last executing test programs:

4m32.612495209s ago: executing program 1 (id=233):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

4m31.03020606s ago: executing program 1 (id=234):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x300000, 0x300000, 0x8})

4m30.811109257s ago: executing program 1 (id=240):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1)
landlock_restrict_self(0xffffffffffffffff, 0xc)

4m29.308952196s ago: executing program 1 (id=245):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

4m29.122149672s ago: executing program 1 (id=247):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec970000382c00fe80000000000000000000002d9ed142498654351cdf24a5000000aaff0200"/65], 0x6e)

4m27.906197822s ago: executing program 1 (id=250):
syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$hidraw(0x0, 0x3, 0x191343)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752)

4m12.567837991s ago: executing program 32 (id=250):
syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$hidraw(0x0, 0x3, 0x191343)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752)

17.957590597s ago: executing program 0 (id=864):
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
recvmsg(0xffffffffffffffff, 0x0, 0x40020000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300))
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x1)
fchdir(r4)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
wait4(r2, 0x0, 0x40000000, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x86)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r5, 0x101, 0x1)
getdents(r5, &(0x7f00000002c0)=""/201, 0xc9)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108)

15.010077602s ago: executing program 0 (id=865):
r0 = openat$dsp1(0xffffff9c, 0x0, 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r2, &(0x7f0000000040)='7', 0x1)
socket$kcm(0x2, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x4044080)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xff7e, 0x7})
close(0xffffffffffffffff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
write$char_usb(r2, &(0x7f0000000bc0)="be", 0x1)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0x5000, 0xfffffffffffffffd})
syz_usb_disconnect(r1)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)

14.952425144s ago: executing program 4 (id=866):
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010825bd7000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004080)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="5c00000014006b03000000d86e6c1d00028400000000564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008010)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000844)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e21, 0x8}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x4c)

14.395542962s ago: executing program 3 (id=869):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000002c0)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x1, 0x0, 0x1000, 0x4, 0xfffffffa, 0x2, 0x8}})

14.182148149s ago: executing program 3 (id=870):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xd, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)

13.956842836s ago: executing program 4 (id=871):
socket$tipc(0x1e, 0x5, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280), 0x0)
accept4(r1, 0x0, 0x0, 0x800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0xffffff00, 0x3, &(0x7f0000000080)=0x3})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, 0x1003})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

13.933372497s ago: executing program 5 (id=872):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0)
semop(0x0, &(0x7f00000000c0), 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0xfffffffc, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x10, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xeedef87e92c927b0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0xffff, 0xb821, 0xffff, 0x6}, {0x9, 0x1, 0x4, 0x8000, 0x8, 0x9}, 0x20000007, 0x800, 0x200004a4}}, @TCA_TBF_RATE64={0xc, 0x4, 0x7c0a013ca58ff15d}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc090)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

12.639385019s ago: executing program 4 (id=873):
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
chdir(0x0)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
close_range(r0, 0xffffffffffffffff, 0x0)

11.834218736s ago: executing program 0 (id=874):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0)
shutdown(r0, 0x1)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1b39024, &(0x7f0000000100)=ANY=[], 0xfe, 0x27f, &(0x7f00000005c0)="$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")

11.334818552s ago: executing program 5 (id=875):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = dup(r5)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
read(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x28000080)
sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000100)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000000c0)="88", 0x1}, {&(0x7f00000003c0)="3455d9b30927b6325543337bec5d0db1e00d0a9e82b0ba08d927eabd6b0ba0c35056cc622a9598956424da1ed7517c4e96a17862a567f26143ebd45520be77cb6e39ee9a4ff8c46cda6b8d10232f23abeafce8934c", 0x55}, {&(0x7f0000000440)="80c37eacbda810053d563bb314a284d2dfa5e20038c8a7affbab935e025a98c941596df0d934c7930475ea08f918", 0x2e}, {&(0x7f0000000680)="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", 0x105}], 0x4}, 0x404c043)
syz_open_procfs(r2, 0x0)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x4e60, 0xc, @local, 0x10}, {0xa, 0x4e24, 0x0, @loopback}, 0x1, {[0x8, 0x0, 0x1000, 0x2]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, 0x0, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

11.270426084s ago: executing program 4 (id=876):
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xa8, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_NAT={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0xd0)

11.118137639s ago: executing program 4 (id=877):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e", @ANYRESOCT], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$media(0x0, 0x5, 0x298301)
mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000140), 0x8c03, &(0x7f0000000040)={[{@nr_blocks={'nr_blocks', 0x3d, [0x67]}}]})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r5, 0xc0145b0e, &(0x7f0000000040)={0x100004, 0x0, 0xff, 0x9, 0x3, 0xfffffffe})

11.064545561s ago: executing program 2 (id=878):
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
recvmsg(0xffffffffffffffff, 0x0, 0x40020000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300))
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x1)
fchdir(r4)
getdents64(0xffffffffffffffff, &(0x7f00000005c0)=""/4096, 0x1000)
wait4(r2, 0x0, 0x40000000, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x86)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r5, 0x101, 0x1)
getdents(r5, &(0x7f00000002c0)=""/201, 0xc9)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108)

10.428762591s ago: executing program 5 (id=879):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x80000002)
openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3, 0x1200)

9.955239757s ago: executing program 0 (id=880):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0)

9.394177275s ago: executing program 2 (id=881):
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010825bd7000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004080)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="5c00000014006b03000000d86e6c1d00028400000000564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008010)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000844)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e21, 0x8}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x4c)

9.129825714s ago: executing program 3 (id=882):
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x1a0c008, 0x0)

8.449398795s ago: executing program 2 (id=883):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080))
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', <r4=>0x0})
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
ioprio_get$pid(0x3, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)

8.31419528s ago: executing program 5 (id=884):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x45, 0x49d8, 0x1, 0x5, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1000000}, 0x50)
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x4008804)
sendmsg$inet(r0, 0x0, 0x0)

7.793525267s ago: executing program 3 (id=885):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0)
semop(0x0, &(0x7f00000000c0), 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0xfffffffc, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x10, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xeedef87e92c927b0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0xffff, 0xb821, 0xffff, 0x6}, {0x9, 0x1, 0x4, 0x8000, 0x8, 0x9}, 0x20000007, 0x800, 0x200004a4}}, @TCA_TBF_RATE64={0xc, 0x4, 0x7c0a013ca58ff15d}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc090)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

6.75607027s ago: executing program 5 (id=886):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x20004805)
openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3)
fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000040)={0x4, <r7=>r5, 0x80000})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000140)={0xe000001b})
syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
chdir(0x0)
r8 = openat$autofs(0xffffffffffffff9c, 0x0, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x80000}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'})
write$cgroup_int(r0, &(0x7f0000000180)=0xfe5f, 0x12)

6.524146368s ago: executing program 2 (id=887):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000082}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x9d2, 0x0, 0x9}, {0x3bd, 0x0, 0xfffffffffffffffb}]})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB="000400", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES64=r1, @ANYRESHEX=r2])
read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r4, &(0x7f00000009c0)='1', 0x1, 0xf}])
r6 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x1)
fsmount(r6, 0x1, 0x0)
dup3(r4, 0xffffffffffffffff, 0x80000)

3.155066418s ago: executing program 3 (id=888):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x5, 0x1530, &(0x7f0000002f80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0xb)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)

2.850173678s ago: executing program 4 (id=889):
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab70102030109021200010000"], 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$SETVAL(0x0, 0x2, 0x10, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)

2.630086035s ago: executing program 2 (id=890):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x39)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d66736361"])
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x23)
ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @start={0x5, 0x1}})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

2.510810409s ago: executing program 0 (id=891):
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
recvmsg(0xffffffffffffffff, 0x0, 0x40020000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300))
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x1)
fchdir(r4)
getdents64(0xffffffffffffffff, &(0x7f00000005c0)=""/4096, 0x1000)
wait4(r2, 0x0, 0x40000000, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x86)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r5, 0x101, 0x1)
getdents(r5, &(0x7f00000002c0)=""/201, 0xc9)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108)

134.117446ms ago: executing program 5 (id=892):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x3, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x6c, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r3)
ioctl$EVIOCRMFF(r3, 0x4004550d, &(0x7f00000000c0)=0x18)
futex(0x0, 0x10d, 0xc0e, 0x0, 0x0, 0x4)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x48212b8952c3aff5, 0x70bd27, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700)

133.151236ms ago: executing program 2 (id=893):
iopl(0x3)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000)
close_range(r0, 0xffffffffffffffff, 0x0)

4.35609ms ago: executing program 3 (id=894):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x80000002)
openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3, 0x1200)

0s ago: executing program 0 (id=895):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0xffffffffffffff7e)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]})
writev(r4, &(0x7f0000001600), 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r5=>0x0})
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)

kernel console output (not intermixed with test programs):

