.345519][T26162] Dev loop2: unable to read RDB block 7
[ 2180.351778][T26162]  loop2: unable to read partition table
[ 2180.358849][T26162] loop2: partition table beyond EOD, truncated
[ 2180.376887][T26162] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2181.156589][T26100] chnl_net:caif_netlink_parms(): no params data found
[ 2181.243867][T15083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2181.312025][T26062] team0: Port device team_slave_0 added
[ 2181.320517][T26062] team0: Port device team_slave_1 added
[ 2181.862204][T25257] Bluetooth: hci1: command tx timeout
[ 2181.941484][T25257] Bluetooth: hci5: command tx timeout
[ 2181.955113][T15083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2182.848176][T26062] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2182.861613][T26062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2182.888205][T26062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2183.310820][T15083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2183.555259][T26062] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2183.571961][T26062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2183.631433][T26062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2183.944222][T25257] Bluetooth: hci1: command tx timeout
[ 2184.040776][T26062] hsr_slave_0: entered promiscuous mode
[ 2184.054640][T26062] hsr_slave_1: entered promiscuous mode
[ 2184.063254][T26062] debugfs: 'hsr0' already exists in 'hsr'
[ 2184.071194][T26062] Cannot create hsr debugfs directory
[ 2184.086840][T26100] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2184.097438][T26100] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2184.106137][T26100] bridge_slave_0: entered allmulticast mode
[ 2184.119592][T26100] bridge_slave_0: entered promiscuous mode
[ 2184.143072][T26100] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2184.157795][T26100] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2184.165325][T26100] bridge_slave_1: entered allmulticast mode
[ 2184.175030][T26100] bridge_slave_1: entered promiscuous mode
[ 2184.460466][T26100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2184.769414][T26193] tmpfs: Unknown parameter ''
[ 2184.978376][T26100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2185.515358][T26100] team0: Port device team_slave_0 added
[ 2185.594476][T26201] loop6: detected capacity change from 0 to 524287487
[ 2185.625147][T26201] buffer_io_error: 6 callbacks suppressed
[ 2185.625211][T26201] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2185.670858][T26201] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2185.693896][T26100] team0: Port device team_slave_1 added
[ 2185.698429][T26201] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2185.736765][T26201] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2185.764737][T26201] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2185.787661][T26201] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2185.819777][T26201] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2185.845520][T26201] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2185.883533][T26201] ldm_validate_partition_table(): Disk read failed.
[ 2185.916034][T26201] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2185.945967][T26100] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2185.960169][T26100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2185.964987][T26201] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2186.007980][T26206] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2186.026698][T25257] Bluetooth: hci1: command tx timeout
[ 2186.032838][T26100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2186.089936][T26201] Dev loop6: unable to read RDB block 0
[ 2186.096162][T26201]  loop6: unable to read partition table
[ 2186.102268][T26201] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 2186.127078][T26197] ALSA: mixer_oss: invalid OSS volume ''
[ 2186.254799][T26100] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2186.279743][T26100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2186.353806][T26100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2186.673757][T15083] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2188.060781][T26151] chnl_net:caif_netlink_parms(): no params data found
[ 2188.101736][T25257] Bluetooth: hci1: command tx timeout
[ 2188.244764][T26100] hsr_slave_0: entered promiscuous mode
[ 2188.262336][T26100] hsr_slave_1: entered promiscuous mode
[ 2188.268832][T26100] debugfs: 'hsr0' already exists in 'hsr'
[ 2188.291626][T26100] Cannot create hsr debugfs directory
[ 2188.344722][T26220] CIFS: VFS: Malformed UNC in devname
[ 2188.360638][T15083] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2189.216115][T15083] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2190.048741][T15083] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2192.295773][T26242] loop8: detected capacity change from 0 to 1024
[ 2193.037151][T26246] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2193.135019][T26151] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2193.154485][T26151] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2193.169522][T26151] bridge_slave_0: entered allmulticast mode
[ 2193.192136][T26151] bridge_slave_0: entered promiscuous mode
[ 2193.269854][T26250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6397'.
[ 2193.287964][T26151] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2193.313346][T26151] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2193.560174][T26151] bridge_slave_1: entered allmulticast mode
[ 2193.589911][T26151] bridge_slave_1: entered promiscuous mode
[ 2193.899012][T26151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2193.976364][T26151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2194.270001][T26253] ALSA: mixer_oss: invalid OSS volume ''
[ 2194.315194][T26151] team0: Port device team_slave_0 added
[ 2194.751968][T26266] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2194.759858][T26266] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 2194.781381][T26266] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2194.789258][T26266] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 2195.295269][T26151] team0: Port device team_slave_1 added
[ 2195.596845][T15083] bridge_slave_1: left allmulticast mode
[ 2195.603320][T15083] bridge_slave_1: left promiscuous mode
[ 2195.609188][T15083] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2195.622732][T15083] bridge_slave_0: left allmulticast mode
[ 2195.628606][T15083] bridge_slave_0: left promiscuous mode
[ 2195.635628][T15083] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2196.361611][T15083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2196.378619][T15083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2196.389826][T15083] bond0 (unregistering): Released all slaves
[ 2197.536577][T26282] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2198.283087][T15083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2198.296060][T15083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2198.306881][T15083] bond0 (unregistering): Released all slaves
[ 2198.348693][T26151] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2198.371675][T26151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2198.411816][T26151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2198.435985][T26151] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2198.443044][T26151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2198.470866][T26151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2198.619345][T15083] tipc: Disabling bearer <udp:syz2>
[ 2198.624889][T15083] tipc: Left network mode
[ 2198.734669][T15083] tipc: Disabling bearer <udp:syz2>
[ 2198.749519][T15083] tipc: Left network mode
[ 2198.847231][T26151] hsr_slave_0: entered promiscuous mode
[ 2198.856158][T26151] hsr_slave_1: entered promiscuous mode
[ 2198.867443][T26151] debugfs: 'hsr0' already exists in 'hsr'
[ 2198.876284][T26151] Cannot create hsr debugfs directory
[ 2199.112712][T26062] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2199.126827][T26062] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2199.530354][T26062] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2199.593161][T26062] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2200.130901][T26301] loop8: detected capacity change from 0 to 1024
[ 2200.815982][T15083] hsr_slave_0: left promiscuous mode
[ 2200.913971][T15083] hsr_slave_1: left promiscuous mode
[ 2201.082361][T15083] hsr_slave_0: left promiscuous mode
[ 2201.089632][T15083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2201.097164][T15083] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2201.314624][T15083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2201.389780][T15083] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2201.784290][T15083] veth1_macvtap: left promiscuous mode
[ 2201.789867][T15083] veth0_macvtap: left promiscuous mode
[ 2201.795692][T15083] veth1_vlan: left promiscuous mode
[ 2201.801029][T15083] veth0_vlan: left promiscuous mode
[ 2201.810171][T15083] veth1_macvtap: left promiscuous mode
[ 2201.816199][T15083] veth0_macvtap: left promiscuous mode
[ 2201.822309][T15083] veth1_vlan: left promiscuous mode
[ 2201.827709][T15083] veth0_vlan: left promiscuous mode
[ 2202.658879][T26313] ALSA: mixer_oss: invalid OSS volume ''
[ 2202.976821][T15083] team0 (unregistering): Port device team_slave_1 removed
[ 2203.027851][T15083] team0 (unregistering): Port device team_slave_0 removed
[ 2204.478170][T15083] team0 (unregistering): Port device team_slave_1 removed
[ 2204.520269][T15083] team0 (unregistering): Port device team_slave_0 removed
[ 2204.641473][   T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 2204.811604][   T24] usb 9-1: Using ep0 maxpacket: 32
[ 2204.822139][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2204.834126][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2204.844301][   T24] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2204.853491][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2204.864544][   T24] usb 9-1: config 0 descriptor??
[ 2204.872716][   T24] hub 9-1:0.0: USB hub found
[ 2205.092506][   T24] hub 9-1:0.0: 1 port detected
[ 2205.950171][T26329] netlink: 180 bytes leftover after parsing attributes in process `syz.7.6416'.
[ 2206.271780][   T24] hub 9-1:0.0: activate --> -90
[ 2206.331594][T26062] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2206.438178][T26062] 8021q: adding VLAN 0 to HW filter on device team0
[ 2206.458228][T13435] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2206.465452][T13435] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2206.477955][ T5979] usb 9-1: USB disconnect, device number 6
[ 2206.584449][T14234] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2206.591699][T14234] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2206.724623][   T24] hub 9-1:0.0: hub_ext_port_status failed (err = -71)
[ 2207.279217][T26100] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2207.801817][T26341] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 2208.020850][T26100] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2208.033644][T26100] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2208.165279][T26100] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2208.225999][T15083] IPVS: stop unused estimator thread 0...
