last executing test programs:

18.354445303s ago: executing program 0 (id=1967):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0)
write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e)
sendmsg$nl_route(r0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aa780ab083aaaaaaaaaaaabb080045000070000000000001907864010100ac1414aa0bba907803000000450000000000ffff0089000000000000e0000001862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f000001e0000001ac1414aa000000"], 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd29, 0x25dddbfe, {0x20, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc090)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000080)=0x4)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0x1a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x21, 0x0, 0x0, 0x2c}, 0x94)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r8 = socket$inet6(0xa, 0x6, 0x119)
ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000001100)={@mcast1, 0xf, r4})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0)

16.068904976s ago: executing program 0 (id=1969):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$unlink(0x9, r0, r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f743c474f006e2c2b2e9bca42a239156d2dd48ed4f70e43873030263030303030303230303030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r5, 0x230d}, 0xc)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080), 0x4a)
r6 = add_key$user(&(0x7f00000036c0), &(0x7f0000003700)={'syz', 0x1}, &(0x7f0000003740)="84", 0x1, 0xfffffffffffffffb)
r7 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xb, [@restrict={0xf}, @float={0x7, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x8000000}}]}, {0x0, [0x61, 0x2e, 0x2e, 0x61, 0x61, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x10000, @value=r7}, 0x28)
keyctl$setperm(0x5, r6, 0x4021010)
r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x389483)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000000)=0x3)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000190000012bbd7000fedbdf25801000a30101000000000000000000000000008e"], 0x58}, 0x1, 0x0, 0x0, 0x20004085}, 0x4044)
r10 = syz_create_resource$binfmt(&(0x7f0000000380)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r10, 0x42, 0x1ff)

14.680730181s ago: executing program 1 (id=1973):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0xfffffffffffffdfd, 0x5f, 0x3})
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_open_dev$MSR(0x0, 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r3, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90)
openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8})
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))

11.683334907s ago: executing program 1 (id=1979):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x175)
close(r2)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12)
r4 = fanotify_init(0x12, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r2, @ANYBLOB="2c776664fac51e", @ANYRESHEX=r4, @ANYBLOB=','])
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1)
sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000001dc0)={&(0x7f0000000140), 0xc, &(0x7f0000001d80)={&(0x7f0000000d00)=ANY=[@ANYBLOB='\x00\x00r[', @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf254b0000000410a80052232f69baeb9ba3397d4f7fb5a944c338697cac9a8626797f21bcf2dba2a5d9c864d23c1c882e75c643ed8106c000a3880e4b39734f1fc07920fd026956d47626b7a2283972fd7a11d736cf912e40bdcf3ff2dc83359dfa674b9cce5073e1f67009eda5e862ab84d6204feae0b56e732c3096e569d3c599f1046f810a0d5d7d98e415717ea2449ddffbb1647126f1025364acf7c6b85b07c20babec375d6ba65f317dcb4d32dfdc3cb865aa706d65596333125960769e89a84618ff23f282465aa94eb72c9657fe2c771d0da6ab2d56fe2623910faaa4ff4a14ec2ab3e3418c1bc0292d653c8b5f62de5d9d2d66e3656179741f915762937df96d32c0c7879430f002be3bea8576606d883cc966aefcec83b43117da4502086e54167e9f9c32ef6451619a825f11cec9c70d98bdbc2f58ca38f4c21e3d65a73d7c44af9a8261d57788c5e312de83ca1338357a83112324e79c6a06e575e4cf630faccb9a312933094990b440cbcedeaf945930c127aa7bfecc20ae598dac3c6022707bf53cd32880aef8838b79015a974ac676493944febf70967ab09a875cee9cb74b8ee7901f8b722b16ed3dd555c913252b92d531368b028d7769a32e06982e51b4383fd722c37efdbb12fcfc8d924a5592bb1dd5ceaa4ce9d3b56bb9bfe43460b5e6ac258cf25dcdb5340d6d0e9a9a3342fa23101af89ce9cdd17c96fcf58b5efbf6f332de91f87cbaefa7a4b32ac89c97f9a83bc55d11fa46006d7f0a700c00b0f03c75ab720934be372f5bd7d699abce1763c9ee7bd2fe838b6ade2ab7a08f5cdba0a88a036811cf72af519ae0a1a9139f2da8039026f5dd9df89ef9cda310ecb8f1644753505756a288ae621ee3c4550f5d6a92b0b6e317daba4bf09aa270fbd59af00f4e3be8a8dccf54ef29e129317b98c5e274ba2248a24bf2225899b41c4abf5ffca0e7a909782bab5e93bd2ee68b4bb6d01167f660b4e7a520f29863990d89463b2431eaf022ee794e55820f0722ab6b07b9a8e7d181acee00fd145462ef39b5bae31bca8b17534bb57149a586a7e9ff8a38e92385103bd078b987d190ada1834298c3e91cacadb84f62a0fbcc604f5765f1eb59f3587950eacb29ec8e193f03e414143e909dff99f6277eb3abdd463b9cce0419df62377970c4004d8e0fa47e8918a9383a0eebccbc8755cef63f410222ff23f96832052d4a081362709b335e99054f61df6213590b82096c769bb5dde7fb8468319ba5911cb6356164f2424dcee411506676ec8814b8a73a2db805f2bb4843fd06e64276916b6d91c4b4dc6d3c6a399d34262515065b8d13382e6ee346980bee8f7e5cfa0e6d3f88c817b57ec019a21c362c83c554b54bc824c0b704450745df447dcf2ad971c6fd0444f6d4ecb6b22c734a8207854ac38a9e9b3437752a79967b269fb039512894336d38088bfd630010c3e5909a8bdfb26466dfd70e45263b53c0dab4507db454340b37721ae4eea66bf05407e23520bba8abef0dad30fde8f3fc57bf7e2a88339a5703d22df99cb94dedcf46140af84347b120be7626027609b7a5e7c147e650c4e97220931a7cdde90fd6b95713a4aa5b18d6f9bbaa0095624ce11ec91882b95db311604ff12f43a060f77d67b6610379c7bb31c8a1e395dcd0541640b5480316cd6190f62359136fb637dd5633158031f15ce0fe635f173b2dc41fe2aa6b7acc2992b53797ef6191182dbe19f23295982581482f76fdb9f7f177745ff725479ebeb1c75380efedbc13d2be53bb9af7789d09d848a6d8facebe3da55f1efee0d55dfb31d85dd4830ea6d1fd43f67f0e207e24081af3f3c4b4f768068232ef78bfedad1afc3f2f175e41392909d38dbb77df773f2bc3ccbf2818de5504f78a83abe161a9f1c9fb89ff46470c30c8cf0edb83578d0b171c22ca88bd48ff9bdc88f0e83563573a101e23b770f4496143b3b11341d8117e736f36635fc184810033c49a1bba0dd0e8903362e6d84647cc2e97a4eeae2f530a0fa5d7da67416803f0131d45454972da1ea3c89c119e95843e4357cf838f1a1dc14575e481e56995851c6550f6e64dc53f794f86d0a1eb17e11682067ab1bc0021fd36a94a754f539687da72502d41c76330e3798c2c06325300a4b16c0f967ef6d3fe8a642ac14d5eab550b454282440d20f4d34400ed31360e434142cae34c63026ba1e06b837f4726d6fde422bc0f2af037bdbdbccefb133977f2f222411e74952d6c129bcfd091ff6db363f6deef3f0aab1f63a0c781281ee019d6d46a5f76af9ef6805e585d037c138be38a6f172de5b01858d4df4e40efd0c043a87d7563defe6bc172fdb677bee9855bbdff25df5f8b6a42f6a53da8dfb3a8c8eb0ab8dc8c8a216502ce7b66869b771ca7cc0d57fc751def7239ab4aa234dcbc6c4be9e4d648af5e5985e64828b677629e0bf807d11c2e3c958a14f19ef25e0ca0e6e3288c5b6d50e923a5749528e2566be1ffa081f5b31101d652cc5d430c3bf210d6a33485fab941740a48206134a89069a9eead0bdce19740427e50083609a9a2997f3ae513b6ee6b68fe60a1f979d9ba45dd7b2f29bad29d18176da71e2c5a1f76071b67ab1cb5e21599d2eb3e4573122fda8767ecc0ce35c6492e0846fc0aced8befd47507f829fa857851a11f134a8ee6d1d819c3a77dd677e82a01ca6d67e33cb244eb69b8ac3580d2e9ceabc82d894d3a518287494ffb92d573629b11e89bf4df73ee06f398028e889405d9992e693b823d396512ed2dc57e9dd298233c4eed7e0babe1d8b4ec29c33d79833f67c6a0d9b463df9c09c38975c698e88e1127b2e6a31ddb3bd95bdd88cbaad6bdc8977168a7234b397b5523d1984d612aa76f0a5775c5cf57904c766e9a38955aecc2f796bd196984ec6b34d9ff0e5c4c2ad2bee64918cc24a2dc65ee3a1fe1c576ee113cec0b6b4a2064d7e80661baa35d9db4314247a9e092634a0f2e0f84c6e2183a6ea94f4d823e735153d83574edcf20803d911cb17811b94729f394e897e4edbf9b2d18b506cb3d6b69bc75cdcd5800bf0d8be6207bdf6258d547f853f63e6a92403e10c736986d69284208f0dfea04c2a01122bc3446590b89b0b9a1f8f0ec8c9f917a18137bba847c9a2173104f15d43561954f5a98bd6596a75c1b4f14af1d387f91292fdd98fb16cf31a41b16ce0490b0708aff77614f781e2c54b8807f2dbbad574d359fb3d9c8c34839976956503a0acd83681131bd8d890a07ddeb7cdec1b954ccf2f254f699bc55ff6a197b105c21b2ff01d350edc03165384d0bab5fd0b92ce224c5f1e645142ad9f033b976d6f3c109fd8487be3a663bc878b35795d38c8357b755cf291e4fe1cea5c44c5b72ce54e354c2e2f5677722be7b885e0b60eb5f26357c399e47bd543f82b17ce15dfc5887abcd4b13657944035961b5d861f027935a5d60d933473acdf5ed9edc48caefec1557f1fa87dc366021f2e7bd491edd2f9f80baebfc1e107a4ee68ccc61149962320df122e61db944bd9f25f7ac5f353cbd2110a58f9871b9732251616223e949d5555e6bd4e57b09d1946408661337c9caeb0a36c2daa94e4d54855e9199a44ae5481e3c7dde9ce15800a4d88d737fd06095e6a04b60112d342cc8faea7dab2d71ef1c2834133f956730ba44c4bff14f08c56cc6b46929f34964be91f2ee8468cb80a37aa1fffad8a287a5121e0a3efa8542a8594677c7567fd7cdbf1ba95bdaf803dc3dc356e54cab78bbe3189c27d9dfc007bcf465d36ee95e37444489b773d901d217d867af29b660d2a9dd6957a2a800953329d733f760f715e72ab99a1825bda7700742cbf1a01e280d859808722a88b955d2cd41243f5283254e65c0553148c7e4df9106a85f3c9627e989c9a03d7f695adf5beb76acce5e2383827fb11c1f89e5fd87fc67f7ddb4919f82eb1fe232ce76bdedd64af3e667041998cf6c0023f683e77c8c924f29d124e01bb1c7b6afdc9ac6af51bd207dd4ea4a22b2ca792dfb7d57977b5041e33a017a7b96cafb1ada32e765c74aac35455b05454af0b66a14d4e4d0bde273b8826a3f4a3bc9f87f6a7c3dfa39824208e7ef2cdb8da71bb70035e2407fa541ecb69f6860664ecd4d0a75ea29564f5626891804cb9b29bd20adc7fe699e106a84ae07fd716bec49daf8273bf3419f6d6fe7b9ad9e6345373fbecfa955afbcbab89cf963ae11517df4e6b5bfe90171c5fc79aacbda7b6d350d8e10ccf58bccac9d5de4109d9bf5c17ae71f9233c08969dc2df4144201656d8892ded4236f44d852a6c023ab15ca1e7cf8cd2d2845f25586ba0d6c8f6ef077d43d5652f45e084deb93b012f6b86efccb0ff29207e6cb78cbe64239897df3c5a7d2b2b88fe41f5c466571397f6f6ffb89c37b15c950fe8293449c3563c56c205986bf28626f98ef003dab7e3d0f05ebb0a0d7bf8e2efb36f91723f3e395110216bbd85adadb9182e6e17552acbbfe3d02674b96037db3c21ae7910d139de83de9753e8919becd70107b5dc8061a93ff19f76231285ce7851926a0f681da276cfd45aa2726dbe4270281f5b3dc98f897df98f54770ac1f947877b892bf7909554a22aa1c9535bcfa81df8236f3b45b2d4cca72769054652ae3e1a27dd81175079392cf87316d86fa3c85fb6d6bf4b96602bbbca6182ac03bfe39c179cdb34b87b5ecf00ff929f6008d944f9574f18989212a001394188d5ac100e225e34bf9b7c4afef8398a046081ee3dfcc0329bb633f02b21e93f680ddaa79e903a9307b8f856fc0f3023148dc4734d41f1083a7aeeec034ad0ebd638f461457344da91f39d24498443c106e15181df73fa5ab4bb0eea18277ac87fc0f67c12b980577352c388fcee30163bf970c1c521c93de88f3182c5c9450646af2b56b709302f6d10e13fedc42ef0ac0a0078355fb224bd2a6c779839450a92dfd1ee1bed14173b4af98057b35c715edfc4b17d018f90e46565fb01cd372e48bd37399d45dc22d717bdb14c8dc14a0bef9d8ebef23d9b46b4fffcacec2c8d0caf6d1e62399c0b12be924d2550245c4d588d8e7ad6f8b1f31406e7b9ce9117affe28a28601a10d236970741f6f5af60c52ab8b5217fb1d91d64aed4322354220a1226130811dd689734060de6d58dd8cee3846a9d8429734ee888429cf9490486df8644a1638e10fb8bdc3513290b06fb4f1306275dfcac95da39c4e6a03b07992a0b5a5770bd9970e393a15a026bbbd44264d90aab077572beefa3959843fff642db9851b5d20ffed279d744cf03e9436b3060e9ada218d291befbae5a61da41c9b73b774980435de9529fc46e6fe23c14de84345b9d4fb0b716e3ab8ea37ad808e3ec14f3b6d14c3fcb8e4936823064ac4ed161ea68662c8b633d45e128fc25d81079d2610e0121589599e1e5aeacf7cd78c7a9f032b948fb721a19c5be55595df0817a6ce894647b731888322ece6581c20c6f53de6c0f835189b8875a049ba90c6b22f99136e0b1076e5b7380db1c46982170640686de99efc2b3ff005e14cd1d45e45b47650af4d5884296134f150473c5ea1665179a2cb5dc58b7419861bc4ff52c0aa9f6545a7a29588f40710fa81ddb265a9a690caff645bfedf8fc998ecc4decb3db7304f82ea0a6a7c99cdc3d87bfb7723979beeda2ae74437c6778898f87a52756b142b4d6474fda7acfff59e7ae7b2ce4cbf43c8ad51770e66be193d5fa2c49d2c26be936d5d6bce26311e41545f8a8c23fc4545c2822999aed232a17bf7474d13964308a4f8024fbf9ac3080001007063690011000200303030303a30303a31302e300000000008000300030000000c00a700ca"], 0x1054}, 0x1, 0x0, 0x0, 0x6080}, 0x8000)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000300))
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f0000006340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x4192b07e18736d64, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
writev(r8, &(0x7f0000000000), 0x0)
write$FUSE_NOTIFY_RETRIEVE(r6, 0x0, 0x0)
openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x123500, 0x0)
umount2(&(0x7f0000000380)='./file0\x00', 0x1)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)