 2 family 0 port 6081 - 0
[   63.895158][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.918902][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.929949][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.940535][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.951201][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.961386][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.972210][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.982680][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.993382][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.005838][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.014118][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.023067][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.031906][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.056978][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.068857][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.079934][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.097172][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.107228][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.117958][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.127992][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.138747][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.151237][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.176902][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.187834][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.221381][  T424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.235279][  T424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.240358][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.256494][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.266211][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.275290][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.277114][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.286844][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.305730][ T4233] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   64.318986][ T4233] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   64.337150][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.348022][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.387527][ T4233] usb 4-1: config 0 descriptor??
[   64.471354][ T1222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.478416][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.479192][ T1222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.497684][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.520963][ T4234] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   64.536066][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   64.545837][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   64.583840][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.608963][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.617851][ T3072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.620211][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.626092][ T3072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.657257][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.895503][ T4233] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   64.925442][ T4276] loop1: detected capacity change from 0 to 32768
[   64.931416][ T4233] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   64.944696][   T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   65.051614][ T4234] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[   65.062187][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.071878][ T4234] usb 5-1: Product: syz
[   65.077372][ T4234] usb 5-1: Manufacturer: syz
[   65.084066][ T4234] usb 5-1: SerialNumber: syz
[   65.102024][ T4234] usb 5-1: config 0 descriptor??
[   65.127928][   T25] audit: type=1800 audit(1781639405.474:2): pid=4276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=7 res=0 errno=0
[   65.163084][ T4234] gspca_main: stk1135-2.14.0 probing 174f:6a31
[   65.205562][   T21] usb 1-1: Using ep0 maxpacket: 8
[   65.313944][ T4235] usb 4-1: USB disconnect, device number 2
[   65.341021][   T21] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[   65.351256][   T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   65.365261][   T21] usb 1-1: config 0 has no interface number 0
[   65.371849][   T21] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[   65.384682][   T21] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[   65.395223][   T21] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255
[   65.405926][   T21] usb 1-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8
[   65.601517][   T21] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[   65.611836][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.622073][   T21] usb 1-1: Product: syz
[   65.626315][   T21] usb 1-1: Manufacturer: syz
[   65.631280][   T21] usb 1-1: SerialNumber: syz
[   65.641743][   T21] usb 1-1: config 0 descriptor??
[   65.661826][ T4274] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   65.669098][ T4274] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   65.771194][ T4237] Bluetooth: hci0: command 0x0419 tx timeout
[   65.782603][ T4237] Bluetooth: hci3: command 0x0419 tx timeout
[   65.792376][ T4268] udc-core: couldn't find an available UDC or it's busy
[   65.799502][ T4268] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   65.833344][ T4268] udc-core: couldn't find an available UDC or it's busy
[   65.840368][ T4268] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   65.857931][ T4233] Bluetooth: hci2: command 0x0419 tx timeout
[   65.866917][ T4233] Bluetooth: hci1: command 0x0419 tx timeout
[   65.876356][ T4233] Bluetooth: hci4: command 0x0419 tx timeout
[   65.910535][ T4274] udc-core: couldn't find an available UDC or it's busy
[   65.918410][ T4274] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   65.940930][ T4237] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   65.954582][ T4274] udc-core: couldn't find an available UDC or it's busy
[   65.963407][ T4274] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   66.127063][ T4234] gspca_stk1135: reg_w 0x0 err -110
[   66.216729][ T4234] gspca_stk1135: serial bus timeout: status=0x00
[   66.351521][ T4237] usb 3-1: config 5 has an invalid interface number: 123 but max is 0
[   66.360814][ T4237] usb 3-1: config 5 has no interface number 0
[   66.367514][ T4237] usb 3-1: config 5 interface 123 altsetting 7 has an invalid endpoint with address 0xEB, skipping
[   66.370854][ T4234] gspca_stk1135: Sensor write failed
[   66.380563][ T4237] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64
[   66.405530][   T21] usb 1-1: NFC: intf ffff88807d008000 id ffffffff8cb53340
[   66.420392][ T4237] usb 3-1: config 5 interface 123 has no altsetting 0
[   66.497612][   T21] nfcmrvl 1-1:0.122: NFC: registered with nci successfully
[   66.506056][ T4234] gspca_stk1135: serial bus timeout: status=0x00
[   66.517304][   T21] usb 1-1: USB disconnect, device number 2
[   66.522327][ T4234] gspca_stk1135: Sensor write failed
[   66.537577][   T21] usb 1-1: NFC: intf ffff88807d008000
[   66.544871][ T4234] gspca_stk1135: serial bus timeout: status=0x00
[   66.582059][ T4234] gspca_stk1135: Sensor read failed
[   66.587302][ T4234] gspca_stk1135: serial bus timeout: status=0x00
[   66.611040][ T4237] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[   66.625038][ T4234] gspca_stk1135: Sensor read failed
[   66.630268][ T4234] gspca_stk1135: Detected sensor type unknown (0x0)
[   66.656388][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.685631][ T4234] gspca_stk1135: serial bus timeout: status=0x00
[   66.692119][ T4237] usb 3-1: Product: syz
[   66.700596][ T4237] usb 3-1: Manufacturer: syz
[   66.708926][ T4234] gspca_stk1135: Sensor read failed
[   66.710894][ T4237] usb 3-1: SerialNumber: syz
[   66.726547][ T4234] gspca_stk1135: serial bus timeout: status=0x00
[   66.740688][ T4234] gspca_stk1135: Sensor read failed
[   66.747395][ T4234] gspca_stk1135: serial bus timeout: status=0x00
[   66.761622][ T4283] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   66.780725][ T4234] gspca_stk1135: Sensor write failed
[   66.786064][ T4234] gspca_stk1135: serial bus timeout: status=0x00
[   66.820685][ T4234] gspca_stk1135: Sensor write failed
[   66.826055][ T4234] stk1135: probe of 5-1:0.0 failed with error -110
[   66.866450][ T4234] usb 5-1: USB disconnect, device number 2
[   66.958990][ T4311] netlink: 'syz.1.14': attribute type 1 has an invalid length.
[   66.977323][ T4311] device macvlan2 entered promiscuous mode
[   66.993976][ T4311] device bridge0 entered promiscuous mode
[   67.019387][ T4311] team0: Port device macvlan2 added
[   67.020038][ T4313] autofs4:pid:4313:autofs_fill_super: called with bogus options
[   67.059779][ T4311] bridge0: port 3(ip6gretap1) entered blocking state
[   67.083899][ T4311] bridge0: port 3(ip6gretap1) entered disabled state
[   67.098393][ T4311] device ip6gretap1 entered promiscuous mode
[   67.194000][ T4283] udc-core: couldn't find an available UDC or it's busy
[   67.217917][ T4302] loop4: detected capacity change from 0 to 32768
[   67.218704][ T4283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   67.277863][ T4283] udc-core: couldn't find an available UDC or it's busy
[   67.301562][ T4302] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.12 (4302)
[   67.341096][ T4283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   67.363729][ T4283] udc-core: couldn't find an available UDC or it's busy
[   67.388553][ T4302] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[   67.406121][ T4283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   67.416184][ T4302] BTRFS info (device loop4): setting nodatasum
[   67.432075][ T4302] BTRFS info (device loop4): force zlib compression, level 3
[   67.447694][ T4302] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[   67.467609][ T4302] BTRFS info (device loop4): use lzo compression, level 0
[   67.487888][ T4302] BTRFS info (device loop4): turning on flush-on-commit
[   67.498031][ T4302] BTRFS info (device loop4): enabling auto defrag
[   67.513689][ T4302] BTRFS info (device loop4): max_inline at 4096
[   67.528012][ T4302] BTRFS info (device loop4): using free space tree
[   67.545176][ T4302] BTRFS info (device loop4): has skinny extents
[   67.545860][ T4235] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   67.660470][ T4283] udc-core: couldn't find an available UDC or it's busy
[   67.670335][ T4283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   67.680989][ T4238] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   67.728787][ T4302] BTRFS info (device loop4): enabling ssd optimizations
[   67.820788][ T4235] usb 2-1: Using ep0 maxpacket: 8
[   67.921822][ T4291] Bluetooth: hci2: command 0x0405 tx timeout
[   67.966491][ T4235] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[   67.995982][ T4235] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[   68.041216][ T4238] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   68.045561][ T4235] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   68.056000][ T4238] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   68.070959][ T4238] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   68.105382][ T4235] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[   68.135118][ T4235] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   68.147830][ T4235] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   68.167721][ T4235] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   68.181086][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.245155][ T4238] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   68.261296][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.269591][ T4238] usb 1-1: Product: syz
[   68.274811][ T4238] usb 1-1: Manufacturer: syz
[   68.280569][ T4238] usb 1-1: SerialNumber: syz
[   68.331618][ T4238] hub 1-1:1.0: bad descriptor, ignoring hub
[   68.338203][ T4238] hub: probe of 1-1:1.0 failed with error -5
[   68.471003][ T4235] usb 2-1: GET_CAPABILITIES returned 0
[   68.477157][ T4235] usbtmc 2-1:16.0: can't read capabilities
[   68.553061][ T4238] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   68.580922][ T4321] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71
[   68.595926][ T4321] udc-core: couldn't find an available UDC or it's busy
[   68.610259][ T4321] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   68.730252][ T4321] udc-core: couldn't find an available UDC or it's busy
[   68.760135][ T4321] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   68.803019][ T4319] udc-core: couldn't find an available UDC or it's busy
[   68.808240][ T4321] udc-core: couldn't find an available UDC or it's busy
[   68.855435][ T4319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   68.868197][ T4321] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   68.895760][ T4321] udc-core: couldn't find an available UDC or it's busy
[   68.905570][ T4321] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   68.926638][ T4237] comedi comedi5: Wrong number of endpoints
[   68.949976][ T4237] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device.
[   68.966808][ T4319] udc-core: couldn't find an available UDC or it's busy
[   69.025488][ T4319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   69.034673][ T4237] usb 3-1: USB disconnect, device number 2
[   69.121150][    C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   69.132935][ T4319] usbtmc 2-1:16.0: Unable to send data, error -71
[   69.183783][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.192151][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.291288][ T4365] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[   69.440665][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   69.450670][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   69.460662][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   69.470665][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   69.490678][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   69.548024][ T4319] udc-core: couldn't find an available UDC or it's busy
[   69.559407][ T4319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   69.802895][ T4319] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71
[   69.882853][ T4238] usb 1-1: USB disconnect, device number 3
[   69.897987][ T4238] usblp1: removed
[   70.043143][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.093538][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.176693][ T4369] udc-core: couldn't find an available UDC or it's busy
