last executing test programs:

2m32.090942411s ago: executing program 4 (id=1233):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)
memfd_create(0x0, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x48802, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x24181, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10004, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11)
write$tcp_mem(r1, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0xa, 0x8, 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0xfe5f, 0x12)

2m31.662011361s ago: executing program 4 (id=1235):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, 0x0)

2m31.284341469s ago: executing program 4 (id=1237):
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYBLOB], 0x144}, 0x1, 0x0, 0x0, 0x20040843}, 0x4050)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0xdf)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001bc0)={{0x0, 0x1, 0x8, 0x7, 0x7, 0x44b1, 0x1, 0x0, 0x7dfb, 0x2, 0xa70, 0x9, 0x9, 0x8, 0x1514}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3b}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0)
sendfile(r4, r4, 0x0, 0x8)

2m30.642591429s ago: executing program 0 (id=1239):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
truncate(0x0, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0)
r2 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x10)

2m30.20657837s ago: executing program 4 (id=1241):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x22)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000005c0)='\x00', 0x1, 0x4fed0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r1, r2, 0x0, 0xfffe80)

2m28.965287488s ago: executing program 0 (id=1243):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, 0x0}, 0x20000040)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x6, 0x7, 0x3f8, 0x1, 0x32}, 0x9c)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, &(0x7f0000000300)={0x3, @win={{0x6, 0x4, 0x9, 0x8e8}, 0x2, 0x401a, &(0x7f00000021c0)={{0x2, 0x0, 0xb86a, 0x40}}, 0x3317, 0x0, 0x14}})

2m28.671286032s ago: executing program 4 (id=1245):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0xc7)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x4004662b, 0x0)

2m27.803420522s ago: executing program 0 (id=1246):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
setns(0xc9, 0x0)
r4 = socket(0x2a, 0x2, 0x5)
connect$inet6(r4, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c)
close_range(r3, 0xffffffffffffffff, 0x0)

2m27.156993113s ago: executing program 4 (id=1248):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
setns(0xc9, 0x0)
r3 = socket(0x2a, 0x2, 0x5)
connect$inet6(r3, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c)
close_range(r2, 0xffffffffffffffff, 0x0)

2m26.56804912s ago: executing program 32 (id=1248):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
setns(0xc9, 0x0)
r3 = socket(0x2a, 0x2, 0x5)
connect$inet6(r3, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c)
close_range(r2, 0xffffffffffffffff, 0x0)

2m26.548325661s ago: executing program 0 (id=1250):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000180)={r0, 0x1, 0x400})
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x0, &(0x7f00000003c0), &(0x7f0000000000)='GPL\x00'}, 0x94)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2)
write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fff", 0x5)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000})
ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000001c0)=0x2)

2m25.561689437s ago: executing program 0 (id=1253):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
truncate(0x0, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0)
r2 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x10)

2m23.512893924s ago: executing program 0 (id=1256):
syz_emit_ethernet(0x92, &(0x7f0000000000)=ANY=[], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400))
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_getaffinity(r2, 0x8, &(0x7f0000000100))
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x7ffb, 0x527603)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
readv(r5, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/101, 0x65}, {0x0}, {0x0}], 0x3)
r6 = io_uring_setup(0x5143, &(0x7f0000000300)={0x0, 0x6d66, 0x380, 0x2, 0x2c2})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x7, 0xd4, 0x6, 0x1, 0x1, "46de63ecb4ae4ed68d07349ff247e9afcb1e7d"})
ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f00000008c0)=0x1)
syz_open_procfs(0x0, &(0x7f00000005c0)='mountinfo\x00')
select(0x40, &(0x7f0000000380)={0x9, 0x7, 0xffff, 0x0, 0xed3, 0x1000, 0x8, 0x75a}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2})

2m3.646957035s ago: executing program 33 (id=1256):
syz_emit_ethernet(0x92, &(0x7f0000000000)=ANY=[], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400))
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_getaffinity(r2, 0x8, &(0x7f0000000100))
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x7ffb, 0x527603)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
readv(r5, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/101, 0x65}, {0x0}, {0x0}], 0x3)
r6 = io_uring_setup(0x5143, &(0x7f0000000300)={0x0, 0x6d66, 0x380, 0x2, 0x2c2})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x7, 0xd4, 0x6, 0x1, 0x1, "46de63ecb4ae4ed68d07349ff247e9afcb1e7d"})
ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f00000008c0)=0x1)
syz_open_procfs(0x0, &(0x7f00000005c0)='mountinfo\x00')
select(0x40, &(0x7f0000000380)={0x9, 0x7, 0xffff, 0x0, 0xed3, 0x1000, 0x8, 0x75a}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2})

14.979963794s ago: executing program 3 (id=1604):
socket$alg(0x26, 0x5, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200800c, &(0x7f0000000680)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="571b320da28b242950a68c6808e7157439556e641f44e846a86fbe3d90cb1601de7ed78a94bd9eabd5a1fd0422326a7c598914c4f3e67e7003aca397013b9497b5cc666e28f0e34a6e8c3a748f8194a02c475b33a0ae49b4737267e85e18c72da28a10079d568edc050c44c82fde99e3423d6ff12450d996eb3560389e82019e", @ANYRES32=0x0, @ANYRES16], 0x1, 0x24b, &(0x7f0000000740)="$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")
llistxattr(0x0, 0x0, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb96}}, 0x24)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4000080)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80)
open(&(0x7f0000000000)='.\x00', 0x8000, 0x50)
r4 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x80)
getdents64(r4, 0x0, 0x0)

14.934181287s ago: executing program 5 (id=1605):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_open(&(0x7f0000000980)='&\x00\x12|\xd6hJ\x1e\xc6\xea\xc3\xe5\xa3\xf9\xb8Bmp\x9e\xdb \x86\x11NLd\xe8\x8b\xacg\xf4\xd9L+\x95.\xf8\x00\x16sS\xef\x15\x9eii%\x7f\xba}MO\xb3\x82\xb4\xe8d-P\x99!\x84<,\xc0\xc2\xf4\xe4\x81\x80\xe4Y\xa9l\xf3\x7ff\x96\xc0d\xd7x$\x83\xb8\x80Xh\xe4g\xcdA\x8c\x83`^De\'\xd8\x18\x99\xaf\x95\xcd+\xa6\xa7\xda\x9bmT\x96&\x93\\\x93\xca0\x88\xb5Iq\x91?\xda\xc9]>K\xf4G9\x00\x00\x00\x00\xc4\x0e\x9e\xd3\xb5\x9d]\xabe\xef%\xb9\xf6Q\xc2\xb1\"r\x1d\x11\x81\xf7\xa0\x87T\xb0\x86\xcaw\xdb\xfe8J\x86,\xaa\x0e\a\xc1ac\xf3\xddf\xa4\x05\v\xe9\xf0d\n\x00\a\xdc\xea\x87\x00\xfc^/\xbcdD\x87\xa7C\xef\x85\xdd\x95\xca\a\x87\x16\x90/\n\x14\xb9e\x15\xc4\x8f\xe7\xfd\xb6y,~\x1c\xf7\xb7\x84\x02\x82T!\xd2\x8eWL\xeb\xdd\xe4\r/\xb3M\x00\rd\xdc\x944\xdc\xb3\xbb:|\xd3\xc8\xfb<\x9c\xc3\t\xc6M\xf9\f\x8c.\xde\xf3\x16_\xc9\x15Ua)\xf2\xbe\t\xc3\xa9\xc7\xee5{\x8f\xa8Y>\b\xfco\xab\x9b\x9f\xae7\xa2\xe0\x95pVl\x914\x86\xe0\xc3\xc2\x90\x9e\x9f%\xf3^\x107\xe6\xbd}\xfazE\x85\x91Lk\xb5O\xffK\xc9\xc8\x8eo\xeb)I\xaf\xf5\xd9\xbe\xba\'\xdb{wQS\xb0&\x92W\xb0\x87\x93\xf2\n\xc8U\xe5O\x1a\xfc&\xe2\xe4g.\x00&Z:\xec\xacp\x9a1n\xa6\t\xd3uc\xad\x0f\xd2\xc7\x0e\xc13J\x9cZ\xff\xdf\x8b\xd9\x8b\xcb\xe9\x90Gc\xd4\x83\x9a@\x86_\b\x00\x00\x00\xfd\xce\xa9\xe6hjU\xb3Qt\xc5\xf4\xd0\xf3\xec\xf8\x14LH\xfa\x13\xb5\b\xbek\xd5\x04\x8f3xC\x0e\xd2\xfe\xd8\xa1\xdb\xd4\xdak3\x9a\xb1\xcfX3\xfc_\xae\xd8\xe7aRa/\xf5\xdc^\xfa\xf3\xdd\x1a\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00(\xdfJoa\x81\xaen\x88Z\x86\xc0\x05\xa8?\x86\xe9\xd2\xb43eA\x14\x01\x0f\x85Y5\xe5\xfb2\xa6\xbd{\x1d|P\x14\x82M\n\xcf\xa3\bfk\v\xb1Y\xa3\x16AE\xc6\x11>\x93\x05w\x87\xed\xb9\xd2\xb6\xa4\xfaT\xfa\xda\x91\x11\xb1*B\x17\x03\\{\xa0\xc8\xf3\xf7\xefYOs\xf7\xdc>\xd9,\xbe\x9dL\xdf\x0f\xd9\x8a~D\vU\\5\xee\xb8:\xf7\x01\xb7\xd1y\x83\x8c\xe6\xb4\xa3KY\xf1\xc5\xaf\xf2\x8dW\xaf\xf2\xae\xed\x01\xa0\x00\x87)A\x05\xdae\x9c;/\xf4/\xe4\xe9\xec\xb1ga4\xf9f\x1d*\x9aX\xff\xb7\x96t$\x05\x11y\xef\xb4+\x88db\x1a\x1e\x1f\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x80, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000001c0)={0x17c04, r0, 0x5000, 0x24000007, 0x2, 0x5})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r3, 0x0)
close_range(r2, r2, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
gettid()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x25dfdbfd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x81, 0xffffadf3, 0xffffffffffffffff, 0x3, 0x10000}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x31e728a5b70dda2, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904"], 0x0)

13.739335983s ago: executing program 2 (id=1607):
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x8, 0x7}}]}, {0xfffffffffffffc20}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x727, 0x7ffffc, 0x2000000}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084)

13.672902796s ago: executing program 3 (id=1608):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

13.472552095s ago: executing program 3 (id=1609):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x14881}, 0x800)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu\x0e\x00\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

12.381919217s ago: executing program 3 (id=1610):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x4880)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002300)="81", 0x5dc}], 0x1}, 0x4)

12.237338113s ago: executing program 2 (id=1611):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x0, &(0x7f00000003c0), &(0x7f0000000000)='GPL\x00'}, 0x94)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2)
write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fff", 0x5)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000})
ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000001c0)=0x2)

11.140887785s ago: executing program 2 (id=1612):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x15b}], 0x1}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918", 0xcf}], 0x1}}], 0x1, 0x0)

10.944711954s ago: executing program 5 (id=1613):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x3, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40)

10.763683263s ago: executing program 5 (id=1614):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000081}, 0x20004450)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0xc, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=<r10=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa000, 0x0)
r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x5, 0x494141)
writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2)
syz_ublk_setup_queues(r12, r10, &(0x7f0000000340)={0x0, 0x5a7a, 0x400, 0x0, 0x2ce, 0x0, r4}, 0x0, 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r9, '\x00', {0x4, 0xe52, 0x0, 0x0}}, &(0x7f0000000180))
r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
write(r13, 0x0, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl80211(0x0, r14)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r14, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r15, @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054)
mount(0x0, 0x0, 0x0, 0x0, 0x0)

10.745180684s ago: executing program 2 (id=1615):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000d31b00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x10100, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x1, 0x0, 0xe, 0x7ff, 0x9}]}, &(0x7f0000000540)='syzkaller\x00', 0xc3, 0x27, &(0x7f0000000580)=""/39, 0x41000, 0xa, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x20763}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, 0xffffffffffffffff, 0x19, 0x0, @void}, 0x10)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="71756965742c636f6465706167653d63703836302c696f636861727365743d63703836312c00808fead042bd35dc78f7f06333a5e7165b8271e41aee85e59cbb6c2df3d4e4c16b06c73f2e3b34ac8d4813c9c3d9cee1ddb95d1bbcf504e065b3749a1cbd841e685a558598cf0db10b55885946e678d0a71877037a090000000700848879ef1604cadc1faca3aa22a576750d559c4e124d4cb7293e7393b77286fa8c6dc449eda0a03d342382e84d6d3c29ab95cc923fbe25e134d1c421320a3bffaa17fcd6b5178e322cc47133b3811e3d3bc34998dc7ed029834ad591d9d56c41063d8de2d50a2398e73ff2913a9fe8e954a4e4ca99ceb5737e57193c5f47fd63b16c8b34f256dbac0e5ebd009078df2cb1ca0151ad091adbfee5126d8a59fa5438734bc3e8cc7b7edc10716a0a9b711952cdf96586e06fbace21dc04bdb4a1a2072ce5f72cf02e5256ff74be5e07a5f8d6ec2fa867b2a353bf6ea1b533377803804a49a499d51f1cb71e1cea551598939afe8ff8e8472352e2d5193bc866c000"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x315, &(0x7f0000000b40)="$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")
mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.stat\x00', 0x275a, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x204c080, 0x0, 0x0, 0x0, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x1, 0x0, &(0x7f0000000140))
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000080)

10.654874788s ago: executing program 1 (id=1616):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000)

9.515188421s ago: executing program 5 (id=1617):
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1})
mkdir(0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='1', 0x1)
mkdir(&(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='tcp', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='ipv4', 0x4)
r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r4, &(0x7f0000000380)='127.0.0.1', 0x9)
symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testsubsys\x00')

9.321114111s ago: executing program 1 (id=1618):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
inotify_init()
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}, 0xf})
write$sndseq(r5, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='ext4\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000340)='ocfs2_dlmfs\x00', 0x8410, 0x0)

7.612526972s ago: executing program 1 (id=1619):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

7.543111155s ago: executing program 2 (id=1620):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x22)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