10.93785117s ago: executing program 0 (id=1982):
r0 = fsopen(0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000440)=@chain={'key_or_keyring:', r4})
r5 = fsmount(r0, 0x0, 0x6)
fchdir(r5)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901)
move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x200)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000040)={0x2009})
ioctl$TFD_IOC_SET_TICKS(r8, 0x40085400, &(0x7f0000000080)=0x8)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x2d, 0x20040040)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x98, 0x50020000, 0x0, 0x0, 0x0, 0x178, 0x1f0, 0x1f0, 0x178, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x35}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, "f8b54bef56811d5a23a1093978539521d944884d917284e3021e0fe5400ac5774e467ac2cca185bac3d45955522fa784cec24fb8b15a3c0b5bbf6044ae73b3e2"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270)

10.33109963s ago: executing program 1 (id=1984):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f00000003c0)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c696f636861727365743d6370313235312c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c646973636172642c696f636861727365743d6d6163637972696c6c69632c6e6f6e756d7461696c3d302c757466383d312c000da48fb09527c2ca36dc"], 0x3, 0x362, &(0x7f0000000900)="$eJzs3UFoW2UcAPB/9tokG9T1MBgKwtO7ZZt40FPH2GDYi0pAPYjBdSpNHTQY3A7L6kU8Ch51F+969CyCIt48eBMVZCoe3G4Dh5/k5SV5adJuE7o5/P0O6b//7//P970m5D3S9surq7FxbjHO37hxLZrNWiysnlqNm7VYjixGrkRVs7itBwDwoLp5JOJ6GtqzcGkc1e7BsgCAfXQzpbj++lIl8+5Xe9UnZ38AeOAV5/+UDs4dbE59mXVh35YFAOyj8vw/ef//8anh+vSv+hcqfxUAADyoXnjp5WdPrkU8n+fNiM33eq1eK56ZjJ88H29GJ9bjWByOWxHDC4XBTa24PXN27fSxPM/78etytAYdvVbEZr/XGl4pnMyK/kYcj8OxXPaXVxsppezM1YjICxFxpV/MH5u1XmsxDpXz/3go1uNE5HFkpj/i7NrpE3l5B63NUX8/YjuaqbxaGax/JQ7Hd6/FhejEuRj0ji5r1k5fPp7np9Ja2R9XhutvFHVDu74DAgAAAAAAAAAAAAAAAAAAAAAA/8pKPrY83j8nTfbvWVmZM17sjzPsL/cH2h7uD5QaKVL6850nWu9nMbU/0M79eXqthThwfw8dAAAAAAAAAAAAAAAAAAAA/jO6F+vR7nTWt7oXL21Ug/5W9+KBiBhk3vrm0y8PxmzNbYKFco7KUF6mLm20UzYqTtlUTRlkg8lHmR+Wxiuu1jTGRzF3GY3dhzqdpcd++WiSeTQb3fPfk5os5h9gtmMZ1WDzoeGS7uYHNQ5O3Kbmp5TSbu2XX5ntilrEwt0/cHsHaRB8fe2Nh5/sHn2qyHyRBmoRg/nik9832p0iKh7B+lb3Vtpol9/Pf7LtHmSR+qNMLYZBrfpMWNirfXs6086+/+PFRz749s5mT9XM23NqsuHhfLZzqD4MBsssgqvjoYPz5lqc8+Tfh+Dox6vtzy///NuddlVeJAavAx9m+/gqBAAAAAAAAAAAAAAAAAAAxNS/x48y5afyL1aKtnd2Pf3cvVkdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANwbk8//rwTbM5k7Cf7qx+xQY32rG1G/34cJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/3D8BAAD//y9Yar0=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x2, 0x638, &(0x7f0000001100)="$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")
unlink(&(0x7f0000000280)='./file1\x00')
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x20c00)

9.152423527s ago: executing program 2 (id=1985):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7a", 0xab}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239", 0x71}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

8.10788183s ago: executing program 0 (id=1986):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0)
write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e)
sendmsg$nl_route(r0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aa780ab083aaaaaaaaaaaabb080045000070000000000001907864010100ac1414aa0bba907803000000450000000000ffff0089000000000000e0000001862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f000001e0000001ac1414aa000000"], 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd29, 0x25dddbfe, {0x20, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc090)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000080)=0x4)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0x1a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x21, 0x0, 0x0, 0x2c}, 0x94)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r8 = socket$inet6(0xa, 0x6, 0x119)
ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000001100)={@mcast1, 0xf, r4})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0)

5.813320143s ago: executing program 0 (id=1987):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0xfffffffffffffdfd, 0x5f, 0x3})
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_open_dev$MSR(0x0, 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r3, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90)
openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8})
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))

5.753873806s ago: executing program 2 (id=1988):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000040)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x13)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e8b, 0x0)

4.737080648s ago: executing program 3 (id=1989):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup2(r5, r6)
close_range(r7, 0xffffffffffffffff, 0x0)

4.619421832s ago: executing program 0 (id=1990):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$unlink(0x9, r0, r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f743c474f006e2c2b2e9bca42a239156d2dd48ed4f70e43873030263030303030303230303030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r5, 0x230d}, 0xc)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080), 0x4a)
r6 = add_key$user(&(0x7f00000036c0), &(0x7f0000003700)={'syz', 0x1}, &(0x7f0000003740)="84", 0x1, 0xfffffffffffffffb)
r7 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xb, [@restrict={0xf}, @float={0x7, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x8000000}}]}, {0x0, [0x61, 0x2e, 0x2e, 0x61, 0x61, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x10000, @value=r7}, 0x28)
keyctl$setperm(0x5, r6, 0x4021010)
r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x389483)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000000)=0x3)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000190000012bbd7000fedbdf25801000a30101000000000000000000000000008e"], 0x58}, 0x1, 0x0, 0x0, 0x20004085}, 0x4044)
r10 = syz_create_resource$binfmt(&(0x7f0000000380)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r10, 0x42, 0x1ff)

4.483444706s ago: executing program 3 (id=1991):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf250200000008000100030000"], 0x1c}, 0x1, 0x0, 0x0, 0xdbbca5e2e2fba6f}, 0x8000)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c)

3.872032896s ago: executing program 2 (id=1992):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$rxrpc(0x21, 0x2, 0xa)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "b7a34d", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}}}}}, 0x0)

3.213038947s ago: executing program 1 (id=1993):
r0 = socket$kcm(0xa, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @empty, 0x4e20, 0x3, 'wlc\x00', 0x3, 0xa7e, 0x100070}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e23, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@private=0xa010101, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xce, 0x40000000}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)

3.212441957s ago: executing program 2 (id=1994):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010)
write$binfmt_misc(r4, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}})
ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0)
io_setup(0x0, &(0x7f00000001c0)=<r7=>0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x40, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0x40}}, 0x0)
r10 = openat$cgroup_devices(r4, &(0x7f0000000500)='devices.allow\x00', 0x2, 0x0)
r11 = eventfd(0x200)
io_submit(r7, 0x7, &(0x7f0000000d00)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x8, r2, &(0x7f0000000400)="18d8260da77de5e43e02a326ebe1c273155e01d425f83c28e6363b6202486c736ea01007fdd79a969d4a78ab1ee2509c0215951ea1c6ccadfb2c4d2b0156caca75cadfb99b20d57f2f61cf048595a59c9af18b0131e593c01c541b7432acce1ca9a85783ab4cfa45", 0x68, 0x378, 0x0, 0x2, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x6, r10, &(0x7f0000000540)="00000000d07f366a32cf60bb63f360b0731b24def3a17c56b1aec9c477d60cb189cac198af0010e8467177c0d632f83c0bf818503973ac0de2d0ad0855ed33f1f75dcf881bf408caf101fdbe275f82ef5d4d9f7f4b371a66f4b573c64628a13a067ceef1a3fed7490fde7294552e058fe5edd35e4c351033ccb89005a68c2c92ea2e35fb5f63f3b14018064a6bda4a6b11f7d5c448a19cc109ce7cd5d9226b652a62d51df4e62acaafb24503a7bc4b694a04d1d1a448e19b65311052cd946051c4ddd8e2d51d9a92d7536ebdfe", 0xcd, 0x80000000c41f, 0x0, 0x1, r4}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x40, r6, &(0x7f0000000680)="8447bebc8d6383cd879fa3fbd0f11667d1f2bbd9a0949b53f0adcc45e6d126720529f44fafa8038bb56cedab1de094f895fa0120a4f41c780dcb8f48452ecc809c79a1d9caf3f3f76c778c5807b357f491cd4a82e976d711552c7bc32741b505fea823894c7f042533c87f87b7ee6351e14c82fa69d2992a4db242c0bb004718479374aa21a404457322fd70c354e9c64096fdd98d22904507e32a445999d2e5147728562bd8556e4826362b0ea8efc898ce5dfe02f0bc5ac2e98bfb4e0c71f0b293185e40", 0xc5, 0x9, 0x0, 0x1, r4}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f0000000880)="e43c3a2600bd13f1e2a322aa7c9568097ddedc5f7624bb1ac1b754bc9b1cb1dd7253646865e5e72f1a82e48043e40772906d87ed7ffccec91a913712a17be5a1f7354a1e8e43fda2728b0e4d1c453ec195e8d0f4a44cba2c2d5094e7b87f4332c4b81b202f234ac3f07c53b511427eda0114bd0c97b6c751e592fdfbfa91748565b90b17eafdf2204a12bb20030e9f111ba6c358061b5b64ece561a0d1a446b88f0869a7a25eaffd5dc45b711dd137ba7448ebeb0c7f1aed148fff1e4c248ad3e3d29f88d91a365b0900006d45759ca53b5e1485a03df73948b48c8ad2971c506247e94763cf82272a56dc2a8bca59df7a26f4d5b8ce", 0xf6, 0x100000001, 0x0, 0x3, r4}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1, r0, &(0x7f00000009c0)="c5c077c5a7340de85617a68083f593b38fedf73fb853a52ef860e8f8d675a2764d853df0b987bd1ed059697097095712a86b2978e405ca45eda6d4b09f2d77015a6d69ae8d28dec0cc9795246344c77a8375a984b3f0d262947824a728aa4fcdbced5da13209b8ffb2d7e3cc210479ae5909bbc0ed89a88d38bed8019806350c1cc6684c2393682f7c2ea7ce9d24e33230e1349b95551c74ea1c632475c5c987bfcad461e4916f1a9053275f", 0xac, 0x100000001, 0x0, 0x1, r11}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0xd, r1, &(0x7f0000000ac0)="f1b185119241c0d1b4e16bb33b1f690f1deb9f3610ca1eed7548c869f5910cc5ff24993c9867711acdc6230014fffe3d9cddd1ad33a76d16e2fc1c299a1f0a98fdc37489651c88e88c170cb2881195d87a22814de7f98eed934cce6be68bd5e76d6798236a19a9aa55ddbae38e69a8ea95158933b2d641b61bdeebda8e6be20b544714bb08ae9b3abc54aa6d5a6ffb244937c478", 0x94, 0x6, 0x0, 0x0, r4}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x6, 0x8, r2, &(0x7f0000000bc0)="e89c4e501157e6594699c89f2ea6a24fc6de44cc618b29367601188b4eb9d3868f43881e46e9fafd8a7c26ad5338fbbae223b5156099b39e552a4d2b46ebd1d23f6b4d7e94699a6572baa599e570b62f05e160630c0112362824f1d0d2351d15a3a4536944ce71c277d89059e5abad705a4b8ace69a7edca547a8baf6cd4b4b7d462b60d86d09626299479085c778c86e83dd6d2d4f7282d91dab4bce463225841fd147ad6ad4f084b4ca18b5ca43ca079b7fa51a31de9a26d865cf38da5d25257701555808bc3779040adbb0a", 0xcd, 0x3}])
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1})
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000140)=0x2, 0x4)

3.176262608s ago: executing program 3 (id=1995):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0)
write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e)
sendmsg$nl_route(r0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aa780ab083aaaaaaaaaaaabb080045000070000000000001907864010100ac1414aa0bba907803000000450000000000ffff0089000000000000e0000001862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f000001e0000001ac1414aa000000"], 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd29, 0x25dddbfe, {0x20, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc090)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000080)=0x4)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0x1a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x21, 0x0, 0x0, 0x2c}, 0x94)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000009000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r8 = socket$inet6(0xa, 0x6, 0x119)
ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000001100)={@mcast1, 0xf, r4})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0)

2.277199387s ago: executing program 1 (id=1996):
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

2.276671827s ago: executing program 3 (id=1997):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000"], 0x7c}}, 0x0)

1.335484167s ago: executing program 3 (id=1998):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a6c000000060a0104000000000000000002000001400004803c0001800a0001006c696d69740000002c00028008000340000000050c000140fffffffffffffffe06000240000000000000000408000440000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x8810)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840)
sendmsg$kcm(r0, 0x0, 0x0)
dup(0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x84}}, 0x20008040)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
epoll_create(0x5)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)

1.264667689s ago: executing program 2 (id=1999):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0xfffffffffffffdfd, 0x5f, 0x3})
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_open_dev$MSR(0x0, 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r3, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90)
openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8})
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))

140.206495ms ago: executing program 1 (id=2000):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r1, r0, 0x0, 0x100000500)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000002500)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000002440)=[{&(0x7f0000000340)=""/183, 0xb7}, {&(0x7f0000001300)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002340)=""/43, 0x2b}, {&(0x7f0000002380)=""/164, 0xa4}], 0x5}, 0x12041)
r3 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=@gettfilter={0x4c, 0x2e, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffff}, {0x8, 0xfff1}, {0x2, 0x1}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8054)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x40180)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x0, 0xf4})
sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r2, 0x0, 0x0, 0xc9100120, 0x0, 0x0)

126.879315ms ago: executing program 2 (id=2001):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020)