[   70.203717][ T4369] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   70.224452][ T4369] udc-core: couldn't find an available UDC or it's busy
[   70.231830][ T4369] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   71.081782][ T4355] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.106459][ T4355] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.160843][ T4355] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.208024][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[   71.223052][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[   71.255793][ T4355] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.541833][ T4351] usb 2-1: USB disconnect, device number 2
[   72.077094][ T4360] batman_adv: batadv0: Adding interface: macsec1
[   72.164161][ T4360] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.190849][ T4360] batman_adv: batadv0: Interface activated: macsec1
[   72.250748][ T4351] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   72.273015][ T4385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'.
[   72.650890][ T4351] usb 2-1: unable to get BOS descriptor or descriptor too short
[   73.270897][ T4351] usb 2-1: not running at top speed; connect to a high speed hub
[   73.350884][ T4351] usb 2-1: config 64 interface 0 has no altsetting 0
[   73.663562][ T4351] usb 2-1: New USB device found, idVendor=0572, idProduct=c689, bcdDevice=35.9a
[   73.828611][ T4351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.852196][ T4351] usb 2-1: Product: syz
[   73.967390][ T4396] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   74.810226][ T4351] usb 2-1: Manufacturer: syz
[   74.820354][ T4351] usb 2-1: SerialNumber: syz
[   74.880834][ T4351] usb 2-1: can't set config #64, error -71
[   74.900860][ T4351] usb 2-1: USB disconnect, device number 3
[   74.998811][ T4401] Zero length message leads to an empty skb
[   75.093829][ T4399] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[   76.188428][ T4270] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   76.330682][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   76.350665][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   76.360659][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   76.370657][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.380658][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.520835][ T4270] usb 1-1: Using ep0 maxpacket: 8
[   76.644653][ T4270] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[   76.657438][ T4270] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   76.686230][ T4270] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   76.714903][ T4270] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[   76.745605][ T4270] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   76.775050][ T4270] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   76.809636][ T4270] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   76.835164][ T4270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.231884][ T4270] usb 1-1: GET_CAPABILITIES returned 0
[   77.237415][ T4270] usbtmc 1-1:16.0: can't read capabilities
[   79.565297][ T4235] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   79.611059][ T4430] tipc: Started in network mode
[   79.620158][ T4430] tipc: Node identity 9612d1ea63c7, cluster identity 4711
[   79.628732][ T4430] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.646516][ T4430] device syzkaller0 entered promiscuous mode
[   79.709727][ T4430] tipc: Resetting bearer <eth:syzkaller0>
[   79.737032][ T4428] tipc: Resetting bearer <eth:syzkaller0>
[   79.813185][ T4428] tipc: Disabling bearer <eth:syzkaller0>
[   79.932946][ T4291] usb 1-1: USB disconnect, device number 4
[   80.460084][ T4441] process 'syz.2.43' launched './file1' with NULL argv: empty string added
[   80.523746][ T4443] tmpfs: Unknown parameter 'grpquota'
[   82.014808][ T4456] binder: 4454:4456 ioctl 4018620d 0 returned -22
[   86.789318][ T4482] sched: RT throttling activated
[   88.559341][ T1331] cfg80211: failed to load regulatory.db
[   88.705053][ T4490] netlink: 'syz.2.58': attribute type 1 has an invalid length.
[   88.741867][ T4486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'.
[   89.551107][ T4494] netlink: 'syz.2.58': attribute type 10 has an invalid length.
[   89.558795][ T4494] netlink: 40 bytes leftover after parsing attributes in process `syz.2.58'.
[   89.582235][ T4494] device dummy0 entered promiscuous mode
[   89.701602][ T4486] bond1 (unregistering): Released all slaves
[   89.750827][ T4351] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   90.100734][ T4351] usb 4-1: Using ep0 maxpacket: 8
[   90.172145][ T4532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.65'.
[   90.181958][ T4532] netlink: set zone limit has 8 unknown bytes
[   90.261186][ T4351] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[   90.290857][ T4351] usb 4-1: config 0 has no interface number 0
[   90.360939][ T4351] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[   90.424014][ T4351] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[   90.470929][ T4351] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   90.536102][ T4351] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   90.572625][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.633830][ T4351] usb 4-1: config 0 descriptor??
[   90.729567][ T4351] ldusb 4-1:0.55: Interrupt in endpoint not found
[   90.837327][ T4291] usb 4-1: USB disconnect, device number 3
[   90.925562][ T4542] syz.1.70 uses obsolete (PF_INET,SOCK_PACKET)
[   91.285100][ T4305] Bluetooth: hci0: command 0x0401 tx timeout
[   91.501212][ T4351] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   92.840770][ T4560] =======================================================
[   92.840770][ T4560] WARNING: The mand mount option has been deprecated and
[   92.840770][ T4560]          and is ignored by this kernel. Remove the mand
[   92.840770][ T4560]          option from the mount to silence this warning.
[   92.840770][ T4560] =======================================================
[   93.261040][ T4560] overlayfs: unrecognized mount option "/" or missing value
[   93.450773][ T4197] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   94.190772][ T4351] usb 5-1: unable to read config index 0 descriptor/all
[   94.201993][ T4351] usb 5-1: can't read configurations, error -71
[   94.330876][ T4197] usb 1-1: Using ep0 maxpacket: 32
[   96.101495][ T4197] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[   96.109725][ T4197] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   96.130417][ T4197] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   96.147814][ T4197] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   96.204357][ T4197] usb 1-1: config 0 interface 0 has no altsetting 0
[   96.290139][ T4591] loop1: detected capacity change from 0 to 256
[   96.306003][ T4197] usb 1-1: string descriptor 0 read error: -71
[   96.377152][ T4594] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[   96.397814][ T4197] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   96.509864][ T4591] exfat: Deprecated parameter 'utf8'
[   97.170764][ T4197] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   97.944386][ T4197] usb 1-1: config 0 descriptor??
[   97.960807][ T4197] usb 1-1: can't set config #0, error -71
[   97.974246][ T4197] usb 1-1: USB disconnect, device number 5
[   99.692354][ T4591] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  100.160870][ T4291] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  100.931010][ T4291] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  100.931161][ T4291] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  100.931212][ T4291] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  101.091130][ T4291] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  101.091176][ T4291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.091226][ T4291] usb 3-1: Product: syz
[  101.091278][ T4291] usb 3-1: Manufacturer: syz
[  101.091328][ T4291] usb 3-1: SerialNumber: syz
[  101.682435][ T4291] hub 3-1:1.0: bad descriptor, ignoring hub
[  101.805987][ T4291] hub: probe of 3-1:1.0 failed with error -5
[  101.992594][ T4609] udc-core: couldn't find an available UDC or it's busy
[  101.999575][ T4609] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  102.213993][ T4291] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  102.729701][ T4237] Bluetooth: hci0: command 0x0433 tx timeout
[  102.804714][ T4609] udc-core: couldn't find an available UDC or it's busy
[  102.819216][ T4609] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  102.982602][ T4609] udc-core: couldn't find an available UDC or it's busy
[  102.990124][ T4609] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  103.776011][ T4609] udc-core: couldn't find an available UDC or it's busy
[  103.804303][ T4648] loop1: detected capacity change from 0 to 256
[  103.847659][ T4609] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  103.871400][ T4648] exfat: Deprecated parameter 'utf8'
[  103.957783][ T4648] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  104.052472][   T25] audit: type=1800 audit(1781639444.404:3): pid=4648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.102" name="file1" dev="loop1" ino=1048590 res=0 errno=0
[  104.276924][ T4197] usb 3-1: USB disconnect, device number 4
[  104.287353][ T4197] usblp0: removed
[  106.125157][ T4670] 9pnet_virtio: no channels available for device syz
[  108.056588][ T4685] loop2: detected capacity change from 0 to 256
[  108.108455][ T4685] exfat: Deprecated parameter 'utf8'
[  108.688480][ T4685] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  108.764155][   T25] audit: type=1800 audit(1781639449.114:4): pid=4685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.114" name="file1" dev="loop2" ino=1048591 res=0 errno=0
[  109.340799][ T4270] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  109.877850][ T4699] loop9: detected capacity change from 0 to 7
[  109.955245][ T4699] Dev loop9: unable to read RDB block 7
[  109.969144][ T4699]  loop9: unable to read partition table
[  109.984677][ T4699] loop9: partition table beyond EOD, truncated
[  110.019179][ T4699] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5)
[  110.221055][ T4270] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  111.093267][ T4270] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  111.103268][ T4270] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  111.300799][ T4270] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  112.123403][ T4270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.131545][ T4270] usb 3-1: Product: syz
[  112.135995][ T4270] usb 3-1: Manufacturer: syz
[  112.140684][ T4270] usb 3-1: SerialNumber: syz
[  112.166996][ T4270] usb 3-1: can't set config #1, error -71
[  112.286074][ T4270] usb 3-1: USB disconnect, device number 5
[  113.925478][ T4734] comedi comedi3: c6xdigio: I/O port conflict (0xffffffff800003c8,3)
[  115.847768][ T4753] netlink: 56 bytes leftover after parsing attributes in process `syz.0.138'.
[  116.690709][ T4197] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  117.134927][ T4197] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  117.172872][ T4197] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  117.208298][ T4197] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  118.090967][ T4197] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  118.105876][ T4197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.114441][ T4197] usb 3-1: Product: syz
[  118.118640][ T4197] usb 3-1: Manufacturer: syz
[  118.129096][ T4197] usb 3-1: SerialNumber: syz
[  118.191228][ T4197] hub 3-1:1.0: bad descriptor, ignoring hub
[  118.197289][ T4197] hub: probe of 3-1:1.0 failed with error -5
[  119.031899][ T4755] udc-core: couldn't find an available UDC or it's busy
[  119.040810][ T4755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  119.051056][ T4769] syz.0.141 (4769) used greatest stack depth: 17688 bytes left
[  119.060028][ T4197] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  119.081969][ T4755] udc-core: couldn't find an available UDC or it's busy
[  119.089001][ T4755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  119.118547][ T4755] udc-core: couldn't find an available UDC or it's busy
[  119.145939][ T4755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  119.245476][ T4755] udc-core: couldn't find an available UDC or it's busy
[  119.295893][ T4755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  119.830651][ T4781] mmap: syz.1.144 (4781) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  122.839265][ T4291] usb 3-1: USB disconnect, device number 6
[  123.057275][ T4291] usblp0: removed
[  123.820797][ T4291] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  124.687275][ T4802] netlink: 'syz.3.153': attribute type 1 has an invalid length.
[  124.722458][ T4802] netlink: 'syz.3.153': attribute type 1 has an invalid length.
[  124.751473][ T4802] netlink: 40 bytes leftover after parsing attributes in process `syz.3.153'.
[  124.820793][ T4291] usb 5-1: Using ep0 maxpacket: 8
[  125.080844][ T4291] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  125.088990][ T4291] usb 5-1: config 0 has no interface number 0
[  125.958747][ T4814] netlink: 72 bytes leftover after parsing attributes in process `syz.2.157'.
[  125.969081][ T4291] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  125.999573][ T4291] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  126.027264][ T4291] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  126.047362][ T4291] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  126.059277][ T4291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.145981][ T4291] usb 5-1: config 0 descriptor??
[  126.203930][ T4291] ldusb 5-1:0.55: Interrupt in endpoint not found
[  126.398080][ T4819] 9pnet_virtio: no channels available for device syz
[  126.453350][ T4197] usb 5-1: USB disconnect, device number 5
[  126.460748][ T4235] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  126.910767][ T4235] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  127.000867][ T4235] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  127.079965][ T4235] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  127.430822][ T4235] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  127.439895][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.476740][ T4827] tmpfs: Unknown parameter 'usrquota'
[  127.490537][ T4235] usb 4-1: Product: syz