6.391258109s ago: executing program 2 (id=1622):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3})
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x80c019, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000180)='./file1\x00')
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)

5.10167732s ago: executing program 1 (id=1625):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_open(&(0x7f0000000980)='&\x00\x12|\xd6hJ\x1e\xc6\xea\xc3\xe5\xa3\xf9\xb8Bmp\x9e\xdb \x86\x11NLd\xe8\x8b\xacg\xf4\xd9L+\x95.\xf8\x00\x16sS\xef\x15\x9eii%\x7f\xba}MO\xb3\x82\xb4\xe8d-P\x99!\x84<,\xc0\xc2\xf4\xe4\x81\x80\xe4Y\xa9l\xf3\x7ff\x96\xc0d\xd7x$\x83\xb8\x80Xh\xe4g\xcdA\x8c\x83`^De\'\xd8\x18\x99\xaf\x95\xcd+\xa6\xa7\xda\x9bmT\x96&\x93\\\x93\xca0\x88\xb5Iq\x91?\xda\xc9]>K\xf4G9\x00\x00\x00\x00\xc4\x0e\x9e\xd3\xb5\x9d]\xabe\xef%\xb9\xf6Q\xc2\xb1\"r\x1d\x11\x81\xf7\xa0\x87T\xb0\x86\xcaw\xdb\xfe8J\x86,\xaa\x0e\a\xc1ac\xf3\xddf\xa4\x05\v\xe9\xf0d\n\x00\a\xdc\xea\x87\x00\xfc^/\xbcdD\x87\xa7C\xef\x85\xdd\x95\xca\a\x87\x16\x90/\n\x14\xb9e\x15\xc4\x8f\xe7\xfd\xb6y,~\x1c\xf7\xb7\x84\x02\x82T!\xd2\x8eWL\xeb\xdd\xe4\r/\xb3M\x00\rd\xdc\x944\xdc\xb3\xbb:|\xd3\xc8\xfb<\x9c\xc3\t\xc6M\xf9\f\x8c.\xde\xf3\x16_\xc9\x15Ua)\xf2\xbe\t\xc3\xa9\xc7\xee5{\x8f\xa8Y>\b\xfco\xab\x9b\x9f\xae7\xa2\xe0\x95pVl\x914\x86\xe0\xc3\xc2\x90\x9e\x9f%\xf3^\x107\xe6\xbd}\xfazE\x85\x91Lk\xb5O\xffK\xc9\xc8\x8eo\xeb)I\xaf\xf5\xd9\xbe\xba\'\xdb{wQS\xb0&\x92W\xb0\x87\x93\xf2\n\xc8U\xe5O\x1a\xfc&\xe2\xe4g.\x00&Z:\xec\xacp\x9a1n\xa6\t\xd3uc\xad\x0f\xd2\xc7\x0e\xc13J\x9cZ\xff\xdf\x8b\xd9\x8b\xcb\xe9\x90Gc\xd4\x83\x9a@\x86_\b\x00\x00\x00\xfd\xce\xa9\xe6hjU\xb3Qt\xc5\xf4\xd0\xf3\xec\xf8\x14LH\xfa\x13\xb5\b\xbek\xd5\x04\x8f3xC\x0e\xd2\xfe\xd8\xa1\xdb\xd4\xdak3\x9a\xb1\xcfX3\xfc_\xae\xd8\xe7aRa/\xf5\xdc^\xfa\xf3\xdd\x1a\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00(\xdfJoa\x81\xaen\x88Z\x86\xc0\x05\xa8?\x86\xe9\xd2\xb43eA\x14\x01\x0f\x85Y5\xe5\xfb2\xa6\xbd{\x1d|P\x14\x82M\n\xcf\xa3\bfk\v\xb1Y\xa3\x16AE\xc6\x11>\x93\x05w\x87\xed\xb9\xd2\xb6\xa4\xfaT\xfa\xda\x91\x11\xb1*B\x17\x03\\{\xa0\xc8\xf3\xf7\xefYOs\xf7\xdc>\xd9,\xbe\x9dL\xdf\x0f\xd9\x8a~D\vU\\5\xee\xb8:\xf7\x01\xb7\xd1y\x83\x8c\xe6\xb4\xa3KY\xf1\xc5\xaf\xf2\x8dW\xaf\xf2\xae\xed\x01\xa0\x00\x87)A\x05\xdae\x9c;/\xf4/\xe4\xe9\xec\xb1ga4\xf9f\x1d*\x9aX\xff\xb7\x96t$\x05\x11y\xef\xb4+\x88db\x1a\x1e\x1f\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x80, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000001c0)={0x17c04, r0, 0x5000, 0x24000007, 0x2, 0x5})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r3, 0x0)
close_range(r2, r2, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
gettid()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x25dfdbfd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x81, 0xffffadf3, 0xffffffffffffffff, 0x3, 0x10000}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x31e728a5b70dda2, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904"], 0x0)

5.073303761s ago: executing program 6 (id=1626):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4", 0x15b}], 0x1}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918", 0xcf}], 0x1}}], 0x1, 0x0)

4.927097458s ago: executing program 6 (id=1627):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000081}, 0x20004450)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0xc, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=<r10=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa000, 0x0)
r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x5, 0x494141)
writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2)
syz_ublk_setup_queues(r12, r10, &(0x7f0000000340)={0x0, 0x5a7a, 0x400, 0x0, 0x2ce, 0x0, r4}, 0x0, 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r9, '\x00', {0x4, 0xe52, 0x0, 0x0}}, &(0x7f0000000180))
r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
write(r13, 0x0, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl80211(0x0, r14)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r14, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r15, @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054)
mount(0x0, 0x0, 0x0, 0x0, 0x0)

3.719018025s ago: executing program 6 (id=1628):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10)
recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1}, 0x100}], 0x1, 0x40010000, &(0x7f0000002b80)={0x0, 0x3938700})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000d31b00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x10100, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x1, 0x0, 0xe, 0x7ff, 0x9}]}, &(0x7f0000000540)='syzkaller\x00', 0xc3, 0x27, &(0x7f0000000580)=""/39, 0x41000, 0xa, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x20763}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, 0xffffffffffffffff, 0x19, 0x0, @void}, 0x10)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x315, &(0x7f0000000b40)="$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")
mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.stat\x00', 0x275a, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x204c080, 0x0, 0x0, 0x0, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x1, 0x0, &(0x7f0000000140))
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000080)

3.309782094s ago: executing program 6 (id=1629):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002980)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x0, 0x2, 0x400, 0x5, 0x81, 0x3, 0x5]}}]}]}]}, 0x48}}, 0x0)

2.346404279s ago: executing program 5 (id=1630):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x8000, 0x7f, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x3a, 0x6a6bc0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x10000, 0xff}}]}, 0xc4}}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000000000000000000000000000000800100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

2.277218593s ago: executing program 3 (id=1631):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000d31b00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x10100, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x1, 0x0, 0xe, 0x7ff, 0x9}]}, &(0x7f0000000540)='syzkaller\x00', 0xc3, 0x27, &(0x7f0000000580)=""/39, 0x41000, 0xa, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x20763}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, 0xffffffffffffffff, 0x19, 0x0, @void}, 0x10)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x315, &(0x7f0000000b40)="$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")
mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.stat\x00', 0x275a, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x204c080, 0x0, 0x0, 0x0, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x1, 0x0, &(0x7f0000000140))
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000080)

2.257387534s ago: executing program 6 (id=1632):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000780)={0x0, 0xfffffffd, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7})

1.253727481s ago: executing program 6 (id=1633):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x14881}, 0x800)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu\x0e\x00\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

929.911157ms ago: executing program 5 (id=1634):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
truncate(0x0, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd6200000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0)
r2 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x10)

929.065147ms ago: executing program 1 (id=1635):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

16.13813ms ago: executing program 3 (id=1636):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x3, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40)

0s ago: executing program 1 (id=1637):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20)
sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x1}}], 0x1, 0x0)

kernel console output (not intermixed with test programs):