0s ago: executing program 3 (id=2002):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000003c0)={0x0, 0x0, 0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000200000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB="00000000000000000000000000000000000000000000000000f908004457e4b4bf65320103e6c048b324524c508055b7d7a64e"], 0x48)
bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000140)={r4, 0x58, &(0x7f0000000200)}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523"], 0xfe33)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES64=r5], 0xfe33)
clock_adjtime(0x0, &(0x7f0000000300)={0x3ff, 0xffff0000, 0x4103, 0xb, 0x2, 0x1, 0x800000000000003, 0x9, 0x0, 0x100, 0x3, 0x0, 0x8, 0x0, 0x9f, 0x2, 0xfffffffd, 0x0, 0x300000000000, 0x9, 0x88001, 0x7, 0xfffffffffffffffd, 0x3, 0x0, 0xe})
r7 = socket$inet(0x2, 0x3, 0x4)
ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f00000001c0)={{[0x7, 0xc8, 0x6]}, 0x0, 0x3, 0x7fff, 0x0, &(0x7f0000000400)=[{{@_ha_fsid={[0xffffffff, 0x7]}, {0xfff7, 0x1, 0x78000, 0x1}}, 0x7, 0x0, '.\x00'}, {{@_ha_fsid={[0x7, 0x2]}, {0x3a3b, 0x409, 0x8, 0x7fffffff}}, 0x4, 0x0, '\x1c\x8a\xa5]ML\xb5\xd9\x8c\xf2l:8)\xa6\xbc\xeeH\xa58\x84\xde\x03r\x99\x1b\xbb\x86\x9dS.'}, {{@align=0x5, {0x8001, 0xffff, 0x8, 0x5}}, 0x7ff, 0x0, 'ip6_vti0\x00'}, {{@align=0x2, {0x4, 0x0, 0x0, 0x5}}, 0x7fff, 0x0, '/dev/snd/midiC#D#\x00'}]})
setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r7, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x68000, 0xe000)

kernel console output (not intermixed with test programs):