[  127.502221][ T4235] usb 4-1: Manufacturer: syz
[  127.516908][ T4235] usb 4-1: SerialNumber: syz
[  127.593148][ T4235] hub 4-1:1.0: bad descriptor, ignoring hub
[  127.602456][ T4235] hub: probe of 4-1:1.0 failed with error -5
[  127.794982][ T4816] udc-core: couldn't find an available UDC or it's busy
[  127.812154][ T4235] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  127.844751][ T4816] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  127.879316][ T4816] udc-core: couldn't find an available UDC or it's busy
[  127.915630][ T4816] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  127.958300][ T4816] udc-core: couldn't find an available UDC or it's busy
[  127.987020][ T4816] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  128.029490][ T4816] udc-core: couldn't find an available UDC or it's busy
[  128.053393][ T4816] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  129.634532][ T4351] usb 4-1: USB disconnect, device number 4
[  129.706205][ T4351] usblp0: removed
[  132.644416][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  132.650872][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  133.517781][ T4921] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  134.172946][ T4925] 9pnet_virtio: no channels available for device syz
[  135.576866][ T4938] 9pnet_virtio: no channels available for device syz
[  135.836215][ T4948] 9pnet: Insufficient options for proto=fd
[  136.103581][   T25] audit: type=1326 audit(1781639476.444:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.3.192" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03a207e59 code=0x7fc00000
[  136.200241][   T25] audit: type=1326 audit(1781639476.494:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.3.192" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03a207e59 code=0x7fc00000
[  136.224815][   T25] audit: type=1326 audit(1781639476.494:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.3.192" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03a207e59 code=0x7fc00000
[  136.249009][   T25] audit: type=1326 audit(1781639476.494:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.3.192" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03a207e59 code=0x7fc00000
[  136.273986][   T25] audit: type=1326 audit(1781639476.494:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.3.192" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03a207e59 code=0x7fc00000
[  136.987964][ T4968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.198'.
[  137.982988][ T4986] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.058321][ T4986] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.078316][ T4986] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.102852][ T4986] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.773265][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  138.794839][ T4993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.519140][ T5023] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  143.526049][ T5023] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  143.571805][ T5023] vhci_hcd vhci_hcd.0: Device attached
[  143.597368][ T5028] vhci_hcd: connection closed
[  143.625343][ T4292] vhci_hcd: stop threads
[  143.628855][ T5036] loop3: detected capacity change from 0 to 256
[  143.668026][ T4292] vhci_hcd: release socket
[  143.687501][ T4292] vhci_hcd: disconnect device
[  143.728428][ T5036] exfat: Deprecated parameter 'utf8'
[  143.778808][ T5036] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  144.265632][   T25] audit: type=1800 audit(1781639484.614:10): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.218" name="file1" dev="loop3" ino=1048592 res=0 errno=0
[  149.110849][   T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  149.146171][ T5094] tipc: Started in network mode
[  149.152479][ T5094] tipc: Node identity 0608b1d7fb3b, cluster identity 4711
[  149.159774][ T5094] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.177930][ T5093] tipc: Disabling bearer <eth:syzkaller0>
[  149.802014][   T26] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  149.839052][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  149.932887][   T26] usb 1-1: Product: syz
[  149.975260][   T26] usb 1-1: Manufacturer: syz
[  150.030806][   T26] usb 1-1: SerialNumber: syz
[  150.205266][   T26] usb 1-1: config 0 descriptor??
[  150.383290][   T26] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  150.522680][   T26] dvb-usb: bulk message failed: -22 (2/0)
[  150.842273][   T26] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  151.014301][   T26] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  151.215960][ T5116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.224420][   T26] usb 1-1: media controller created
[  151.244168][   T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  151.272203][ T5116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.281596][ T5116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.292697][   T26] cxusb: set interface failed
[  151.297497][   T26] dvb-usb: bulk message failed: -22 (1/0)
[  151.336709][ T5116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.868802][ T5116] batman_adv: batadv0: Interface deactivated: macsec1
[  151.886662][ T5116] batman_adv: batadv0: Removing interface: macsec1
[  151.896505][   T26] DVB: Unable to find symbol mt352_attach()
[  151.903550][   T26] dvb-usb: bulk message failed: -22 (5/0)
[  151.911835][   T26] zl10353_read_register: readreg error (reg=127, ret==-121)
[  151.991817][   T26] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  152.009618][ T5129] loop3: detected capacity change from 0 to 256
[  152.064734][ T5128] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.081353][ T5129] exfat: Deprecated parameter 'utf8'
[  152.108381][ T5127] tipc: Disabling bearer <eth:syzkaller0>
[  152.147612][ T5129] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  152.150666][   T26] rc_core: IR keymap rc-dvico-mce not found
[  152.319911][   T26] Registered IR keymap rc-empty
[  152.326643][   T26] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  152.337354][   T26] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5
[  152.352262][   T26] dvb-usb: schedule remote query interval to 100 msecs.
[  152.359224][   T26] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  152.392097][   T26] usb 1-1: USB disconnect, device number 6
[  152.403953][   T25] audit: type=1800 audit(1781639492.614:11): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.241" name="file1" dev="loop3" ino=1048593 res=0 errno=0
[  152.701800][ T5140] capability: warning: `syz.4.244' uses 32-bit capabilities (legacy support in use)
[  152.731214][   T26] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  157.971998][ T4305] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  158.300674][ T4305] usb 4-1: Using ep0 maxpacket: 32
[  159.960697][ T4236] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  160.920758][ T4305] usb 4-1: unable to read config index 0 descriptor/all
[  160.927782][ T4305] usb 4-1: can't read configurations, error -71
[  161.250802][ T4236] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  161.865090][ T4236] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  161.875592][ T4236] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.970752][ T4236] usb 3-1: string descriptor 0 read error: -71
[  161.977508][ T4236] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  161.991116][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.007425][ T5210] netlink: 'syz.2.264': attribute type 1 has an invalid length.
[  162.030819][ T4236] usb 3-1: can't set config #1, error -71
[  162.039921][ T4236] usb 3-1: USB disconnect, device number 7
[  162.215170][ T5216] loop0: detected capacity change from 0 to 256
[  162.280697][ T5210] 8021q: adding VLAN 0 to HW filter on device bond1
[  162.383378][ T5216] exfat: Deprecated parameter 'utf8'
[  163.175952][ T5216] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  163.213979][   T25] audit: type=1800 audit(1781639503.564:12): pid=5216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.263" name="file1" dev="loop0" ino=1048594 res=0 errno=0
[  165.670753][ T5248] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  165.677301][ T5248] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  165.702316][ T5248] vhci_hcd vhci_hcd.0: Device attached
[  165.726783][ T5249] vhci_hcd: connection closed
[  165.728427][  T424] vhci_hcd: stop threads
[  165.743820][  T424] vhci_hcd: release socket
[  165.748278][  T424] vhci_hcd: disconnect device
[  166.748210][ T5272] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  166.770918][ T5272] cramfs: wrong magic
[  168.226046][ T5272] netlink: 52 bytes leftover after parsing attributes in process `syz.4.277'.
[  168.350318][ T5272] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.357694][ T5272] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.536277][ T4501] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.818596][ T4501] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.880688][ T4270] Bluetooth: hci2: command 0x0409 tx timeout
[  174.217947][ T5303] raw_sendmsg: syz.3.286 forgot to set AF_INET. Fix it!
[  174.221321][ T4501] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.257090][ T5303] ubi0: attaching mtd0
[  174.284478][ T5303] ubi0: scanning is finished
[  174.303287][ T5303] ubi0: empty MTD device detected
[  174.328676][ T4501] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.428530][ T5289] chnl_net:caif_netlink_parms(): no params data found
[  174.545384][ T5303] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  174.555861][ T5311] loop4: detected capacity change from 0 to 256
[  174.608359][ T5303] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  174.620689][ T5303] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  174.621501][ T5311] exfat: Deprecated parameter 'utf8'
[  174.670931][ T5303] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  174.678341][ T5303] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  174.685659][ T5303] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  174.693566][ T5311] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  174.693769][ T5303] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3063379492
[  174.720802][ T5303] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  174.732117][ T5309] ubi0: background thread "ubi_bgt0d" started, PID 5309
[  174.801361][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.828898][ T5289] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.831411][   T25] audit: type=1800 audit(1781639515.184:13): pid=5311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.288" name="file1" dev="loop4" ino=1048595 res=0 errno=0
[  174.837732][ T5289] device bridge_slave_0 entered promiscuous mode
[  174.866541][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.873829][ T5289] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.929544][ T5289] device bridge_slave_1 entered promiscuous mode
[  175.092083][ T4501] device ip6gretap1 left promiscuous mode
[  175.212521][ T4501] bridge0: port 3(ip6gretap1) entered disabled state
[  175.313046][ T5324] tmpfs: Unknown parameter 'usrquota'
[  175.435389][ T5289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.499416][ T5289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.610319][ T5289] team0: Port device team_slave_0 added
[  175.659614][ T5289] team0: Port device team_slave_1 added
[  175.840806][ T4197] Bluetooth: hci2: command 0x041b tx timeout
[  175.868649][ T5331] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  175.941130][ T5289] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.976345][ T5289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.183444][ T5289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.263825][ T5289] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.300953][ T5289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.453110][ T5289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.592722][ T5289] device hsr_slave_0 entered promiscuous mode
[  176.623232][ T5289] device hsr_slave_1 entered promiscuous mode
[  176.646310][ T5289] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  176.679942][ T5289] Cannot create hsr debugfs directory
[  177.598144][ T5372] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  177.691857][ T5388] loop4: detected capacity change from 0 to 256
[  177.746190][ T5372] kvm: pic: non byte read
[  177.768402][ T5372] kvm: pic: level sensitive irq not supported
[  177.769261][ T5372] kvm: pic: non byte read
[  177.787294][ T5372] kvm: pic: level sensitive irq not supported
[  177.787411][ T5372] kvm: pic: non byte read
[  177.799117][ T5388] exfat: Deprecated parameter 'utf8'
[  177.825126][ T5388] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  177.838104][ T5372] kvm: pic: level sensitive irq not supported
[  177.838208][ T5372] kvm: pic: non byte read
[  177.861610][ T4501] device hsr_slave_0 left promiscuous mode
[  177.864107][ T5372] kvm: pic: level sensitive irq not supported
[  177.876440][   T25] audit: type=1800 audit(1781639518.224:14): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.300" name="file1" dev="loop4" ino=1048596 res=0 errno=0
[  177.904076][ T4501] device hsr_slave_1 left promiscuous mode
[  177.911541][ T5372] kvm: pic: non byte read
[  177.916343][ T5372] kvm: pic: level sensitive irq not supported
[  177.916430][ T5372] kvm: pic: non byte read
[  177.920746][ T4197] Bluetooth: hci2: command 0x040f tx timeout
[  177.935852][ T4501] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.988289][ T4501] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.035882][ T4501] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.051003][ T5372] kvm: pic: level sensitive irq not supported
[  178.051068][ T5372] kvm: pic: non byte read
[  178.053908][ T5396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.301'.
[  178.058969][ T5372] kvm: pic: level sensitive irq not supported
[  178.067069][ T4501] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.110798][ T5372] kvm: pic: non byte read
[  178.119553][ T4501] device bridge_slave_1 left promiscuous mode
[  178.135373][ T4501] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.182591][ T4501] device bridge_slave_0 left promiscuous mode
[  178.200550][ T4501] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.275568][ T4501] device bridge0 left promiscuous mode
[  178.291829][ T4501] device veth1_macvtap left promiscuous mode
[  178.311105][ T4501] device veth0_macvtap left promiscuous mode