[ 2208.461188][T26151] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2208.528264][T26151] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2208.539022][T26360] loop7: detected capacity change from 0 to 1024
[ 2208.556830][T26360] EXT4-fs: Ignoring removed bh option
[ 2208.571704][T26360] EXT4-fs: Ignoring removed nobh option
[ 2208.586498][T26360] EXT4-fs: Ignoring removed bh option
[ 2208.636323][T26151] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2208.652639][T26151] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2208.669132][T26360] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2209.105186][T26062] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2209.203519][T26368] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4192: comm syz.7.6422: Allocating blocks 497-513 which overlap fs metadata
[ 2209.321661][T26368] EXT4-fs (loop7): pa ffff888032504910: logic 256, phys. 385, len 8
[ 2209.330042][T26368] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5443: group 0, free 0, pa_free 1
[ 2209.860468][T26062] veth0_vlan: entered promiscuous mode
[ 2209.917597][T26100] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2210.134245][T26062] veth1_vlan: entered promiscuous mode
[ 2210.309841][T26100] 8021q: adding VLAN 0 to HW filter on device team0
[ 2210.328707][T26151] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2210.376869][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2210.384026][ T8821] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2210.465501][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2210.472702][ T8821] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2210.564584][T26151] 8021q: adding VLAN 0 to HW filter on device team0
[ 2210.993553][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2211.000791][ T8821] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2211.060834][T26062] veth0_macvtap: entered promiscuous mode
[ 2211.103953][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2211.111121][ T8821] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2211.166584][T26062] veth1_macvtap: entered promiscuous mode
[ 2211.346473][T26062] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2211.569949][T26062] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2211.630313][ T8821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2211.663499][ T8821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2211.758008][ T8821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2211.785993][T26386] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2211.801696][ T8821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2211.949213][T24338] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2212.831749][T13413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2212.839604][T13413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2213.017310][T13413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2213.053386][T13413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2213.462715][T26404] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2213.721985][T26100] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2213.744134][T26401] tipc: Started in network mode
[ 2213.749037][T26401] tipc: Node identity d669974c21d5, cluster identity 4711
[ 2213.761602][T26401] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2213.774982][T26405] syzkaller0: entered promiscuous mode
[ 2213.780546][T26405] syzkaller0: entered allmulticast mode
[ 2213.804093][T26151] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2213.871658][T26400] tipc: Resetting bearer <eth:syzkaller0>
[ 2214.045476][T26400] tipc: Disabling bearer <eth:syzkaller0>
[ 2214.401747][T23967] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 2214.671637][T23967] usb 4-1: Using ep0 maxpacket: 32
[ 2214.772031][T23967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2214.793327][T23967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2214.841623][T23967] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2214.938894][T23967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2215.417692][T23967] usb 4-1: config 0 descriptor??
[ 2215.471137][T23967] hub 4-1:0.0: USB hub found
[ 2216.108365][T23967] hub 4-1:0.0: 1 port detected
[ 2216.478290][T26151] veth0_vlan: entered promiscuous mode
[ 2216.556112][T26151] veth1_vlan: entered promiscuous mode
[ 2216.576642][T26100] veth0_vlan: entered promiscuous mode
[ 2216.620154][T26100] veth1_vlan: entered promiscuous mode
[ 2216.658989][T26151] veth0_macvtap: entered promiscuous mode
[ 2216.683932][T26151] veth1_macvtap: entered promiscuous mode
[ 2216.715960][T26151] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2216.737266][T26151] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2216.751603][T21498] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 2216.767086][T13413] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2216.776800][T13413] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2216.796127][T13413] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2216.808228][T13413] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2216.808408][T23967] hub 4-1:0.0: activate --> -90
[ 2216.833240][T26100] veth0_macvtap: entered promiscuous mode
[ 2216.846688][T26100] veth1_macvtap: entered promiscuous mode
[ 2216.897882][T26100] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2216.975746][T26100] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2216.993118][T13418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2217.010490][ T5979] usb 4-1: USB disconnect, device number 12
[ 2217.036173][T13418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2217.055493][T14234] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2217.088155][T14234] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2217.194205][   T24] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[ 2217.201658][T21498] usb 9-1: Using ep0 maxpacket: 32
[ 2217.217730][T21498] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[ 2217.227816][T21498] usb 9-1: config 0 has no interface number 0
[ 2217.279678][T21498] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 2217.352131][T14234] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2217.396315][T21498] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2217.487773][T21498] usb 9-1: Product: syz
[ 2217.522962][T21498] usb 9-1: Manufacturer: syz
[ 2217.551542][T13418] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2217.567342][T21498] usb 9-1: SerialNumber: syz
[ 2217.919565][T13413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2217.948666][T13413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2218.127561][T21498] usb 9-1: config 0 descriptor??
[ 2218.154683][T21498] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 2218.418571][T21498] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 2218.426009][T26446] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 2218.582286][T13413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2218.600945][T13413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2218.644004][T21498] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 2218.777446][ T8821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2218.800951][ T8821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2218.874059][T26461] tipc: Started in network mode
[ 2218.881927][T26460] overlayfs: failed to resolve './file1/file0': -2
[ 2218.891263][T26461] tipc: Node identity c6679f40982c, cluster identity 4711
[ 2218.908619][    C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 2218.909364][ T5979] usb 9-1: USB disconnect, device number 7
[ 2218.921866][T26461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2218.952623][T26463] syzkaller0: entered promiscuous mode
[ 2218.958214][T26463] syzkaller0: entered allmulticast mode
[ 2218.975126][ T5979] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 2218.979332][T26466] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2219.023808][T26458] tipc: Resetting bearer <eth:syzkaller0>
[ 2219.036089][ T5979] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 2219.062604][ T5979] quatech2 9-1:0.51: device disconnected
[ 2219.942905][T26458] tipc: Disabling bearer <eth:syzkaller0>
[ 2221.351455][T12929] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 2221.921292][T12929] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 2222.022062][T23958] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[ 2222.280606][T23958] usb 8-1: Using ep0 maxpacket: 32
[ 2222.382277][T23958] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2222.493705][T23958] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2222.561296][T26497] loop6: detected capacity change from 0 to 524287487
[ 2222.596071][T23958] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2222.635057][T26497] buffer_io_error: 6 callbacks suppressed
[ 2222.635083][T26497] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2222.649630][T12929] usb 9-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[ 2222.658884][T12929] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2222.662988][T23958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2222.798795][T26497] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2222.938066][T23958] usb 8-1: config 0 descriptor??
[ 2222.949430][T12929] usb 9-1: config 0 descriptor??
[ 2222.955398][T23958] hub 8-1:0.0: USB hub found
[ 2222.965379][T26497] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2223.799931][T26497] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2223.809518][T23958] hub 8-1:0.0: 1 port detected
[ 2223.853371][T26497] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2223.882654][T26497] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2223.890796][T12929] usbhid 9-1:0.0: can't add hid device: -71
[ 2223.908913][T26497] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2223.917297][T12929] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 2223.927932][T12929] usb 9-1: USB disconnect, device number 8
[ 2223.928574][T26497] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2223.946393][T26497] ldm_validate_partition_table(): Disk read failed.
[ 2223.957163][T26497] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2223.973835][T26497] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2223.986176][T26497] Dev loop6: unable to read RDB block 0
[ 2223.995780][T26510] overlayfs: failed to resolve './file1/file0': -2
[ 2223.996690][T26497]  loop6: unable to read partition table
[ 2224.024816][T26497] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 2224.356572][T26506] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2224.362599][T26506] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 2224.370962][T26511] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2224.377049][T26511] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 2225.169392][T26511] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 2225.211847][T26506] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2225.211901][T26511] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2225.217796][T26506] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 2225.223840][T26511] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 2225.329262][T26511] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 2225.378387][T26506] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2225.384851][T26506] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 2225.507322][T26525] validate_nla: 40 callbacks suppressed
[ 2225.507350][T26525] netlink: 'syz.6.6456': attribute type 12 has an invalid length.
[ 2226.073678][T12929] usb 8-1: USB disconnect, device number 20
[ 2226.152393][T26533] tipc: Started in network mode
[ 2226.159084][T26534] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2226.176262][T26533] tipc: Node identity 4687831c4e9d, cluster identity 4711
[ 2226.225082][T26533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2226.282077][T26535] syzkaller0: entered promiscuous mode
[ 2226.303664][T26535] syzkaller0: entered allmulticast mode
[ 2228.481648][T26531] tipc: Resetting bearer <eth:syzkaller0>
[ 2228.545473][T26531] tipc: Disabling bearer <eth:syzkaller0>
[ 2229.168376][T23282] tipc: Node number set to 135955228
[ 2230.548172][T26551] ALSA: mixer_oss: invalid OSS volume ''
[ 2230.766397][T26563] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6469'.