0.0: Error: mce write submit urb error = -90
[  471.869022][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  471.960441][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  472.008955][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  472.064790][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  472.114221][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  472.188946][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  472.245773][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  472.344001][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  472.421853][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  472.659575][    T8] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  472.669466][    T8] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  472.689928][    T8] usb 2-1: USB disconnect, device number 20
[  476.175733][ T9620] syz.1.1040 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  478.315725][ T9638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1045'.
[  482.229298][ T5762] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  482.452566][ T5762] usb 2-1: Using ep0 maxpacket: 16
[  482.460185][ T5762] usb 2-1: config 0 has no interfaces?
[  482.467480][ T5762] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  482.518755][ T5762] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  482.526813][ T5762] usb 2-1: Manufacturer: syz
[  482.561688][ T5762] usb 2-1: config 0 descriptor??
[  483.511116][ T6680] usb 2-1: USB disconnect, device number 21
[  484.217093][ T9694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1060'.
[  488.980842][ T5762] libceph: connect (1)[c::]:6789 error -101
[  488.992678][ T5762] libceph: mon0 (1)[c::]:6789 connect error
[  489.026381][ T9718] ceph: No mds server is up or the cluster is laggy
[  489.288837][    T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  489.504413][    T8] usb 2-1: Using ep0 maxpacket: 16
[  489.527294][    T8] usb 2-1: config 0 has no interfaces?
[  489.535204][    T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  489.578997][    T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  489.594858][    T8] usb 2-1: Manufacturer: syz
[  489.621734][    T8] usb 2-1: config 0 descriptor??
[  490.194550][    T8] usb 2-1: USB disconnect, device number 22
[  490.228759][ T5762] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  490.277301][ T9744] fuse: Bad value for 'fd'
[  490.409030][ T5762] usb 4-1: device descriptor read/64, error -71
[  490.678911][ T5762] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  490.858823][ T5762] usb 4-1: device descriptor read/64, error -71
[  490.999929][ T5762] usb usb4-port1: attempt power cycle
[  492.118878][ T5762] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  492.169196][ T5762] usb 4-1: device descriptor read/8, error -71
[  493.358747][ T5762] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  493.414329][ T5762] usb 4-1: device descriptor read/8, error -71
[  493.549106][ T5762] usb usb4-port1: unable to enumerate USB device
[  495.245102][ T6057] libceph: connect (1)[c::]:6789 error -101
[  495.245231][ T6057] libceph: mon0 (1)[c::]:6789 connect error
[  495.245360][ T9783] ceph: No mds server is up or the cluster is laggy
[  496.088929][ T9804] Error parsing options; rc = [-22]
[  496.331996][ T5762] libceph: connect (1)[c::]:6789 error -101
[  496.332124][ T5762] libceph: mon0 (1)[c::]:6789 connect error
[  497.896519][ T9816] syzkaller0: entered promiscuous mode
[  497.924281][ T9816] syzkaller0: entered allmulticast mode
[  499.631354][ T9837] IPVS: Error connecting to the multicast addr
[  501.630932][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  503.894270][ T9862] binder: 9861:9862 ioctl c0306201 200000001ac0 returned -14
[  504.353500][ T9868] IPVS: Error connecting to the multicast addr
[  506.955963][ T9884] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  507.653164][ T9886] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  509.414107][ T6057] libceph: connect (1)[c::]:6789 error -101
[  509.423898][ T6057] libceph: mon0 (1)[c::]:6789 connect error
[  509.503988][ T9905] ceph: No mds server is up or the cluster is laggy
[  509.711725][ T6057] libceph: connect (1)[c::]:6789 error -101
[  509.730016][ T6057] libceph: mon0 (1)[c::]:6789 connect error
[  510.043864][ T9914] IPVS: Error connecting to the multicast addr
[  515.711174][ T9953] IPVS: Error connecting to the multicast addr
[  516.304953][ T6057] libceph: connect (1)[c::]:6789 error -101
[  516.311224][ T6057] libceph: mon0 (1)[c::]:6789 connect error
[  516.317663][ T9949] ceph: No mds server is up or the cluster is laggy
[  516.638251][ T9969] fuse: Unknown parameter '0x0000000000000003'
[  519.448176][ T9998] IPVS: Error connecting to the multicast addr
[  520.278354][T10001] fuse: Unknown parameter '0x0000000000000003'
[  521.258991][ T6057] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  521.980398][ T6057] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  522.001052][ T6057] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  522.011855][ T6057] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  522.025866][ T6057] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  522.037317][ T6057] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.085682][ T6057] usb 3-1: config 0 descriptor??
[  523.121863][ T6057] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd
[  523.136607][ T6057] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  523.151247][T10033] IPVS: Error connecting to the multicast addr
[  523.184067][ T6057] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  523.371453][ T6057] usb 3-1: USB disconnect, device number 27
[  523.419591][T10040] fuse: Unknown parameter '0x0000000000000003'
[  524.079557][T10047] batman_adv: batadv0: Removing interface: batadv_slave_0
[  524.249650][T10047] batman_adv: batadv0: Removing interface: batadv_slave_1
[  524.652281][T10052] 9pnet_fd: Insufficient options for proto=fd
[  526.740981][T10080] IPVS: Error connecting to the multicast addr
[  530.349038][T10128] IPVS: Error connecting to the multicast addr
[  535.543818][T10210] comedi comedi0: No hardware detected at I/O base 0x294
[  537.350551][T10236] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  537.648851][ T5969] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  537.715804][ T5762] libceph: connect (1)[c::]:6789 error -101
[  537.725274][ T5762] libceph: mon0 (1)[c::]:6789 connect error
[  537.754939][T10238] ceph: No mds server is up or the cluster is laggy
[  537.838732][ T5969] usb 4-1: Using ep0 maxpacket: 16
[  537.849569][ T5969] usb 4-1: too many configurations: 123, using maximum allowed: 8
[  537.871813][ T5969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.892954][ T5969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.910232][ T5969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.930254][ T5969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.947623][ T5969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.960261][ T5969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.993911][ T5969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  538.054690][ T5969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  538.117983][ T5969] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  538.171766][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  538.220559][ T5969] usb 4-1: SerialNumber: syz
[  538.641571][ T5969] usb 4-1: config 0 descriptor??
[  538.827304][ T5969] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input88
[  539.042958][ T5128] bcm5974 4-1:0.0: could not read from device
[  539.104136][ T5128] bcm5974 4-1:0.0: could not read from device
[  539.117239][ T5969] usb 4-1: USB disconnect, device number 26
[  539.187901][ T5777] Bluetooth: hci3: hcon ffff888068bec000 sent 0 < count 10
[  539.196739][T10252] qnx6: unable to read the first superblock
[  539.296713][ T5128] bcm5974 4-1:0.0: could not read from device
[  539.887370][T10254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1205'.
[  540.139058][T10257] comedi comedi0: No hardware detected at I/O base 0x294
[  541.451285][T10273] fuse: Unknown parameter 'group_i00000000000000000000'
[  541.581311][T10277] vlan0: left promiscuous mode
[  541.606214][T10277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1211'.
[  541.649116][T10279] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  541.749036][T10280] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  542.413641][T10282] nbd1: detected capacity change from 0 to 63
[  542.426225][T10284] block nbd1: NBD_DISCONNECT
[  542.434539][T10284] block nbd1: Disconnected due to user request.
[  542.447512][   T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  542.467598][   T10] Buffer I/O error on dev nbd1, logical block 0, async page read
[  542.475600][   T10] Buffer I/O error on dev nbd1, logical block 1, async page read
[  542.483454][   T10] Buffer I/O error on dev nbd1, logical block 2, async page read
[  542.491386][   T10] Buffer I/O error on dev nbd1, logical block 3, async page read
[  542.500698][   T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  542.510460][   T10] Buffer I/O error on dev nbd1, logical block 0, async page read
[  542.518182][   T10] Buffer I/O error on dev nbd1, logical block 1, async page read
[  542.525995][   T10] Buffer I/O error on dev nbd1, logical block 2, async page read
[  542.533932][   T10] Buffer I/O error on dev nbd1, logical block 3, async page read
[  542.542011][   T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  542.558747][   T10] Buffer I/O error on dev nbd1, logical block 0, async page read
[  542.566496][   T10] Buffer I/O error on dev nbd1, logical block 1, async page read
[  542.574622][   T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  542.583849][   T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  542.593381][   T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  542.602715][   T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  542.612006][   T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  542.621165][ T5767] ldm_validate_partition_table(): Disk read failed.
[  542.628123][   T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  542.663646][T10284] block nbd1: shutting down sockets
[  542.672036][   T24] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  542.718892][ T5767] Dev nbd1: unable to read RDB block 0
[  542.798827][ T5767]  nbd1: unable to read partition table
[  542.822544][ T5767] ldm_validate_partition_table(): Disk read failed.
[  542.863437][ T5767] Dev nbd1: unable to read RDB block 0
[  542.869699][ T5767]  nbd1: unable to read partition table
[  543.037006][T10290] qnx6: unable to read the first superblock
[  543.971987][T10292] comedi comedi0: No hardware detected at I/O base 0x294
[  544.206319][T10299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1219'.
[  544.281843][T10301] fuse: Unknown parameter 'root<GO'
[  544.319338][ T5762] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  544.518934][ T5762] usb 4-1: Using ep0 maxpacket: 16
[  544.540802][ T5762] usb 4-1: too many configurations: 123, using maximum allowed: 8
[  544.566305][ T5762] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  544.602198][ T5762] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  544.621790][ T5762] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  544.633806][ T5762] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  544.645345][ T5762] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  544.659807][ T5762] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  544.671930][ T5762] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  544.684685][ T5762] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  544.696360][ T5762] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  544.705857][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  544.714178][ T5762] usb 4-1: SerialNumber: syz
[  544.735003][ T5762] usb 4-1: config 0 descriptor??
[  544.757936][ T5762] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input89
[  544.962566][ T5128] bcm5974 4-1:0.0: could not read from device
[  544.994497][ T5128] bcm5974 4-1:0.0: could not read from device
[  545.013423][ T5762] usb 4-1: USB disconnect, device number 27
[  545.341395][T10314] qnx6: unable to read the first superblock
[  546.260713][T10313] syzkaller0: entered promiscuous mode
[  546.266266][T10313] syzkaller0: entered allmulticast mode
[  546.727923][ T5969] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  547.280134][T10323] nbd0: detected capacity change from 0 to 63
[  547.292102][ T5777] block nbd0: Receive control failed (result -104)
[  547.370166][T10327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1230'.
[  547.428909][ T5969] usb 3-1: Using ep0 maxpacket: 32
[  547.497565][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  547.579112][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  547.717773][ T5969] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  547.870905][ T5969] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  548.008627][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.028640][ T5969] usb 3-1: config 0 descriptor??
[  548.116195][T10342] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1234'.
[  548.183738][T10343] qnx6: unable to read the first superblock
[  549.458753][ T5777] Bluetooth: hci1: hcon ffff88802fc28000 sent 0 < count 10
[  549.876352][ T5969] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0010/input/input90
[  549.893876][ T5969] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0010/input/input91
[  549.941855][ T5969] kye 0003:0458:5011.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[  550.099955][T10350] syzkaller0: entered promiscuous mode
[  550.105643][T10350] syzkaller0: entered allmulticast mode
[  550.299855][T10352] fuse: Unknown parameter 'root<GO'
[  550.419066][ T5762] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  551.349316][   T28] usb 3-1: USB disconnect, device number 28
[  551.399134][ T5762] usb 1-1: Using ep0 maxpacket: 16
[  551.411900][ T5762] usb 1-1: too many configurations: 123, using maximum allowed: 8
[  551.617336][T10361] fuse: Bad value for 'fd'
[  551.811938][ T5762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  551.829958][ T5762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  551.856590][ T5762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  551.932387][ T5762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  551.969341][ T5762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  551.992050][ T5762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  552.021739][ T5762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  552.061532][ T5762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  552.075187][ T5762] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  552.095298][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  552.117577][ T5762] usb 1-1: SerialNumber: syz
[  552.145698][ T5762] usb 1-1: config 0 descriptor??
[  552.167302][ T5762] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input92
[  552.365225][ T5128] bcm5974 1-1:0.0: could not read from device
[  552.375414][ T5128] bcm5974 1-1:0.0: could not read from device
[  552.395408][ T5128] bcm5974 1-1:0.0: could not read from device
[  552.459890][ T5762] usb 1-1: USB disconnect, device number 26
[  552.522790][ T5128] bcm5974 1-1:0.0: could not read from device
[  552.722742][T10377] vlan2: entered promiscuous mode
[  552.729971][T10377] bridge0: entered promiscuous mode
[  552.781759][T10378] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1244'.
[  552.804172][T10378] qnx6: unable to read the first superblock
[  555.951748][T10394] batman_adv: batadv0: Removing interface: batadv_slave_0
[  555.989384][T10394] batman_adv: batadv0: Removing interface: batadv_slave_1
[  556.249305][ T6680] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  556.558786][ T6680] usb 3-1: Using ep0 maxpacket: 32
[  556.630575][ T6680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  556.694744][ T6680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  556.747269][ T6680] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  556.765308][ T6680] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  556.775546][ T6680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.792545][ T6680] usb 3-1: config 0 descriptor??
[  557.232208][ T6680] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0011/input/input93
[  557.324883][ T6680] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0011/input/input94
[  557.387095][ T6680] kye 0003:0458:5011.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[  558.349560][    C0] kye 0003:0458:5011.0011: usb_submit_urb(ctrl) failed: -1
[  558.548815][ T6680] usb 3-1: reset high-speed USB device number 29 using dummy_hcd
[  558.631083][T10432] fuse: Unknown parameter 'root<GO'
[  558.739849][ T6680] usb 3-1: device descriptor read/64, error -32
[  559.025006][T10439] ptrace attach of ""[10440] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10439]
[  559.087533][T10438] netlink: 'syz.2.1261': attribute type 72 has an invalid length.
[  559.111272][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1261'.
[  559.289091][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  559.289133][   T27] audit: type=1800 audit(1781089777.786:82): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1258" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  559.296325][T10435] kye 0003:0458:5011.0011: pid 10435 passed too short report
[  559.680585][ T5969] usb 3-1: USB disconnect, device number 29
[  559.901664][T10450] fuse: Bad value for 'user_id'
[  561.584967][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1271'.
[  561.802592][T10474] fuse: Bad value for 'user_id'
[  561.878765][   T28] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  561.919798][T10476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1275'.
[  561.966685][T10478] fuse: Unknown parameter 'root<GO'
[  562.058779][   T28] usb 1-1: Using ep0 maxpacket: 32
[  562.066327][   T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  562.077722][   T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  562.087914][   T28] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  562.101301][   T28] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  562.145616][   T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.178072][   T28] usb 1-1: config 0 descriptor??
[  562.393949][T10483] fuse: Bad value for 'fd'
[  562.833313][   T28] usbhid 1-1:0.0: can't add hid device: -71
[  562.845949][   T28] usbhid: probe of 1-1:0.0 failed with error -71
[  562.879604][   T28] usb 1-1: USB disconnect, device number 27
[  563.071630][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  565.118524][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'.
[  565.120060][T10506] fuse: Bad value for 'fd'
[  565.373713][T10513] IPVS: Error connecting to the multicast addr
[  565.700600][T10516] fuse: Bad value for 'fd'
[  565.828762][ T5969] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  566.005029][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1290'.
[  566.009176][ T5969] usb 2-1: Using ep0 maxpacket: 32
[  566.781091][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  566.801052][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  566.816306][ T5969] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  566.830134][ T5969] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  566.839392][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.859059][ T5969] usb 2-1: config 0 descriptor??
[  567.919305][T10542] fuse: Bad value for 'fd'
[  568.641992][ T5969] usbhid 2-1:0.0: can't add hid device: -71
[  568.678483][ T5969] usbhid: probe of 2-1:0.0 failed with error -71
[  568.819526][ T5969] usb 2-1: USB disconnect, device number 23
[  568.916025][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'.
[  568.999538][T10556] IPVS: Error connecting to the multicast addr
[  570.333182][T10554] fuse: Bad value for 'fd'
[  571.699048][T10578] fuse: Bad value for 'fd'
[  572.599162][ T5969] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  572.788843][ T5969] usb 1-1: Using ep0 maxpacket: 32
[  572.801392][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  572.818835][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  572.835969][ T5969] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  572.856878][ T5969] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  572.868535][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.883260][ T5969] usb 1-1: config 0 descriptor??
[  573.382255][ T5969] usbhid 1-1:0.0: can't add hid device: -71
[  573.418900][ T5969] usbhid: probe of 1-1:0.0 failed with error -71
[  573.444616][ T5969] usb 1-1: USB disconnect, device number 28
[  573.632827][T10600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1312'.
[  577.706472][T10620] fuse: Bad value for 'fd'
[  577.791617][   T24] block nbd0: Possible stuck request ffff888021fb0000: control (read@0,4096B). Runtime 30 seconds
[  578.988828][ T5969] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  579.168886][ T5969] usb 2-1: Using ep0 maxpacket: 32
[  579.185436][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  579.218397][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  579.250649][ T5969] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  579.286709][ T5969] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  579.317268][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.347112][ T5969] usb 2-1: config 0 descriptor??
[  580.420890][ T5969] usbhid 2-1:0.0: can't add hid device: -71
[  580.426947][ T5969] usbhid: probe of 2-1:0.0 failed with error -71
[  580.580409][ T5969] usb 2-1: USB disconnect, device number 24
[  582.421646][ T5777] Bluetooth: hci3: command 0x0406 tx timeout
[  582.432649][T10648] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  583.529404][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1330'.
[  583.547518][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1330'.
[  583.559198][ T5762] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  583.613539][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1330'.
[  583.622609][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1330'.
[  584.428306][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'.
[  584.591513][ T5762] usb 2-1: Using ep0 maxpacket: 16
[  584.605585][ T5762] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  584.616208][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  584.631697][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  584.642682][ T5762] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  584.672324][ T5969] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  584.858810][ T5969] usb 1-1: Using ep0 maxpacket: 32
[  585.752510][ T5762] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  585.767656][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  585.782445][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  585.783556][ T5762] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  586.001787][ T5762] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  586.011001][ T5762] usb 2-1: Manufacturer: syz
[  586.018201][ T5762] usb 2-1: config 0 descriptor??
[  586.042567][ T5969] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  586.068237][ T5969] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  586.088543][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.233113][ T5969] usb 1-1: config 0 descriptor??