8192, ipg=32, mo=a002c018, mo2=0082]
[  246.209096][ T6088] System zones: 1-12
[  246.239115][ T6088] EXT4-fs (loop0): 1 truncate cleaned up
[  246.258475][ T6088] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  246.610153][ T6099] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  247.049826][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  247.194940][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  247.555979][ T5399] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  248.635005][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  248.726771][ T5399] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  248.864998][ T5399] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  248.940256][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  248.997944][ T5399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.039684][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  249.262422][ T5399] usb 4-1: Product: syz
[  249.367732][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  249.405501][ T5399] usb 4-1: Manufacturer: syz
[  249.477230][ T5399] usb 4-1: SerialNumber: syz
[  249.490557][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  249.634464][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  250.242288][ T5399] usb 4-1: Cannot retrieve CPort count: -110
[  250.260079][ T5399] usb 4-1: Cannot retrieve CPort count: -110
[  250.472936][ T5399] es2_ap_driver: probe of 4-1:1.0 failed with error -110
[  250.923412][ T6116] device syzkaller0 entered promiscuous mode
[  251.105112][ T5399] usb 4-1: USB disconnect, device number 9
[  251.425363][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'.
[  254.529258][ T6136] loop4: detected capacity change from 0 to 32768
[  254.629118][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  254.922280][ T6165] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  255.229125][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  255.757529][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  255.925617][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  255.955654][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  256.016502][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  257.328328][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  258.209437][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  258.215879][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  261.514495][ T6187] loop1: detected capacity change from 0 to 16
[  261.646015][ T6187] erofs: (device loop1): mounted with root inode @ nid 36.
[  261.687195][ T6180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.576'.
[  261.881635][ T6180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.576'.
[  263.550285][ T5399] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  263.759094][ T5399] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  263.793684][ T5399] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  263.825895][ T5399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.880643][ T5399] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected
[  263.902866][ T5399] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81
[  263.959258][ T5399] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1
[  264.223183][ T4377] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  264.680529][ T5399] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84
[  264.699354][ T5399] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2
[  264.733430][ T4377] usb 3-1: Using ep0 maxpacket: 16
[  264.757456][ T5399] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  264.791792][ T4377] usb 3-1: unable to get BOS descriptor or descriptor too short
[  264.826681][ T4377] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  264.831208][ T5399] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88
[  264.864322][ T4377] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  264.883251][ T4377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.893341][ T5399] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6
[  264.901031][ T4377] usb 3-1: Product: syz
[  264.901048][ T4377] usb 3-1: Manufacturer: syz
[  264.901061][ T4377] usb 3-1: SerialNumber: syz
[  264.971702][ T5399] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  265.139825][ T4377] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  265.166681][ T4377] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  265.316861][ T5400] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  265.877789][ T4377] usb 3-1: USB disconnect, device number 7
[  266.281401][ T4319] usb 2-1: USB disconnect, device number 5
[  266.329921][ T4319] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  266.395343][ T4319] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  266.406300][ T5400] usb 1-1: config 0 has an invalid interface number: 237 but max is 0
[  266.425707][ T5400] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.438760][ T4319] keyspan 2-1:1.0: device disconnected
[  266.461957][ T5400] usb 1-1: config 0 has no interface number 0
[  266.476204][ T5400] usb 1-1: config 0 interface 237 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  266.507142][ T5400] usb 1-1: config 0 interface 237 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  266.536412][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  266.634576][ T5400] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[  267.083841][ T4319] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  267.324574][ T4319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  267.403942][ T4319] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  267.519507][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.602940][ T4319] usb 2-1: Product: syz
[  267.644233][ T4319] usb 2-1: Manufacturer: syz
[  267.706342][ T4319] usb 2-1: SerialNumber: syz
[  268.434380][ T4319] usb 2-1: Cannot retrieve CPort count: -110
[  268.816128][ T5400] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  269.134464][ T4319] usb 2-1: Cannot retrieve CPort count: -110
[  269.818355][ T4319] es2_ap_driver: probe of 2-1:1.0 failed with error -110
[  270.612097][ T6234] device syzkaller0 entered promiscuous mode
[  270.618989][ T5400] usb 1-1: Product: syz
[  270.623240][ T5400] usb 1-1: Manufacturer: syz
[  270.841700][ T6234] netlink: 168 bytes leftover after parsing attributes in process `syz.4.592'.
[  271.057348][ T5400] usb 1-1: SerialNumber: syz
[  271.064106][ T5400] usb 1-1: config 0 descriptor??
[  272.026312][ T5400] usb 1-1: can't set config #0, error -71
[  272.033587][ T5400] usb 1-1: USB disconnect, device number 2
[  272.052224][ T5399] usb 2-1: USB disconnect, device number 6
[  273.044148][ T4615] Process accounting resumed
[  274.257456][ T6267] nvmet_tcp: malformed ip/port passed: :
[  274.410010][ T6269] netlink: 'syz.0.603': attribute type 10 has an invalid length.
[  274.486075][ T6269] bridge0: port 1(syz_tun) entered disabled state
[  274.561980][ T6269] bridge0: port 1(syz_tun) entered blocking state
[  274.568533][ T6269] bridge0: port 1(syz_tun) entered forwarding state
[  274.600562][ T6269] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  274.794221][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'.
[  274.827210][ T6272] device syz_tun left promiscuous mode
[  274.833597][ T6279] loop1: detected capacity change from 0 to 32768
[  274.851237][ T6279] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.606 (6279)
[  274.872717][ T6272] bridge0: port 1(syz_tun) entered disabled state
[  274.877432][ T6279] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  274.889424][ T6279] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  274.898188][ T6279] BTRFS info (device loop1): setting nodatasum
[  274.906006][ T6279] BTRFS info (device loop1): force zlib compression, level 3
[  274.913618][ T6279] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  274.923012][ T6279] BTRFS info (device loop1): use lzo compression, level 0
[  274.930310][ T6279] BTRFS info (device loop1): turning on flush-on-commit
[  274.937281][ T6279] BTRFS info (device loop1): enabling auto defrag
[  274.943957][ T6279] BTRFS info (device loop1): max_inline at 4096
[  274.950319][ T6279] BTRFS info (device loop1): using free space tree
[  275.008339][ T6272] bond0: (slave bridge0): Releasing backup interface
[  275.027503][ T4317] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  275.041956][ T6279] BTRFS info (device loop1): enabling ssd optimizations
[  275.404553][ T4317] usb 3-1: config 0 has an invalid interface number: 237 but max is 0
[  275.404674][ T4317] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  275.404741][ T4317] usb 3-1: config 0 has no interface number 0
[  275.404994][ T4317] usb 3-1: config 0 interface 237 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  275.405087][ T4317] usb 3-1: config 0 interface 237 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  275.939577][ T6301] tmpfs: Unknown parameter 'usrquota'
[  276.024907][ T4317] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[  276.077816][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  276.165824][ T4317] usb 3-1: Product: syz
[  276.230846][ T6301] syz.1.606 (6301) used greatest stack depth: 20208 bytes left
[  276.243114][ T4317] usb 3-1: Manufacturer: syz
[  276.258155][ T4317] usb 3-1: SerialNumber: syz
[  276.277924][ T4317] usb 3-1: config 0 descriptor??
[  276.696594][ T5399] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  277.103620][ T4615] usb 3-1: USB disconnect, device number 8
[  277.590284][ T5399] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  277.743111][ T5400] Process accounting resumed
[  277.810896][ T5399] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  278.017501][ T5399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.185690][ T5399] usb 4-1: Product: syz
[  278.273563][ T5399] usb 4-1: Manufacturer: syz
[  278.362022][ T4272] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  278.386680][ T5399] usb 4-1: SerialNumber: syz
[  279.189870][ T5399] usb 4-1: Cannot retrieve CPort count: -110
[  279.198584][ T5399] usb 4-1: Cannot retrieve CPort count: -110
[  279.297267][ T5399] es2_ap_driver: probe of 4-1:1.0 failed with error -110
[  279.422008][ T6310] device syzkaller0 entered promiscuous mode
[  280.311807][ T6320] netlink: 168 bytes leftover after parsing attributes in process `syz.4.610'.
[  280.346464][ T6316] loop2: detected capacity change from 0 to 128
[  280.398528][ T2312] pvrusb2: request_firmware fatal error with code=-110
[  280.497746][ T2312] pvrusb2: Failure uploading firmware1
[  280.562735][ T6316] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  280.636931][ T2312] pvrusb2: Device initialization was not successful.
[  280.677142][ T6316] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  280.691303][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  280.701697][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  280.712065][ T4321] pvrusb2: Device being rendered inoperable
[  280.743462][ T4615] usb 4-1: USB disconnect, device number 10
[  282.360161][ T6343] nvmet_tcp: malformed ip/port passed: :
[  282.776587][ T5400] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  283.209240][ T5400] usb 5-1: config 0 has no interfaces?
[  283.241541][ T4321] Process accounting resumed
[  284.144394][ T5400] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  284.153601][ T5400] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  284.161601][ T5400] usb 5-1: Manufacturer: syz
[  284.178035][ T5400] usb 5-1: config 0 descriptor??
[  284.356441][ T6345] loop0: detected capacity change from 0 to 32768
[  284.567040][ T6345] XFS (loop0): Mounting V5 Filesystem
[  284.688359][ T4317] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  284.835763][ T5400] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  285.948450][ T5400] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  286.049649][ T5400] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  286.064117][ T6345] XFS (loop0): log mount failed
[  286.154286][ T5400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.233774][ T5400] usb 2-1: Product: syz
[  286.272872][ T5400] usb 2-1: Manufacturer: syz
[  286.333895][ T4317] usb 3-1: config 0 has an invalid interface number: 237 but max is 0
[  286.345980][ T5400] usb 2-1: SerialNumber: syz
[  286.411918][ T5398] usb 5-1: USB disconnect, device number 3
[  287.079902][ T5400] usb 2-1: Cannot retrieve CPort count: -110
[  287.105660][ T5400] usb 2-1: Cannot retrieve CPort count: -110
[  287.279015][ T5400] es2_ap_driver: probe of 2-1:1.0 failed with error -110
[  287.781505][ T4317] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.792686][ T4317] usb 3-1: config 0 has no interface number 0
[  287.798840][ T4317] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  287.809913][ T4317] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  287.819798][ T4317] usb 3-1: config 0 interface 237 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  287.833815][ T6372] loop4: detected capacity change from 0 to 128
[  287.859505][ T4317] usb 3-1: string descriptor 0 read error: -71
[  287.884210][ T4317] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[  287.893416][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  287.903486][ T4317] usb 3-1: config 0 descriptor??
[  287.909378][ T4317] usb 3-1: can't set config #0, error -71
[  287.916299][ T4317] usb 3-1: USB disconnect, device number 9
[  287.925531][ T6372] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  287.939602][ T6372] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  288.100040][ T5398] usb 2-1: USB disconnect, device number 7
[  288.493939][ T6381] loop0: detected capacity change from 0 to 64
[  289.490675][ T6386] random: crng reseeded on system resumption
[  291.436400][ T6407] loop2: detected capacity change from 0 to 64
[  292.562974][ T4322] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  292.589537][ T6420] loop0: detected capacity change from 0 to 128
[  292.638406][ T6420] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  292.707035][ T6420] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  292.846387][ T4322] usb 4-1: config 0 has an invalid interface number: 237 but max is 0
[  292.854976][ T4322] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  293.161880][ T4322] usb 4-1: config 0 has no interface number 0
[  293.180795][ T4322] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  293.193011][ T4322] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  293.207620][ T4322] usb 4-1: config 0 interface 237 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  293.241686][ T4322] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[  293.256616][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  293.264830][ T4322] usb 4-1: Product: syz
[  293.270433][ T4322] usb 4-1: Manufacturer: syz
[  293.275484][ T4322] usb 4-1: SerialNumber: syz
[  293.286077][ T4322] usb 4-1: config 0 descriptor??
[  293.391498][ T6433] loop1: detected capacity change from 0 to 64
[  293.725808][ T5398] usb 4-1: USB disconnect, device number 11
[  298.503618][ T6473] loop1: detected capacity change from 0 to 64
[  299.584982][ T6478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.659'.
[  299.705037][ T6478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.659'.
[  299.714421][ T6481] device syzkaller0 entered promiscuous mode
[  299.950958][ T6486] loop1: detected capacity change from 0 to 64
[  302.729084][ T4317] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  303.503692][ T4317] usb 1-1: config 0 has an invalid interface number: 237 but max is 0
[  303.531733][ T4317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.686577][ T4317] usb 1-1: config 0 has no interface number 0
[  303.706848][ T4317] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  303.766716][ T4317] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  303.814940][ T4317] usb 1-1: config 0 interface 237 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  303.981417][ T4317] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[  304.810768][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  304.818805][ T4317] usb 1-1: Product: syz
[  304.831409][ T4317] usb 1-1: Manufacturer: syz
[  304.836131][ T4317] usb 1-1: SerialNumber: syz
[  304.843027][ T4317] usb 1-1: config 0 descriptor??
[  305.091374][ T4317] usb 1-1: can't set config #0, error -71
[  305.112706][ T4317] usb 1-1: USB disconnect, device number 3
[  305.294222][ T6520] loop1: detected capacity change from 0 to 64
[  308.014192][ T6533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.675'.
[  308.053364][ T6533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.675'.
[  308.092974][ T6533] device syzkaller0 entered promiscuous mode
[  309.478988][ T6544] random: crng reseeded on system resumption
[  314.033086][  T954] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  315.287356][  T954] usb 3-1: config 0 has an invalid interface number: 237 but max is 0
[  315.335885][  T954] usb 3-1: config 0 has no interface number 0
[  315.342023][  T954] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  315.452876][  T954] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  315.487460][  T954] usb 3-1: config 0 interface 237 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  315.630916][ T6577] loop4: detected capacity change from 0 to 16
[  315.838115][ T6577] erofs: (device loop4): mounted with root inode @ nid 36.
[  316.739079][  T954] usb 3-1: string descriptor 0 read error: -71
[  316.754934][  T954] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[  316.818067][  T954] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  316.855952][  T954] usb 3-1: config 0 descriptor??
[  316.905046][  T954] usb 3-1: can't set config #0, error -71
[  316.926327][  T954] usb 3-1: USB disconnect, device number 10
[  317.057600][ T6583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.689'.
[  317.066506][ T6583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.689'.
[  318.043755][ T6583] device syzkaller0 entered promiscuous mode
[  321.696729][ T6624] loop2: detected capacity change from 0 to 16
[  321.715188][ T6624] erofs: (device loop2): mounted with root inode @ nid 36.
[  323.458927][ T6631] device syzkaller0 entered promiscuous mode
[  324.827643][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  324.836154][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  328.338677][  T954] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  328.904212][  T954] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  329.011192][  T954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  329.078783][  T954] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  329.178308][  T954] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  329.187024][  T954] usb 1-1: Manufacturer: syz
[  329.209991][  T954] usb 1-1: config 0 descriptor??
[  329.217558][  T954] igorplugusb 1-1:0.0: incorrect number of endpoints
[  330.896233][  T954] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  330.984590][ T6686] random: crng reseeded on system resumption
[  333.120617][  T954] usb 3-1: config 0 has an invalid interface number: 237 but max is 0
[  333.192127][  T954] usb 3-1: config 0 has no interface number 0