[  178.317362][ T4501] device veth1_vlan left promiscuous mode
[  178.327275][ T4501] device veth0_vlan left promiscuous mode
[  178.707013][ T4501] team0 (unregistering): Port device macvlan2 removed
[  178.843761][ T5401] loop4: detected capacity change from 0 to 128
[  178.859935][ T4501] team0 (unregistering): Port device team_slave_1 removed
[  178.874535][ T4501] team0 (unregistering): Port device team_slave_0 removed
[  178.896562][ T4501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.905743][ T5401] EXT4-fs (loop4): Unrecognized mount option "fsmagic=0x0000000000000003" or missing value
[  178.928517][ T4501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.986064][ T4501] bond0 (unregistering): Released all slaves
[  179.328071][ T5289] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  179.367708][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'.
[  179.490794][ T5289] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  179.528043][ T5289] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  179.923643][ T5289] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  180.000818][ T4197] Bluetooth: hci2: command 0x0419 tx timeout
[  180.408501][ T5289] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.441219][ T4197] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  180.685342][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  180.738839][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  180.801466][ T4238] Bluetooth: hci1: command 0x0406 tx timeout
[  180.821279][ T4197] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  180.896473][ T5289] 8021q: adding VLAN 0 to HW filter on device team0
[  180.916381][ T4197] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  181.060534][ T4197] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  181.143832][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  181.201477][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  181.215212][ T4197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.333096][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.340232][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.422607][ T1331] Bluetooth: hci3: command 0x0406 tx timeout
[  181.438988][ T1331] Bluetooth: hci0: command 0x0406 tx timeout
[  181.451890][ T5438] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  181.687732][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  181.871508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  182.087390][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  182.273370][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.280505][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.543764][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  182.677421][ T5452] loop4: detected capacity change from 0 to 256
[  182.750430][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  182.887894][ T5452] exfat: Deprecated parameter 'utf8'
[  182.981119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  183.272147][ T1331] Bluetooth: hci4: command 0x0406 tx timeout
[  183.348063][ T4197] usb 3-1: USB disconnect, device number 8
[  183.401734][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  183.417004][ T5289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  183.454191][ T5452] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  183.530639][ T5289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  183.570486][   T25] audit: type=1800 audit(1781639523.914:15): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.311" name="file1" dev="loop4" ino=1048597 res=0 errno=0
[  183.597052][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  183.622601][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  183.644876][ T5464] loop6: detected capacity change from 0 to 7
[  183.661458][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  183.679116][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  183.712497][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  183.735247][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  183.751521][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  183.811199][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  184.574326][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  184.590668][ T4197] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  184.590927][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  184.612665][ T5289] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.840713][ T4197] usb 3-1: Using ep0 maxpacket: 8
[  184.961545][ T4197] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.008512][ T4197] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.068502][ T4197] usb 3-1: config 0 interface 0 has no altsetting 0
[  185.083492][ T4197] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  185.118157][ T4197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.163178][ T4197] usb 3-1: config 0 descriptor??
[  185.421581][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  185.427522][ T5511] block device autoloading is deprecated and will be removed.
[  185.470990][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  185.514780][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  185.543938][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  185.558672][ T5289] device veth0_vlan entered promiscuous mode
[  185.574063][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  185.586262][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  185.615752][ T5289] device veth1_vlan entered promiscuous mode
[  185.686348][ T5289] device veth0_macvtap entered promiscuous mode
[  187.009921][  T424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  187.028864][  T424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  187.073154][  T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  187.082105][  T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  187.093629][  T424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  187.139161][ T5289] device veth1_macvtap entered promiscuous mode
[  187.250769][ T4197] usbhid 3-1:0.0: can't add hid device: -71
[  187.256794][ T4197] usbhid: probe of 3-1:0.0 failed with error -71
[  187.356669][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.377863][ T4197] usb 3-1: USB disconnect, device number 9
[  187.727441][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.086728][ T5289] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.096138][  T424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  188.148803][  T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  188.179721][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.218763][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.272957][ T5289] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.323285][  T424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  188.414574][  T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  188.665591][ T5289] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.816096][ T5289] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.920659][ T1331] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  188.943567][ T5289] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.059807][ T5289] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.476843][ T4499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.505539][ T4499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.545401][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  189.570736][ T1331] usb 3-1: Using ep0 maxpacket: 16
[  189.611016][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.697798][ T5566] netlink: 36 bytes leftover after parsing attributes in process `syz.3.334'.
[  189.712258][ T4349] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  189.854552][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.990828][ T4349] usb 1-1: Using ep0 maxpacket: 16
[  190.067588][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  190.114386][ T4349] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.300683][ T4349] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  190.440714][ T1331] usb 3-1: unable to get BOS descriptor or descriptor too short
[  190.496569][ T5573] 9pnet_virtio: no channels available for device syz
[  190.831189][ T4349] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  191.603160][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.208107][ T4349] usb 1-1: Product: syz
[  192.318237][ T4349] usb 1-1: Manufacturer: syz
[  192.418901][ T4349] usb 1-1: SerialNumber: syz
[  192.574306][ T1331] usb 3-1: unable to read config index 0 descriptor/start: -71
[  192.616556][ T4349] usb 1-1: can't set config #1, error -71
[  192.620007][ T1331] usb 3-1: can't read configurations, error -71
[  192.775126][ T4349] usb 1-1: USB disconnect, device number 7
[  192.811663][ T5585] syz.2.338 (5585): /proc/5584/oom_adj is deprecated, please use /proc/5584/oom_score_adj instead.
[  196.088474][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  196.094936][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  198.459068][ T5611] netlink: 36 bytes leftover after parsing attributes in process `syz.0.346'.
[  201.325674][ T5642] ODEBUG: Out of memory. ODEBUG disabled
[  201.750130][ T5657] ALSA: mixer_oss: invalid OSS volume ''
[  205.375921][ T5696] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  205.385473][ T5696] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  205.394896][ T5696] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  205.403881][ T5696] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  205.425480][ T5696] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  211.130440][ T5767] loop2: detected capacity change from 0 to 256
[  212.061100][ T5767] exfat: Deprecated parameter 'utf8'
[  212.095258][ T5767] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  212.355121][   T25] audit: type=1800 audit(1781639552.574:16): pid=5767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.377" name="file1" dev="loop2" ino=1048600 res=0 errno=0
[  214.417142][ T5806] loop4: detected capacity change from 0 to 128
[  214.580654][ T4269] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  214.722259][ T5816] tmpfs: Unknown parameter 'usrquota'
[  214.940760][ T4269] usb 3-1: Using ep0 maxpacket: 8
[  215.081132][ T4269] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  215.117678][ T4269] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  215.210861][ T4269] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  216.194181][ T4269] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  216.206017][ T4269] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  216.219233][ T4269] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  216.260593][ T4269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.551262][ T4269] usb 3-1: usb_control_msg returned -32
[  216.563087][ T4269] usbtmc 3-1:16.0: can't read capabilities
[  218.378302][ T4270] usb 3-1: USB disconnect, device number 12
[  218.911339][ T5860] 9pnet_virtio: no channels available for device syz
[  219.862480][ T5863] Illegal XDP return value 51, expect packet loss!
[  221.645689][ T5886] loop0: detected capacity change from 0 to 128
[  224.261578][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e6ef800: rx timeout, send abort
[  224.771327][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e6ef800: abort rx timeout. Force session deactivation
[  225.457979][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.409'.
[  225.761320][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.407'.
[  226.137860][ T4206] Bluetooth: hci2: link tx timeout
[  226.143424][ T4206] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  226.492966][ T5981] autofs4:pid:5981:autofs_fill_super: called with bogus options
[  227.532348][ T4206] Bluetooth: hci2: link tx timeout
[  227.537936][ T4206] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  228.253986][ T4234] Bluetooth: hci2: command 0x0406 tx timeout
[  228.473170][ T6001] netlink: 80 bytes leftover after parsing attributes in process `syz.2.421'.
[  229.637834][ T6014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.425'.
[  229.647057][ T6014] netlink: set zone limit has 8 unknown bytes
[  230.564570][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.427'.
[  231.116633][ T6026] binder: BINDER_SET_CONTEXT_MGR already set
[  231.130813][ T6026] binder: 6021:6026 ioctl 4018620d 200000004a80 returned -16
[  231.280852][ T4234] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  231.389780][ T6037] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.431'.
[  233.753436][ T6063] device bridge1 entered promiscuous mode
[  233.954250][ T6074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.438'.
[  233.964039][ T6074] netlink: set zone limit has 8 unknown bytes
[  238.038048][ T6098] device syzkaller0 entered promiscuous mode
[  238.057820][ T6098] 0: reclassify loop, rule prio 0, protocol 800
[  238.083401][ T6100] fuse: Bad value for 'fd'
[  238.336770][ T6108] loop3: detected capacity change from 0 to 256
[  238.355485][ T6110] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  238.599891][ T6108] exfat: Deprecated parameter 'utf8'
[  238.809712][ T6108] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  240.379532][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'.
[  240.693374][ T6148] fuse: Bad value for 'fd'
[  242.915224][ T6172] netlink: 36 bytes leftover after parsing attributes in process `syz.2.466'.
[  243.734229][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'.
[  243.861188][ T6174] device syzkaller0 entered promiscuous mode
[  245.232373][ T6207] fuse: Bad value for 'fd'
[  246.355641][ T6224] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  246.373967][ T6224] cramfs: wrong magic
[  247.343603][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.480'.
[  247.535432][ T6245] binder: 6234:6245 ioctl 80049370 200000000000 returned -22
[  249.313416][ T6260] fuse: Bad value for 'fd'
[  250.010059][ T6280] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  250.027104][ T6280] cramfs: wrong magic
[  254.664095][ T6315] fuse: Bad value for 'fd'
[  254.832398][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.498'.
[  255.549858][ T6343] 9pnet_virtio: no channels available for device syz
[  256.948300][ T6403] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  256.962597][ T6403] cramfs: wrong magic
[  258.257261][ T6403] netlink: 52 bytes leftover after parsing attributes in process `syz.3.505'.
[  259.480844][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.512'.