[  586.331995][ T5762] rc_core: IR keymap rc-hauppauge not found
[  586.350407][ T5762] Registered IR keymap rc-empty
[  586.366413][ T5762] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  587.205230][ T5969] usbhid 1-1:0.0: can't add hid device: -71
[  587.218724][ T5762] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  587.221488][ T5969] usbhid: probe of 1-1:0.0 failed with error -71
[  587.244314][ T5969] usb 1-1: USB disconnect, device number 29
[  587.301163][ T5762] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  587.810835][ T5762] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input95
[  587.974076][ T5762] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  588.026542][ T5762] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  588.122197][ T5762] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  588.169391][ T5762] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  588.208896][ T5762] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  588.260001][ T5762] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  588.298823][ T5762] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  588.338833][ T5762] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  588.378996][ T5762] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  588.419557][ T5762] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  588.453029][ T5762] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  588.461491][ T5762] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  588.465852][ T5762] usb 2-1: USB disconnect, device number 25
[  589.359225][T10714] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  589.359289][T10714] overlayfs: missing 'lowerdir'
[  589.637859][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'.
[  589.647261][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'.
[  589.686672][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'.
[  589.695759][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'.
[  591.029052][ T5969] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  591.757053][T10732] 9pnet_fd: Insufficient options for proto=fd
[  591.768786][ T5969] usb 4-1: Using ep0 maxpacket: 32
[  591.775665][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  592.666796][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  592.678975][ T5969] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  592.708310][ T5969] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  592.717640][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.740002][ T5969] usb 4-1: config 0 descriptor??
[  593.028779][ T5762] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  593.651556][ T5969] usbhid 4-1:0.0: can't add hid device: -71
[  593.677951][ T5969] usbhid: probe of 4-1:0.0 failed with error -71
[  593.702811][ T5969] usb 4-1: USB disconnect, device number 28
[  593.808762][ T5762] usb 3-1: Using ep0 maxpacket: 16
[  593.820265][ T5762] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  593.838901][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  593.868094][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  593.887219][ T5762] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  593.907677][ T5762] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  593.940267][ T5762] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  593.956664][ T5762] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  594.003270][ T5762] usb 3-1: Manufacturer: syz
[  594.107684][ T5762] usb 3-1: config 0 descriptor??
[  595.828901][ T5762] rc_core: IR keymap rc-hauppauge not found
[  595.838753][ T5762] Registered IR keymap rc-empty
[  595.850048][ T5762] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  595.864081][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'.
[  595.879152][ T5762] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  596.708821][ T5762] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  597.002259][ T5762] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input96
[  597.219507][ T5762] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  597.248945][ T5762] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  597.278971][ T5762] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  597.309559][ T5762] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  597.339522][ T5762] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  597.378834][ T5762] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  597.412654][ T5762] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  597.468873][ T5762] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  599.070983][ T5762] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  599.118724][ T5762] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  599.152969][ T5762] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  599.171012][ T5762] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  599.201863][ T5762] usb 3-1: USB disconnect, device number 30
[  599.568739][   T28] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  599.838699][   T28] usb 4-1: Using ep0 maxpacket: 32
[  599.856133][   T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  599.870008][   T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  599.881930][   T28] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  599.896841][   T28] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  599.909526][   T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.967061][   T28] usb 4-1: config 0 descriptor??
[  600.567048][   T28] usbhid 4-1:0.0: can't add hid device: -71
[  600.584773][   T28] usbhid: probe of 4-1:0.0 failed with error -71
[  600.735194][   T28] usb 4-1: USB disconnect, device number 29
[  600.838562][    T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  601.355462][    T8] usb 2-1: Using ep0 maxpacket: 16
[  601.419411][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  601.444823][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  601.458066][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  601.468366][    T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  601.478611][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  601.495589][    T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  601.505426][    T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  601.609998][    T8] usb 2-1: Manufacturer: syz
[  601.723093][    T8] usb 2-1: config 0 descriptor??
[  602.428137][    T8] rc_core: IR keymap rc-hauppauge not found
[  602.466572][    T8] Registered IR keymap rc-empty
[  602.488572][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  602.669531][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  602.893735][    T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  602.925429][    T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input97
[  602.957803][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  603.141502][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  603.178358][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  603.211180][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  603.258324][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  603.298599][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  603.340496][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  603.405347][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  603.469524][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  603.531047][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  603.575066][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'.
[  603.642665][    T8] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  603.676817][    T8] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  603.812713][    T8] usb 2-1: USB disconnect, device number 26
[  605.857922][    T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  606.001782][T10834] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  606.717940][    T8] usb 2-1: Using ep0 maxpacket: 32
[  606.737865][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  606.772694][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  606.822993][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  606.836475][    T8] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  606.853991][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.866344][    T8] usb 2-1: config 0 descriptor??
[  607.810056][    T8] usbhid 2-1:0.0: can't add hid device: -71
[  607.830847][    T8] usbhid: probe of 2-1:0.0 failed with error -71
[  607.868053][   T24] block nbd0: Possible stuck request ffff888021fb0000: control (read@0,4096B). Runtime 60 seconds
[  607.910558][    T8] usb 2-1: USB disconnect, device number 27
[  607.953602][T10840] binder: BINDER_SET_CONTEXT_MGR already set
[  608.036611][T10840] binder: 10839:10840 ioctl 4018620d 200000000040 returned -16
[  608.922178][T10845] fuse: Bad value for 'fd'
[  609.247483][ T5762] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  610.627414][ T5762] usb 1-1: Using ep0 maxpacket: 16
[  610.665364][ T5762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  610.747412][    T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  610.756541][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  610.839240][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  610.898303][ T5762] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  610.937938][ T5762] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  610.995111][ T5762] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  611.029448][ T5762] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  611.061891][ T5762] usb 1-1: Manufacturer: syz
[  611.116964][ T5762] usb 1-1: config 0 descriptor??
[  611.518147][ T5762] rc_core: IR keymap rc-hauppauge not found
[  611.524113][ T5762] Registered IR keymap rc-empty
[  611.587314][ T5762] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  611.602340][    T8] usb 3-1: Using ep0 maxpacket: 32
[  611.619327][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  611.637388][ T5762] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  611.645614][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  611.668253][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  611.681537][    T8] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  611.683679][ T5762] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  611.693409][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.751754][ T5762] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input98
[  611.793069][ T5762] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  611.828216][ T5762] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  611.859676][ T5762] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  611.870081][    T8] usb 3-1: config 0 descriptor??
[  611.898388][ T5762] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  611.928006][ T5762] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  611.957813][ T5762] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  611.987914][ T5762] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  612.018086][ T5762] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  612.047828][ T5762] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  612.087145][ T5762] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  612.093743][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1396'.
[  612.130936][ T5762] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  612.139180][ T5762] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  612.173267][ T5762] usb 1-1: USB disconnect, device number 30
[  612.344897][    T8] usbhid 3-1:0.0: can't add hid device: -71
[  612.366404][    T8] usbhid: probe of 3-1:0.0 failed with error -71
[  612.417767][    T8] usb 3-1: USB disconnect, device number 31
[  612.629943][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'.
[  613.954358][T10880] binder: 10876:10880 ioctl c0306201 2000000001c0 returned -14
[  616.256800][ T6057] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  616.593328][ T6057] usb 1-1: Using ep0 maxpacket: 32
[  616.605006][ T6057] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  616.626536][ T6057] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  616.654114][ T6057] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  616.736355][ T6057] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  616.753706][ T6057] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.774653][ T6057] usb 1-1: config 0 descriptor??
[  616.966651][ T5970] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  617.176588][ T5970] usb 4-1: Using ep0 maxpacket: 16
[  617.190465][ T5970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  617.275791][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  617.384884][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  617.491328][ T5970] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  617.606827][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  617.774751][ T5970] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  617.829394][ T5970] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  617.836962][ T6057] usbhid 1-1:0.0: can't add hid device: -71
[  617.843508][ T6057] usbhid: probe of 1-1:0.0 failed with error -71
[  617.853726][ T6057] usb 1-1: USB disconnect, device number 31
[  617.894681][ T5970] usb 4-1: Manufacturer: syz
[  617.991207][ T5970] usb 4-1: config 0 descriptor??
[  619.348224][ T5970] rc_core: IR keymap rc-hauppauge not found
[  619.851554][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'.
[  620.125922][ T5970] Registered IR keymap rc-empty
[  620.131629][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.166519][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.207556][ T5970] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  620.222268][ T5970] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input99
[  620.248280][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.278615][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.308449][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.346593][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.396170][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.456145][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.496298][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.796274][    T8] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  621.397607][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.446578][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.512802][T10978] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  621.525955][ T5970] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.577226][ T5970] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  621.598270][    T8] usb 2-1: Using ep0 maxpacket: 32
[  621.625483][ T5970] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  621.644903][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  621.659125][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  621.698211][ T5970] usb 4-1: USB disconnect, device number 30
[  621.714214][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  621.746219][    T8] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  621.755259][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.858253][    T8] usb 2-1: config 0 descriptor??
[  622.360817][    T8] usbhid 2-1:0.0: can't add hid device: -71
[  622.465170][    T8] usbhid: probe of 2-1:0.0 failed with error -71
[  622.476303][    T8] usb 2-1: USB disconnect, device number 28
[  624.215769][   T28] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  624.423403][    T8] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  624.974825][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  625.017290][T11004] comedi comedi0: Minor 9 could not be opened
[  625.135576][    T8] usb 3-1: Using ep0 maxpacket: 16
[  625.147377][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  625.171671][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  625.185657][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  625.195706][    T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  625.205375][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  625.205786][   T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  625.238554][   T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  625.256037][    T8] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  625.258935][   T28] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  625.275345][    T8] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  625.284345][   T28] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  625.295603][   T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.305307][    T8] usb 3-1: Manufacturer: syz
[  625.321483][    T8] usb 3-1: config 0 descriptor??
[  625.327184][   T28] usb 2-1: config 0 descriptor??
[  625.435538][ T5970] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  625.635459][ T5970] usb 4-1: Using ep0 maxpacket: 32
[  625.652118][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  625.685547][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  625.695883][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  625.709174][ T5970] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  625.718578][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.730350][ T5970] usb 4-1: config 0 descriptor??
[  625.745937][    T8] rc_core: IR keymap rc-hauppauge not found
[  625.752434][    T8] Registered IR keymap rc-empty
[  625.757745][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  625.764988][   T28] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  625.781843][   T28] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  625.785596][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  625.790541][   T28] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  625.804041][   T28] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  625.822627][   T28] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  625.834004][   T28] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  625.844932][   T28] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  625.859080][   T28] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  625.859681][    T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  625.869208][   T28] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  625.884966][    T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input100
[  625.906912][   T28] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  625.907225][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  625.914372][   T28] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  625.914399][   T28] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  625.914423][   T28] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  625.914446][   T28] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  625.914470][   T28] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  625.915275][   T28] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  625.979302][   T28] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  625.992123][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  626.024150][T11011] syz.0.1434: attempt to access beyond end of device
[  626.024150][T11011] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  626.041226][T11011] 9pnet_fd: Insufficient options for proto=fd
[  626.117701][   T28] usb 2-1: USB disconnect, device number 29
[  626.682737][ T5970] usbhid 4-1:0.0: can't add hid device: -71
[  626.742397][ T5970] usbhid: probe of 4-1:0.0 failed with error -71
[  626.752412][ T5970] usb 4-1: USB disconnect, device number 31
[  626.775373][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  626.789958][T11012] fido_id[11012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  626.807506][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  626.835575][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  626.866015][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  627.775297][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  627.815241][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  627.845241][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  627.889906][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  627.927200][    T8] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  627.937317][    T8] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  627.943630][T11032] nbd: must specify at least one socket
[  627.951814][    T8] usb 3-1: USB disconnect, device number 32
[  629.071803][T11038] comedi comedi0: Minor 9 could not be opened
[  629.972647][T11051] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  630.385887][ T5970] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  630.545371][T11064] syz.3.1445: attempt to access beyond end of device
[  630.545371][T11064] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  630.562485][T11064] 9pnet_fd: Insufficient options for proto=fd
[  630.604849][ T5970] usb 3-1: Using ep0 maxpacket: 32
[  631.264633][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  631.275814][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  631.286545][ T5970] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  631.299551][ T5970] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  631.309612][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.326662][ T5970] usb 3-1: config 0 descriptor??
[  631.814237][T11072] 9pnet_fd: Insufficient options for proto=fd
[  633.706208][ T5970] usbhid 3-1:0.0: can't add hid device: -71
[  633.712204][ T5970] usbhid: probe of 3-1:0.0 failed with error -71
[  633.727513][ T5970] usb 3-1: USB disconnect, device number 33
[  633.954424][   T28] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  634.834470][   T28] usb 4-1: Using ep0 maxpacket: 16
[  635.601713][   T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  635.753308][   T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  635.774273][   T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  635.794475][   T28] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  635.814688][   T28] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  635.865342][   T28] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  635.884171][   T28] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  635.892217][   T28] usb 4-1: Manufacturer: syz
[  635.906525][   T28] usb 4-1: config 0 descriptor??
[  636.028486][T11104] bond0: entered promiscuous mode
[  636.046123][T11104] bond_slave_0: entered promiscuous mode
[  636.069010][T11104] bond_slave_1: entered promiscuous mode
[  636.109322][T11107] syz.1.1454: attempt to access beyond end of device
[  636.109322][T11107] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  636.127015][T11107] 9pnet_fd: Insufficient options for proto=fd
[  636.956830][T11105] comedi comedi0: Minor 9 could not be opened
[  637.264041][   T28] rc_core: IR keymap rc-hauppauge not found
[  637.284033][   T28] Registered IR keymap rc-empty
[  637.307098][   T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  637.376853][   T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  637.426757][   T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  637.481039][   T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input101