[  333.227577][  T954] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  333.349955][  T954] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  333.403325][  T954] usb 3-1: config 0 interface 237 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  333.486119][ T4317] usb 1-1: USB disconnect, device number 4
[  333.510174][  T954] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[  333.554228][  T954] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  333.579053][  T954] usb 3-1: Product: syz
[  333.590029][  T954] usb 3-1: Manufacturer: syz
[  333.601020][  T954] usb 3-1: SerialNumber: syz
[  333.650132][  T954] usb 3-1: config 0 descriptor??
[  334.504739][  T954] usb 3-1: USB disconnect, device number 11
[  334.676753][ T6696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.721'.
[  334.691970][ T6696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.721'.
[  334.751581][ T6696] device syzkaller0 entered promiscuous mode
[  335.035182][ T6705] loop3: detected capacity change from 0 to 128
[  335.821192][ T6705] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  336.548853][ T6705] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  338.461221][ T5400] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  338.724920][ T5400] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  338.746168][ T5400] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  338.817613][ T5400] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  338.889112][ T5400] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  338.944723][ T5400] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  338.988299][ T5400] usb 2-1: Manufacturer: syz
[  339.047070][ T5400] usb 2-1: config 0 descriptor??
[  339.084524][ T5400] igorplugusb 2-1:0.0: incorrect number of endpoints
[  340.199167][   T22] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  340.415689][   T22] usb 3-1: config 0 has an invalid interface number: 237 but max is 0
[  340.460003][   T22] usb 3-1: config 0 has no interface number 0
[  340.547754][   T22] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  340.720138][   T22] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  340.841558][   T22] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  340.968555][   T22] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  341.229717][   T22] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[  341.258047][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.735'.
[  341.334844][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.735'.
[  341.362719][   T22] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  341.370424][ T6743] device syzkaller0 entered promiscuous mode
[  341.388650][   T22] usb 3-1: Product: syz
[  341.398357][   T22] usb 3-1: Manufacturer: syz
[  341.402993][   T22] usb 3-1: SerialNumber: syz
[  342.258675][   T22] usb 3-1: config 0 descriptor??
[  342.317930][ T5399] usb 2-1: USB disconnect, device number 8
[  342.318937][   T22] xpad: probe of 3-1:0.237 failed with error -5
[  342.549486][ T5398] usb 3-1: USB disconnect, device number 12
[  343.388619][ T6756] loop4: detected capacity change from 0 to 128
[  343.395842][ T6756] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  343.416098][ T6756] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  344.683950][ T4321] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  345.288627][ T4321] usb 2-1: device descriptor read/64, error -71
[  345.588535][ T4321] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  345.863080][ T4321] usb 2-1: device descriptor read/64, error -71
[  346.773914][ T4321] usb usb2-port1: attempt power cycle
[  346.783812][ T6783] loop3: detected capacity change from 0 to 64
[  348.258384][ T4321] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  348.417206][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.749'.
[  348.426397][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.749'.
[  348.437435][ T6791] device syzkaller0 entered promiscuous mode
[  348.545819][ T4321] usb 2-1: device not accepting address 11, error -71
[  349.353209][ T4321] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  349.588929][ T6805] loop3: detected capacity change from 0 to 64
[  349.643233][ T4321] usb 2-1: config 0 has an invalid interface number: 237 but max is 0
[  349.667897][ T6804] loop4: detected capacity change from 0 to 128
[  349.808699][ T6804] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  349.996137][ T6804] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  351.144091][ T4321] usb 2-1: config 0 has no interface number 0
[  351.150381][ T4321] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  351.162539][ T4321] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  351.172784][ T4321] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  351.186399][ T4321] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  351.201280][ T4321] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[  351.221667][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  351.238192][ T4321] usb 2-1: Product: syz
[  351.244526][ T4321] usb 2-1: Manufacturer: syz
[  351.249180][ T4321] usb 2-1: SerialNumber: syz
[  351.256829][ T6813] loop2: detected capacity change from 0 to 16
[  351.264889][ T6813] erofs: (device loop2): mounted with root inode @ nid 36.
[  351.715429][ T5399] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  352.659051][ T4321] usb 2-1: config 0 descriptor??
[  352.842896][ T5399] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  352.935316][ T5399] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  353.111463][ T5399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.247825][ T5399] usb 1-1: Product: syz
[  353.305023][ T5399] usb 1-1: Manufacturer: syz
[  353.367987][ T5399] usb 1-1: SerialNumber: syz
[  354.107620][ T4321] usb 2-1: can't set config #0, error -71
[  355.368232][ T5399] usb 1-1: Cannot retrieve CPort count: -110
[  355.386037][ T5399] usb 1-1: Cannot retrieve CPort count: -110
[  355.699489][ T5399] es2_ap_driver: probe of 1-1:1.0 failed with error -110
[  355.901925][ T4321] usb 2-1: USB disconnect, device number 12
[  357.014120][ T6830] loop1: detected capacity change from 0 to 64
[  357.087046][   T22] usb 1-1: USB disconnect, device number 5
[  357.087991][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.765'.
[  357.102150][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.765'.
[  357.116740][ T6839] device syzkaller0 entered promiscuous mode
[  357.351568][ T5399] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  357.839087][ T5399] usb 4-1: device descriptor read/64, error -71
[  357.983304][ T6843] nvmet_tcp: malformed ip/port passed: :
[  358.151781][ T5399] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  358.948563][ T6855] loop2: detected capacity change from 0 to 16
[  358.963260][ T6855] erofs: (device loop2): mounted with root inode @ nid 36.
[  360.245092][ T5399] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  360.486604][ T5399] usb 4-1: config 0 has an invalid interface number: 237 but max is 0
[  360.509896][ T5399] usb 4-1: config 0 has no interface number 0
[  360.519330][ T6869] loop0: detected capacity change from 0 to 16
[  360.527329][ T6869] erofs: (device loop0): mounted with root inode @ nid 36.
[  360.655825][ T5399] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  360.669262][ T5399] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  360.715630][ T5399] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  360.856460][ T5399] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  361.041146][ T5399] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[  361.054235][ T5399] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  361.082283][ T5399] usb 4-1: Product: syz
[  361.100127][ T5399] usb 4-1: Manufacturer: syz
[  361.199676][ T5399] usb 4-1: SerialNumber: syz
[  361.484660][ T5399] usb 4-1: config 0 descriptor??
[  361.660407][ T5399] xpad: probe of 4-1:0.237 failed with error -5
[  361.779246][ T6883] nvmet_tcp: malformed ip/port passed: :
[  361.932115][ T6884] loop1: detected capacity change from 0 to 64
[  362.016014][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.780'.
[  362.034938][ T5399] usb 4-1: USB disconnect, device number 14
[  362.261062][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.780'.
[  362.846014][ T5399] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  362.912507][ T6894] loop2: detected capacity change from 0 to 128
[  362.920467][ T6894] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  362.952773][ T6895] loop3: detected capacity change from 0 to 16
[  362.976667][ T6894] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  363.133030][ T5399] usb 5-1: device descriptor read/64, error -71
[  363.165956][ T6895] erofs: (device loop3): mounted with root inode @ nid 36.
[  363.723768][ T5399] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  363.897093][ T5399] usb 5-1: device descriptor read/64, error -71
[  364.027423][ T5399] usb usb5-port1: attempt power cycle
[  366.105648][ T6912] loop0: detected capacity change from 0 to 16
[  366.116104][ T6912] erofs: (device loop0): mounted with root inode @ nid 36.
[  366.205566][ T5399] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  366.251711][ T5399] usb 5-1: device descriptor read/8, error -71
[  366.486589][ T6920] nvmet_tcp: malformed ip/port passed: :
[  367.256853][ T5399] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  367.380846][ T5399] usb 5-1: device descriptor read/8, error -71
[  367.517755][ T5399] usb usb5-port1: unable to enumerate USB device
[  367.546644][ T6927] loop3: detected capacity change from 0 to 64
[  368.108643][ T6928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.797'.
[  368.234318][ T6928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.797'.
[  368.353759][ T6928] device syzkaller0 entered promiscuous mode
[  369.834828][ T6947] loop3: detected capacity change from 0 to 16
[  369.895804][ T6947] erofs: (device loop3): mounted with root inode @ nid 36.
[  370.996817][ T6945] loop4: detected capacity change from 0 to 16
[  371.029447][ T6945] erofs: (device loop4): mounted with root inode @ nid 36.
[  371.589112][ T6962] loop3: detected capacity change from 0 to 64
[  371.678698][ T5398] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  371.895552][ T5398] usb 1-1: device descriptor read/64, error -71
[  372.198929][ T5398] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  372.391945][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.811'.
[  372.402052][ T5398] usb 1-1: device descriptor read/64, error -71
[  372.433325][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.811'.
[  372.444872][ T6965] device syzkaller0 entered promiscuous mode
[  372.543567][ T5398] usb usb1-port1: attempt power cycle
[  372.768237][ T6975] nvmet_tcp: malformed ip/port passed: :
[  373.627680][ T6978] random: crng reseeded on system resumption
[  373.878653][ T5398] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  373.955640][ T5398] usb 1-1: device descriptor read/8, error -71
[  374.334016][ T5398] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  374.389715][ T5398] usb 1-1: device descriptor read/8, error -71
[  374.518983][ T6988] loop4: detected capacity change from 0 to 128
[  374.530460][ T5398] usb usb1-port1: unable to enumerate USB device
[  374.613228][ T6988] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  374.797463][ T6988] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  377.532710][ T7014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.822'.
[  377.586177][ T7014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.822'.
[  377.630039][ T7014] device syzkaller0 entered promiscuous mode
[  377.643329][ T7014] netlink: 168 bytes leftover after parsing attributes in process `syz.1.822'.
[  378.854108][ T5398] Process accounting resumed
[  379.009199][ T7025] loop3: detected capacity change from 0 to 64
[  381.845654][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  381.917040][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  381.953117][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  381.989051][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  382.119773][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  382.137327][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  382.161325][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  385.313320][ T7076] fuse: Bad value for 'group_id'
[  385.811304][ T4321] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  385.954022][ T7083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.844'.
[  386.052134][ T4321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  386.070069][ T7083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.844'.
[  386.081459][ T4615] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  386.123482][ T4321] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  386.197542][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.276850][ T4321] usb 3-1: Product: syz
[  386.305564][ T4321] usb 3-1: Manufacturer: syz
[  386.319165][ T4615] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  386.347387][ T4321] usb 3-1: SerialNumber: syz
[  386.360385][ T4615] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  386.514551][ T4615] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  386.610265][ T4615] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  386.689938][ T4615] usb 4-1: Manufacturer: syz
[  386.805042][ T7089] device syzkaller0 entered promiscuous mode
[  386.817895][ T4615] usb 4-1: config 0 descriptor??
[  386.929881][ T4615] igorplugusb 4-1:0.0: incorrect number of endpoints
[  387.017721][ T4321] usb 3-1: Cannot retrieve CPort count: -110
[  387.033454][ T4321] usb 3-1: Cannot retrieve CPort count: -110
[  387.075074][ T7091] netlink: 168 bytes leftover after parsing attributes in process `syz.1.845'.
[  387.131964][ T4321] es2_ap_driver: probe of 3-1:1.0 failed with error -110
[  389.130089][ T4321] usb 3-1: USB disconnect, device number 13
[  389.368199][ T5398] usb 4-1: USB disconnect, device number 15
[  389.495073][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  390.024924][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  390.054016][ T5405] Process accounting resumed
[  390.060056][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  390.075508][ T7111] loop3: detected capacity change from 0 to 16
[  390.084133][ T7111] erofs: (device loop3): mounted with root inode @ nid 36.
[  390.146556][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  390.180530][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  390.247896][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  390.293032][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  391.372578][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  391.378951][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  391.835398][ T7119] loop1: detected capacity change from 0 to 16
[  391.892753][ T7119] erofs: (device loop1): mounted with root inode @ nid 36.
[  392.108692][ T7124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.856'.
[  392.136945][ T7124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.856'.
[  392.185267][ T7124] device syzkaller0 entered promiscuous mode
[  392.411762][ T7132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.858'.
[  392.444242][ T7132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.858'.
[  392.574767][ T7132] device syzkaller0 entered promiscuous mode
[  392.611746][ T7132] netlink: 168 bytes leftover after parsing attributes in process `syz.0.858'.
[  393.615019][ T7146] loop1: detected capacity change from 0 to 16
[  393.622529][ T7146] erofs: (device loop1): mounted with root inode @ nid 36.
[  393.867566][ T4615] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  395.403984][ T4615] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  395.749262][ T4615] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  395.764248][ T4615] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  395.774047][ T4615] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  395.782447][ T4615] usb 3-1: Manufacturer: syz
[  395.791491][ T4615] usb 3-1: config 0 descriptor??
[  395.803768][ T4615] igorplugusb 3-1:0.0: incorrect number of endpoints
[  396.009621][ T5399] Process accounting resumed
[  396.203824][ T7161] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  396.285214][ T7161] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  396.311272][ T7161] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  396.343473][ T7161] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  396.413801][ T7161] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  396.420113][ T7166] loop1: detected capacity change from 0 to 16
[  396.421696][ T7161] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  396.436394][ T7161] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  396.448210][ T7167] device syzkaller0 entered promiscuous mode
[  396.498750][ T7166] erofs: (device loop1): mounted with root inode @ nid 36.
[  398.028494][ T4615] usb 3-1: USB disconnect, device number 14
[  398.654771][ T7187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.875'.
[  398.691354][ T7187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.875'.
[  398.746675][ T7187] device syzkaller0 entered promiscuous mode
[  398.787954][ T7187] netlink: 168 bytes leftover after parsing attributes in process `syz.1.875'.
[  399.035142][ T7191] loop0: detected capacity change from 0 to 16
[  399.044635][ T7191] erofs: (device loop0): mounted with root inode @ nid 36.
[  400.591450][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  400.599719][ T5399] Process accounting resumed
[  400.668939][ T7201] loop3: detected capacity change from 0 to 16
[  400.739976][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  400.780695][ T7201] erofs: (device loop3): mounted with root inode @ nid 36.
[  400.830391][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  400.972669][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  400.997165][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  401.566650][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  401.813402][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  401.903355][ T7210] device syzkaller0 entered promiscuous mode
[  402.314644][ T7232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.888'.
[  402.327794][ T7232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.888'.
[  402.393781][ T7232] device syzkaller0 entered promiscuous mode
[  402.425312][ T4377] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  402.434766][ T7232] netlink: 168 bytes leftover after parsing attributes in process `syz.0.888'.
[  402.654486][ T4377] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  402.696480][ T4377] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  402.800975][ T4377] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  402.859137][ T4377] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  402.907429][ T4377] usb 5-1: Manufacturer: syz
[  402.924625][ T4377] usb 5-1: config 0 descriptor??
[  402.942871][ T7242] loop1: detected capacity change from 0 to 16
[  402.952250][ T4377] igorplugusb 5-1:0.0: incorrect number of endpoints
[  403.113204][ T7242] erofs: (device loop1): mounted with root inode @ nid 36.
[  405.443404][ T4377] usb 5-1: USB disconnect, device number 8
[  406.781247][ T5399] Process accounting resumed
[  407.134161][ T7270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.899'.