[  260.210689][ T4270] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  260.642642][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  260.649002][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  260.980623][ T4270] usb 3-1: Using ep0 maxpacket: 8
[  261.101794][ T4270] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  261.430469][ T4270] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  261.474610][ T4270] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  261.508503][ T4270] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  261.560918][ T4270] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  261.587403][ T4270] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  261.610797][ T4270] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  261.630150][ T4270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.782770][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.526'.
[  261.900673][ T4270] usb 3-1: GET_CAPABILITIES returned 0
[  261.906286][ T4270] usbtmc 3-1:16.0: can't read capabilities
[  262.816075][ T6541] loop4: detected capacity change from 0 to 128
[  262.907763][ T6541] EXT4-fs (loop4): Unrecognized mount option "fsmagic=0x0000000000000003" or missing value
[  262.971023][ T6546] netlink: 16 bytes leftover after parsing attributes in process `syz.5.530'.
[  262.980180][ T6546] netlink: set zone limit has 8 unknown bytes
[  263.620033][ T4349] usb 3-1: USB disconnect, device number 13
[  264.730109][ T6581] fuse: Invalid rootmode
[  264.883654][ T6587] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  265.052306][ T4349] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  265.300699][ T4349] usb 3-1: Using ep0 maxpacket: 8
[  265.422944][ T4349] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  265.473819][ T4349] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  265.496429][ T6591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.543'.
[  265.505810][ T6591] netlink: set zone limit has 8 unknown bytes
[  265.690632][ T4269] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  266.233901][ T4349] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  266.284444][ T4349] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  266.343781][ T4349] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  266.385683][ T4349] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  266.429453][ T4349] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  266.430623][ T4269] usb 1-1: Using ep0 maxpacket: 8
[  266.474307][ T4349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.573980][ T4269] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  266.577308][ T6606] loop3: detected capacity change from 0 to 128
[  266.586490][ T4269] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  266.613486][ T4269] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  266.625892][ T4269] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  266.640255][ T4269] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  266.671270][ T4269] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  266.694447][ T4269] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  266.720691][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.734112][ T6606] EXT4-fs (loop3): Unrecognized mount option "fsmagic=0x0000000000000003" or missing value
[  266.813978][ T4349] usb 3-1: GET_CAPABILITIES returned 0
[  266.829705][ T4349] usbtmc 3-1:16.0: can't read capabilities
[  267.020718][ T4269] usb 1-1: GET_CAPABILITIES returned 0
[  267.026233][ T4269] usbtmc 1-1:16.0: can't read capabilities
[  267.432361][ T4291] usb 3-1: USB disconnect, device number 14
[  268.676653][ T4291] usb 1-1: USB disconnect, device number 9
[  268.746880][ T6645] binder: 6639:6645 ioctl 80049370 200000000000 returned -22
[  269.367924][ T6649] fuse: Bad value for 'rootmode'
[  269.796178][ T6659] autofs4:pid:6659:autofs_fill_super: called with bogus options
[  270.747647][ T6668] loop5: detected capacity change from 0 to 128
[  270.919460][ T6668] EXT4-fs (loop5): Unrecognized mount option "fsmagic=0x0000000000000003" or missing value
[  271.260638][ T6679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.557'.
[  271.269804][ T6679] netlink: set zone limit has 8 unknown bytes
[  272.348415][ T4269] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  273.400683][ T4269] usb 5-1: Using ep0 maxpacket: 8
[  273.520907][ T4269] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  273.538810][ T4269] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  273.587999][ T4269] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  273.612804][ T4269] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  273.640355][ T4269] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  273.663434][ T4269] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  273.707119][ T4269] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  273.747376][ T4269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.747662][ T4291] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  273.988633][ T6728] binder: 6724:6728 ioctl 80049370 200000000000 returned -22
[  274.020638][ T4291] usb 1-1: Using ep0 maxpacket: 8
[  274.071301][ T4269] usb 5-1: GET_CAPABILITIES returned 0
[  274.087064][ T4269] usbtmc 5-1:16.0: can't read capabilities
[  274.600505][ T4269] usb 5-1: USB disconnect, device number 6
[  275.540679][ T4291] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  275.615171][ T4291] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  275.625228][ T4291] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  275.635145][ T4291] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  275.646871][ T4291] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  275.660468][ T4291] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  275.673808][ T4291] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  275.686346][ T4291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.714655][ T6741] loop3: detected capacity change from 0 to 128
[  275.732502][ T6743] loop5: detected capacity change from 0 to 256
[  275.771152][ T6743] exfat: Deprecated parameter 'utf8'
[  275.780916][ T6741] EXT4-fs (loop3): Unrecognized mount option "fsmagic=0x0000000000000003" or missing value
[  275.825622][ T6743] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  275.849002][   T25] audit: type=1800 audit(1781639616.194:17): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.572" name="file1" dev="loop5" ino=1048601 res=0 errno=0
[  276.048541][ T4291] usb 1-1: GET_CAPABILITIES returned 0
[  276.054390][ T4291] usbtmc 1-1:16.0: can't read capabilities
[  276.570614][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  276.580528][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  276.589612][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  276.598682][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  276.607759][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  276.616824][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  276.625903][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  276.634969][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  276.644034][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  276.653105][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  276.662203][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  276.671284][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  276.680351][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  276.689424][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  276.698510][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  276.707662][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  277.798371][ T4305] usb 1-1: USB disconnect, device number 10
[  278.312015][ T6785] binder: 6783:6785 ioctl 80049370 200000000000 returned -22
[  278.607510][ T4305] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  278.880949][ T4305] usb 1-1: Using ep0 maxpacket: 8
[  279.000792][ T4305] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  279.771102][ T4305] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  279.794684][ T4305] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  279.812851][ T4305] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  279.843842][ T4305] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  279.872928][ T4305] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  279.903269][ T4305] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  279.922682][ T4305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.200893][ T4305] usb 1-1: GET_CAPABILITIES returned 0
[  280.226736][ T4305] usbtmc 1-1:16.0: can't read capabilities
[  281.009578][ T6803] loop3: detected capacity change from 0 to 128
[  281.063901][ T6803] EXT4-fs (loop3): Unrecognized mount option "fsmagic=0x0000000000000003" or missing value
[  281.709833][ T6811] loop3: detected capacity change from 0 to 256
[  281.796511][ T6811] exfat: Deprecated parameter 'utf8'
[  281.802394][    C0] hrtimer: interrupt took 517006 ns
[  281.849071][ T6811] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  281.892007][   T25] audit: type=1800 audit(1781639622.244:18): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.589" name="file1" dev="loop3" ino=1048602 res=0 errno=0
[  282.250795][ T5453] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  282.530769][ T5453] usb 3-1: Using ep0 maxpacket: 8
[  282.633453][ T4291] usb 1-1: USB disconnect, device number 11
[  282.670984][ T5453] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  282.700184][ T5453] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  282.740620][ T5453] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  282.776103][ T5453] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  282.801052][ T5453] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  282.830801][ T5453] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  282.868815][ T5453] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  282.909612][ T5453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.220913][ T5453] usb 3-1: GET_CAPABILITIES returned 0
[  283.227336][ T5453] usbtmc 3-1:16.0: can't read capabilities
[  283.970581][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  283.979700][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  283.988860][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  283.997939][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  284.007100][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  284.016248][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  284.025311][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  284.034470][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  284.043538][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  284.052607][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  284.061669][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  284.070731][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  284.079887][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  284.088951][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  284.098170][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  284.107261][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  285.567464][ T5453] usb 3-1: USB disconnect, device number 15
[  286.534964][ T6854] loop2: detected capacity change from 0 to 128
[  286.765692][ T6854] EXT4-fs (loop2): Unrecognized mount option "fsmagic=0x0000000000000003" or missing value
[  287.321074][ T6862] device syzkaller0 entered promiscuous mode
[  287.573668][ T4305] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  288.261046][ T4305] usb 4-1: Using ep0 maxpacket: 8
[  290.401006][ T4305] usb 4-1: unable to read config index 0 descriptor/start: -71
[  290.663043][ T4305] usb 4-1: can't read configurations, error -71
[  290.765223][ T6881] loop0: detected capacity change from 0 to 256
[  290.831336][ T6881] exfat: Deprecated parameter 'utf8'
[  290.860812][ T4291] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  290.883685][ T6887] binder: BINDER_SET_CONTEXT_MGR already set
[  290.894859][ T6881] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  290.901572][ T6887] binder: 6885:6887 ioctl 4018620d 200000004a80 returned -16
[  290.963577][   T25] audit: type=1800 audit(1781639631.314:19): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.608" name="file1" dev="loop0" ino=1048603 res=0 errno=0
[  291.111768][ T4291] usb 3-1: Using ep0 maxpacket: 8
[  291.231863][ T4291] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  291.245012][ T4291] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  291.271726][ T4291] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  291.293376][ T4291] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  292.133090][ T4291] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  292.190283][ T4291] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  293.246806][ T4291] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  293.259775][ T4291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.334103][ T4291] usb 3-1: usb_control_msg returned -71
[  293.339784][ T4291] usbtmc 3-1:16.0: can't read capabilities
[  293.356360][ T4291] usb 3-1: USB disconnect, device number 16
[  293.725642][ T6905] device syzkaller0 entered promiscuous mode
[  295.302220][ T4269] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  295.414221][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.5.620'.
[  295.424910][ T6929] netlink: set zone limit has 8 unknown bytes
[  295.661568][ T4269] usb 4-1: Using ep0 maxpacket: 8
[  296.064855][ T4269] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  296.248024][ T4269] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  296.326117][ T4269] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  296.369173][ T4269] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  296.390701][ T4269] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  296.402632][ T4269] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  296.417607][ T4269] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  296.428185][ T4269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.700765][ T4269] usb 4-1: GET_CAPABILITIES returned 0
[  296.706945][ T4269] usbtmc 4-1:16.0: can't read capabilities
[  297.370994][ T4305] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  297.401287][ T6948] device syzkaller0 entered promiscuous mode
[  297.790797][ T4305] usb 3-1: Using ep0 maxpacket: 8
[  297.885107][ T6954] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  297.913289][ T6954] cramfs: wrong magic
[  297.968865][ T6954] netlink: 52 bytes leftover after parsing attributes in process `syz.0.629'.