[  637.555980][   T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  637.607099][   T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  637.687055][   T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  637.744754][   T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  637.835077][   T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  637.905387][   T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  637.934511][   T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  637.975101][   T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  638.014142][   T24] block nbd0: Possible stuck request ffff888021fb0000: control (read@0,4096B). Runtime 90 seconds
[  638.034328][   T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  638.074490][   T28] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  638.117352][   T28] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  638.126421][   T28] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  638.199690][   T28] usb 4-1: USB disconnect, device number 32
[  638.284228][T11137] IPVS: Error connecting to the multicast addr
[  640.412972][T11163] syz.2.1464: attempt to access beyond end of device
[  640.412972][T11163] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  640.462597][T11163] 9pnet_fd: Insufficient options for proto=fd
[  640.815463][T11143] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  642.130744][   T28] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  642.353549][   T28] usb 3-1: Using ep0 maxpacket: 16
[  643.440202][   T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  643.453142][   T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  643.499100][   T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  643.512134][   T28] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  643.539554][   T28] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  643.573041][   T28] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  643.587367][   T28] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  643.612072][   T28] usb 3-1: Manufacturer: syz
[  643.620414][   T28] usb 3-1: config 0 descriptor??
[  643.743631][T11203] IPVS: Error connecting to the multicast addr
[  644.544082][   T28] rc_core: IR keymap rc-hauppauge not found
[  644.550051][   T28] Registered IR keymap rc-empty
[  644.598637][T11206] comedi comedi0: Minor 9 could not be opened
[  644.636448][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  644.693882][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  645.557500][   T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  645.691674][   T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input102
[  645.764614][T11219] input: syz1 as /devices/virtual/input/input103
[  645.771156][T11219] input: failed to attach handler leds to device input103, error: -6
[  645.882321][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  646.523381][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  646.734413][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  646.755221][T11223] syz.1.1474: attempt to access beyond end of device
[  646.755221][T11223] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  646.773917][T11223] 9pnet_fd: Insufficient options for proto=fd
[  647.582966][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  647.643659][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  647.689360][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  647.733024][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  647.815233][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  647.825248][   T27] audit: type=1326 audit(1781090122.366:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.1475" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0a359ce59 code=0x0
[  647.892878][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  647.922797][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  647.954162][   T28] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  647.967067][   T28] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  647.983478][   T28] usb 3-1: USB disconnect, device number 34
[  648.820119][T11244] loop5: detected capacity change from 0 to 7
[  648.838707][T11244] Dev loop5: unable to read RDB block 7
[  648.844807][T11244]  loop5: unable to read partition table
[  648.851323][T11244] loop5: partition table beyond EOD, truncated
[  648.857719][T11244] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  648.895896][T11244] binder: 11242:11244 ioctl c0285840 200000000000 returned -22
[  650.849758][T11254] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  650.896871][T11253] 
[  651.142482][    T8] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  651.260955][T11260] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  651.342428][    T8] usb 4-1: Using ep0 maxpacket: 16
[  651.378844][T11263] syz.2.1485: attempt to access beyond end of device
[  651.378844][T11263] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  651.395990][T11263] 9pnet_fd: Insufficient options for proto=fd
[  652.161322][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  652.171724][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  652.182735][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  652.192441][    T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  652.202474][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  652.219059][    T8] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  652.228221][    T8] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  652.242251][    T8] usb 4-1: Manufacturer: syz
[  652.263823][    T8] usb 4-1: config 0 descriptor??
[  652.642200][    T8] rc_core: IR keymap rc-hauppauge not found
[  652.648135][    T8] Registered IR keymap rc-empty
[  652.667562][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  652.709032][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  652.881296][    T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  652.886356][T11275] comedi comedi0: Minor 9 could not be opened
[  652.948790][    T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input104
[  652.985817][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  653.022349][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  653.052273][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  653.082767][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  653.122236][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  653.162532][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  653.202583][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  653.282214][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  653.392293][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  653.723296][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  653.872973][    T8] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  653.910379][    T8] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  653.945295][    T8] usb 4-1: USB disconnect, device number 33
[  655.729313][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'.
[  655.825800][T11305] syz.3.1494: attempt to access beyond end of device
[  655.825800][T11305] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  655.842585][T11305] 9pnet_fd: Insufficient options for proto=fd
[  657.181691][ T5762] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  658.001530][ T5762] usb 4-1: Using ep0 maxpacket: 16
[  658.024771][ T5762] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  658.041768][ T5762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  658.064105][ T5762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  658.098001][ T5762] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  658.113804][ T5762] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  658.158295][ T5762] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  658.173186][ T5762] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  658.183239][T11322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1501'.
[  658.192816][ T5762] usb 4-1: Manufacturer: syz
[  658.199220][ T5762] usb 4-1: config 0 descriptor??
[  658.221958][T11333] comedi comedi0: Minor 9 could not be opened
[  658.501491][ T5762] rc_core: IR keymap rc-hauppauge not found
[  658.507487][ T5762] Registered IR keymap rc-empty
[  658.512490][ T5762] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  658.521927][   T28] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  658.561928][ T5762] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  658.605704][ T5762] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  658.635104][ T5762] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input105
[  658.668752][ T5762] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  658.711764][ T5762] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  658.721455][   T28] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  658.743762][   T28] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  658.753927][ T5969] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[  658.773099][ T5762] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  658.780999][   T28] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  658.790511][   T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.799401][   T28] usb 1-1: Product: syz
[  658.803911][   T28] usb 1-1: Manufacturer: syz
[  658.808602][   T28] usb 1-1: SerialNumber: syz
[  658.825591][   T28] cdc_mbim 1-1:1.0: skipping garbage
[  658.832532][ T5762] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  658.871721][ T5762] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  658.911606][ T5762] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  658.963873][ T5969] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  658.963994][ T5762] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  658.984045][ T5969] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  658.997593][ T5969] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  659.014716][ T5762] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  659.020967][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.032294][T11332] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  659.051740][ T5762] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  659.092357][ T5762] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  659.124221][ T5762] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  659.132630][ T5762] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  659.166728][ T5762] usb 4-1: USB disconnect, device number 34
[  659.275432][ T5969] usb 3-1: usb_control_msg returned -32
[  659.281083][ T5969] usbtmc 3-1:16.0: can't read capabilities
[  659.341690][ T5969] usb 3-1: USB disconnect, device number 35
[  659.683580][T11332] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  659.691039][   T28] cdc_mbim 1-1:1.0: setting tx_max = 16384
[  659.722414][   T28] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[  659.846871][T11345] syz.1.1507: attempt to access beyond end of device
[  659.846871][T11345] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  659.892257][T11345] 9pnet_fd: Insufficient options for proto=fd
[  660.645824][   T28] wwan wwan0: port wwan0mbim0 attached
[  660.691214][   T28] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 02:75:aa:61:45:a0
[  660.729517][   T28] usb 1-1: USB disconnect, device number 32
[  660.745225][   T28] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  661.575353][   T28] wwan wwan0: port wwan0mbim0 disconnected
[  662.151695][   T28] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  662.401070][   T28] usb 1-1: Using ep0 maxpacket: 16
[  662.414864][   T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  662.446256][   T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  662.551605][   T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  662.567946][   T28] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  662.583284][   T28] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  662.583748][T11370] comedi comedi0: Minor 9 could not be opened
[  662.619687][   T28] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  662.629481][   T28] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  662.653963][   T28] usb 1-1: Manufacturer: syz
[  664.442961][   T28] usb 1-1: config 0 descriptor??
[  665.566336][T11386] syz.1.1519: attempt to access beyond end of device
[  665.566336][T11386] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  665.584581][T11386] 9pnet_fd: Insufficient options for proto=fd
[  666.420571][   T28] rc_core: IR keymap rc-hauppauge not found
[  666.433267][   T28] Registered IR keymap rc-empty
[  666.444503][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  666.510651][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  666.563673][   T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  666.667977][   T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input106
[  667.599476][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  667.661368][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  667.703149][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  667.750479][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  667.781575][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  667.857361][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  669.401341][   T24] block nbd0: Possible stuck request ffff888021fb0000: control (read@0,4096B). Runtime 120 seconds
[  669.422106][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  669.487424][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  669.536606][T11409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1525'.
[  670.290298][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  670.330284][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  670.387131][   T28] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  670.453700][   T28] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  670.919835][T11415] team0: Device veth1_macvtap failed to register rx_handler
[  671.359296][   T28] usb 1-1: USB disconnect, device number 33
[  671.410861][ T6824] udevd[6824]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  671.486208][T11419] syz.3.1530: attempt to access beyond end of device
[  671.486208][T11419] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  671.503788][T11419] 9pnet_fd: Insufficient options for proto=fd
[  672.579996][   T28] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  673.349054][   T28] usb 1-1: Using ep0 maxpacket: 16
[  673.359448][   T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  673.437212][   T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  673.489221][   T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  673.511894][   T28] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  673.524027][T11435] comedi comedi0: Minor 9 could not be opened
[  673.534971][   T28] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  673.549573][   T28] usb 1-1: string descriptor 0 read error: -71
[  673.556416][   T28] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  673.566231][   T28] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  673.576957][   T28] usb 1-1: config 0 descriptor??
[  673.583560][   T28] usb 1-1: can't set config #0, error -71
[  675.177425][   T28] usb 1-1: USB disconnect, device number 34
[  676.231990][T11449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1539'.
[  677.493381][T11462] syz.1.1542: attempt to access beyond end of device
[  677.493381][T11462] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  677.511138][T11462] 9pnet_fd: Insufficient options for proto=fd
[  677.833282][ T5969] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  679.199303][ T5969] usb 1-1: Using ep0 maxpacket: 16
[  679.244467][ T5969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  679.287484][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  679.335191][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  679.373033][ T5969] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  679.434332][ T5969] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  679.570134][ T5969] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  679.618139][ T5969] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  679.709842][ T5969] usb 1-1: Manufacturer: syz
[  679.820356][ T5969] usb 1-1: config 0 descriptor??
[  680.349175][ T5969] rc_core: IR keymap rc-hauppauge not found
[  680.364694][ T5969] Registered IR keymap rc-empty
[  680.391677][ T5969] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  680.439641][ T5969] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  681.320592][ T5969] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  681.429856][ T5969] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input107
[  681.696078][ T5969] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  681.729744][ T5969] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  682.937162][T11499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1552'.
[  684.041372][ T5969] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  684.113826][ T5969] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  684.179127][ T5969] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  684.247284][T11506] syz.3.1553: attempt to access beyond end of device
[  684.247284][T11506] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  684.264453][T11506] 9pnet_fd: Insufficient options for proto=fd
[  685.058632][ T5969] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  685.098508][ T5969] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  685.141430][ T5969] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  685.229293][ T5969] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  685.361126][ T5969] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  685.941351][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  685.962897][ T5969] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  685.988636][ T5969] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  686.009782][T11516] comedi comedi0: Minor 9 could not be opened
[  686.068966][ T5969] usb 1-1: USB disconnect, device number 35
[  687.578250][   T28] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  687.628196][ T5969] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  687.805684][   T28] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  687.834806][   T28] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  687.874009][   T28] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  687.909253][   T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.979586][T11529] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  688.151885][   T28] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  688.466200][T11537] syz.3.1564: attempt to access beyond end of device
[  688.466200][T11537] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  688.484126][T11537] 9pnet_fd: Insufficient options for proto=fd
[  688.632808][ T5969] usb 2-1: Using ep0 maxpacket: 16
[  689.280375][ T5969] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  689.291081][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  689.302193][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  689.311918][ T5969] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  689.321857][ T5969] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  689.344422][ T5969] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  689.353775][ T5969] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  689.361920][ T5969] usb 2-1: Manufacturer: syz
[  689.383163][   T28] usb 3-1: USB disconnect, device number 36
[  689.390941][ T5969] usb 2-1: config 0 descriptor??
[  690.408408][ T5969] rc_core: IR keymap rc-hauppauge not found
[  690.419116][ T5969] Registered IR keymap rc-empty
[  690.424137][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  690.477964][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  690.519049][ T5969] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  690.567551][ T5969] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input108
[  690.626838][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  690.667877][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  690.707931][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  690.757879][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  690.798122][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  691.300557][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  691.347716][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  691.833042][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  691.908509][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  691.968067][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  692.007311][T11577] 9pnet_fd: Insufficient options for proto=fd
[  692.959752][ T5969] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  693.036769][ T5969] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  693.844903][ T5969] usb 2-1: USB disconnect, device number 30
[  694.020915][T11586] syz.0.1574: attempt to access beyond end of device
[  694.020915][T11586] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  694.188026][T11586] 9pnet_fd: Insufficient options for proto=fd
[  694.897332][ T5969] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  695.297432][ T5969] usb 3-1: Using ep0 maxpacket: 32
[  695.308386][ T5969] usb 3-1: config index 0 descriptor too short (expected 63119, got 27)
[  695.319548][ T5969] usb 3-1: config 22 has too many interfaces: 38, using maximum allowed: 32
[  695.339355][ T5969] usb 3-1: config 22 has an invalid descriptor of length 164, skipping remainder of the config
[  695.362265][ T5969] usb 3-1: config 22 has 0 interfaces, different from the descriptor's value: 38
[  695.390248][ T5969] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  695.400003][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  695.427784][ T5969] usb 3-1: Product: syz
[  695.439993][ T5969] usb 3-1: Manufacturer: syz
[  695.482817][ T5969] usb 3-1: SerialNumber: syz
[  696.029118][ T5969] usb 3-1: USB disconnect, device number 37
[  696.376518][   T28] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  696.457267][T11609] 9pnet_fd: Insufficient options for proto=fd
[  697.540588][   T28] usb 1-1: Using ep0 maxpacket: 16
[  697.695444][   T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  697.784122][   T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  697.955503][   T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  698.091202][   T28] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  698.225960][   T28] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  698.329812][   T28] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  698.553552][   T28] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  698.651035][   T28] usb 1-1: Manufacturer: syz
[  698.816795][   T28] usb 1-1: config 0 descriptor??
[  700.028320][   T24] block nbd0: Possible stuck request ffff888021fb0000: control (read@0,4096B). Runtime 150 seconds
[  700.046644][   T28] rc_core: IR keymap rc-hauppauge not found
[  700.060850][   T28] Registered IR keymap rc-empty
[  700.082970][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  700.797992][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  701.025837][   T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  701.151197][   T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input109
[  701.260371][T11644] loop3: detected capacity change from 0 to 16
[  701.313589][T11644] erofs: (device loop3): mounted with root inode @ nid 36.
[  701.464904][T11644] syz.3.1594: attempt to access beyond end of device