[  407.186719][ T7270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.899'.
[  407.232249][ T7270] device syzkaller0 entered promiscuous mode
[  407.436582][ T7271] loop1: detected capacity change from 0 to 16
[  407.454213][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  407.517122][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  407.535952][ T7271] erofs: (device loop1): mounted with root inode @ nid 36.
[  407.631186][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  407.716734][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  407.780195][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  407.830822][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  407.864126][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  407.915485][ T7281] device syzkaller0 entered promiscuous mode
[  407.949273][ T7281] netlink: 168 bytes leftover after parsing attributes in process `syz.4.901'.
[  409.638133][ T7302] loop3: detected capacity change from 0 to 16
[  409.728078][ T7302] erofs: (device loop3): mounted with root inode @ nid 36.
[  410.770503][ T4615] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  410.981932][ T4615] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  411.700104][ T4615] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  411.707959][ T5400] Process accounting resumed
[  411.715572][ T4615] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  411.725384][ T4615] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  411.733403][ T4615] usb 5-1: Manufacturer: syz
[  411.743042][ T4615] usb 5-1: config 0 descriptor??
[  411.764336][ T4615] igorplugusb 5-1:0.0: incorrect number of endpoints
[  411.952256][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.911'.
[  411.967711][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.911'.
[  412.097534][ T7317] device syzkaller0 entered promiscuous mode
[  413.882446][ T7324] loop2: detected capacity change from 0 to 16
[  413.943013][ T5400] usb 5-1: USB disconnect, device number 9
[  414.171680][ T7324] erofs: (device loop2): mounted with root inode @ nid 36.
[  414.407372][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  414.595721][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  414.738816][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  414.813122][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  414.821504][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  414.917553][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  414.926550][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  415.503363][ T7339] device syzkaller0 entered promiscuous mode
[  415.579397][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.916'.
[  415.597618][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.916'.
[  415.688764][ T7345] netlink: 168 bytes leftover after parsing attributes in process `syz.2.916'.
[  417.935827][ T5399] Process accounting resumed
[  419.071663][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.925'.
[  419.104780][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.925'.
[  419.172879][ T7364] device syzkaller0 entered promiscuous mode
[  419.248510][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  419.263761][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  419.271593][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  419.279255][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  419.287042][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  419.292589][ T5399] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  419.310860][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  419.330302][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  419.861703][ T7374] loop4: detected capacity change from 0 to 16
[  420.010826][ T5399] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  420.932623][ T5399] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  421.002563][ T7374] erofs: (device loop4): mounted with root inode @ nid 36.
[  421.080802][ T5399] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  421.119868][ T5399] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  421.173067][ T5399] usb 1-1: Manufacturer: syz
[  421.229258][ T5399] usb 1-1: config 0 descriptor??
[  421.471557][ T5399] igorplugusb 1-1:0.0: incorrect number of endpoints
[  422.536422][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.934'.
[  422.568275][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.934'.
[  422.746527][ T7390] device syzkaller0 entered promiscuous mode
[  422.761264][   T22] Process accounting resumed
[  423.018294][   T22] usb 1-1: USB disconnect, device number 10
[  423.037743][ T7390] netlink: 168 bytes leftover after parsing attributes in process `syz.1.934'.
[  423.307641][ T7402] device syzkaller0 entered promiscuous mode
[  423.857465][ T7415] loop1: detected capacity change from 0 to 16
[  426.438456][ T7415] erofs: (device loop1): mounted with root inode @ nid 36.
[  429.070496][ T5398] Process accounting resumed
[  429.301973][ T7442] random: crng reseeded on system resumption
[  431.537034][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.953'.
[  431.546087][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.953'.
[  431.558958][ T7451] device syzkaller0 entered promiscuous mode
[  431.566299][ T7449] loop0: detected capacity change from 0 to 128
[  431.623851][ T7449] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  431.710185][ T7453] loop3: detected capacity change from 0 to 16
[  431.717842][ T7453] erofs: (device loop3): mounted with root inode @ nid 36.
[  431.755062][ T7449] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  434.347152][   T22] Process accounting resumed
[  435.075856][ T7492] random: crng reseeded on system resumption
[  436.343843][ T7493] loop0: detected capacity change from 0 to 16
[  436.435263][ T7493] erofs: (device loop0): mounted with root inode @ nid 36.
[  437.232836][ T7502] loop4: detected capacity change from 0 to 128
[  437.259316][ T7502] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  437.300366][ T7504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.971'.
[  437.344276][ T7502] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  437.394487][ T7504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.971'.
[  437.435967][ T7506] device syzkaller0 entered promiscuous mode
[  441.289639][ T5400] Process accounting resumed
[  444.108873][ T7548] loop0: detected capacity change from 0 to 128
[  444.116770][ T7546] loop2: detected capacity change from 0 to 16
[  444.126081][ T7546] erofs: (device loop2): mounted with root inode @ nid 36.
[  444.246975][ T7548] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  444.345549][ T7548] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  445.366132][ T5400] Process accounting resumed
[  446.597299][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.990'.
[  446.672297][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.990'.
[  446.754229][ T7572] netlink: 168 bytes leftover after parsing attributes in process `syz.1.990'.
[  448.398712][ T7588] random: crng reseeded on system resumption
[  451.050440][   T22] Process accounting resumed
[  453.924932][ T7623] loop2: detected capacity change from 0 to 64
[  454.335843][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1007'.
[  454.349760][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1007'.
[  454.454691][ T7625] device syzkaller0 entered promiscuous mode
[  454.552806][ T7631] loop3: detected capacity change from 0 to 16
[  454.569837][ T7631] erofs: (device loop3): mounted with root inode @ nid 36.
[  455.434900][ T7625] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1007'.
[  455.875485][ T7640] loop0: detected capacity change from 0 to 128
[  455.914979][ T7640] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  455.947200][ T7640] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  457.372600][   T22] Process accounting resumed
[  457.626563][ T7653] loop2: detected capacity change from 0 to 64
[  457.959642][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  457.966068][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  459.004635][ T7664] loop2: detected capacity change from 0 to 64
[  460.095458][ T7666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1022'.
[  460.127318][ T7669] loop1: detected capacity change from 0 to 16
[  460.147493][ T7669] erofs: (device loop1): mounted with root inode @ nid 36.
[  460.284696][ T7666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1022'.
[  460.889979][ T7666] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1022'.
[  462.108669][ T5398] Process accounting resumed
[  462.113189][ T7691] fuse: Unknown parameter 'grou00000000000000000000'
[  462.385007][ T7693] loop2: detected capacity change from 0 to 32768
[  462.394028][ T7693] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1030 (7693)
[  462.410346][ T7693] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  462.420561][ T7693] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  462.429515][ T7693] BTRFS info (device loop2): setting nodatasum
[  462.436358][ T7693] BTRFS info (device loop2): force zlib compression, level 3
[  462.443760][ T7693] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  462.453041][ T7693] BTRFS info (device loop2): use lzo compression, level 0
[  462.460224][ T7693] BTRFS info (device loop2): turning on flush-on-commit
[  462.467347][ T7693] BTRFS info (device loop2): enabling auto defrag
[  462.473829][ T7693] BTRFS info (device loop2): max_inline at 4096
[  462.480216][ T7693] BTRFS info (device loop2): using free space tree
[  463.851365][ T7693] BTRFS info (device loop2): enabling ssd optimizations
[  463.993158][ T7729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1038'.
[  464.122655][ T7732] loop1: detected capacity change from 0 to 16
[  464.130731][ T7732] erofs: (device loop1): mounted with root inode @ nid 36.
[  464.138799][ T7729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1038'.
[  464.336201][ T7729] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1038'.
[  464.684731][ T7738] tmpfs: Unknown parameter 'usrquota'
[  466.257670][ T4283] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  467.556437][ T7754] loop3: detected capacity change from 0 to 16
[  467.571449][ T7754] erofs: (device loop3): mounted with root inode @ nid 36.
[  467.791045][   T22] Process accounting resumed
[  468.682553][    C0] hrtimer: interrupt took 61329 ns
[  468.966943][ T7775] nvmet_tcp: malformed ip/port passed: :
[  470.322919][ T7793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1053'.
[  470.334136][ T7793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1053'.
[  470.428962][ T7793] device syzkaller0 entered promiscuous mode
[  470.633605][ T7793] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1053'.
[  471.311669][ T7800] random: crng reseeded on system resumption
[  473.186036][ T6317] Process accounting resumed
[  474.693725][ T7815] nvmet_tcp: malformed ip/port passed: :
[  476.605155][ T7835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1068'.
[  476.636331][ T7835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1068'.
[  476.671528][ T7835] device syzkaller0 entered promiscuous mode
[  478.456413][ T4377] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  478.812383][ T4377] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  478.825200][ T4377] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  478.837903][ T4377] usb 4-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00
[  479.055580][ T4377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.625426][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1085'.
[  480.658113][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1085'.
[  480.703643][ T7882] device syzkaller0 entered promiscuous mode
[  481.229781][ T7889] loop4: detected capacity change from 0 to 16
[  481.262013][ T7889] erofs: (device loop4): mounted with root inode @ nid 36.
[  481.388100][ T4377] usb 4-1: USB disconnect, device number 16
[  483.678976][ T4615] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  483.830036][ T7917] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[  483.885949][ T4615] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  483.903775][ T4615] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  483.913350][ T4615] usb 2-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00
[  483.923223][ T4615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.000379][ T7933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1104'.
[  485.009919][ T7933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1104'.
[  485.032459][ T7933] device syzkaller0 entered promiscuous mode
[  485.067721][ T7933] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1104'.
[  487.065344][ T4615] usb 2-1: USB disconnect, device number 13
[  490.438907][ T5400] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  490.473536][ T7998] loop4: detected capacity change from 0 to 16
[  490.492933][ T7998] erofs: (device loop4): mounted with root inode @ nid 36.
[  490.722188][ T5400] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  490.793953][ T5400] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  490.917734][ T5400] usb 1-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00
[  491.034465][ T5400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.541009][   T22] usb 1-1: USB disconnect, device number 11
[  494.154761][ T8035] random: crng reseeded on system resumption
[  498.537819][ T8064] fuse: Bad value for 'user_id'
[  500.899704][ T8091] nvmet_tcp: malformed ip/port passed: :
[  502.176086][ T6317] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  503.305120][ T6317] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  503.370593][ T6317] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  503.440542][ T8114] loop3: detected capacity change from 0 to 128
[  503.447975][ T8114] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  503.456630][ T6317] usb 1-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00
[  503.485556][ T8114] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  503.514582][ T6317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.590195][ T6317] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx
[  504.578109][ T2312] usb 1-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2
[  504.691105][ T2312] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw
[  504.911790][   T22] usb 1-1: USB disconnect, device number 12
[  505.118825][ T8125] loop2: detected capacity change from 0 to 32768
[  505.159110][ T8125] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1166 (8125)
[  505.220053][ T8125] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  505.230302][ T8125] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  505.239091][ T8125] BTRFS info (device loop2): setting nodatasum
[  505.245357][ T8125] BTRFS info (device loop2): force zlib compression, level 3
[  505.252721][ T8125] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  505.261950][ T8125] BTRFS info (device loop2): use lzo compression, level 0
[  505.269391][ T8125] BTRFS info (device loop2): turning on flush-on-commit
[  505.276386][ T8125] BTRFS info (device loop2): enabling auto defrag
[  505.282832][ T8125] BTRFS info (device loop2): max_inline at 4096
[  505.289097][ T8125] BTRFS info (device loop2): using free space tree
[  505.816015][ T8125] BTRFS info (device loop2): enabling ssd optimizations
[  505.892963][ T8148] nvmet_tcp: malformed ip/port passed: :
[  506.711433][ T8160] tmpfs: Unknown parameter 'usrquota'
[  507.117834][ T4283] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  507.918216][ T8163] loop0: detected capacity change from 0 to 128
[  508.029687][ T8163] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  508.118291][ T8163] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  510.067674][ T8190] loop2: detected capacity change from 0 to 16
[  510.183190][ T8194] random: crng reseeded on system resumption
[  511.318567][ T8190] erofs: (device loop2): mounted with root inode @ nid 36.
[  511.867083][ T8207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1183'.
[  512.782707][ T8209] loop4: detected capacity change from 0 to 64
[  515.771321][ T8234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'.
[  516.491809][ T8234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'.
[  516.510797][ T8234] device syzkaller0 entered promiscuous mode
[  516.583948][ T8239] random: crng reseeded on system resumption
[  516.622110][ T8238] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1191'.
[  517.204896][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1195'.
[  518.417038][ T8264] loop1: detected capacity change from 0 to 64
[  520.680431][ T6317] Process accounting resumed
[  521.412694][ T8290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1208'.
[  521.487128][ T8290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1208'.
[  521.498728][ T8290] device syzkaller0 entered promiscuous mode
[  521.507986][ T8290] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1208'.
[  521.677423][ T8297] loop0: detected capacity change from 0 to 32768
[  521.692284][ T8297] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1209 (8297)
[  521.713822][ T8297] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  521.724055][ T8297] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  521.732855][ T8297] BTRFS info (device loop0): setting nodatasum
[  521.739069][ T8297] BTRFS info (device loop0): force zlib compression, level 3
[  521.746429][ T8297] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  521.755761][ T8297] BTRFS info (device loop0): use lzo compression, level 0
[  521.762988][ T8297] BTRFS info (device loop0): turning on flush-on-commit
[  521.769946][ T8297] BTRFS info (device loop0): enabling auto defrag
[  521.776750][ T8297] BTRFS info (device loop0): max_inline at 4096
[  521.783109][ T8297] BTRFS info (device loop0): using free space tree
[  522.072951][ T8297] BTRFS info (device loop0): enabling ssd optimizations
[  522.077171][ T8319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1211'.
[  522.457033][ T8324] tmpfs: Unknown parameter 'usrquota'
[  522.928505][ T4274] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  524.548733][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  524.556610][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  525.058957][ T8343] Process accounting resumed
[  526.151979][ T8375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1223'.
[  526.385896][ T8374] loop0: detected capacity change from 0 to 32768
[  526.393601][ T8374] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1225 (8374)
[  526.408105][ T8374] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  526.418322][ T8374] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  526.427132][ T8374] BTRFS info (device loop0): setting nodatasum
[  526.433351][ T8374] BTRFS info (device loop0): force zlib compression, level 3
[  526.440763][ T8374] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  526.450053][ T8374] BTRFS info (device loop0): use lzo compression, level 0
[  526.457236][ T8374] BTRFS info (device loop0): turning on flush-on-commit
[  526.464339][ T8374] BTRFS info (device loop0): enabling auto defrag
[  526.472010][ T8374] BTRFS info (device loop0): max_inline at 4096