[  297.994945][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.003027][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.900693][ T4305] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  298.909047][ T4305] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  298.967251][ T4305] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  298.977492][ T4305] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  298.988993][ T4305] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  299.107598][ T4305] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  299.121150][ T4305] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  299.130313][ T4305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.476624][ T4305] usb 3-1: GET_CAPABILITIES returned 0
[  299.485564][ T4305] usbtmc 3-1:16.0: can't read capabilities
[  299.506972][ T6964] loop4: detected capacity change from 0 to 256
[  299.551597][ T6964] exfat: Deprecated parameter 'utf8'
[  299.618150][ T6964] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  299.653648][   T25] audit: type=1800 audit(1781639640.004:20): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.632" name="file1" dev="loop4" ino=1048604 res=0 errno=0
[  299.970576][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  299.979712][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  299.988805][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  299.997902][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  300.006995][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  300.016097][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  300.025188][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  300.034272][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  300.043370][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  300.052444][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  300.061518][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  300.070613][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  300.079802][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  300.089015][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  300.098347][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  300.107444][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  300.122652][ T4305] usb 3-1: USB disconnect, device number 17
[  300.753526][ T4305] usb 4-1: USB disconnect, device number 9
[  301.538830][ T6983] binder: 6981:6983 ioctl 80049370 200000000000 returned -22
[  303.440456][ T7001] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  303.470602][ T7001] cramfs: wrong magic
[  303.516651][ T7001] netlink: 52 bytes leftover after parsing attributes in process `syz.0.643'.
[  304.767537][ T7007] fuse: Unknown parameter 'user_i00000000000000000000'
[  304.881029][ T4291] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  305.140606][ T4291] usb 1-1: Using ep0 maxpacket: 8
[  308.110786][ T4291] usb 1-1: unable to read config index 0 descriptor/start: -71
[  308.119103][ T4291] usb 1-1: can't read configurations, error -71
[  309.345338][ T7037] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  309.357150][ T7037] cramfs: wrong magic
[  312.109958][ T7037] netlink: 52 bytes leftover after parsing attributes in process `syz.0.655'.
[  312.141316][ T7034] device syzkaller0 entered promiscuous mode
[  312.265387][ T7048] fuse: Unknown parameter 'user_i00000000000000000000'
[  312.486839][ T7053] loop0: detected capacity change from 0 to 256
[  312.513084][ T7053] exfat: Deprecated parameter 'utf8'
[  312.557832][ T7053] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  312.705927][   T25] audit: type=1800 audit(1781639653.054:21): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.658" name="file1" dev="loop0" ino=1048605 res=0 errno=0
[  312.740794][ T4349] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  313.800597][ T4349] usb 3-1: Using ep0 maxpacket: 8
[  314.000755][ T4349] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  314.109521][ T4349] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  314.131307][ T4349] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  314.865494][ T4349] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  314.877251][ T4349] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  314.984068][ T4349] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  315.000379][ T4349] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  315.009941][ T4349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.480782][ T4349] usb 3-1: GET_CAPABILITIES returned 0
[  315.486390][ T4349] usbtmc 3-1:16.0: can't read capabilities
[  315.700667][ T7074] 9pnet_virtio: no channels available for device syz
[  316.433492][ T7087] fuse: Unknown parameter 'user_i00000000000000000000'
[  317.385244][ T7094] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  317.396491][ T7094] cramfs: wrong magic
[  317.406549][ T7094] netlink: 52 bytes leftover after parsing attributes in process `syz.5.667'.
[  317.418747][ T7094] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.426128][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.846158][ T7101] loop5: detected capacity change from 0 to 128
[  320.794648][ T7114] loop0: detected capacity change from 0 to 256
[  320.865537][ T7114] exfat: Deprecated parameter 'utf8'
[  320.898712][ T7114] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  320.973018][   T25] audit: type=1800 audit(1781639661.324:22): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.675" name="file1" dev="loop0" ino=1048606 res=0 errno=0
[  321.086585][ T4291] usb 3-1: USB disconnect, device number 18
[  322.192810][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  322.199156][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  322.281215][ T7130] fuse: Unknown parameter 'user_id00000000000000000000'
[  325.542966][ T7160] device syzkaller0 entered promiscuous mode
[  325.997125][ T7169] loop2: detected capacity change from 0 to 256
[  326.131185][ T7169] exfat: Deprecated parameter 'utf8'
[  326.178722][ T7171] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  326.676165][ T7169] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  327.177197][ T7177] fuse: Unknown parameter 'user_id00000000000000000000'
[  327.195310][   T25] audit: type=1800 audit(1781639667.544:23): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.692" name="file1" dev="loop2" ino=1048607 res=0 errno=0
[  327.797127][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'.
[  330.744720][ T7205] device syzkaller0 entered promiscuous mode
[  332.174176][ T7218] fuse: Unknown parameter 'user_id00000000000000000000'
[  333.086795][ T7229] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  333.117693][ T7229] cramfs: wrong magic
[  333.154167][ T7230] netlink: 52 bytes leftover after parsing attributes in process `syz.0.711'.
[  334.525823][ T7237] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  335.335836][ T7243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.714'.
[  335.345350][ T7243] netlink: set zone limit has 8 unknown bytes
[  338.297038][ T7257] fuse: Bad value for 'fd'
[  338.470804][ T1331] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  338.720693][ T1331] usb 1-1: Using ep0 maxpacket: 8
[  338.840979][ T1331] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  338.906884][ T1331] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  339.175820][ T1331] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  339.237199][ T7264] loop2: detected capacity change from 0 to 256
[  339.253983][ T1331] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  339.316630][ T1331] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  339.328062][ T1331] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  339.331354][ T7264] exfat: Deprecated parameter 'utf8'
[  339.348156][ T1331] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  339.358379][ T1331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.440013][ T7264] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  339.699377][ T7273] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  339.763213][   T25] audit: type=1800 audit(1781639680.114:24): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.722" name="file1" dev="loop2" ino=1048608 res=0 errno=0
[  339.905366][ T1331] usb 1-1: GET_CAPABILITIES returned 0
[  339.911947][ T1331] usbtmc 1-1:16.0: can't read capabilities
[  339.921059][ T7273] cramfs: wrong magic
[  339.974999][ T7274] netlink: 52 bytes leftover after parsing attributes in process `syz.5.723'.
[  340.149126][ T7252] udc-core: couldn't find an available UDC or it's busy
[  340.180701][ T7252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  340.636931][ T7252] udc-core: couldn't find an available UDC or it's busy
[  340.660840][ T7252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  340.700555][    C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  340.710432][ T7252] usbtmc 1-1:16.0: Unable to send data, error -71
[  341.221133][ T7252] udc-core: couldn't find an available UDC or it's busy
[  341.513413][ T7252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  341.722831][ T5453] usb 1-1: USB disconnect, device number 14
[  342.127417][ T7286] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  342.311678][ T7335] binder_alloc: 7334: binder_alloc_buf, no vma
[  342.765474][ T7343] fuse: Bad value for 'fd'
[  346.383290][ T7364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.738'.
[  346.393788][ T7364] netlink: set zone limit has 8 unknown bytes
[  347.190887][ T4349] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  347.480830][ T4349] usb 3-1: Using ep0 maxpacket: 8
[  347.646145][ T4349] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  347.701652][ T4349] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  347.732591][ T4349] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  347.751479][ T7379] fuse: Bad value for 'fd'
[  347.761540][ T4349] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  347.796323][ T4349] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  347.827858][ T4349] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  347.885159][ T7381] binder: BINDER_SET_CONTEXT_MGR already set
[  347.891385][ T4349] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  347.910574][ T7381] binder: 7380:7381 ioctl 4018620d 200000004a80 returned -16
[  347.918143][ T4349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.214095][ T4349] usb 3-1: GET_CAPABILITIES returned 0
[  348.219669][ T4349] usbtmc 3-1:16.0: can't read capabilities
[  348.424825][ T7373] udc-core: couldn't find an available UDC or it's busy
[  348.440207][ T7373] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  348.467061][ T7373] udc-core: couldn't find an available UDC or it's busy
[  348.494770][ T7373] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  348.560537][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  348.570647][ T7373] usbtmc 3-1:16.0: Unable to send data, error -71
[  348.714240][ T7389] 9pnet_virtio: no channels available for device syz
[  349.020868][ T7373] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -71
[  350.688407][ T4197] usb 3-1: USB disconnect, device number 19
[  350.756046][ T7392] loop5: detected capacity change from 0 to 256
[  350.792421][ T7396] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  350.812420][ T7392] exfat: Deprecated parameter 'utf8'
[  351.004644][ T7392] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  351.128348][   T25] audit: type=1800 audit(1781639691.474:25): pid=7392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.746" name="file1" dev="loop5" ino=1048609 res=0 errno=0
[  354.209874][ T7413] loop4: detected capacity change from 0 to 128
[  356.360680][ T4349] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  357.223733][ T4349] usb 3-1: Using ep0 maxpacket: 8
[  357.340873][ T4349] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  357.349012][ T4349] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  357.417262][ T4349] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  357.468498][ T4349] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  357.532848][ T4349] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  357.587284][ T4349] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  357.651332][ T4349] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  357.876694][ T7442] 9pnet_virtio: no channels available for device syz
[  358.846810][ T4349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.140901][ T4349] usb 3-1: GET_CAPABILITIES returned 0
[  359.150691][ T4349] usbtmc 3-1:16.0: can't read capabilities
[  359.491477][ T7431] udc-core: couldn't find an available UDC or it's busy
[  359.510788][ T7431] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  361.428520][ T4349] usb 3-1: USB disconnect, device number 20
[  361.511088][ T7460] loop5: detected capacity change from 0 to 128
[  361.679065][ T7465] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  363.214530][ T7479] loop0: detected capacity change from 0 to 256
[  364.019858][ T7479] exfat: Deprecated parameter 'utf8'
[  364.180620][ T7479] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  364.727762][   T25] audit: type=1800 audit(1781639705.074:26): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.773" name="file1" dev="loop0" ino=1048610 res=0 errno=0
[  365.240973][ T4349] Bluetooth: hci2: command 0x0406 tx timeout
[  365.642732][ T7501] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  365.652313][ T7501] cramfs: wrong magic
[  365.662408][ T7501] netlink: 52 bytes leftover after parsing attributes in process `syz.2.778'.
[  365.674624][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.682608][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.760919][ T4291] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  366.053353][ T4291] usb 1-1: Using ep0 maxpacket: 8
[  366.191955][ T4291] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  366.206333][ T4291] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  366.269083][ T4291] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  366.286121][ T4291] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  366.301061][ T4291] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  366.312240][ T4291] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  366.384461][ T7517] loop3: detected capacity change from 0 to 128
[  366.480578][ T4291] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  366.493817][ T4291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.804288][ T7521] udc-core: couldn't find an available UDC or it's busy