[  701.464904][T11644] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  701.512588][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  701.556513][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  701.596771][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  701.653544][T11644] syz.3.1594: attempt to access beyond end of device
[  701.653544][T11644] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16
[  701.668260][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  701.716422][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  701.758589][T11644] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  701.779429][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  701.820459][   T27] audit: type=1800 audit(1781090944.370:84): pid=11644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1594" name="file2" dev="loop3" ino=89 res=0 errno=0
[  701.863365][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  701.906495][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  701.946441][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  702.026840][   T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  702.073764][   T28] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  702.148216][   T28] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  702.876638][   T28] usb 1-1: USB disconnect, device number 36
[  704.396121][    T8] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  704.615996][    T8] usb 2-1: Using ep0 maxpacket: 16
[  705.344931][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  705.356754][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  705.368233][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  705.379839][    T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  705.390527][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  705.408181][    T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  705.443755][    T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  705.498036][    T8] usb 2-1: Manufacturer: syz
[  705.560535][    T8] usb 2-1: config 0 descriptor??
[  705.596559][T11661] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1599'.
[  706.298517][T11672] loop5: detected capacity change from 0 to 7
[  706.308574][T11672] Dev loop5: unable to read RDB block 7
[  706.314193][T11672]  loop5: unable to read partition table
[  706.320025][T11672] loop5: partition table beyond EOD, truncated
[  706.326221][T11672] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  706.336750][T11672] binder: 11671:11672 ioctl c0285840 200000000000 returned -22
[  706.405852][    T8] rc_core: IR keymap rc-hauppauge not found
[  706.411894][    T8] Registered IR keymap rc-empty
[  706.485951][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  706.545779][ T5970] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  706.875008][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  706.898061][ T5970] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  706.908105][ T5970] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  706.922361][    T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  706.935174][ T5970] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  707.660879][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.690866][    T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input110
[  707.727959][ T5970] usb 4-1: can't set config #16, error -71
[  707.737345][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  707.763736][ T5970] usb 4-1: USB disconnect, device number 35
[  707.801858][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  708.185581][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  708.655677][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  708.758280][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  708.938613][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  709.128712][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  709.306062][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  709.343329][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  709.387642][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  709.499612][    T8] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  710.154745][    T8] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  710.744779][    T8] usb 2-1: USB disconnect, device number 31
[  711.128196][T11713] loop5: detected capacity change from 0 to 7
[  711.145305][T11713] Dev loop5: unable to read RDB block 7
[  711.151088][T11713]  loop5: unable to read partition table
[  711.157986][T11713] loop5: partition table beyond EOD, truncated
[  711.164394][T11713] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  711.199978][T11713] binder: 11711:11713 ioctl c0285840 200000000000 returned -22
[  712.664337][T11720] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1614'.
[  712.766743][T11724] 9pnet_fd: Insufficient options for proto=fd
[  713.055529][ T5970] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  713.250698][ T5970] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  713.304186][ T5970] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  713.430196][ T5970] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  713.512882][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.824721][ T5970] usb 2-1: usb_control_msg returned -32
[  713.836967][ T5970] usbtmc 2-1:16.0: can't read capabilities
[  714.564799][ T5970] usb 2-1: USB disconnect, device number 32
[  714.765535][T11739] loop3: detected capacity change from 0 to 512
[  714.772845][T11739] EXT4-fs: Ignoring removed oldalloc option
[  714.783427][T11739] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  714.796694][T11739] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  714.818525][T11739] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  714.832086][T11739] EXT4-fs (loop3): 1 truncate cleaned up
[  714.839175][T11739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  714.870001][T11739] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  714.904829][    T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  715.775041][    T8] usb 3-1: Using ep0 maxpacket: 16
[  715.781888][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  715.857819][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  715.869197][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  715.879035][    T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  715.889447][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  715.932232][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  715.945877][    T8] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  715.955808][    T8] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  715.964459][    T8] usb 3-1: Manufacturer: syz
[  715.971803][    T8] usb 3-1: config 0 descriptor??
[  716.223243][T11751] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  716.232745][T11751] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  716.704817][    T8] rc_core: IR keymap rc-hauppauge not found
[  716.710767][    T8] Registered IR keymap rc-empty
[  716.716679][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  716.753685][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  716.800585][    T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  716.829448][    T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input111
[  716.908418][T11759] 9pnet_fd: Insufficient options for proto=fd
[  716.933008][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  717.105594][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  717.215091][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  717.335863][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  717.458175][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  717.612983][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  717.744540][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  717.814517][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  717.844606][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  717.877907][    T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  717.928943][    T8] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  717.968242][    T8] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  718.010050][    T8] usb 3-1: USB disconnect, device number 38
[  720.511751][T11788] 9pnet_fd: Insufficient options for proto=fd
[  722.854408][ T6057] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  723.754756][ T6057] usb 3-1: Using ep0 maxpacket: 16
[  723.777243][ T6057] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  723.838627][ T6057] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  723.884498][ T6057] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  723.917705][ T6057] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  723.944104][ T6057] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  723.969621][ T6057] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  723.979581][ T6057] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  723.988941][ T6057] usb 3-1: Manufacturer: syz
[  723.996802][ T6057] usb 3-1: config 0 descriptor??
[  724.978759][ T6057] rc_core: IR keymap rc-hauppauge not found
[  725.503016][ T6057] Registered IR keymap rc-empty
[  725.508564][ T6057] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  725.543727][ T6057] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  725.574419][ T6057] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  725.590196][ T6057] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input112
[  725.651010][ T6057] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  725.720865][T11828] 9pnet_fd: Insufficient options for proto=fd
[  726.733430][ T6057] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  726.783400][ T6057] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  726.813594][ T6057] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  726.923894][ T6057] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  727.793274][ T6057] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  727.823249][ T6057] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  727.873338][ T6057] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  727.905026][ T6057] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  727.962254][ T6057] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  728.018938][ T6057] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  728.053992][ T6057] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  728.092754][ T6057] usb 3-1: USB disconnect, device number 39
[  730.095489][   T24] block nbd0: Possible stuck request ffff888021fb0000: control (read@0,4096B). Runtime 180 seconds
[  730.223529][ T5970] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  730.517868][T11868] 9pnet_fd: Insufficient options for proto=fd
[  730.532991][ T5970] usb 3-1: Using ep0 maxpacket: 32
[  730.603515][T11870] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  731.560191][ T5970] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  731.580736][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.588998][ T5970] usb 3-1: Product: syz
[  731.593394][ T5970] usb 3-1: Manufacturer: syz
[  731.598206][ T5970] usb 3-1: SerialNumber: syz
[  731.617678][ T5970] usb 3-1: config 0 descriptor??
[  731.630188][ T5970] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  731.682025][ T5970] dvb-usb: bulk message failed: -22 (4/0)
[  731.688409][ T5970] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  731.699693][ T5970] dvb-usb: bulk message failed: -22 (5/0)
[  731.740704][ T5970] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  731.773657][ T5970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  731.784796][ T5970] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  731.793478][ T5970] usb 3-1: media controller created
[  731.846703][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  731.936210][T11863] dvb-usb: bulk message failed: -22 (7/0)
[  731.982705][T11863] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  731.999343][T11863] ttusb2: i2c transfer failed.
[  733.019280][ T5970] usb 3-1: selecting invalid altsetting 3
[  733.025197][ T5970] ttusb2: set interface to alts=3 failed
[  733.068257][ T5970] DVB: Unable to find symbol tda10086_attach()
[  733.079869][ T5970] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  733.088930][ T5970] dvb-usb: bulk message failed: -22 (4/0)
[  733.096479][ T5970] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  733.106851][ T5970] dvb-usb: bulk message failed: -22 (5/0)
[  733.112684][ T5970] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  733.127429][ T5970] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  733.151148][ T5970] usb 3-1: USB disconnect, device number 40
[  733.194475][ T5970] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  733.251995][T11885] loop5: detected capacity change from 0 to 7
[  733.268201][T11885] Dev loop5: unable to read RDB block 7
[  733.274081][T11885]  loop5: unable to read partition table
[  733.280580][T11885] loop5: partition table beyond EOD, truncated
[  733.286937][T11885] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  733.302002][T11885] binder: 11881:11885 ioctl c0285840 200000000000 returned -22
[  735.400235][T11889] fuse: Unknown parameter 'root<GO'
[  738.070427][T11913] 9pnet_fd: Insufficient options for proto=fd
[  740.949932][ T5143] udevd[5143]: worker [5767] /devices/virtual/block/nbd0 timeout; kill it
[  740.976796][ T5143] udevd[5143]: seq 16019 '/devices/virtual/block/nbd0' killed
[  741.810754][T11930] xt_TCPMSS: Only works on TCP SYN packets
[  742.615756][T11931] loop5: detected capacity change from 0 to 7
[  742.631859][T11931] Dev loop5: unable to read RDB block 7
[  742.637663][T11931]  loop5: unable to read partition table
[  742.644229][T11931] loop5: partition table beyond EOD, truncated
[  742.650486][T11931] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  742.665516][T11931] binder: 11928:11931 ioctl c0285840 200000000000 returned -22
[  745.434011][T11943] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  746.615901][T11963] syz_tun: entered allmulticast mode
[  746.682625][T11963] bond0: entered promiscuous mode
[  747.011749][T11973] loop5: detected capacity change from 0 to 7
[  747.020583][T11973] Dev loop5: unable to read RDB block 7
[  747.026414][T11973]  loop5: unable to read partition table
[  747.032942][T11973] loop5: partition table beyond EOD, truncated
[  747.039232][T11973] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  747.053405][T11973] binder: 11970:11973 ioctl c0285840 200000000000 returned -22
[  747.833578][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  749.146924][T11986] fuse: Bad value for 'fd'
[  751.723390][T12009] loop5: detected capacity change from 0 to 7
[  751.828018][T12009] Dev loop5: unable to read RDB block 7
[  751.834401][T12009]  loop5: unable to read partition table
[  751.840933][T12009] loop5: partition table beyond EOD, truncated
[  751.847245][T12009] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  751.862456][T12009] binder: 12005:12009 ioctl c0285840 200000000000 returned -22
[  752.820208][ T5970] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  752.870335][T12018] fuse: Bad value for 'fd'
[  752.938270][T12024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1700'.
[  753.000184][ T5970] usb 2-1: Using ep0 maxpacket: 32
[  753.818786][ T5970] usb 2-1: config 5 has an invalid interface number: 245 but max is 0
[  753.827480][ T5970] usb 2-1: config 5 has no interface number 0
[  753.834007][ T5970] usb 2-1: config 5 interface 245 has no altsetting 0
[  753.853633][ T5970] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=ba.d2
[  753.862862][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.870947][ T5970] usb 2-1: Product: syz
[  753.875113][ T5970] usb 2-1: Manufacturer: syz
[  753.879684][ T5970] usb 2-1: SerialNumber: syz
[  754.759516][ T5970] gspca_main: mars-2.14.0 probing 093a:050f
[  754.818150][ T5970] usb 2-1: USB disconnect, device number 33
[  756.790499][T12050] loop5: detected capacity change from 0 to 7
[  756.800143][T12050] Dev loop5: unable to read RDB block 7
[  756.805915][T12050]  loop5: unable to read partition table
[  756.812457][T12050] loop5: partition table beyond EOD, truncated
[  756.818727][T12050] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  756.833131][T12050] binder: 12047:12050 ioctl c0285840 200000000000 returned -22
[  759.314656][T12057] fuse: Bad value for 'fd'
[  759.967350][T12065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1711'.
[  760.664604][T11304] block nbd0: Possible stuck request ffff888021fb0000: control (read@0,4096B). Runtime 210 seconds
[  763.765484][T12102] fuse: Bad value for 'fd'
[  763.891049][T12105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1722'.
[  765.005793][T12115] IPVS: Error connecting to the multicast addr
[  767.296274][T12135] loop0: detected capacity change from 0 to 128
[  768.088432][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  768.858255][T12142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1731'.
[  768.954678][T12149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1733'.
[  770.064664][T12156] fuse: Bad value for 'fd'
[  771.257234][T12167] syz_tun: entered allmulticast mode
[  771.275609][T12169] loop0: detected capacity change from 0 to 1024
[  774.307021][T12187] loop1: detected capacity change from 0 to 4096
[  774.333689][T12187] EXT4-fs: inline encryption not supported
[  774.403987][T12187] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003]
[  774.417851][T12187] System zones: 0-5
[  774.433149][T12192] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1745'.
[  774.442505][T12187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  775.417459][   T27] audit: type=1800 audit(1781091273.963:85): pid=12187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1744" name="file1" dev="loop1" ino=15 res=0 errno=0
[  777.335113][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  777.588726][T12213] fuse: Bad value for 'fd'
[  778.964521][T12223] loop3: detected capacity change from 0 to 256
[  779.375005][T12228] x_tables: ip_tables: osf match: only valid for protocol 6
[  780.166559][T12233] loop3: detected capacity change from 0 to 2048
[  780.591388][T12233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  781.793756][T12243] overlayfs: missing 'lowerdir'
[  781.845632][T12242] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  781.887492][T12242] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null.
[  781.923911][T12242] overlayfs: failed to verify origin (/, ino=2, err=-28)
[  781.931734][T12242] overlayfs: failed to verify upper root origin
[  782.493729][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  783.595208][T12253] syz.3.1762: attempt to access beyond end of device
[  783.595208][T12253] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  783.612334][T12253] 9pnet_fd: Insufficient options for proto=fd
[  787.544125][T12264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1765'.
[  787.723306][T12276] loop5: detected capacity change from 0 to 7
[  787.780660][T12277] binder: 12271:12277 ioctl c0285840 200000000000 returned -22
[  788.340896][T12276] Dev loop5: unable to read RDB block 7
[  788.348020][T12276]  loop5: unable to read partition table
[  788.557689][T12276] loop5: partition table beyond EOD, truncated
[  788.563894][T12276] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  789.189446][T12292] xt_TCPMSS: Only works on TCP SYN packets
[  789.206657][T12289] syz.0.1773: attempt to access beyond end of device
[  789.206657][T12289] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  789.225647][T12289] 9pnet_fd: Insufficient options for proto=fd
[  790.782622][T12301] fuse: Bad value for 'fd'
[  791.632229][   T24] block nbd0: Possible stuck request ffff888021fb0000: control (read@0,4096B). Runtime 240 seconds
[  792.086419][T12311] loop1: detected capacity change from 0 to 64
[  792.187682][T12309] loop3: detected capacity change from 0 to 32768
[  792.328877][T12309] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  793.014831][T12309] XFS (loop3): Ending clean mount
[  794.750789][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  795.466754][T12334] syz.2.1784: attempt to access beyond end of device
[  795.466754][T12334] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  795.483730][T12334] 9pnet_fd: Insufficient options for proto=fd
[  798.212563][T12352] loop0: detected capacity change from 0 to 64
[  798.795762][T12370] syz.2.1795: attempt to access beyond end of device
[  798.795762][T12370] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  798.825826][T12370] 9pnet_fd: Insufficient options for proto=fd
[  799.901313][T12375] fuse: Bad value for 'group_id'
[  800.167953][T12381] fuse: Unknown parameter 'root<GO'
[  800.376695][T12388] loop1: detected capacity change from 0 to 64
[  800.959429][T12378] hpfs: Bad magic ... probably not HPFS
[  804.264689][T12400] fuse: Bad value for 'group_id'
[  804.506816][T12406] syz.0.1806: attempt to access beyond end of device
[  804.506816][T12406] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  804.526152][T12406] 9pnet_fd: Insufficient options for proto=fd
[  805.738017][T12416] loop0: detected capacity change from 0 to 2048
[  805.800009][T12416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  806.676413][T12427] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  806.704128][T12428] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  806.728874][T12427] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null.
[  806.750704][T12427] overlayfs: failed to verify origin (/, ino=2, err=-28)
[  806.758354][T12427] overlayfs: failed to verify upper root origin
[  807.551098][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  808.807305][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  808.865758][T12441] fuse: Bad value for 'group_id'
[  809.137458][T12449] xt_TCPMSS: Only works on TCP SYN packets
[  809.147895][T12446] syz.1.1816: attempt to access beyond end of device
[  809.147895][T12446] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  809.167762][T12446] 9pnet_fd: Insufficient options for proto=fd
[  810.821650][T12461] loop3: detected capacity change from 0 to 128
[  811.051221][T12463] fuse: Unknown parameter 'root<GO'
[  813.294983][T12491] syz.2.1828: attempt to access beyond end of device
[  813.294983][T12491] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  813.312407][T12491] 9pnet_fd: Insufficient options for proto=fd
[  815.168340][T12505] veth1_macvtap: left promiscuous mode
[  815.310583][T12505] bond1: left allmulticast mode
[  816.512273][T12526] syz.1.1839: attempt to access beyond end of device
[  816.512273][T12526] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  816.531180][T12526] 9pnet_fd: Insufficient options for proto=fd
[  817.450547][T12539] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1835'.
[  818.153209][T12544] fuse: Unknown parameter 'root<GO'
[  818.439101][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1843'.
[  821.028650][T12572] syz.2.1850: attempt to access beyond end of device
[  821.028650][T12572] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  821.046582][T12572] 9pnet_fd: Insufficient options for proto=fd
[  821.862123][    T8] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  822.082118][    T8] usb 1-1: Using ep0 maxpacket: 16
[  822.089064][    T8] usb 1-1: config 0 has no interfaces?