[  526.478367][ T8374] BTRFS info (device loop0): using free space tree
[  526.973992][ T8374] BTRFS info (device loop0): enabling ssd optimizations
[  527.427091][ T8403] tmpfs: Unknown parameter 'usrquota'
[  527.866587][ T4274] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  529.709904][ T8406] ALSA: seq fatal error: cannot create timer (-22)
[  530.008625][ T5596] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5596)
[  530.906986][ T8431] capability: warning: `syz.1.1236' uses 32-bit capabilities (legacy support in use)
[  532.124452][ T8446] loop4: detected capacity change from 0 to 1024
[  532.186673][ T8443] loop1: detected capacity change from 0 to 32768
[  532.196363][ T8443] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  532.269085][ T4265] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  532.354852][ T8446] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  532.710890][ T8457] tmpfs: Unknown parameter 'usrquota'
[  532.809260][ T8446] loop4: detected capacity change from 1024 to 64
[  533.131918][ T8458] syz.4.1241: attempt to access beyond end of device
[  533.131918][ T8458] loop4: rw=2049, sector=224, nr_sectors = 2 limit=64
[  533.191877][ T8458] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 112)
[  533.204011][ T8458] Buffer I/O error on device loop4, logical block 112
[  533.365956][ T8449] loop2: detected capacity change from 0 to 32768
[  533.399947][ T8449] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1231 (8449)
[  533.461520][ T8449] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  533.474166][ T4282] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  533.497761][ T4282] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  533.497911][ T8449] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  533.529882][ T8449] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  533.539958][ T4282] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  533.573204][ T8449] BTRFS info (device loop2): use zstd compression, level 3
[  533.595140][ T4282] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  533.616381][ T8449] BTRFS info (device loop2): using free space tree
[  533.638941][ T4282] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  533.664820][ T4282] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  533.680158][ T4282] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  533.697045][ T4282] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  533.711566][ T4282] EXT4-fs warning (device loop4): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  533.831117][ T8449] BTRFS info (device loop2): enabling ssd optimizations
[  534.641024][   T57] kworker/u4:4: attempt to access beyond end of device
[  534.641024][   T57] loop4: rw=1, sector=606, nr_sectors = 2 limit=64
[  534.734990][   T57] Buffer I/O error on device loop4, logical block 303
[  534.798032][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  534.858599][ T8450] kmmpd-loop4: attempt to access beyond end of device
[  534.858599][ T8450] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  534.911458][ T8450] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  534.990793][ T4283] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  535.587524][ T4374] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.060976][ T4374] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.491455][ T8508] loop2: detected capacity change from 0 to 32768
[  537.518241][ T8508] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  537.556252][ T4374] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.623638][ T8510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1253'.
[  537.637681][ T5596] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  537.802291][ T4374] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.085709][ T8516] tmpfs: Unknown parameter 'usrquota'
[  538.345451][ T8513] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  538.355882][ T8513] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  538.364925][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  538.374751][ T8513] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  538.382458][ T8513] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  538.391415][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  540.683676][ T8513] Bluetooth: hci3: command 0x0409 tx timeout
[  540.844916][ T8512] chnl_net:caif_netlink_parms(): no params data found
[  540.987938][ T8539] loop3: detected capacity change from 0 to 8192
[  541.231676][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.240610][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.249641][ T8512] device bridge_slave_0 entered promiscuous mode
[  541.317849][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.330053][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.367076][ T8512] device bridge_slave_1 entered promiscuous mode
[  541.688894][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  541.839970][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  541.988857][ T8512] team0: Port device team_slave_0 added
[  542.044836][ T8512] team0: Port device team_slave_1 added
[  542.221197][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.241925][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.292476][ T8512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.847762][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_1
[  542.866108][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.925068][ T8512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  542.936901][ T4280] Bluetooth: hci3: command 0x041b tx timeout
[  542.993724][ T8565] loop2: detected capacity change from 0 to 32768
[  543.047629][ T8565] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1263 (8565)
[  543.285816][ T8565] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  543.305162][ T8512] device hsr_slave_0 entered promiscuous mode
[  543.311655][ T8565] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  543.321702][ T8565] BTRFS info (device loop2): setting nodatacow, compression disabled
[  543.331226][ T8512] device hsr_slave_1 entered promiscuous mode
[  543.339204][ T8565] BTRFS info (device loop2): setting datasum, datacow enabled
[  543.346993][ T8565] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  543.356817][ T8565] BTRFS info (device loop2): force zstd compression, level 3
[  543.364688][ T8565] BTRFS info (device loop2): turning on sync discard
[  543.366438][ T8512] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  543.372112][ T8565] BTRFS warning (device loop2): excessive commit interval 43283
[  543.394305][ T8565] BTRFS info (device loop2): enabling ssd optimizations
[  543.401569][ T8565] BTRFS info (device loop2): using spread ssd allocation scheme
[  543.402106][ T8512] Cannot create hsr debugfs directory
[  543.413921][ T8565] BTRFS info (device loop2): not using ssd optimizations
[  543.421900][ T8565] BTRFS info (device loop2): not using spread ssd allocation scheme
[  543.436689][ T8565] BTRFS info (device loop2): using free space tree
[  543.766653][ T4283] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  543.932592][ T8603] nvmet_tcp: malformed ip/port passed: :
[  544.261084][ T4374] device hsr_slave_0 left promiscuous mode
[  544.262576][ T5596] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop2 scanned by udevd (5596)
[  544.302525][ T4374] device hsr_slave_1 left promiscuous mode
[  544.342314][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  544.377098][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_0
[  544.411223][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  544.421890][ T8407] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  544.429204][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_1
[  544.455512][ T4374] device bridge_slave_1 left promiscuous mode
[  544.474667][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.507036][ T4374] device bridge_slave_0 left promiscuous mode
[  544.542826][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.588415][ T8623] loop3: detected capacity change from 0 to 64
[  544.654609][ T8407] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  545.180366][ T4280] Bluetooth: hci3: command 0x040f tx timeout
[  545.400653][ T8407] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x81, skipping
[  545.411410][ T8407] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  545.424480][ T8407] usb 3-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00
[  545.433661][ T8407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.449206][ T8407] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx
[  545.507519][ T4374] device veth1_macvtap left promiscuous mode
[  545.522476][ T4374] device veth0_macvtap left promiscuous mode
[  545.549936][ T4374] device veth1_vlan left promiscuous mode
[  545.572910][ T4374] device veth0_vlan left promiscuous mode
[  545.902120][ T8407] usb 3-1: USB disconnect, device number 15
[  545.936097][ T8407] pvrusb2: Device being rendered inoperable
[  546.450336][ T4374] team0 (unregistering): Port device team_slave_1 removed
[  546.498138][ T4374] team0 (unregistering): Port device team_slave_0 removed
[  546.583531][ T4374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  546.653794][ T4374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  546.937771][ T8636] random: crng reseeded on system resumption
[  547.434631][ T4280] Bluetooth: hci3: command 0x0419 tx timeout
[  548.201539][ T4374] bond0 (unregistering): Released all slaves
[  548.491394][ T8512] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  548.610717][ T8512] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  548.634100][ T8512] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  548.647781][ T8512] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  548.780640][ T8646] loop1: detected capacity change from 0 to 128
[  548.822477][ T8646] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  548.909899][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0
[  548.931596][ T8512] 8021q: adding VLAN 0 to HW filter on device team0
[  548.945672][ T7807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  548.959605][ T7807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  548.979565][ T8646] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  549.041257][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  549.080116][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  549.141165][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.148381][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  549.199146][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  549.229727][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  549.299749][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  549.308282][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.315526][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  549.388696][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  549.420415][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  549.551602][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'.
[  549.629393][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  549.738455][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  549.848268][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  549.959138][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  550.092513][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  550.229506][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  550.329515][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  550.478812][ T8512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  550.665509][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  550.699959][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  550.720625][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  551.048451][ T6317] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  551.264199][ T6317] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  551.282397][ T6317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.290673][ T6317] usb 4-1: Product: syz
[  551.300260][ T6317] usb 4-1: Manufacturer: syz
[  551.314498][ T6317] usb 4-1: SerialNumber: syz
[  551.316570][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  551.339492][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  551.363155][ T8512] 8021q: adding VLAN 0 to HW filter on device batadv0
[  551.412471][ T8411] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  551.464641][ T6317] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  551.620639][ T8411] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  551.635971][ T8411] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x81, skipping
[  551.661762][ T8411] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  551.693376][ T8411] usb 3-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00
[  551.716280][ T8411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.747304][ T8411] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx
[  551.998651][ T8669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.052328][ T8669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.190749][ T4326] usb 3-1: USB disconnect, device number 16
[  552.226535][ T4326] pvrusb2: Device being rendered inoperable
[  552.488834][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  552.503090][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  552.532891][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  552.546472][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  552.563265][ T8512] device veth0_vlan entered promiscuous mode
[  552.573643][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  552.585237][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  552.599234][ T8512] device veth1_vlan entered promiscuous mode
[  552.636680][ T6317] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  552.650827][ T6317] ath9k_htc: Failed to initialize the device
[  552.681183][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  552.690449][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  552.692290][ T6317] usb 4-1: ath9k_htc: USB layer deinitialized
[  552.709856][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  552.733158][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  552.760312][ T8512] device veth0_macvtap entered promiscuous mode
[  552.793451][ T8512] device veth1_macvtap entered promiscuous mode
[  552.869811][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  552.901602][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  552.925915][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  552.947975][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  552.959460][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  552.960098][ T6317] usb 4-1: USB disconnect, device number 17
[  552.974910][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  552.997797][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_0
[  553.036399][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  553.095772][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  553.206867][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  553.339281][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  553.487149][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  553.515043][ T5400] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  553.566338][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  553.627505][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  553.664206][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  553.705457][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  553.734162][ T5400] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  553.763484][ T5400] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  553.781481][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  553.807859][ T5400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.845199][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_1
[  553.857250][ T5400] usb 3-1: Product: syz
[  553.871776][ T5400] usb 3-1: Manufacturer: syz
[  553.885728][ T7807] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  553.915763][ T5400] usb 3-1: SerialNumber: syz
[  553.948247][ T7807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  554.115653][ T8512] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  554.198572][ T8512] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  554.287290][ T8512] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  554.380557][ T8512] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  554.620998][ T5400] usb 3-1: Cannot retrieve CPort count: -110
[  554.629079][ T5400] usb 3-1: Cannot retrieve CPort count: -110
[  554.718831][ T5400] es2_ap_driver: probe of 3-1:1.0 failed with error -110
[  556.467898][ T8725] random: crng reseeded on system resumption
[  558.491286][ T4371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.499142][ T4371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.565978][ T5402] usb 3-1: USB disconnect, device number 17
[  558.682642][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  558.721123][ T8735] loop1: detected capacity change from 0 to 64
[  559.080088][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.122713][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.239730][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  559.508567][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'.
[  559.780600][ T8513] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  559.792133][ T8513] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  559.801269][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  559.810774][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  559.822926][ T4289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  559.830273][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  560.936392][ T8762] loop5: detected capacity change from 0 to 128
[  560.984550][ T8762] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  561.149205][ T8762] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  561.379383][ T8757] loop2: detected capacity change from 0 to 8192
[  561.588761][ T8407] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  561.829971][ T8407] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  561.942516][ T8407] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  562.053049][ T8737] chnl_net:caif_netlink_parms(): no params data found
[  562.087552][ T4289] Bluetooth: hci5: command 0x0409 tx timeout
[  562.123014][ T8407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.268254][ T8407] usb 2-1: Product: syz
[  562.346111][ T8407] usb 2-1: Manufacturer: syz
[  562.430346][ T8407] usb 2-1: SerialNumber: syz
[  563.203807][ T8407] usb 2-1: Cannot retrieve CPort count: -110
[  563.213448][ T8407] usb 2-1: Cannot retrieve CPort count: -110
[  563.319237][ T8407] es2_ap_driver: probe of 2-1:1.0 failed with error -110
[  564.341572][ T4289] Bluetooth: hci5: command 0x041b tx timeout
[  564.748877][ T4319] usb 2-1: USB disconnect, device number 14
[  564.987930][ T8737] bridge0: port 1(bridge_slave_0) entered blocking state
[  565.057378][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.100226][ T8737] device bridge_slave_0 entered promiscuous mode
[  565.145951][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state
[  565.153242][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.256512][ T8737] device bridge_slave_1 entered promiscuous mode