[ 2231.388722][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 2231.667073][T26567] loop6: detected capacity change from 0 to 524287487
[ 2231.711578][T26563] batadv1: entered allmulticast mode
[ 2231.731842][T26567] buffer_io_error: 6 callbacks suppressed
[ 2231.731865][T26567] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2231.732251][T26565] overlayfs: failed to resolve './file1/file0': -2
[ 2231.767365][T26567] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2231.789332][T26567] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2231.807772][T26567] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2231.873318][T26567] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2231.947367][T26567] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2232.004172][T26567] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2232.048542][T26567] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2232.108374][T26567] ldm_validate_partition_table(): Disk read failed.
[ 2232.125667][T26567] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2232.161724][T26567] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2232.182301][T26567] Dev loop6: unable to read RDB block 0
[ 2232.188243][T26567]  loop6: unable to read partition table
[ 2232.213577][T26567] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 2233.406678][T26578] loop6: detected capacity change from 0 to 1024
[ 2233.421865][T26578] EXT4-fs: Ignoring removed bh option
[ 2233.486091][T26578] EXT4-fs: Ignoring removed nobh option
[ 2233.499708][T26578] EXT4-fs: Ignoring removed bh option
[ 2233.563399][T26578] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2234.071828][T23958] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 2234.501623][T23958] usb 6-1: Using ep0 maxpacket: 32
[ 2234.544028][T23958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2234.630526][T23958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2234.698988][T23958] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2234.728645][T23958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2234.784009][T23958] usb 6-1: config 0 descriptor??
[ 2235.017034][T23958] hub 6-1:0.0: USB hub found
[ 2235.334728][T23958] hub 6-1:0.0: 1 port detected
[ 2236.121425][ T5979] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 2236.871118][T23958] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2236.871627][T23282] usb 6-1: USB disconnect, device number 14
[ 2236.963816][ T5979] usb 5-1: device descriptor read/64, error -71
[ 2238.112393][ T5979] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 2238.292517][ T5979] usb 5-1: device descriptor read/64, error -71
[ 2238.426871][T26612] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2238.461807][ T5979] usb usb5-port1: attempt power cycle
[ 2238.485957][T26612] syzkaller0: entered promiscuous mode
[ 2238.515227][T26612] syzkaller0: entered allmulticast mode
[ 2238.603828][T26611] tipc: Resetting bearer <eth:syzkaller0>
[ 2238.702074][T26611] tipc: Disabling bearer <eth:syzkaller0>
[ 2238.739038][T26151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2238.827654][ T5979] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 2238.889872][ T5979] usb 5-1: device descriptor read/8, error -71
[ 2240.264356][T26625] loop6: detected capacity change from 0 to 524287487
[ 2240.382169][T26625] buffer_io_error: 6 callbacks suppressed
[ 2240.382195][T26625] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2240.746266][T26625] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2240.772332][T26625] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2240.795138][T26625] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2240.811541][T26625] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2240.827155][T26625] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2240.861873][T26625] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2240.927104][T26625] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2240.977289][T26625] ldm_validate_partition_table(): Disk read failed.
[ 2241.031731][T26625] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2241.046630][T26625] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2241.086270][T26625] Dev loop6: unable to read RDB block 0
[ 2241.096712][T26625]  loop6: unable to read partition table
[ 2241.114301][T26625] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 2241.253238][T26636] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2243.205212][T26649] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6495'.
[ 2243.638011][T26657] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2243.646942][T26657] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 2243.692187][T26657] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2243.700451][T26657] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 2244.010890][T26662] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2244.082126][T26667] syzkaller0: entered promiscuous mode
[ 2244.090559][T26667] syzkaller0: entered allmulticast mode
[ 2244.201679][T26661] tipc: Resetting bearer <eth:syzkaller0>
[ 2244.339859][T26661] tipc: Disabling bearer <eth:syzkaller0>
[ 2244.980953][T26681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6505'.
[ 2246.401003][T26694] loop6: detected capacity change from 0 to 524287487
[ 2246.418190][T26694] buffer_io_error: 6 callbacks suppressed
[ 2246.418213][T26694] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2246.667677][T26702] netlink: 'syz.7.6510': attribute type 10 has an invalid length.
[ 2246.709854][T26702] syz_tun: entered allmulticast mode
[ 2246.829429][T26704] vivid-007: disconnect
[ 2247.255781][T26695] vivid-007: reconnect
[ 2247.626178][T26694] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2247.818032][T26694] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2247.830730][T26708] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2247.867345][T26694] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2247.911615][T26694] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2247.934094][T26694] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2247.942121][T26694] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2247.950035][T26694] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2247.958004][T26694] ldm_validate_partition_table(): Disk read failed.
[ 2247.964862][T26694] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2247.972852][T26694] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2247.980951][T26694] Dev loop6: unable to read RDB block 0
[ 2247.987228][T26694]  loop6: unable to read partition table
[ 2247.993191][T26694] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 2250.258094][T26728] CIFS: VFS: Malformed UNC in devname
[ 2250.281887][T26727] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2250.290571][T26727] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 2250.302901][T26727] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2250.311105][T26727] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 2250.912593][T26738] tipc: Started in network mode
[ 2250.918460][T26738] tipc: Node identity 12df32601fcc, cluster identity 4711
[ 2251.091588][T26738] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2252.156587][T26731] tipc: Disabling bearer <eth:syzkaller0>
[ 2253.058948][   T24] tipc: Node number set to 219361888
[ 2253.220923][T26756] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6524'.
[ 2253.871399][T26765] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 2257.381539][   T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 2257.561641][   T24] usb 5-1: Using ep0 maxpacket: 16
[ 2257.647227][T26793] CIFS: VFS: Malformed UNC in devname
[ 2257.689500][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2258.046459][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2258.167685][   T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[ 2258.199311][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2258.247185][   T24] usb 5-1: config 0 descriptor??
[ 2258.955710][   T24] konepure 0003:1E7D:2DB4.0012: unknown main item tag 0x0
[ 2258.972401][   T24] konepure 0003:1E7D:2DB4.0012: unknown main item tag 0x0
[ 2258.987072][   T24] konepure 0003:1E7D:2DB4.0012: item fetching failed at offset 2/4
[ 2259.048789][T26811] vivid-007: disconnect
[ 2259.516277][T26805] vivid-007: reconnect
[ 2259.794102][   T24] konepure 0003:1E7D:2DB4.0012: parse failed
[ 2259.821991][   T24] konepure 0003:1E7D:2DB4.0012: probe with driver konepure failed with error -22
[ 2260.062990][   T24] usb 5-1: USB disconnect, device number 19
[ 2260.160767][T26816] ubi: mtd0 is already attached to ubi31
[ 2262.354782][T26825] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6544'.
[ 2264.623203][T26847] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2264.631088][T26847] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 2264.655757][T26847] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2264.666408][T26847] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 2267.015486][T26869] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000
[ 2267.023738][T26869] tipc: Enabled bearer <udp:syz2>, priority 10
[ 2268.278226][T12929] tipc: Node number set to 4156331852
[ 2269.371652][T26882] CIFS: VFS: Malformed UNC in devname
[ 2270.552313][T26892] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6564'.
[ 2272.992098][T26912] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2272.999989][T26912] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 2273.257394][T26912] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2273.265450][T26912] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 2273.876572][T26922] tipc: Started in network mode
[ 2273.881535][T26922] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 2273.890595][T26922] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000
[ 2273.898863][T26922] tipc: Enabled bearer <udp:syz2>, priority 10
[ 2275.147882][T12929] tipc: Node number set to 1
[ 2275.819694][T26935] CIFS: VFS: Malformed UNC in devname
[ 2276.091507][    T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 2277.333199][    T9] usb 9-1: Using ep0 maxpacket: 16
[ 2277.344553][    T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2278.382667][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2278.689820][    T9] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2278.725723][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2278.781848][    T9] usb 9-1: Product: syz
[ 2278.797376][    T9] usb 9-1: Manufacturer: syz
[ 2278.842843][    T9] usb 9-1: SerialNumber: syz
[ 2279.042884][    T9] usb 9-1: config 0 descriptor??
[ 2279.058477][    T9] usb 9-1: can't set config #0, error -71
[ 2279.081587][    T9] usb 9-1: USB disconnect, device number 9
[ 2279.279653][T26959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6582'.
[ 2280.366680][T26975] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000
[ 2280.376783][T26975] tipc: Enabled bearer <udp:syz2>, priority 10
[ 2281.933207][   T24] tipc: Node number set to 1582014272
[ 2283.055682][T26999] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2283.671525][    T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 2283.821391][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 2283.832513][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2283.857300][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2283.903607][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2284.142190][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2284.150405][    T9] usb 4-1: Product: syz
[ 2284.155442][    T9] usb 4-1: Manufacturer: syz
[ 2284.160826][    T9] usb 4-1: SerialNumber: syz
[ 2284.955582][    T9] usb 4-1: config 0 descriptor??