[  822.096913][    T8] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  822.114056][    T8] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  822.142556][    T8] usb 1-1: Manufacturer: syz
[  822.559666][T11304] block nbd0: Possible stuck request ffff888021fb0000: control (read@0,4096B). Runtime 270 seconds
[  822.576202][    T8] usb 1-1: config 0 descriptor??
[  822.853720][    T8] usb 1-1: USB disconnect, device number 37
[  825.106376][T12604] delete_channel: no stack
[  825.845694][T12611] fuse: Unknown parameter 'root<GO'
[  826.120659][T12620] xt_TCPMSS: Only works on TCP SYN packets
[  828.522895][T12628] loop3: detected capacity change from 0 to 8192
[  828.602561][T12628] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  828.704608][T12628] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  828.717435][T12638] loop2: detected capacity change from 0 to 128
[  828.738609][T12628] REISERFS (device loop3): using ordered data mode
[  828.761733][T12628] reiserfs: using flush barriers
[  828.887453][T12628] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  828.912280][T12628] REISERFS (device loop3): checking transaction log (loop3)
[  829.561223][ T5970] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  829.850858][ T5970] usb 2-1: Using ep0 maxpacket: 16
[  829.866973][ T5970] usb 2-1: config 0 has no interfaces?
[  829.883254][ T5970] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  829.902753][ T5970] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  830.540910][ T5970] usb 2-1: Manufacturer: syz
[  830.561540][ T5970] usb 2-1: config 0 descriptor??
[  830.577195][T12628] REISERFS (device loop3): Using tea hash to sort names
[  830.679140][T12628] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  830.912445][ T5970] usb 2-1: USB disconnect, device number 34
[  831.694479][T12655] loop0: detected capacity change from 0 to 2048
[  833.339354][T12655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  833.351994][T12655] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  834.002025][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  836.089449][T12685] fuse: Unknown parameter 'root<GO'
[  836.148975][T12687] syz.1.1880: attempt to access beyond end of device
[  836.148975][T12687] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  836.166249][T12687] 9pnet_fd: Insufficient options for proto=fd
[  837.513625][ T5970] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  838.259884][ T5970] usb 2-1: Using ep0 maxpacket: 16
[  838.424162][ T5970] usb 2-1: config 0 has no interfaces?
[  838.439236][ T5970] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  838.451578][ T5970] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  838.460099][ T5970] usb 2-1: Manufacturer: syz
[  838.482682][ T5970] usb 2-1: config 0 descriptor??
[  840.852364][ T5762] usb 2-1: USB disconnect, device number 35
[  841.108122][T12708] binder: 12707:12708 ioctl 4018620d 0 returned -22
[  842.688153][T12723] syz.1.1890: attempt to access beyond end of device
[  842.688153][T12723] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  842.706180][T12723] 9pnet_fd: Insufficient options for proto=fd
[  843.549834][T12732] fuse: Unknown parameter 'root<GO'
[  844.658123][T12740] binder: 12739:12740 ioctl 4018620d 0 returned -22
[  845.044471][T12750] xt_TCPMSS: Only works on TCP SYN packets
[  845.846629][T12752] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  845.853545][T12752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  845.893666][T12752] vhci_hcd vhci_hcd.0: Device attached
[  845.907307][T12753] vhci_hcd: connection closed
[  845.922618][ T7476] vhci_hcd: stop threads
[  845.933132][ T7476] vhci_hcd: release socket
[  845.950629][ T7476] vhci_hcd: disconnect device
[  846.593217][T12760] syz.1.1901: attempt to access beyond end of device
[  846.593217][T12760] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  846.611530][T12760] 9pnet_fd: Insufficient options for proto=fd
[  851.283386][T12786] xt_TCPMSS: Only works on TCP SYN packets
[  852.997573][T12792] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  853.188312][T11304] block nbd0: Possible stuck request ffff888021fb0000: control (read@0,4096B). Runtime 300 seconds
[  854.146881][T12802] syz.2.1911: attempt to access beyond end of device
[  854.146881][T12802] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  854.166287][T12802] 9pnet_fd: Insufficient options for proto=fd
[  855.507777][T10362] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  855.794875][T12817] trusted_key: encrypted_key: insufficient parameters specified
[  856.617648][T10362] usb 2-1: Using ep0 maxpacket: 16
[  856.631265][T10362] usb 2-1: config 0 has no interfaces?
[  856.653968][T10362] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  856.664957][T10362] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  856.674429][T10362] usb 2-1: Manufacturer: syz
[  856.695424][T10362] usb 2-1: config 0 descriptor??
[  856.908921][T10362] usb 2-1: USB disconnect, device number 36
[  857.650886][T12823] binder: BINDER_SET_CONTEXT_MGR already set
[  857.656928][T12823] binder: 12821:12823 ioctl 4018620d 200000000040 returned -16
[  859.287693][T12823] binder: 12821:12823 ioctl c0306201 0 returned -14
[  859.485782][T12828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1919'.
[  859.567294][T12835] syz.3.1922: attempt to access beyond end of device
[  859.567294][T12835] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  859.585507][T12835] 9pnet_fd: Insufficient options for proto=fd
[  860.525722][T12832] loop0: detected capacity change from 0 to 32768
[  860.556692][T12832] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1920 (12832)
[  860.826019][T12832] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  860.867707][T12832] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  860.891297][T12850] xt_TCPMSS: Only works on TCP SYN packets
[  861.058358][T12832] BTRFS info (device loop0): using free space tree
[  861.822323][T12870] =======================================================
[  861.822323][T12870] WARNING: The mand mount option has been deprecated and
[  861.822323][T12870]          and is ignored by this kernel. Remove the mand
[  861.822323][T12870]          option from the mount to silence this warning.
[  861.822323][T12870] =======================================================
[  861.875836][T12870] overlayfs: overlapping lowerdir path
[  861.967027][ T5969] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  863.467357][ T5969] usb 4-1: Using ep0 maxpacket: 16
[  863.492059][ T5969] usb 4-1: config 0 has no interfaces?
[  863.512323][ T5969] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  863.530990][ T5969] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  863.569795][T12832] BTRFS error (device loop0): open_ctree failed: -4
[  863.577944][ T5969] usb 4-1: Manufacturer: syz
[  863.592069][ T5969] usb 4-1: config 0 descriptor??
[  863.766003][T12876] binder: 12874:12876 ioctl c0306201 0 returned -14
[  863.766179][T12877] syz_tun: entered allmulticast mode
[  863.844984][T10362] usb 4-1: USB disconnect, device number 36
[  863.845961][T12877] bond0: entered promiscuous mode
[  864.273316][T12884] syz.0.1932: attempt to access beyond end of device
[  864.273316][T12884] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  864.293142][T12884] 9pnet_fd: Insufficient options for proto=fd
[  865.652128][T12898] xt_TCPMSS: Only works on TCP SYN packets
[  867.157136][T12901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1936'.
[  869.846567][T12917] binder: 12914:12917 ioctl c0306201 0 returned -14
[  870.337136][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  870.792706][T12929] syz.3.1944: attempt to access beyond end of device
[  870.792706][T12929] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  870.810788][T12929] 9pnet_fd: Insufficient options for proto=fd
[  871.161023][T12934] xt_TCPMSS: Only works on TCP SYN packets
[  875.716099][T12950] 9pnet_fd: Insufficient options for proto=fd
[  876.083548][T12953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1950'.
[  876.713226][T12968] loop0: detected capacity change from 0 to 32768
[  876.722362][T12968] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1954 (12968)
[  876.745915][T12968] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  876.756098][T12968] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  876.764806][T12968] BTRFS info (device loop0): metadata ratio 0
[  876.770937][T12968] BTRFS info (device loop0): turning on sync discard
[  876.777674][T12968] BTRFS info (device loop0): using free space tree
[  877.037510][T12980] xt_TCPMSS: Only works on TCP SYN packets
[  877.603978][T12968] BTRFS info (device loop0): enabling ssd optimizations
[  877.814990][   T27] audit: type=1800 audit(1781092144.369:86): pid=12986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1954" name="file1" dev="loop0" ino=260 res=0 errno=0
[  878.289120][T12992] syz.2.1957: attempt to access beyond end of device
[  878.289120][T12992] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  878.305752][T12992] 9pnet_fd: Insufficient options for proto=fd
[  879.481728][ T5773] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  881.413987][T13000] 9pnet_fd: Insufficient options for proto=fd
[  883.774489][   T24] block nbd0: Possible stuck request ffff888021fb0000: control (read@0,4096B). Runtime 330 seconds
[  884.993094][T13019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1965'.
[  887.210716][T13029] fuse: Unknown parameter 'root<GO'
[  887.238992][T13030] syz.1.1968: attempt to access beyond end of device
[  887.238992][T13030] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  887.253387][T13030] 9pnet_fd: Insufficient options for proto=fd
[  887.973790][T13038] xt_TCPMSS: Only works on TCP SYN packets
[  890.076358][T13050] No source specified
[  891.007353][T13052] 9pnet_fd: Insufficient options for proto=fd
[  891.752108][T13060] bond0: entered promiscuous mode
[  891.758399][T13060] bond_slave_0: entered promiscuous mode
[  891.770013][T13060] bond_slave_1: entered promiscuous mode
[  891.874682][T13062] syz.1.1979: attempt to access beyond end of device
[  891.874682][T13062] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  891.892191][T13062] 9pnet_fd: Insufficient options for proto=fd
[  893.667454][T13076] xt_TCPMSS: Only works on TCP SYN packets
[  895.182581][T13079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1983'.
[  895.835590][T13082] loop1: detected capacity change from 0 to 256
[  897.229542][T13082] FAT-fs (loop1): Directory bread(block 64) failed
[  897.293815][T13082] FAT-fs (loop1): Directory bread(block 65) failed
[  897.374159][T13082] FAT-fs (loop1): Directory bread(block 66) failed
[  897.442705][T13082] FAT-fs (loop1): Directory bread(block 67) failed
[  897.449384][T13082] FAT-fs (loop1): Directory bread(block 68) failed
[  897.476423][T13082] FAT-fs (loop1): Directory bread(block 69) failed
[  897.491025][T13082] FAT-fs (loop1): Directory bread(block 70) failed
[  897.498024][T13082] FAT-fs (loop1): Directory bread(block 71) failed
[  897.504818][T13082] FAT-fs (loop1): Directory bread(block 72) failed
[  897.511542][T13082] FAT-fs (loop1): Directory bread(block 73) failed
[  897.638656][T13094] 9pnet_fd: Insufficient options for proto=fd
[  898.494412][T13082] syz.1.1984: attempt to access beyond end of device
[  898.494412][T13082] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  898.509114][T13082] syz.1.1984: attempt to access beyond end of device
[  898.509114][T13082] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256
[  898.531236][T13082] syz.1.1984: attempt to access beyond end of device
[  898.531236][T13082] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256
[  898.553585][T13093] loop2: detected capacity change from 0 to 4096
[  898.584738][T13082] syz.1.1984: attempt to access beyond end of device
[  898.584738][T13082] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256
[  898.599515][   T27] audit: type=1800 audit(1781092165.101:87): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1984" name="file1" dev="loop1" ino=1048648 res=0 errno=0
[  898.692770][T13098] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  898.711588][T13082] buffer_io_error: 138 callbacks suppressed
[  898.711602][T13082] Buffer I/O error on dev loop1, logical block 290, async page read
[  898.777466][   T27] audit: type=1800 audit(1781092165.351:88): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1984" name="file1" dev="loop1" ino=1048648 res=0 errno=0
[  898.815936][T13100] fuse: Unknown parameter 'root<GO'
[  898.864157][T13082] syz.1.1984: attempt to access beyond end of device
[  898.864157][T13082] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256
[  898.933501][T13082] Buffer I/O error on dev loop1, logical block 290, async page read
[  898.992670][T13080] syz.1.1984: attempt to access beyond end of device
[  898.992670][T13080] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256
[  899.113689][T13080] Buffer I/O error on dev loop1, logical block 290, async page read
[  899.196155][T13082] syz.1.1984: attempt to access beyond end of device
[  899.196155][T13082] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256
[  899.315080][T13082] Buffer I/O error on dev loop1, logical block 290, async page read
[  899.401623][T13080] syz.1.1984: attempt to access beyond end of device
[  899.401623][T13080] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256
[  899.510612][T13080] Buffer I/O error on dev loop1, logical block 290, async page read
[  899.838364][T13082] syz.1.1984: attempt to access beyond end of device
[  899.838364][T13082] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256
[  899.940389][T13082] Buffer I/O error on dev loop1, logical block 290, async page read
[  900.161185][T13109] loop5: detected capacity change from 0 to 7
[  900.170158][T13109] Dev loop5: unable to read RDB block 7
[  900.176150][T13109]  loop5: unable to read partition table
[  900.182861][T13109] loop5: partition table beyond EOD, truncated
[  900.189105][T13109] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  900.202319][T13109] binder: 13107:13109 ioctl c0285840 200000000000 returned -22
[  901.250404][T13120] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1997'.
[  902.149674][T13123] 9pnet_fd: Insufficient options for proto=fd
[  904.152054][   T29] INFO: task udevd:5767 blocked for more than 143 seconds.
[  904.159359][   T29]       Not tainted syzkaller #0
[  904.361610][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  904.453479][   T29] task:udevd           state:D stack:23592 pid:5767  ppid:5143   flags:0x00004006
[  904.533146][   T29] Call Trace:
[  904.585064][   T29]  <TASK>
[  904.624550][   T29]  __schedule+0x1553/0x45a0
[  904.717104][   T29]  ? asan.module_dtor+0x20/0x20
[  904.814695][   T29]  ? mark_lock+0x94/0x320
[  904.869605][   T29]  ? lock_chain_count+0x20/0x20
[  904.933085][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[  905.009454][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[  905.100561][   T29]  schedule+0xbd/0x170
[  905.166816][   T29]  io_schedule+0x80/0xd0
[  905.224891][   T29]  folio_wait_bit_common+0x714/0xfa0
[  905.298557][   T29]  ? folio_wait_bit+0x30/0x30
[  905.355222][   T29]  ? _compound_head+0x120/0x120
[  905.399724][   T29]  ? filemap_add_folio+0x192/0x3c0
[  905.450996][   T29]  ? __filemap_get_folio+0x704/0xbb0
[  905.508716][   T29]  ? blkdev_writepage+0x30/0x30
[  905.559792][   T29]  do_read_cache_folio+0x1c0/0x7d0
[  905.599479][   T29]  ? blkdev_writepage+0x30/0x30
[  905.636363][   T29]  read_part_sector+0xd2/0x340
[  905.673773][   T29]  adfspart_check_POWERTEC+0x93/0xed0
[  905.716650][   T29]  ? adfspart_check_ADFS+0x620/0x620
[  905.754419][   T29]  ? put_partition+0x370/0x370
[  905.786393][   T29]  ? alloc_pages+0x4dc/0x740
[  905.818944][   T29]  bdev_disk_changed+0x740/0x1420
[  905.859598][   T29]  ? bdev_resize_partition+0xf0/0xf0
[  905.904417][   T29]  ? iput+0x343/0x920
[  905.908481][   T29]  blkdev_get_whole+0x30d/0x390
[  905.913503][   T29]  blkdev_get_by_dev+0x279/0x600
[  905.918650][   T29]  blkdev_open+0x152/0x360
[  905.923249][   T29]  ? blkdev_mmap+0x1b0/0x1b0
[  905.927867][   T29]  do_dentry_open+0x8c6/0x1500
[  905.932814][   T29]  path_openat+0x27f1/0x3230
[  905.937450][   T29]  ? do_sys_openat2+0xda/0x1d0
[  905.942296][   T29]  ? verify_lock_unused+0x140/0x140
[  905.947518][   T29]  ? do_filp_open+0x430/0x430
[  905.952277][   T29]  ? __virt_addr_valid+0x18c/0x540
[  905.957474][   T29]  do_filp_open+0x1f5/0x430
[  905.962044][   T29]  ? vfs_tmpfile+0x490/0x490
[  905.966670][   T29]  ? _raw_spin_unlock+0x28/0x40
[  905.971535][   T29]  ? alloc_fd+0x58f/0x630
[  905.975954][   T29]  do_sys_openat2+0x134/0x1d0
[  905.980656][   T29]  ? do_sys_open+0xe0/0xe0
[  905.985126][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  905.991125][   T29]  ? lock_chain_count+0x20/0x20
[  905.996297][   T29]  __x64_sys_openat+0x139/0x160
[  906.001179][   T29]  do_syscall_64+0x55/0xb0
[  906.005763][   T29]  ? clear_bhb_loop+0x40/0x90
[  906.010505][   T29]  ? clear_bhb_loop+0x40/0x90
[  906.015260][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  906.021224][   T29] RIP: 0033:0x7f88af6a7407
[  906.025761][   T29] RSP: 002b:00007ffcd519d430 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  906.034456][   T29] RAX: ffffffffffffffda RBX: 00007f88afd9b880 RCX: 00007f88af6a7407
[  906.042499][   T29] RDX: 00000000000a0800 RSI: 00005581905e1040 RDI: ffffffffffffff9c
[  906.050487][   T29] RBP: 00005581905bb910 R08: 0000000000000000 R09: 0000000000000000
[  906.058561][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005581905d8f10
[  906.066575][   T29] R13: 00005581905d3410 R14: 0000000000000000 R15: 00005581905d8f10
[  906.074643][   T29]  </TASK>
[  906.077742][   T29] 
[  906.077742][   T29] Showing all locks held in the system:
[  906.094959][   T29] 1 lock held by khungtaskd/29:
[  906.099846][   T29]  #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  906.109878][   T29] 2 locks held by kworker/u4:4/59:
[  906.115092][   T29] 1 lock held by klogd/5132:
[  906.119687][   T29]  #0: ffff8880b8e3c098 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140
[  906.129714][   T29] 2 locks held by getty/5528:
[  906.134421][   T29]  #0: ffff88803168a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  906.144397][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[  906.154838][   T29] 1 lock held by udevd/5767:
[  906.159432][   T29]  #0: ffff8881413254c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600
[  906.169579][   T29] 
[  906.171975][   T29] =============================================
[  906.171975][   T29] 
[  906.180392][   T29] NMI backtrace for cpu 0
[  906.184727][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  906.191914][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  906.201962][   T29] Call Trace:
[  906.205251][   T29]  <TASK>
[  906.208178][   T29]  dump_stack_lvl+0x18c/0x250
[  906.212861][   T29]  ? show_regs_print_info+0x20/0x20
[  906.218056][   T29]  ? load_image+0x420/0x420
[  906.222567][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  906.227536][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  906.233687][   T29]  ? _printk+0xde/0x130
[  906.237835][   T29]  ? load_image+0x420/0x420
[  906.242333][   T29]  ? load_image+0x420/0x420
[  906.246827][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  906.252897][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  906.258874][   T29]  watchdog+0xf3d/0xf80
[  906.263034][   T29]  ? watchdog+0x1e1/0xf80
[  906.267364][   T29]  kthread+0x2fa/0x390
[  906.271427][   T29]  ? hungtask_pm_notify+0x90/0x90
[  906.276449][   T29]  ? kthread_blkcg+0xd0/0xd0
[  906.281030][   T29]  ret_from_fork+0x48/0x80
[  906.285441][   T29]  ? kthread_blkcg+0xd0/0xd0
[  906.290023][   T29]  ret_from_fork_asm+0x11/0x20
[  906.294823][   T29]  </TASK>
[  906.298183][   T29] Sending NMI from CPU 0 to CPUs 1:
[  906.303452][    C1] NMI backtrace for cpu 1
[  906.303462][    C1] CPU: 1 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0
[  906.303476][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  906.303484][    C1] Workqueue: bat_events batadv_nc_worker
[  906.303588][    C1] RIP: 0010:__rcu_read_unlock+0xd/0xd0
[  906.303611][    C1] Code: 80 c1 03 38 c1 7c e3 48 89 df e8 8e b4 6d 00 eb d9 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 <49> bf 00 00 00 00 00 fc ff df 65 48 8b 3d 11 ff 91 7e 48 8d 9f 3c
[  906.303697][    C1] RSP: 0018:ffffc900015a7b30 EFLAGS: 00000293
[  906.303708][    C1] RAX: ffffffff8a4fb091 RBX: ffff888020fa6840 RCX: ffff88801da83c00
[  906.303720][    C1] RDX: 0000000000000000 RSI: ffffffff8b1c9c00 RDI: ffffffff8b1c9bc0
[  906.303729][    C1] RBP: fffffffffffffe38 R08: dffffc0000000000 R09: 1ffffffff2239aa0
[  906.303739][    C1] R10: dffffc0000000000 R11: fffffbfff2239aa1 R12: dffffc0000000000
[  906.303749][    C1] R13: ffffffff8a4faf52 R14: ffff888030aacd00 R15: 0000000000000126
[  906.303759][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  906.303771][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  906.303780][    C1] CR2: 00007fe0a37e8158 CR3: 000000002fe4e000 CR4: 00000000003506e0
[  906.303793][    C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[  906.303801][    C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  906.303811][    C1] Call Trace:
[  906.303816][    C1]  <TASK>
[  906.303822][    C1]  ? batadv_nc_worker+0xd2/0x610
[  906.303839][    C1]  batadv_nc_worker+0x282/0x610
[  906.303858][    C1]  ? process_scheduled_works+0x96f/0x15d0
[  906.303876][    C1]  process_scheduled_works+0xa5d/0x15d0
[  906.303903][    C1]  ? worker_attach_to_pool+0x380/0x380
[  906.303919][    C1]  ? assign_work+0x3d2/0x5d0
[  906.303938][    C1]  worker_thread+0xa55/0xfc0
[  906.303966][    C1]  kthread+0x2fa/0x390
[  906.303978][    C1]  ? pr_cont_work+0x560/0x560
[  906.303994][    C1]  ? kthread_blkcg+0xd0/0xd0
[  906.304007][    C1]  ret_from_fork+0x48/0x80
[  906.304023][    C1]  ? kthread_blkcg+0xd0/0xd0
[  906.304036][    C1]  ret_from_fork_asm+0x11/0x20
[  906.304060][    C1]  </TASK>
[  906.308697][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  906.524890][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  906.532091][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  906.542150][   T29] Call Trace:
[  906.545432][   T29]  <TASK>
[  906.548363][   T29]  dump_stack_lvl+0x18c/0x250
[  906.553056][   T29]  ? show_regs_print_info+0x20/0x20
[  906.558272][   T29]  ? load_image+0x420/0x420
[  906.562789][   T29]  panic+0x2dc/0x730
[  906.566695][   T29]  ? schedule_preempt_disabled+0x20/0x20
[  906.572344][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  906.576857][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  906.582451][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  906.588617][   T29]  watchdog+0xf7c/0xf80
[  906.592783][   T29]  ? watchdog+0x1e1/0xf80
[  906.597125][   T29]  kthread+0x2fa/0x390
[  906.601195][   T29]  ? hungtask_pm_notify+0x90/0x90
[  906.606226][   T29]  ? kthread_blkcg+0xd0/0xd0
[  906.610825][   T29]  ret_from_fork+0x48/0x80
[  906.615247][   T29]  ? kthread_blkcg+0xd0/0xd0
[  906.619826][   T29]  ret_from_fork_asm+0x11/0x20
[  906.624596][   T29]  </TASK>
[  906.627727][   T29] Kernel Offset: disabled
[  906.632035][   T29] Rebooting in 86400 seconds..