[  565.528537][ T8737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  565.619208][ T8737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  565.768533][ T8801] futex_wake_op: syz.5.1303 tries to shift op by 144; fix this program
[  565.784870][ T8801] loop5: detected capacity change from 0 to 256
[  566.693986][ T4289] Bluetooth: hci5: command 0x040f tx timeout
[  567.431508][ T8798] loop2: detected capacity change from 0 to 16
[  567.466352][ T8801] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  567.480979][ T8798] erofs: (device loop2): mounted with root inode @ nid 36.
[  567.523900][   T27] audit: type=1800 audit(1789657851.278:17): pid=8800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1303" name="file1" dev="loop5" ino=1048614 res=0 errno=0
[  568.435173][ T8737] team0: Port device team_slave_0 added
[  568.538898][ T8737] team0: Port device team_slave_1 added
[  568.629218][ T8813] random: crng reseeded on system resumption
[  568.948693][ T4289] Bluetooth: hci5: command 0x0419 tx timeout
[  569.864445][ T8737] batman_adv: batadv0: Adding interface: batadv_slave_0
[  570.138101][ T8737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  570.165475][ T8737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  570.178944][ T8737] batman_adv: batadv0: Adding interface: batadv_slave_1
[  570.186376][ T8737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  570.213787][ T8737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  570.724909][ T6317] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  570.843202][ T8737] device hsr_slave_0 entered promiscuous mode
[  570.944246][ T6317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  570.999817][ T6317] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  571.124346][ T6317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.169025][ T6317] usb 3-1: Product: syz
[  571.321690][ T6317] usb 3-1: Manufacturer: syz
[  571.376413][ T6317] usb 3-1: SerialNumber: syz
[  571.474630][ T8737] device hsr_slave_1 entered promiscuous mode
[  571.585913][ T8737] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  571.703450][ T8737] Cannot create hsr debugfs directory
[  571.949950][ T6317] usb 3-1: Cannot retrieve CPort count: -110
[  571.959687][ T6317] usb 3-1: Cannot retrieve CPort count: -110
[  572.060699][ T6317] es2_ap_driver: probe of 3-1:1.0 failed with error -110
[  572.094263][ T8832] loop3: detected capacity change from 0 to 128
[  572.290780][ T8832] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  572.318227][ T4280] Bluetooth: hci3: command 0x0409 tx timeout
[  572.512114][ T8832] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  573.148015][ T8407] usb 3-1: USB disconnect, device number 18
[  573.189810][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1316'.
[  573.258711][ T8842] loop5: detected capacity change from 0 to 16
[  573.272169][ T8842] erofs: (device loop5): mounted with root inode @ nid 36.
[  573.861915][ T8737] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  574.146274][ T8737] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  574.358821][ T8737] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  574.493202][ T2312] pvrusb2: request_firmware fatal error with code=-110
[  574.548349][ T2312] pvrusb2: Failure uploading firmware1
[  574.691918][ T8737] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  574.712445][ T2312] pvrusb2: Device initialization was not successful.
[  574.729436][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  574.739828][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  574.750938][   T22] pvrusb2: Device being rendered inoperable
[  575.016785][ T8860] loop5: detected capacity change from 0 to 32768
[  575.037453][ T8860] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  575.295616][ T8867] tmpfs: Unknown parameter 'usrquota'
[  576.189338][ T8868] random: crng reseeded on system resumption
[  576.358645][ T8737] 8021q: adding VLAN 0 to HW filter on device bond0
[  578.035312][ T8737] 8021q: adding VLAN 0 to HW filter on device team0
[  578.633113][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  578.675622][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  578.764850][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  578.875053][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  578.967635][ T4798] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.976214][ T4798] bridge0: port 1(bridge_slave_0) entered forwarding state
[  579.147970][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  579.194592][ T4266] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  579.245918][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  579.335367][ T4798] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.342569][ T4798] bridge0: port 2(bridge_slave_1) entered forwarding state
[  579.502154][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  579.621571][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  579.730141][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  579.863307][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  579.988620][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1327'.
[  580.049996][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  580.123751][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  580.260047][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  580.367771][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  580.482785][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  580.590160][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  580.754733][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  580.863743][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  580.986220][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  582.505888][ T4326] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  582.724908][ T4326] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  583.035412][ T4326] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  583.205470][ T4326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.357022][ T4326] usb 6-1: Product: syz
[  583.434033][ T4326] usb 6-1: Manufacturer: syz
[  583.522447][ T4326] usb 6-1: SerialNumber: syz
[  584.315979][ T4326] usb 6-1: Cannot retrieve CPort count: -110
[  584.325283][ T4326] usb 6-1: Cannot retrieve CPort count: -110
[  584.429132][ T4326] es2_ap_driver: probe of 6-1:1.0 failed with error -110
[  584.773316][ T8896] loop2: detected capacity change from 0 to 16
[  585.221756][ T8896] erofs: (device loop2): mounted with root inode @ nid 36.
[  585.298728][ T6317] usb 6-1: USB disconnect, device number 2
[  585.478767][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.505920][ T8907] loop5: detected capacity change from 0 to 512
[  585.550855][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  585.642642][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  585.746252][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  585.754290][ T8907] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.1332: missing EA_INODE flag
[  585.965734][ T8907] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1332: error while reading EA inode 2 err=-117
[  586.099743][ T8907] EXT4-fs (loop5): 1 orphan inode deleted
[  586.241616][ T8907] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  587.607427][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.768420][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  587.807036][ T8924] EXT4-fs warning (device loop5): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed
[  588.665820][ T8512] EXT4-fs (loop5): unmounting filesystem.
[  588.701911][ T8737] 8021q: adding VLAN 0 to HW filter on device batadv0
[  588.990919][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.003806][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  589.240999][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.251658][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  589.290293][ T4319] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  589.432148][ T8943] input: syz1 as /devices/virtual/input/input8
[  589.507733][ T4319] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  589.535223][ T4319] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  589.595138][ T4319] usb 3-1: config 0 interface 0 has no altsetting 0
[  589.613080][ T4319] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  589.634410][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.747439][ T4319] usb 3-1: config 0 descriptor??
[  590.203577][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.215879][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.223705][ T8407] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  590.243938][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.253912][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.265924][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.272815][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.301745][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.341645][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.359728][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.370684][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.398737][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.427968][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.449557][ T8407] usb 4-1: Using ep0 maxpacket: 8
[  590.454765][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.464584][ T8407] usb 4-1: unable to get BOS descriptor or descriptor too short
[  590.484103][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.490945][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.500482][ T8407] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  590.525517][ T8407] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  590.545701][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.555466][ T8407] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 246, using maximum allowed: 30
[  590.567121][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.575321][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.583683][ T8407] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246
[  590.599976][   T27] audit: type=1800 audit(1789657872.564:18): pid=8962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1344" name=08 dev="sda1" ino=2050 res=0 errno=0
[  590.611674][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.638671][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.646374][ T8407] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40
[  590.655982][ T8407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.669613][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.676452][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.683984][ T8407] usb 4-1: Product: syz
[  590.688620][ T8407] usb 4-1: Manufacturer: syz
[  590.693231][ T8407] usb 4-1: SerialNumber: syz
[  590.698153][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.720837][ T4319] sony 0003:054C:024B.0001: unknown main item tag 0x0
[  590.807006][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  590.817098][ T4319] sony 0003:054C:024B.0001: hiddev0,hidraw0: USB HID vff.fb Device [HID 054c:024b] on usb-dummy_hcd.2-1/input0
[  590.826688][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  590.861707][ T4319] sony 0003:054C:024B.0001: failed to claim input
[  590.938260][ T4319] usb 3-1: USB disconnect, device number 19
[  590.957489][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  590.971200][ T8407] usb 4-1: 0:1 : does not exist
[  591.019901][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  591.065154][ T8737] device veth0_vlan entered promiscuous mode
[  591.068105][ T8407] snd-usb-audio: probe of 4-1:1.0 failed with error -71
[  591.108267][ T8407] usb 4-1: USB disconnect, device number 18
[  591.136015][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  591.142361][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  591.161378][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  591.179002][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  591.198741][ T5596] udevd[5596]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  591.354230][ T8972] fido_id[8972]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  591.379400][ T8737] device veth1_vlan entered promiscuous mode
[  591.584369][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  591.611910][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  591.626093][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  591.653893][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  591.834617][ T8737] device veth0_macvtap entered promiscuous mode
[  591.850618][ T8982] loop1: detected capacity change from 0 to 64
[  592.019521][ T8737] device veth1_macvtap entered promiscuous mode
[  592.137553][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  592.217877][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  592.789203][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  592.859301][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  592.876786][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  592.915309][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  592.929150][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  592.952584][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  592.967965][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  592.978735][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.009201][ T8737] batman_adv: batadv0: Interface activated: batadv_slave_0
[  593.113401][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  593.156951][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  593.192478][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.227474][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.259127][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.286716][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.302841][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.317892][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.328824][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.342957][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.356899][ T8737] batman_adv: batadv0: Interface activated: batadv_slave_1
[  593.408632][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  593.440425][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  593.460398][ T8737] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  593.474899][ T8737] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  593.483856][ T8737] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.493087][ T8737] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  594.368420][ T9002] device syzkaller0 entered promiscuous mode
[  594.683036][ T9007] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1354'.
[  594.913234][   T11] device hsr_slave_0 left promiscuous mode
[  594.947512][   T11] device hsr_slave_1 left promiscuous mode
[  595.063039][   T11] device veth1_macvtap left promiscuous mode
[  595.074209][   T11] device veth0_macvtap left promiscuous mode
[  595.092421][   T11] device veth1_vlan left promiscuous mode
[  595.136147][   T11] device veth0_vlan left promiscuous mode
[  595.809571][   T11] bond2 (unregistering): (slave geneve2): Releasing active interface
[  595.835028][   T11] bond2 (unregistering): Released all slaves
[  596.165269][ T9049] loop2: detected capacity change from 0 to 16
[  596.179199][ T9049] erofs: (device loop2): mounted with root inode @ nid 36.
[  596.575491][ T9053] loop2: detected capacity change from 0 to 32768
[  596.625979][ T9053] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  596.979051][ T9058] tmpfs: Unknown parameter 'usrquota'
[  597.417165][   T11] bond1 (unregistering): Released all slaves
[  597.622205][ T4280] Bluetooth: Wrong link type (-71)
[  597.803085][ T4266] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  598.035635][ T9072] loop1: detected capacity change from 0 to 512
[  598.144837][ T9072] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.1370: missing EA_INODE flag
[  598.158068][ T9072] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1370: error while reading EA inode 2 err=-117
[  598.180247][ T9072] EXT4-fs (loop1): 1 orphan inode deleted
[  598.186049][ T9072] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  598.471987][ T9081] EXT4-fs warning (device loop1): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed
[  598.945313][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  599.728972][ T9095] loop2: detected capacity change from 0 to 32768
[  599.757484][ T9095] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  600.078487][ T9100] tmpfs: Unknown parameter 'usrquota'
[  600.942751][ T4266] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  600.988160][ T9109] nvmet: Invalid value 'tc' for trtype
[  601.471044][ T9115] tmpfs: Unknown parameter 'usrquota'
[  601.902664][ T9117] loop3: detected capacity change from 0 to 128
[  601.938518][ T9117] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  602.115861][ T9117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  602.458165][ T8411] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  602.775487][ T8411] usb 2-1: Using ep0 maxpacket: 16
[  602.796274][ T8411] usb 2-1: unable to get BOS descriptor or descriptor too short
[  602.816943][ T8411] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  602.839734][ T8411] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  602.858824][ T8411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.866867][ T8411] usb 2-1: Product: syz
[  602.875480][ T8411] usb 2-1: Manufacturer: syz
[  602.880587][ T8411] usb 2-1: SerialNumber: syz
[  603.169188][ T8411] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  603.177955][ T8411] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  603.244177][   T11] bond0 (unregistering): Released all slaves
[  603.392357][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.417751][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.517179][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.536456][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  603.548900][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.559782][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  604.392329][ T8411] usb 2-1: USB disconnect, device number 15
[  604.478612][ T9140] nvmet: Invalid value 'tc' for trtype
[  604.774771][ T9142] loop6: detected capacity change from 0 to 40427
[  604.795671][ T9142] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288)
[  604.808569][ T9142] F2FS-fs (loop6): invalid crc value
[  604.814767][ T9142] F2FS-fs (loop6): invalid crc value
[  604.820686][ T9142] F2FS-fs (loop6): Failed to get valid F2FS checkpoint
[  604.919273][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  605.042657][ T9157] loop5: detected capacity change from 0 to 16
[  605.050696][ T9157] erofs: (device loop5): mounted with root inode @ nid 36.
[  605.061078][ T9150] loop2: detected capacity change from 0 to 32768
[  605.068991][ T9150] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  606.467935][ T9165] tmpfs: Unknown parameter 'usrquota'
[  607.366273][ T9174] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1403'.
[  607.648531][ T9164] loop1: detected capacity change from 0 to 64
[  607.808639][ T9181] loop5: detected capacity change from 0 to 64
[  608.254470][ T9194] nvmet: Invalid value 'tc' for trtype