[ 2285.021707][T27013] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2285.076981][    T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2285.135615][    T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[ 2285.159540][T27013] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 2285.181381][T27013] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2285.189263][T27013] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 2285.879167][    T9] em28xx 4-1:0.0: chip ID is em2874
[ 2287.001185][T27025] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6604'.
[ 2289.741563][T27047] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2291.653098][    T9] usb 4-1: USB disconnect, device number 13
[ 2291.672307][    T9] em28xx 4-1:0.0: Disconnecting em28xx
[ 2291.702394][    T9] em28xx 4-1:0.0: Freeing device
[ 2292.001725][T23282] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 2292.203797][T27078] netlink: 180 bytes leftover after parsing attributes in process `syz.8.6619'.
[ 2292.831894][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 2293.599669][T23282] usb 6-1: Using ep0 maxpacket: 16
[ 2293.611130][T23282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2293.669064][T23282] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2293.715619][T23282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2293.765493][T23282] usb 6-1: Product: syz
[ 2293.790572][T23282] usb 6-1: Manufacturer: syz
[ 2293.839082][T23282] usb 6-1: SerialNumber: syz
[ 2293.858815][T27089] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2293.917082][T23282] usb 6-1: config 0 descriptor??
[ 2293.921614][T27090] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6622'.
[ 2293.944154][T23282] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2293.955553][T23282] em28xx 6-1:0.0: DVB interface 0 found: bulk
[ 2295.531771][T23282] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 2295.978591][T23282] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2296.024246][T23282] em28xx 6-1:0.0: board has no eeprom
[ 2296.121904][T23282] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2296.130011][T23282] em28xx 6-1:0.0: dvb set to bulk mode.
[ 2296.395401][T12929] em28xx 6-1:0.0: Binding DVB extension
[ 2297.267490][T27108] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2297.278668][   T24] usb 6-1: USB disconnect, device number 15
[ 2297.315341][   T24] em28xx 6-1:0.0: Disconnecting em28xx
[ 2298.520330][T12929] em28xx 6-1:0.0: Registering input extension
[ 2298.530449][T27117] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 2298.586760][   T24] em28xx 6-1:0.0: Closing input extension
[ 2298.720236][   T24] em28xx 6-1:0.0: Freeing device
[ 2298.864002][T27121] loop4: detected capacity change from 0 to 1024
[ 2299.352221][T27121] EXT4-fs: Ignoring removed bh option
[ 2299.357706][T27121] EXT4-fs: Ignoring removed nobh option
[ 2299.366470][T27121] EXT4-fs: Ignoring removed bh option
[ 2299.473749][T27121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2299.901513][T12929] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 2300.083332][T12929] usb 6-1: Using ep0 maxpacket: 32
[ 2300.120441][T27129] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4192: comm syz.4.6631: Allocating blocks 497-513 which overlap fs metadata
[ 2300.151459][T12929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2300.204966][T27129] EXT4-fs (loop4): pa ffff888032504910: logic 256, phys. 385, len 8
[ 2300.213221][T27129] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5443: group 0, free 0, pa_free 1
[ 2300.271343][T12929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2301.205047][T12929] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2301.266142][T12929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2301.336923][T12929] usb 6-1: config 0 descriptor??
[ 2301.384705][T12929] hub 6-1:0.0: USB hub found
[ 2301.716252][T12929] hub 6-1:0.0: 1 port detected
[ 2302.535905][T12929] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2302.550324][T12929] usb 6-1: USB disconnect, device number 16
[ 2305.010487][T27162] overlayfs: failed to resolve './file0': -2
[ 2306.295625][T23671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2307.181606][T27187] netlink: 180 bytes leftover after parsing attributes in process `syz.7.6647'.
[ 2308.486292][T27192] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6652'.
[ 2309.661531][T23282] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 2309.861705][T23282] usb 7-1: Using ep0 maxpacket: 32
[ 2309.906071][T23282] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2309.970188][T23282] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2310.037943][T23282] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2310.942616][T23282] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2310.984354][T23282] usb 7-1: config 0 descriptor??
[ 2311.003055][T23282] hub 7-1:0.0: USB hub found
[ 2311.272816][T23282] hub 7-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2311.741446][T23967] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[ 2311.911677][T23967] usb 8-1: Using ep0 maxpacket: 32
[ 2311.930482][T23967] usb 8-1: config index 0 descriptor too short (expected 35577, got 27)
[ 2311.991257][T23282] usbhid 7-1:0.0: can't add hid device: -71
[ 2311.997409][T23282] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 2312.015102][T23967] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 2312.037094][T23282] usb 7-1: USB disconnect, device number 14
[ 2312.081678][T23967] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 2312.131385][T23967] usb 8-1: config 1 has no interface number 0
[ 2312.163595][T23967] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2312.204643][T23967] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 2312.230333][T27216] overlayfs: failed to resolve './file0': -2
[ 2312.261623][T23967] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 2312.291196][T23967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2312.346548][T23967] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found
[ 2312.681267][T23967] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached
[ 2312.852867][T23282] usb 8-1: USB disconnect, device number 21
[ 2312.861919][T23282] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected
[ 2313.246274][T27225] loop8: detected capacity change from 0 to 1024
[ 2313.273135][T27225] EXT4-fs: Ignoring removed bh option
[ 2313.286660][T27225] EXT4-fs: Ignoring removed nobh option
[ 2313.409851][T27225] EXT4-fs: Ignoring removed bh option
[ 2313.462154][T27225] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2313.830158][T27240] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4192: comm syz.8.6662: Allocating blocks 497-513 which overlap fs metadata
[ 2314.618946][T27240] EXT4-fs (loop8): pa ffff88803adc0e80: logic 256, phys. 385, len 8
[ 2314.627085][T27240] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5443: group 0, free 0, pa_free 1
[ 2314.703222][T27249] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6667'.
[ 2315.003787][T27253] overlayfs: failed to resolve './file1': -2
[ 2315.169363][T22902] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2315.581795][T27263] vivid-007: disconnect
[ 2315.721763][   T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 2316.082607][   T24] usb 4-1: Using ep0 maxpacket: 16
[ 2316.088877][T27227] vivid-007: reconnect
[ 2316.137349][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2316.172951][   T24] usb 4-1: config 13 has an invalid interface number: 50 but max is 0
[ 2316.492159][   T24] usb 4-1: config 13 has no interface number 0
[ 2316.533718][   T24] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16
[ 2316.601374][   T24] usb 4-1: config 13 interface 50 has no altsetting 0
[ 2316.714377][   T24] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[ 2316.734722][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2316.771398][   T24] usb 4-1: Product: syz
[ 2316.785966][   T24] usb 4-1: Manufacturer: syz
[ 2316.790581][   T24] usb 4-1: SerialNumber: syz
[ 2316.802125][T23958] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[ 2316.843493][T27261] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2316.982014][T23958] usb 8-1: Using ep0 maxpacket: 32
[ 2317.064815][T23958] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2317.206072][T27257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2317.329762][T23958] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2317.363001][T27257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2317.421705][T23958] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2317.521429][T23958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2317.628971][T23958] usb 8-1: config 0 descriptor??
[ 2317.680642][T23958] hub 8-1:0.0: USB hub found
[ 2317.886454][T23958] hub 8-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2317.987860][T27283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6679'.
[ 2319.087546][T23958] usbhid 8-1:0.0: can't add hid device: -71
[ 2319.099584][T23958] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 2319.125498][   T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 2319.132569][   T24] usb 4-1: MIDIStreaming interface descriptor not found
[ 2319.162145][T23958] usb 8-1: USB disconnect, device number 22
[ 2319.242433][   T24] usb 4-1: USB disconnect, device number 14
[ 2319.339055][T27293] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6684'.
[ 2319.391160][T27274] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6675'.
[ 2319.429066][T27274] overlayfs: failed to resolve './file1/file0': -2
[ 2320.354067][T27303] loop4: detected capacity change from 0 to 1024
[ 2320.368234][T27303] EXT4-fs: Ignoring removed bh option
[ 2320.369864][T27305] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2320.374681][T27303] EXT4-fs: Ignoring removed nobh option
[ 2320.387493][T27303] EXT4-fs: Ignoring removed bh option
[ 2320.408029][T27304] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2320.415951][T27304] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 2320.424705][T27304] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2320.432546][T27304] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 2320.508234][T27303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2320.551442][T23282] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[ 2321.233055][T23282] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2321.300232][T23282] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 2321.320194][T27316] loop6: detected capacity change from 0 to 524287487
[ 2321.612299][T27316] buffer_io_error: 6 callbacks suppressed
[ 2321.612326][T27316] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2321.724771][T23282] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2321.901401][T23282] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[ 2321.903114][T27316] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2321.953316][T27316] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2321.967162][T23282] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40
[ 2321.986389][T23282] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 2321.999014][T27316] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2322.007091][T23282] usb 9-1: SerialNumber: syz
[ 2322.019027][T27316] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2322.028643][T27299] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 2322.037511][T27316] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2322.039312][T23282] cdc_acm 9-1:1.0: Control and data interfaces are not separated!
[ 2322.048448][T27316] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2322.080879][T27316] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2322.093949][T23282] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -12
[ 2322.119552][T27316] ldm_validate_partition_table(): Disk read failed.
[ 2322.136657][T27316] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2322.160308][T27316] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2322.175465][T27316] Dev loop6: unable to read RDB block 0
[ 2322.203100][T27316]  loop6: unable to read partition table
[ 2322.261904][T27316] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 2322.393425][T11165] usb 9-1: USB disconnect, device number 10
[ 2322.851687][T11165] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 2322.857228][T27334] syzkaller0: entered promiscuous mode
[ 2322.873167][T27334] syzkaller0: entered allmulticast mode
[ 2322.965519][T23671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2323.012008][T11165] usb 7-1: Using ep0 maxpacket: 16
[ 2323.030440][T11165] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2323.051519][T27337] fuse: Unknown parameter 'grou00000000000000000000'
[ 2323.060454][T11165] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 2323.093948][T11165] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2323.134823][T11165] usb 7-1: config 0 descriptor??
[ 2323.233972][T27343] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6698'.
[ 2323.451468][T23958] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 2323.620120][T23958] usb 5-1: Using ep0 maxpacket: 16
[ 2323.632399][T23958] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2323.671338][T23958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2323.731826][T23958] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2323.755081][T27350] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000
[ 2323.763554][T27350] tipc: Enabled bearer <udp:syz2>, priority 10
[ 2323.770666][T23958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2323.818192][T23958] usb 5-1: Product: syz
[ 2323.832203][T23958] usb 5-1: Manufacturer: syz
[ 2323.849771][T23958] usb 5-1: SerialNumber: syz
[ 2323.882566][T23958] usb 5-1: config 0 descriptor??
[ 2323.920096][T23958] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2323.924597][T11165] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[ 2323.951810][T23958] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[ 2324.362784][T23282] usb 7-1: USB disconnect, device number 15
[ 2324.551609][T23958] em28xx 5-1:0.0: chip ID is em2874
[ 2324.764046][T23958] usb 5-1: USB disconnect, device number 20
[ 2324.778410][T23958] em28xx 5-1:0.0: Disconnecting em28xx
[ 2324.798192][T23958] em28xx 5-1:0.0: Freeing device
[ 2324.805571][T27360] vivid-007: disconnect
[ 2324.917056][T27351] vivid-007: reconnect
[ 2324.928813][T27364] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2326.523514][T27380] fuse: Unknown parameter 'group_i00000000000000000000'
[ 2327.074244][T27387] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[ 2330.891599][T11165] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 2331.066449][T11165] usb 5-1: Using ep0 maxpacket: 16
[ 2331.099281][T11165] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2331.157659][T11165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2331.205500][T11165] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2331.306179][T11165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2331.338878][T11165] usb 5-1: Product: syz
[ 2331.362642][T11165] usb 5-1: Manufacturer: syz
[ 2331.372738][T11165] usb 5-1: SerialNumber: syz
[ 2331.413281][T11165] usb 5-1: config 0 descriptor??
[ 2331.449410][T11165] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2331.890461][T27425] fuse: Unknown parameter 'group_i00000000000000000000'
[ 2331.927670][T11165] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[ 2332.357031][T11165] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 2332.403655][T11165] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[ 2332.422723][T11165] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[ 2332.443143][T11165] em28xx 5-1:0.0: No AC97 audio processor
[ 2332.477397][T11165] usb 5-1: USB disconnect, device number 21
[ 2332.504500][T11165] em28xx 5-1:0.0: Disconnecting em28xx
[ 2332.514754][T11165] em28xx 5-1:0.0: Freeing device
[ 2333.392581][T27443] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2333.400450][T27443] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 2333.408958][T27443] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2333.416835][T27443] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 2333.581485][T18270] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 2333.989324][T27452] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6735'.
[ 2333.998643][T18270] usb 4-1: device descriptor read/64, error -71
[ 2334.472205][T18270] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 2334.539372][T27456] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 2334.592438][T27459] fuse: Unknown parameter 'group_i00000000000000000000'
[ 2334.621598][T18270] usb 4-1: device descriptor read/64, error -71
[ 2334.744080][T18270] usb usb4-port1: attempt power cycle
[ 2335.322344][T18270] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 2335.435929][T18270] usb 4-1: device descriptor read/8, error -71
[ 2335.785200][T18270] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 2335.843386][T18270] usb 4-1: device descriptor read/8, error -71
[ 2335.972057][T18270] usb usb4-port1: unable to enumerate USB device
[ 2336.516480][T27475] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6742'.
[ 2336.904055][T27488] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6748'.
[ 2336.911404][T11165] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 2337.649481][T27486] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2337.657453][T27486] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 2337.665969][T27486] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2337.673799][T27486] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 2337.872925][T11165] usb 7-1: Using ep0 maxpacket: 16
[ 2337.936893][T11165] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2338.364452][T11165] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2338.410365][T11165] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2338.441578][T11165] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2338.488958][T11165] usb 7-1: Product: syz
[ 2338.495283][T27504] loop6: detected capacity change from 0 to 524287487
[ 2338.512707][T27504] buffer_io_error: 6 callbacks suppressed
[ 2338.513659][T27504] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2338.533303][T27504] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2338.534855][T11165] usb 7-1: Manufacturer: syz
[ 2338.561044][T27504] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2338.594093][T11165] usb 7-1: SerialNumber: syz
[ 2338.620510][T27504] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2338.642361][T11165] usb 7-1: config 0 descriptor??
[ 2338.668470][T11165] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2338.671196][T27504] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2338.684331][T11165] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[ 2338.695135][T27504] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2338.720172][T27504] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2338.720467][T27507] fuse: Unknown parameter 'group_id00000000000000000000'
[ 2338.728492][T27504] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2338.743821][T27504] ldm_validate_partition_table(): Disk read failed.
[ 2338.770610][T27504] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2338.803474][T27504] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2338.838968][T27504] Dev loop6: unable to read RDB block 0
[ 2338.878646][T27504]  loop6: unable to read partition table
[ 2338.888077][T27504] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 2339.421562][T11165] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[ 2339.521707][T11165] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[ 2339.552380][T11165] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[ 2339.624985][T11165] em28xx 7-1:0.0: No AC97 audio processor
[ 2340.089340][T11165] usb 7-1: USB disconnect, device number 16
[ 2340.172426][T27518] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6757'.
[ 2340.185192][T11165] em28xx 7-1:0.0: Disconnecting em28xx
[ 2340.219211][T11165] em28xx 7-1:0.0: Freeing device
[ 2340.237178][T27518] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6757'.
[ 2340.714614][T27531] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2340.722751][T27531] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 2340.731235][T27531] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2340.739146][T27531] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 2340.950753][T27539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6765'.
[ 2341.801392][T27546] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2342.381790][T27549] fuse: Unknown parameter 'group_id00000000000000000000'
[ 2343.578535][T27567] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6769'.
[ 2343.591803][T27567] overlayfs: failed to resolve './file1/file0': -2
[ 2344.423526][   T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 2345.661472][   T24] usb 5-1: Using ep0 maxpacket: 16
[ 2345.676887][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2345.721450][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2345.764389][   T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2345.775073][T27589] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2345.783747][T27589] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 2345.784346][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2346.810133][T27589] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2346.829305][T27589] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 2346.885011][   T24] usb 5-1: Product: syz
[ 2346.889540][   T24] usb 5-1: Manufacturer: syz
[ 2346.916749][   T24] usb 5-1: SerialNumber: syz
[ 2346.950194][   T24] usb 5-1: config 0 descriptor??
[ 2346.987046][   T24] usb 5-1: can't set config #0, error -71
[ 2347.014430][   T24] usb 5-1: USB disconnect, device number 22
[ 2347.243203][T27606] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2347.407423][T27609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6782'.
[ 2349.736186][T27628] loop6: detected capacity change from 0 to 524287487
[ 2349.875692][T27628] buffer_io_error: 6 callbacks suppressed
[ 2349.875721][T27628] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2350.215482][T27628] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2350.663874][T27628] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2350.704387][T27628] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2350.735432][T27628] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2350.773221][T27628] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2350.805108][T27628] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2350.849499][T27628] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2350.896460][T27628] ldm_validate_partition_table(): Disk read failed.