[  608.945457][ T9211] loop6: detected capacity change from 0 to 32768
[  608.953607][ T9211] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[  610.725824][ T4266] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  612.347446][ T9222] loop2: detected capacity change from 0 to 64
[  612.438049][ T9228] tmpfs: Unknown parameter 'usrquota'
[  614.224186][ T9265] loop2: detected capacity change from 0 to 32768
[  614.353688][ T9265] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  614.637178][ T9272] tmpfs: Unknown parameter 'usrquota'
[  616.166935][ T4266] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  617.842509][ T9308] loop2: detected capacity change from 0 to 32768
[  618.049976][ T9308] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  618.425652][ T9318] tmpfs: Unknown parameter 'usrquota'
[  620.103368][ T4266] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  620.360820][ T9333] loop3: detected capacity change from 0 to 64
[  621.915184][ T9336] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  621.944589][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1452'.
[  622.634742][ T9358] loop6: detected capacity change from 0 to 32768
[  622.759510][ T9358] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[  622.973384][ T9367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1460'.
[  623.340685][ T9371] tmpfs: Unknown parameter 'usrquota'
[  623.437586][ T9370] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1461'.
[  625.052570][ T9391] loop6: detected capacity change from 0 to 64
[  626.058733][ T9409] nvmet_tcp: malformed ip/port passed: :
[  626.104268][ T9413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1474'.
[  626.971467][ T9420] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1476'.
[  627.377716][ T9425] loop1: detected capacity change from 0 to 32768
[  627.400273][ T9425] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  627.599372][ T9433] fuse: Bad value for 'fd'
[  627.716237][ T9435] tmpfs: Unknown parameter 'usrquota'
[  628.433166][ T9441] loop5: detected capacity change from 0 to 16
[  628.450173][ T9441] erofs: (device loop5): mounted with root inode @ nid 36.
[  629.212035][ T4266] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  629.287826][ T9439] loop3: detected capacity change from 0 to 64
[  630.418945][ T5399] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  630.685317][ T5399] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  630.777212][ T5399] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  630.895568][ T5399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.992019][ T5399] usb 2-1: Product: syz
[  631.050239][ T5399] usb 2-1: Manufacturer: syz
[  631.106912][ T5399] usb 2-1: SerialNumber: syz
[  631.839477][ T5399] usb 2-1: Cannot retrieve CPort count: -110
[  631.848963][ T5399] usb 2-1: Cannot retrieve CPort count: -110
[  631.937243][ T5399] es2_ap_driver: probe of 2-1:1.0 failed with error -110
[  632.896915][  T954] usb 2-1: USB disconnect, device number 16
[  632.929918][ T9466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1488'.
[  633.090152][ T9473] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1489'.
[  633.157825][ T9477] fuse: Bad value for 'fd'
[  634.160229][ T9489] nvmet_tcp: malformed ip/port passed: :
[  634.586703][ T9495] loop6: detected capacity change from 0 to 32768
[  634.615038][ T9495] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[  635.438314][ T9513] tmpfs: Unknown parameter 'usrquota'
[  636.073987][ T9524] random: crng reseeded on system resumption
[  636.636369][ T9527] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1506'.
[  637.171970][ T9529] x_tables: unsorted underflow at hook 2
[  639.405094][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1516'.
[  639.578662][ T9561] nvmet_tcp: malformed ip/port passed: :
[  642.530418][ T9595] loop3: detected capacity change from 0 to 64
[  644.075869][ T9609] nvmet_tcp: malformed ip/port passed: :
[  646.089537][ T9645] loop5: detected capacity change from 0 to 32768
[  646.097485][ T9645] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  647.133779][ T4266] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  647.165542][ T9649] loop2: detected capacity change from 0 to 64
[  647.388632][ T9658] tmpfs: Unknown parameter 'usrquota'
[  647.738994][ T9665] nvmet_tcp: malformed ip/port passed: :
[  652.089755][ T9706] loop3: detected capacity change from 0 to 32768
[  652.097620][ T9706] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  652.222572][ T9699] loop2: detected capacity change from 0 to 64
[  652.240051][ T4266] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  652.482395][ T9714] tmpfs: Unknown parameter 'usrquota'
[  652.686136][ T9719] nvmet_tcp: malformed ip/port passed: :
[  655.091975][ T9751] loop2: detected capacity change from 0 to 16
[  655.110360][ T9751] erofs: (device loop2): mounted with root inode @ nid 36.
[  656.337389][ T9759] loop3: detected capacity change from 0 to 32768
[  656.412384][ T9759] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  656.853481][ T9764] tmpfs: Unknown parameter 'usrquota'
[  657.115101][ T9754] loop6: detected capacity change from 0 to 64
[  657.220228][ T9770] loop1: detected capacity change from 0 to 128
[  657.387471][ T9777] loop3: detected capacity change from 0 to 64
[  657.721467][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  657.727831][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  658.350446][ T9770] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  658.410122][ T9770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  658.946853][ T9802] device syzkaller0 entered promiscuous mode
[  660.129318][ T9812] loop3: detected capacity change from 0 to 32768
[  660.159543][ T9812] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  660.491126][ T9818] tmpfs: Unknown parameter 'usrquota'
[  660.737775][ T4266] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  662.340306][ T8411] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  662.878118][ T9838] loop6: detected capacity change from 0 to 64
[  663.407225][ T9842] loop5: detected capacity change from 0 to 128
[  663.449775][ T8411] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  663.457099][ T9842] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  663.475991][ T9842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  663.505067][ T8411] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  663.532613][ T8411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.550595][ T8411] usb 4-1: Product: syz
[  663.561400][ T8411] usb 4-1: Manufacturer: syz
[  663.567711][ T8411] usb 4-1: SerialNumber: syz
[  664.175820][ T8411] usb 4-1: Cannot retrieve CPort count: -110
[  664.188347][ T8411] usb 4-1: Cannot retrieve CPort count: -110
[  664.201508][ T8411] es2_ap_driver: probe of 4-1:1.0 failed with error -110
[  664.946696][ T5397] usb 4-1: USB disconnect, device number 19
[  665.403561][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1593'.
[  666.465314][ T9876] fuse: Unknown parameter 'fd0x0000000000000003'
[  666.940739][ T9878] loop3: detected capacity change from 0 to 64
[  667.377735][ T9899] loop3: detected capacity change from 0 to 16
[  667.396467][ T9899] erofs: (device loop3): mounted with root inode @ nid 36.
[  668.582843][ T5402] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  668.619708][ T9909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1607'.
[  668.673929][ T9909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1607'.
[  668.727903][ T9909] device syzkaller0 entered promiscuous mode
[  668.892615][ T9915] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1607'.
[  669.029778][ T9915] tc_dump_action: action bad kind
[  669.174648][ T5402] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  669.621211][ T5402] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  669.641052][ T5402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.649173][ T5402] usb 6-1: Product: syz
[  669.653466][ T5402] usb 6-1: Manufacturer: syz
[  669.658096][ T5402] usb 6-1: SerialNumber: syz
[  669.973278][ T9921] device syzkaller0 entered promiscuous mode
[  670.998129][ T5402] usb 6-1: Cannot retrieve CPort count: -110
[  671.004178][ T5402] usb 6-1: Cannot retrieve CPort count: -110
[  671.071662][ T4280] Bluetooth: hci3: command 0x0406 tx timeout
[  671.142272][ T5402] es2_ap_driver: probe of 6-1:1.0 failed with error -110
[  671.220901][ T5402] usb 6-1: USB disconnect, device number 3
[  671.306772][ T9931] fuse: Unknown parameter 'fd0x0000000000000003'
[  672.817528][ T9935] loop2: detected capacity change from 0 to 64
[  674.683310][ T9952] loop2: detected capacity change from 0 to 1024
[  674.772074][ T9952] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  674.984358][ T9952] loop2: detected capacity change from 1024 to 64
[  675.740949][ T9959] syz.2.1620 (9959) used greatest stack depth: 20128 bytes left
[  675.754119][ T4283] EXT4-fs warning (device loop2): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  675.768801][ T4283] EXT4-fs warning (device loop2): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  675.784371][ T4283] EXT4-fs warning (device loop2): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  675.798928][ T4283] EXT4-fs warning (device loop2): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  675.829191][ T4283] EXT4-fs warning (device loop2): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  675.844302][ T4283] EXT4-fs warning (device loop2): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  675.858594][ T4283] EXT4-fs warning (device loop2): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  675.885676][ T4283] EXT4-fs warning (device loop2): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  676.025607][ T4283] EXT4-fs warning (device loop2): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  676.075764][ T4283] EXT4-fs warning (device loop2): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  676.937725][ T9967] fuse: Unknown parameter 'fd0x0000000000000003'
[  677.509372][ T5402] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  678.559221][ T5402] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  678.620658][ T9979] loop6: detected capacity change from 0 to 64
[  678.645917][ T5402] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  678.655374][ T5402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.663891][ T5402] usb 2-1: Product: syz
[  678.668141][ T5402] usb 2-1: Manufacturer: syz
[  678.672941][ T5402] usb 2-1: SerialNumber: syz
[  679.243568][ T5402] usb 2-1: Cannot retrieve CPort count: -110
[  679.250238][ T5402] usb 2-1: Cannot retrieve CPort count: -110
[  679.261541][ T5402] es2_ap_driver: probe of 2-1:1.0 failed with error -110
[  679.823850][ T5402] usb 2-1: USB disconnect, device number 17
[  680.033299][ T9989] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1630'.
[  680.132023][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  680.200604][ T9993] loop3: detected capacity change from 0 to 64
[  680.262826][ T9953] kmmpd-loop2: attempt to access beyond end of device
[  680.262826][ T9953] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  680.368635][ T9953] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  680.482389][ T9953] EXT4-fs error (device loop2): kmmpd:186: comm kmmpd-loop2: Error writing to MMP block
[  681.167105][ T4374] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.219777][ T9953] kmmpd-loop2: attempt to access beyond end of device
[  681.219777][ T9953] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  681.259249][ T9953] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  682.043920][ T4283] ------------[ cut here ]------------
[  682.049427][ T4283] ODEBUG: free active (active state 0) object type: timer_list hint: print_daily_error_info+0x0/0x480
[  682.137558][ T4283] WARNING: CPU: 1 PID: 4283 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x395/0x520
[  682.147660][ T4283] Modules linked in:
[  682.152019][ T4283] CPU: 1 PID: 4283 Comm: syz-executor Not tainted syzkaller #0
[  682.159733][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  682.169842][ T4283] RIP: 0010:debug_check_no_obj_freed+0x395/0x520
[  682.176262][ T4283] Code: e8 a0 b5 b8 fd 4c 8b 45 00 48 c7 c7 60 72 df 8a 48 c7 c6 c0 6e df 8a 48 c7 c2 c0 73 df 8a 8b 4c 24 1c 4d 89 e9 e8 9b f7 32 fd <0f> 0b 4c 8b 6c 24 10 48 b9 00 00 00 00 00 fc ff df ff 05 0c 27 06
[  682.196050][ T4283] RSP: 0018:ffffc90003eb7a80 EFLAGS: 00010246
[  682.202173][ T4283] RAX: f881cf3fb6b06200 RBX: ffffffff96eb42f0 RCX: ffff88807e1d1e00
[  682.210168][ T4283] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  682.218255][ T4283] RBP: ffffffff8a8df5e0 R08: ffffc90003eb7707 R09: 1ffff920007d6ee0
[  682.226288][ T4283] R10: dffffc0000000000 R11: fffff520007d6ee1 R12: 0000000000000001
[  682.234288][ T4283] R13: ffffffff823570c0 R14: ffff88807c8d8000 R15: ffff88807c8d8728
[  682.242370][ T4283] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  682.251350][ T4283] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  682.258025][ T4283] CR2: 00007f434fa02000 CR3: 0000000034415000 CR4: 00000000003506e0
[  682.266008][ T4283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  682.274030][ T4283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  682.282056][ T4283] Call Trace:
[  682.285342][ T4283]  <TASK>
[  682.288398][ T4283]  slab_free_freelist_hook+0xd2/0x1b0
[  682.293931][ T4283]  ? generic_shutdown_super+0x130/0x340
[  682.299618][ T4283]  __kmem_cache_free+0xb6/0x200
[  682.304502][ T4283]  ? ext4_drop_inode+0x2b0/0x2b0
[  682.309442][ T4283]  generic_shutdown_super+0x130/0x340
[  682.314886][ T4283]  kill_block_super+0x7c/0xe0
[  682.319572][ T4283]  deactivate_locked_super+0x93/0xf0
[  682.324875][ T4283]  cleanup_mnt+0x471/0x4f0
[  682.329308][ T4283]  task_work_run+0x1d0/0x260
[  682.334017][ T4283]  ? task_work_cancel+0x220/0x220
[  682.339052][ T4283]  ? do_exit+0x9d0/0x2570
[  682.343467][ T4283]  ? kmem_cache_free+0xf7/0x2a0
[  682.348323][ T4283]  do_exit+0x9d5/0x2570
[  682.352475][ T4283]  ? put_task_struct+0x80/0x80
[  682.357296][ T4283]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  682.363355][ T4283]  ? lock_chain_count+0x20/0x20
[  682.368254][ T4283]  ? _raw_spin_lock_irq+0xb7/0xf0
[  682.373390][ T4283]  ? _raw_spin_unlock_irq+0x1f/0x40
[  682.378641][ T4283]  ? lockdep_hardirqs_on+0x94/0x140
[  682.383877][ T4283]  do_group_exit+0x229/0x2e0
[  682.388526][ T4283]  __x64_sys_exit_group+0x3b/0x40
[  682.393563][ T4283]  do_syscall_64+0x4c/0xa0
[  682.398017][ T4283]  ? clear_bhb_loop+0x60/0xb0
[  682.402682][ T4283]  ? clear_bhb_loop+0x60/0xb0
[  682.407362][ T4283]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  682.413295][ T4283] RIP: 0033:0x7f9ed359e159
[  682.417700][ T4283] Code: Unable to access opcode bytes at 0x7f9ed359e12f.
[  682.424803][ T4283] RSP: 002b:00007ffc0a902138 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  682.433256][ T4283] RAX: ffffffffffffffda RBX: 00007f9ed363453f RCX: 00007f9ed359e159
[  682.441287][ T4283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  682.449263][ T4283] RBP: 0000000000000027 R08: 0000000000000000 R09: 00007f9ed36344bb
[  682.457293][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0a9033f0
[  682.465293][ T4283] R13: 00007f9ed36344bb R14: 00005555573304e8 R15: 00007ffc0a9055b0
[  682.473328][ T4283]  </TASK>
[  682.476360][ T4283] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  682.483618][ T4283] CPU: 1 PID: 4283 Comm: syz-executor Not tainted syzkaller #0
[  682.491143][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  682.501186][ T4283] Call Trace:
[  682.504454][ T4283]  <TASK>
[  682.507369][ T4283]  dump_stack_lvl+0x188/0x24e
[  682.512063][ T4283]  ? memcpy+0x3c/0x60
[  682.516033][ T4283]  ? show_regs_print_info+0x12/0x12
[  682.521233][ T4283]  ? load_image+0x410/0x410
[  682.525748][ T4283]  panic+0x2d3/0x710
[  682.529632][ T4283]  ? bpf_jit_dump+0xd0/0xd0
[  682.534134][ T4283]  __warn+0x2f8/0x4f0
[  682.538098][ T4283]  ? debug_check_no_obj_freed+0x395/0x520
[  682.543815][ T4283]  ? debug_check_no_obj_freed+0x395/0x520
[  682.549521][ T4283]  report_bug+0x2ba/0x4f0
[  682.553854][ T4283]  ? debug_check_no_obj_freed+0x395/0x520
[  682.559563][ T4283]  handle_bug+0x3a/0x70
[  682.563714][ T4283]  exc_invalid_op+0x16/0x40
[  682.568206][ T4283]  asm_exc_invalid_op+0x16/0x20
[  682.573037][ T4283] RIP: 0010:debug_check_no_obj_freed+0x395/0x520
[  682.579348][ T4283] Code: e8 a0 b5 b8 fd 4c 8b 45 00 48 c7 c7 60 72 df 8a 48 c7 c6 c0 6e df 8a 48 c7 c2 c0 73 df 8a 8b 4c 24 1c 4d 89 e9 e8 9b f7 32 fd <0f> 0b 4c 8b 6c 24 10 48 b9 00 00 00 00 00 fc ff df ff 05 0c 27 06
[  682.599046][ T4283] RSP: 0018:ffffc90003eb7a80 EFLAGS: 00010246
[  682.605098][ T4283] RAX: f881cf3fb6b06200 RBX: ffffffff96eb42f0 RCX: ffff88807e1d1e00
[  682.613056][ T4283] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  682.621013][ T4283] RBP: ffffffff8a8df5e0 R08: ffffc90003eb7707 R09: 1ffff920007d6ee0
[  682.628971][ T4283] R10: dffffc0000000000 R11: fffff520007d6ee1 R12: 0000000000000001
[  682.636928][ T4283] R13: ffffffff823570c0 R14: ffff88807c8d8000 R15: ffff88807c8d8728
[  682.644909][ T4283]  ? ext4_group_desc_init+0x20c0/0x20c0
[  682.650462][ T4283]  slab_free_freelist_hook+0xd2/0x1b0
[  682.655840][ T4283]  ? generic_shutdown_super+0x130/0x340
[  682.661379][ T4283]  __kmem_cache_free+0xb6/0x200
[  682.666216][ T4283]  ? ext4_drop_inode+0x2b0/0x2b0
[  682.671138][ T4283]  generic_shutdown_super+0x130/0x340
[  682.676495][ T4283]  kill_block_super+0x7c/0xe0
[  682.681158][ T4283]  deactivate_locked_super+0x93/0xf0
[  682.686431][ T4283]  cleanup_mnt+0x471/0x4f0
[  682.690849][ T4283]  task_work_run+0x1d0/0x260
[  682.695426][ T4283]  ? task_work_cancel+0x220/0x220
[  682.700440][ T4283]  ? do_exit+0x9d0/0x2570
[  682.704791][ T4283]  ? kmem_cache_free+0xf7/0x2a0
[  682.709629][ T4283]  do_exit+0x9d5/0x2570
[  682.713796][ T4283]  ? put_task_struct+0x80/0x80
[  682.718574][ T4283]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  682.724567][ T4283]  ? lock_chain_count+0x20/0x20
[  682.729418][ T4283]  ? _raw_spin_lock_irq+0xb7/0xf0
[  682.734473][ T4283]  ? _raw_spin_unlock_irq+0x1f/0x40
[  682.739664][ T4283]  ? lockdep_hardirqs_on+0x94/0x140
[  682.744856][ T4283]  do_group_exit+0x229/0x2e0
[  682.749447][ T4283]  __x64_sys_exit_group+0x3b/0x40
[  682.754465][ T4283]  do_syscall_64+0x4c/0xa0
[  682.758872][ T4283]  ? clear_bhb_loop+0x60/0xb0
[  682.763538][ T4283]  ? clear_bhb_loop+0x60/0xb0
[  682.768211][ T4283]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  682.774099][ T4283] RIP: 0033:0x7f9ed359e159
[  682.778507][ T4283] Code: Unable to access opcode bytes at 0x7f9ed359e12f.
[  682.785509][ T4283] RSP: 002b:00007ffc0a902138 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  682.793915][ T4283] RAX: ffffffffffffffda RBX: 00007f9ed363453f RCX: 00007f9ed359e159
[  682.801891][ T4283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  682.809942][ T4283] RBP: 0000000000000027 R08: 0000000000000000 R09: 00007f9ed36344bb
[  682.817903][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0a9033f0
[  682.825862][ T4283] R13: 00007f9ed36344bb R14: 00005555573304e8 R15: 00007ffc0a9055b0
[  682.833836][ T4283]  </TASK>
[  682.837091][ T4283] Kernel Offset: disabled
[  682.841442][ T4283] Rebooting in 86400 seconds..