[ 2350.911661][T27628] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2350.929993][T27628] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2350.948674][T27628] Dev loop6: unable to read RDB block 0
[ 2350.962625][T27628]  loop6: unable to read partition table
[ 2350.970823][T27628] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 2351.261449][T11165] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 2351.561341][T11165] usb 4-1: Using ep0 maxpacket: 16
[ 2351.781504][T11165] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2351.844438][T11165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2351.928410][T11165] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2351.942169][T11165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2351.956531][T27660] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2351.971169][T11165] usb 4-1: Product: syz
[ 2351.991641][T11165] usb 4-1: Manufacturer: syz
[ 2352.005005][T11165] usb 4-1: SerialNumber: syz
[ 2352.049228][T11165] usb 4-1: config 0 descriptor??
[ 2352.090441][T11165] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2352.172780][T11165] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[ 2352.689738][T11165] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 2353.471929][T11165] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[ 2353.481396][T11165] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[ 2353.488702][T11165] em28xx 4-1:0.0: No AC97 audio processor
[ 2353.609602][T11165] usb 4-1: USB disconnect, device number 19
[ 2353.617928][T11165] em28xx 4-1:0.0: Disconnecting em28xx
[ 2353.625656][T11165] em28xx 4-1:0.0: Freeing device
[ 2354.267069][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 2354.678110][T27675] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6802'.
[ 2355.570516][T27680] loop4: detected capacity change from 0 to 1024
[ 2356.443849][T27685] syzkaller0: entered promiscuous mode
[ 2356.454321][T27685] syzkaller0: entered allmulticast mode
[ 2357.064819][T27694] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6806'.
[ 2359.157838][T27701] loop6: detected capacity change from 0 to 524287487
[ 2359.184160][T27701] buffer_io_error: 6 callbacks suppressed
[ 2359.184184][T27701] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2360.855107][T27701] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2360.863430][T27701] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2360.873939][T27701] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2360.881900][T27701] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2360.890240][T27701] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2360.910431][T27701] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2360.921949][T27701] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2360.940073][T27701] ldm_validate_partition_table(): Disk read failed.
[ 2360.957796][T27701] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2360.977384][T27701] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2360.994573][T27701] Dev loop6: unable to read RDB block 0
[ 2361.000796][T27701]  loop6: unable to read partition table
[ 2361.006816][T27701] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 2361.251346][T23282] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 2361.421444][T23282] usb 5-1: Using ep0 maxpacket: 16
[ 2361.435717][T23282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2361.475285][T23282] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2361.586153][T27727] netlink: 180 bytes leftover after parsing attributes in process `syz.8.6813'.
[ 2362.147685][T27725] loop3: detected capacity change from 0 to 1024
[ 2362.286616][T23282] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[ 2362.705227][T23282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2362.756763][T23282] usb 5-1: config 0 descriptor??
[ 2364.428074][T23282] usbhid 5-1:0.0: can't add hid device: -71
[ 2364.434195][T23282] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 2364.489837][T23282] usb 5-1: USB disconnect, device number 23
[ 2372.613867][    T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 2372.863572][    T9] usb 9-1: Using ep0 maxpacket: 16
[ 2373.215374][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2373.247566][    T9] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 2373.284844][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2373.323957][    T9] usb 9-1: config 0 descriptor??
[ 2373.851404][T23282] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[ 2374.093680][T23282] usb 4-1: device descriptor read/64, error -71
[ 2375.115855][    T9] usbhid 9-1:0.0: can't add hid device: -71
[ 2375.139227][    T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 2375.198001][    T9] usb 9-1: USB disconnect, device number 11
[ 2375.211386][T23282] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[ 2375.266003][T27819] fuse: Bad value for 'fd'
[ 2375.378468][T27822] netlink: 'syz.7.6845': attribute type 1 has an invalid length.
[ 2375.386785][T27822] netlink: 'syz.7.6845': attribute type 2 has an invalid length.
[ 2375.781500][T23282] usb 4-1: device descriptor read/64, error -71
[ 2375.891944][T23282] usb usb4-port1: attempt power cycle
[ 2375.977449][T27827] fuse: Bad value for 'fd'
[ 2376.232080][T23967] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 2376.381589][T23967] usb 7-1: device descriptor read/64, error -71
[ 2377.439795][T12929] IPVS: starting estimator thread 0...
[ 2377.560357][T27842] IPVS: using max 21 ests per chain, 50400 per kthread
[ 2377.771383][T23967] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 2378.311816][T23967] usb 7-1: device descriptor read/64, error -71
[ 2379.301100][T23967] usb usb7-port1: attempt power cycle
[ 2379.705579][T27859] overlayfs: missing 'lowerdir'
[ 2380.149473][T27867] fuse: Bad value for 'fd'
[ 2380.291433][    T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 2380.496993][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 2380.519669][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 2380.553910][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 2380.600453][    T9] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 2380.637431][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2380.651431][T23967] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[ 2380.693367][    T9] usb 4-1: Product: syz
[ 2380.717636][    T9] usb 4-1: Manufacturer: syz
[ 2380.721362][T21498] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[ 2380.740192][    T9] usb 4-1: SerialNumber: syz
[ 2380.776168][    T9] usb 4-1: config 0 descriptor??
[ 2380.801447][T23967] usb 7-1: device descriptor read/64, error -71
[ 2380.808743][T27863] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2380.851623][T27863] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2380.878691][    T9] usb 4-1: ucan: probing device on interface #0
[ 2380.932996][T21498] usb 8-1: Using ep0 maxpacket: 32
[ 2380.957129][T21498] usb 8-1: config 0 has an invalid interface number: 188 but max is 0
[ 2381.015853][T21498] usb 8-1: config 0 has no interface number 0
[ 2381.060066][T21498] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 2381.084031][T21498] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 2381.101142][T21498] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2381.109840][T21498] usb 8-1: Product: syz
[ 2381.114239][T21498] usb 8-1: Manufacturer: syz
[ 2381.118931][T21498] usb 8-1: SerialNumber: syz
[ 2381.148616][T21498] usb 8-1: config 0 descriptor??
[ 2381.153895][T23967] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[ 2381.171502][T27874] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 2381.299970][    T9] usb 4-1: ucan: device reported invalid tx-fifo size
[ 2381.311582][T23967] usb 7-1: device descriptor read/64, error -71
[ 2381.318168][    T9] usb 4-1: ucan: probe failed; try to update the device firmware
[ 2381.397390][T27874] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 2381.505722][    T9] usb 4-1: USB disconnect, device number 23
[ 2381.889055][T23967] usb usb7-port1: attempt power cycle
[ 2382.621337][T23967] usb 7-1: new full-speed USB device number 22 using dummy_hcd
[ 2382.659210][T23967] usb 7-1: device descriptor read/8, error -71
[ 2382.749041][T21498] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 2382.804408][T27889] loop5: detected capacity change from 0 to 1024
[ 2382.814660][T21498] asix 8-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[ 2382.846273][T21498] asix 8-1:0.188: probe with driver asix failed with error -71
[ 2382.931614][T23967] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[ 2383.235166][    T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 2383.763242][T21498] usb 8-1: USB disconnect, device number 23
[ 2383.777889][    T9] usb 4-1: device descriptor read/64, error -71
[ 2384.001376][T23967] usb 7-1: device not accepting address 23, error -71
[ 2384.043337][    T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 2384.191717][    T9] usb 4-1: device descriptor read/64, error -71
[ 2384.241493][T23967] usb usb7-port1: unable to enumerate USB device
[ 2384.354207][    T9] usb usb4-port1: attempt power cycle
[ 2384.824450][    T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 2384.892103][    T9] usb 4-1: device descriptor read/8, error -71
[ 2384.966915][T27914] loop6: detected capacity change from 0 to 524287487
[ 2385.006333][T27914] buffer_io_error: 6 callbacks suppressed
[ 2385.006358][T27914] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2385.151459][    T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 2385.225211][T27914] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2385.233361][T27914] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2385.241500][T27914] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2385.249457][T27914] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2385.258535][T27914] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2385.266480][T23967] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 2385.275563][T27914] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2385.282155][    T9] usb 4-1: device descriptor read/8, error -71
[ 2385.311304][T27914] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2385.326047][T27917] fuse: Bad value for 'fd'
[ 2385.350805][T27914] ldm_validate_partition_table(): Disk read failed.
[ 2385.388164][T27914] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2385.391965][    T9] usb usb4-port1: unable to enumerate USB device
[ 2385.426335][T27914] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2385.451328][T23967] usb 7-1: Using ep0 maxpacket: 16
[ 2385.465333][T27914] Dev loop6: unable to read RDB block 0
[ 2385.484486][T23967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2385.502961][T27914]  loop6: unable to read partition table
[ 2385.530217][T27914] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 2385.553368][T23967] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2385.588747][T23967] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2385.624226][T23967] usb 7-1: Product: syz
[ 2385.641009][T23967] usb 7-1: Manufacturer: syz
[ 2385.683335][T23967] usb 7-1: SerialNumber: syz
[ 2385.711503][T23967] usb 7-1: config 0 descriptor??
[ 2385.744826][T23967] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2385.795375][T23967] em28xx 7-1:0.0: DVB interface 0 found: bulk
[ 2387.365675][T23967] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[ 2387.471801][T23967] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2387.521431][T23967] em28xx 7-1:0.0: board has no eeprom
[ 2387.623438][T27928] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6883'.
[ 2387.641428][T23967] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2387.661323][T23967] em28xx 7-1:0.0: dvb set to bulk mode.
[ 2387.682170][T21498] em28xx 7-1:0.0: Binding DVB extension
[ 2387.701185][T23967] usb 7-1: USB disconnect, device number 24
[ 2387.729629][T23967] em28xx 7-1:0.0: Disconnecting em28xx
[ 2387.895017][T21498] em28xx 7-1:0.0: Registering input extension
[ 2387.921405][    T9] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[ 2388.107416][T23967] em28xx 7-1:0.0: Closing input extension
[ 2388.977479][T23967] em28xx 7-1:0.0: Freeing device
[ 2389.112106][    T9] usb 6-1: device descriptor read/64, error -71
[ 2389.651873][    T9] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[ 2389.781897][    T9] usb 6-1: device descriptor read/64, error -71
[ 2390.332237][    T9] usb usb6-port1: attempt power cycle
[ 2391.021541][T23967] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 2392.323623][    T9] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[ 2393.050913][T23967] usb 5-1: device descriptor read/64, error -71
[ 2394.473980][    T9] usb 6-1: device descriptor read/8, error -71
[ 2394.681664][T23967] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 2394.791375][ T5979] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 2394.992035][ T5979] usb 4-1: Using ep0 maxpacket: 16
[ 2395.033055][ T5979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2395.096638][ T5979] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2395.136706][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2395.181348][ T5979] usb 4-1: Product: syz
[ 2395.191339][ T5979] usb 4-1: Manufacturer: syz
[ 2395.203845][ T5979] usb 4-1: SerialNumber: syz
[ 2395.240469][ T5979] usb 4-1: config 0 descriptor??
[ 2395.298022][ T5979] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2395.368249][ T5979] em28xx 4-1:0.0: DVB interface 0 found: bulk
[ 2395.912691][T27988] netlink: 180 bytes leftover after parsing attributes in process `syz.7.6902'.
[ 2396.815734][ T5979] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 2399.176113][ T5979] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2399.184331][ T5979] em28xx 4-1:0.0: board has no eeprom
[ 2399.261803][ T5979] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2399.438933][ T5979] em28xx 4-1:0.0: dvb set to bulk mode.
[ 2399.654249][T23282] em28xx 4-1:0.0: Binding DVB extension
[ 2400.261131][T23282] em28xx 4-1:0.0: Registering input extension
[ 2400.338762][T23282] usb 4-1: USB disconnect, device number 28
[ 2400.352893][T23282] em28xx 4-1:0.0: Disconnecting em28xx
[ 2400.401702][T23282] em28xx 4-1:0.0: Closing input extension
[ 2400.528309][T23282] em28xx 4-1:0.0: Freeing device
[ 2401.659763][T23282] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 2401.791326][T23282] usb 5-1: device descriptor read/64, error -71
[ 2402.062076][T23282] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 2403.782559][T23282] usb 5-1: device descriptor read/64, error -71
[ 2403.804080][T28027] binder_alloc: 28026: binder_alloc_buf, no vma
[ 2404.098077][T23282] usb usb5-port1: attempt power cycle
[ 2405.928490][T28062] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2409.162147][T28077] fuse: Invalid rootmode
[ 2412.966613][T28114] binder_alloc: 28113: binder_alloc_buf, no vma
[ 2414.691402][ T5909] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 2414.922733][ T5909] usb 4-1: Using ep0 maxpacket: 16
[ 2415.359917][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2415.470814][ T5909] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2415.503325][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2415.761864][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 2415.789006][ T5909] usb 4-1: Product: syz
[ 2415.816700][ T5909] usb 4-1: Manufacturer: syz
[ 2415.821774][ T5909] usb 4-1: SerialNumber: syz
[ 2415.847668][ T5909] usb 4-1: config 0 descriptor??
[ 2415.861093][ T5909] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2415.877711][ T5909] em28xx 4-1:0.0: DVB interface 0 found: bulk
[ 2417.938290][ T5909] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 2418.688452][ T5909] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2418.711083][ T5909] em28xx 4-1:0.0: board has no eeprom
[ 2418.809719][ T5909] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2418.835103][ T5909] em28xx 4-1:0.0: dvb set to bulk mode.
[ 2418.850669][T23958] em28xx 4-1:0.0: Binding DVB extension
[ 2419.034101][T23282] usb 4-1: USB disconnect, device number 29
[ 2419.051971][T23282] em28xx 4-1:0.0: Disconnecting em28xx
[ 2419.107230][T28155] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2419.147804][T28155] tipc: Resetting bearer <eth:syzkaller0>
[ 2419.163100][T23958] em28xx 4-1:0.0: Registering input extension
[ 2419.169645][T23282] em28xx 4-1:0.0: Closing input extension
[ 2419.327902][T23282] em28xx 4-1:0.0: Freeing device
[ 2419.612899][T28154] tipc: Disabling bearer <eth:syzkaller0>
[ 2422.615001][T28185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2422.666201][T28181] syzkaller0: entered promiscuous mode
[ 2422.683178][T28181] syzkaller0: entered allmulticast mode
[ 2422.965613][T28181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6963'.
[ 2423.926604][T28178] tipc: Resetting bearer <eth:syzkaller0>
[ 2424.332534][T28178] tipc: Disabling bearer <eth:syzkaller0>
[ 2425.383130][T28200] loop6: detected capacity change from 0 to 1024
[ 2426.629522][T28218] netlink: 212916 bytes leftover after parsing attributes in process `syz.5.6972'.
[ 2430.491650][T28242] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2430.500003][T28242] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 2430.529254][T28242] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2430.537868][T28242] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 2430.817668][T28246] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6981'.
[ 2431.289831][T28255] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6983'.
[ 2432.821505][T23282] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[ 2432.972523][T23282] usb 8-1: Using ep0 maxpacket: 16
[ 2432.980632][T23282] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2433.017606][T23282] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 2433.043987][T23282] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2433.092647][T23282] usb 8-1: config 0 descriptor??
[ 2433.980893][T23282] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0
[ 2434.150650][    C0] ==================================================================
[ 2434.158756][    C0] BUG: KASAN: use-after-free in mcp2221_raw_event+0x1070/0x10a0
[ 2434.166399][    C0] Read of size 1 at addr ffff888027d73fff by task syz.3.6988/28271
[ 2434.174376][    C0] 
[ 2434.176695][    C0] CPU: 0 UID: 0 PID: 28271 Comm: syz.3.6988 Not tainted syzkaller #0 PREEMPT(full) 
[ 2434.176741][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2434.176765][    C0] Call Trace:
[ 2434.176778][    C0]  <IRQ>
[ 2434.176792][    C0]  dump_stack_lvl+0x116/0x1f0
[ 2434.176842][    C0]  print_report+0xcd/0x630
[ 2434.176876][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2434.176923][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2434.176969][    C0]  ? __phys_addr+0xe8/0x180
[ 2434.177024][    C0]  ? mcp2221_raw_event+0x1070/0x10a0
[ 2434.177065][    C0]  kasan_report+0xe0/0x110
[ 2434.177102][    C0]  ? mcp2221_raw_event+0x1070/0x10a0
[ 2434.177150][    C0]  mcp2221_raw_event+0x1070/0x10a0
[ 2434.177190][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2434.177236][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 2434.177286][    C0]  __hid_input_report.constprop.0+0x314/0x450
[ 2434.177342][    C0]  ? __pfx_mcp2221_raw_event+0x10/0x10
[ 2434.177388][    C0]  hid_irq_in+0x35e/0x870
[ 2434.177434][    C0]  __usb_hcd_giveback_urb+0x38b/0x610
[ 2434.177484][    C0]  usb_hcd_giveback_urb+0x39b/0x450
[ 2434.177529][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2434.177582][    C0]  dummy_timer+0x1809/0x3a00
[ 2434.177654][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2434.177719][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 2434.177797][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2434.177858][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 2434.177934][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2434.177976][    C0]  ? rcu_is_watching+0x12/0xc0
[ 2434.178015][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 2434.178053][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 2434.178093][    C0]  __hrtimer_run_queues+0x202/0xad0
[ 2434.178137][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 2434.178174][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2434.178216][    C0]  hrtimer_run_softirq+0x17d/0x350
[ 2434.178255][    C0]  handle_softirqs+0x219/0x8e0
[ 2434.178297][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 2434.178335][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2434.178374][    C0]  __irq_exit_rcu+0x109/0x170
[ 2434.178410][    C0]  irq_exit_rcu+0x9/0x30
[ 2434.178446][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 2434.178483][    C0]  </IRQ>
[ 2434.178494][    C0]  <TASK>
[ 2434.178505][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2434.178538][    C0] RIP: 0010:preempt_schedule_irq+0x4c/0x90
[ 2434.178584][    C0] Code: df 55 65 48 8b 2d ac 72 41 08 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 4f 66 29 f6 e8 da bb 64 f6 fb bf 01 00 00 00 <e8> af 99 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 3d f1 28
[ 2434.178627][    C0] RSP: 0000:ffffc9000ad57e58 EFLAGS: 00000206
[ 2434.178663][    C0] RAX: 0000000000001d65 RBX: ffffed100b081000 RCX: ffffffff81c4e85f
[ 2434.178694][    C0] RDX: 0000000000000000 RSI: ffffffff8da2ae3d RDI: 0000000000000001
[ 2434.178714][    C0] RBP: ffff888058408000 R08: 0000000000000001 R09: 0000000000000001
[ 2434.178733][    C0] R10: ffffffff90824ed7 R11: 0000000000000000 R12: 0000000000000000
[ 2434.178753][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2434.178778][    C0]  ? trace_irq_enable.constprop.0+0x2f/0x120
[ 2434.178825][    C0]  ? preempt_schedule_irq+0x46/0x90
[ 2434.178863][    C0]  irqentry_exit+0x36/0x90
[ 2434.178899][    C0]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 2434.178932][    C0] RIP: 0010:irqentry_exit_to_user_mode+0x15a/0x310
[ 2434.178974][    C0] Code: 85 2e 01 00 00 e8 d6 0f 00 00 65 48 8b 05 c6 a4 42 08 48 8b 18 f7 c3 37 03 00 00 0f 84 f3 fe ff ff e8 fa ed 65 f6 fb f6 c3 30 <75> b9 f6 c7 01 74 be 4c 89 e7 e8 07 2f 93 f6 f6 c3 06 74 b6 4c 89
[ 2434.179004][    C0] RSP: 0000:ffffc9000ad57f28 EFLAGS: 00000202
[ 2434.179027][    C0] RAX: 0000000000001d63 RBX: 0000000000000010 RCX: ffffffff81c4e85f
[ 2434.179046][    C0] RDX: 0000000000000000 RSI: ffffffff8da2ae3d RDI: ffffffff8bf079c0
[ 2434.179067][    C0] RBP: ffff888058408000 R08: 0000000000000001 R09: 0000000000000001
[ 2434.179086][    C0] R10: ffffffff90824ed7 R11: 0000000000000001 R12: ffffc9000ad57f48
[ 2434.179106][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2434.179131][    C0]  ? trace_irq_enable.constprop.0+0x2f/0x120
[ 2434.179175][    C0]  ? irqentry_exit_to_user_mode+0x156/0x310
[ 2434.179216][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[ 2434.179249][    C0] RIP: 0033:0x7fd9eac6f237
[ 2434.179273][    C0] Code: 39 f0 72 ef e9 cb fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 48 c7 43 50 04 00 00 00 e9 06 fe ff ff 0f 1f 00 48 8b 0d 41 2e 37 00 <48> 81 ce ff ff ff 3f 31 c0 48 3b 34 c1 74 5b 48 83 c0 01 48 83 f8
[ 2434.179302][    C0] RSP: 002b:00007ffd83e28660 EFLAGS: 00000202
[ 2434.179325][    C0] RAX: 0000000000000000 RBX: 00007fd9ebb15720 RCX: 000000110c230000
[ 2434.179345][    C0] RDX: 0000000000000e6c RSI: ffffffff89278e6c RDI: 000000000000000a
[ 2434.179365][    C0] RBP: ffffffff89278e6c R08: 00007fd9eafe6128 R09: 00007fd9eafd2000
[ 2434.179385][    C0] R10: 00007fd9ea3fd008 R11: 000000000000000a R12: 000000000000000a
[ 2434.179405][    C0] R13: 0000000000000000 R14: ffffffff892785c4 R15: 0000000000000625
[ 2434.179425][    C0]  ? sk_alloc+0x1f4/0xc20
[ 2434.179483][    C0]  ? sk_alloc+0xa9c/0xc20
[ 2434.179530][    C0]  ? sk_alloc+0xa9c/0xc20
[ 2434.179583][    C0]  </TASK>
[ 2434.179594][    C0] 
[ 2434.674179][    C0] The buggy address belongs to the physical page:
[ 2434.680577][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027d73000 pfn:0x27d73
[ 2434.690635][    C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 2434.697743][    C0] raw: 00fff00000000000 ffffea0002269888 ffffea0000a6b9c8 0000000000000000
[ 2434.706320][    C0] raw: ffff888027d73000 0000000000000000 00000000ffffffff 0000000000000000
[ 2434.714887][    C0] page dumped because: kasan: bad access detected
[ 2434.721287][    C0] page_owner tracks the page as freed
[ 2434.726639][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 23282, tgid 23282 (kworker/0:4), ts 2433976265773, free_ts 2433980449874
[ 2434.746277][    C0]  post_alloc_hook+0x1af/0x220
[ 2434.751057][    C0]  get_page_from_freelist+0x10a3/0x3a30
[ 2434.756623][    C0]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 2434.762539][    C0]  alloc_pages_mpol+0x1fb/0x550
[ 2434.767404][    C0]  alloc_pages_noprof+0x131/0x390
[ 2434.772420][    C0]  __vmalloc_node_range_noprof+0x6f8/0x1480
[ 2434.778308][    C0]  __vmalloc_node_noprof+0xad/0xf0
[ 2434.783413][    C0]  hid_open_report+0x2a0/0x830
[ 2434.788190][    C0]  mcp2221_probe+0x4c/0xc50
[ 2434.792699][    C0]  hid_device_probe+0x5ba/0x8d0
[ 2434.797555][    C0]  really_probe+0x241/0xa90
[ 2434.802065][    C0]  __driver_probe_device+0x1de/0x440
[ 2434.807443][    C0]  driver_probe_device+0x4c/0x1b0
[ 2434.812484][    C0]  __device_attach_driver+0x1df/0x310
[ 2434.817878][    C0]  bus_for_each_drv+0x159/0x1e0
[ 2434.822735][    C0]  __device_attach+0x1e4/0x4b0
[ 2434.827505][    C0] page last free pid 23282 tgid 23282 stack trace:
[ 2434.833988][    C0]  __free_frozen_pages+0x7df/0x1160
[ 2434.839201][    C0]  vfree+0x1fd/0xb50
[ 2434.843097][    C0]  hid_open_report+0x6cd/0x830
[ 2434.847872][    C0]  mcp2221_probe+0x4c/0xc50
[ 2434.852381][    C0]  hid_device_probe+0x5ba/0x8d0
[ 2434.857253][    C0]  really_probe+0x241/0xa90
[ 2434.861815][    C0]  __driver_probe_device+0x1de/0x440
[ 2434.867119][    C0]  driver_probe_device+0x4c/0x1b0
[ 2434.872161][    C0]  __device_attach_driver+0x1df/0x310
[ 2434.877564][    C0]  bus_for_each_drv+0x159/0x1e0
[ 2434.882451][    C0]  __device_attach+0x1e4/0x4b0
[ 2434.887230][    C0]  bus_probe_device+0x17f/0x1c0
[ 2434.892088][    C0]  device_add+0x1148/0x1aa0
[ 2434.896634][    C0]  hid_add_device+0x31b/0x5c0
[ 2434.901324][    C0]  usbhid_probe+0xd38/0x13f0
[ 2434.906011][    C0]  usb_probe_interface+0x303/0xa40
[ 2434.911133][    C0] 
[ 2434.913444][    C0] Memory state around the buggy address:
[ 2434.919063][    C0]  ffff888027d73e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2434.927132][    C0]  ffff888027d73f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2434.935191][    C0] >ffff888027d73f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2434.943245][    C0]                                                                 ^
[ 2434.951210][    C0]  ffff888027d74000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2434.959475][    C0]  ffff888027d74080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2434.967532][    C0] ==================================================================
[ 2434.975585][    C0] Disabling lock debugging due to kernel taint
[ 2435.767196][T23967] usb 8-1: USB disconnect, device number 24