[  367.859338][ T7521] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  368.363922][ T4291] usb 1-1: GET_CAPABILITIES returned 0
[  368.369446][ T4291] usbtmc 1-1:16.0: can't read capabilities
[  368.419511][ T7521] udc-core: couldn't find an available UDC or it's busy
[  368.456316][ T7521] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  368.725062][ T7527] loop5: detected capacity change from 0 to 256
[  368.732351][ T7527] exfat: Deprecated parameter 'utf8'
[  368.760523][    C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  368.826680][ T7499] usbtmc 1-1:16.0: Unable to send data, error -71
[  369.613814][ T7499] udc-core: couldn't find an available UDC or it's busy
[  369.646035][ T7527] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  369.679883][ T7499] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  369.776675][ T7499] udc-core: couldn't find an available UDC or it's busy
[  369.792793][   T25] audit: type=1800 audit(1781639710.144:27): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.787" name="file1" dev="loop5" ino=1048611 res=0 errno=0
[  369.838221][ T7499] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  369.962960][ T4305] usb 1-1: USB disconnect, device number 15
[  371.262307][ T7550] device syzkaller0 entered promiscuous mode
[  371.433842][ T7562] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  371.485345][ T7564] binder: BINDER_SET_CONTEXT_MGR already set
[  371.559803][ T7564] binder: 7563:7564 ioctl 4018620d 200000004a80 returned -16
[  371.661996][ T7571] loop5: detected capacity change from 0 to 128
[  376.011465][ T7591] loop2: detected capacity change from 0 to 256
[  376.081272][ T7591] exfat: Deprecated parameter 'utf8'
[  376.151981][ T7591] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  376.209689][   T25] audit: type=1800 audit(1781639716.554:28): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.800" name="file1" dev="loop2" ino=1048612 res=0 errno=0
[  376.505824][ T7589] device syzkaller0 entered promiscuous mode
[  376.757256][ T4197] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  377.060860][ T4197] usb 5-1: Using ep0 maxpacket: 8
[  377.210740][ T4197] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  377.320813][ T4197] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  377.333528][ T4197] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  377.370591][ T4197] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  377.400749][ T4197] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  377.414172][ T4197] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  377.428823][ T4197] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  377.449870][ T4197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.740755][ T4197] usb 5-1: GET_CAPABILITIES returned 0
[  377.746713][ T4197] usbtmc 5-1:16.0: can't read capabilities
[  378.708128][ T7595] udc-core: couldn't find an available UDC or it's busy
[  378.791179][ T7595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  378.821578][ T7595] udc-core: couldn't find an available UDC or it's busy
[  378.851246][ T7595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  378.864468][ T7623] device syzkaller0 entered promiscuous mode
[  378.890935][    C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  378.911865][ T7595] usbtmc 5-1:16.0: Unable to send data, error -71
[  379.119986][ T7595] udc-core: couldn't find an available UDC or it's busy
[  379.133844][ T7595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  379.176969][ T7595] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71
[  379.185340][ T7595] udc-core: couldn't find an available UDC or it's busy
[  379.193785][ T7595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  379.205637][ T1357] usb 5-1: USB disconnect, device number 7
[  379.227681][ T7628] loop0: detected capacity change from 0 to 128
[  379.357049][ T4234] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  381.145082][ T7645] loop0: detected capacity change from 0 to 256
[  381.170690][ T4234] usb 6-1: Using ep0 maxpacket: 8
[  381.191680][ T7648] device syzkaller0 entered promiscuous mode
[  381.244839][ T7645] exfat: Deprecated parameter 'utf8'
[  381.290980][ T4234] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  381.305130][ T7645] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  381.328670][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.353440][   T25] audit: type=1800 audit(1781639721.704:29): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.812" name="file1" dev="loop0" ino=1048613 res=0 errno=0
[  381.420555][ T4235] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  381.523378][ T4234] pvrusb2: Hardware description: Terratec Grabster AV400
[  381.539533][ T4234] pvrusb2: **********
[  381.549723][ T4234] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  381.790772][ T4235] usb 5-1: Using ep0 maxpacket: 8
[  381.835736][ T4234] pvrusb2: Important functionality might not be entirely working.
[  381.845229][ T4234] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  381.857621][ T4234] pvrusb2: **********
[  381.905926][ T2426] pvrusb2: Invalid write control endpoint
[  382.733338][ T4235] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  382.819428][ T4235] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  382.845258][ T4235] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  382.913313][ T4234] usb 6-1: USB disconnect, device number 2
[  382.937149][ T4235] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  383.025560][ T4235] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  383.029676][ T2426] pvrusb2: Invalid write control endpoint
[  383.085407][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  383.085566][ T4235] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  383.136768][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  383.150810][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  383.162841][ T2426] pvrusb2: Device being rendered inoperable
[  383.184693][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  383.186939][ T4235] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  383.195341][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  383.205917][ T7666] device syzkaller0 entered promiscuous mode
[  383.224670][ T2426] pvrusb2: Attached sub-driver cx25840
[  383.231079][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  383.244365][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  383.260717][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.414478][ T7673] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  383.524417][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  383.534220][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  383.563983][ T4235] usb 5-1: GET_CAPABILITIES returned 0
[  383.569820][ T4235] usbtmc 5-1:16.0: can't read capabilities
[  384.124290][ T7682] loop0: detected capacity change from 0 to 128
[  384.230805][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  384.240009][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  384.249103][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  384.258194][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  384.267284][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  384.276366][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  384.285442][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  384.294536][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  384.303608][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  384.312677][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  384.321739][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  384.330806][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  384.339868][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  384.348922][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  384.357976][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  384.367089][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.595815][ T7701] loop2: detected capacity change from 0 to 256
[  387.631394][ T7701] exfat: Deprecated parameter 'utf8'
[  387.659047][ T7701] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  387.671596][ T4349] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  387.804959][   T25] audit: type=1800 audit(1781639728.154:30): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.827" name="file1" dev="loop2" ino=1048614 res=0 errno=0
[  388.420525][ T4349] usb 1-1: Using ep0 maxpacket: 8
[  388.620794][ T4349] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  388.631926][ T4349] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  388.648988][ T7707] device syzkaller0 entered promiscuous mode
[  389.305238][ T4349] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  389.315876][ T4349] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  389.327584][ T4349] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  389.338344][ T4349] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  389.351902][ T4349] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  389.361619][ T4349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.640708][ T4349] usb 1-1: GET_CAPABILITIES returned 0
[  389.646253][ T4349] usbtmc 1-1:16.0: can't read capabilities
[  389.919250][ T7697] udc-core: couldn't find an available UDC or it's busy
[  390.005269][ T7727] loop5: detected capacity change from 0 to 128
[  390.252431][ T7697] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  391.306950][ T4270] usb 5-1: USB disconnect, device number 8
[  392.632391][ T4305] usb 1-1: USB disconnect, device number 16
[  394.218436][ T7745] loop4: detected capacity change from 0 to 256
[  394.309362][ T7745] exfat: Deprecated parameter 'utf8'
[  394.424948][ T7745] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  394.523978][   T25] audit: type=1800 audit(1781639734.874:31): pid=7745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.839" name="file1" dev="loop4" ino=1048615 res=0 errno=0
[  395.418064][ T7756] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  396.394387][ T7768] device syzkaller0 entered promiscuous mode
[  396.402789][ T7769] netlink: set zone limit has 8 unknown bytes
[  396.634198][ T7773] loop2: detected capacity change from 0 to 128
[  396.970745][ T4291] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  397.190681][ T5453] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  397.230791][ T4291] usb 4-1: Using ep0 maxpacket: 8
[  397.370724][ T4291] usb 4-1: config index 0 descriptor too short (expected 74, got 45)
[  397.409941][ T4291] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  397.430169][ T4291] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  397.450641][ T5453] usb 5-1: Using ep0 maxpacket: 8
[  397.461093][ T4291] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  397.496862][ T4291] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  397.535802][ T4291] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  397.571003][ T5453] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  397.624124][ T4291] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  397.627759][ T5453] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  397.650763][ T5453] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  397.665282][ T5453] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  397.679729][ T5453] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  397.695199][ T4291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.652917][ T5453] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  399.867200][ T1357] Bluetooth: hci1: command 0x0409 tx timeout
[  399.877640][ T5453] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  399.887647][ T5453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.920765][ T5453] usb 5-1: can't set config #16, error -71
[  399.940955][ T4291] usb 4-1: can't set config #16, error -71
[  399.950814][ T4291] usb 4-1: USB disconnect, device number 10
[  399.954391][ T5453] usb 5-1: USB disconnect, device number 9
[  399.984257][ T7791] loop4: detected capacity change from 0 to 256
[  400.104302][ T7791] exfat: Deprecated parameter 'utf8'
[  400.491321][ T7791] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  400.605180][   T25] audit: type=1800 audit(1781639740.954:32): pid=7791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.851" name="file1" dev="loop4" ino=1048616 res=0 errno=0
[  403.749428][ T7822] device syzkaller0 entered promiscuous mode
[  403.812222][ T7821] loop0: detected capacity change from 0 to 128
[  404.800787][ T1357] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  407.192374][ T7846] loop2: detected capacity change from 0 to 256
[  407.214023][ T7846] exfat: Deprecated parameter 'utf8'
[  407.252523][ T7846] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  407.383275][ T1357] usb 3-1: device not accepting address 21, error -71
[  407.430575][ T4305] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  407.560524][   T25] audit: type=1800 audit(1781639747.894:33): pid=7846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.867" name="file1" dev="loop2" ino=1048617 res=0 errno=0
[  407.778672][ T4305] usb 1-1: Using ep0 maxpacket: 32
[  407.900856][ T4305] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  407.951228][ T4305] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  408.052061][ T4305] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  408.126267][ T4305] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  409.365414][ T4305] usb 1-1: config 0 interface 0 has no altsetting 0
[  409.467027][ T7861] device syzkaller0 entered promiscuous mode
[  409.531063][ T4305] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  409.550646][ T4305] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  409.559222][ T4305] usb 1-1: Product: syz
[  409.564276][ T4305] usb 1-1: Manufacturer: syz
[  409.568900][ T4305] usb 1-1: SerialNumber: syz
[  409.608957][ T4305] usb 1-1: config 0 descriptor??
[  410.650645][ T4305] usb 1-1: can't set config #0, error -71
[  410.657907][ T4305] usb 1-1: USB disconnect, device number 17
[  410.940745][ T7873] loop0: detected capacity change from 0 to 128
[  411.761189][ T4197] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  412.110692][ T4197] usb 5-1: Using ep0 maxpacket: 8
[  412.230734][ T4197] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  412.364401][ T4197] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  412.641027][ T4197] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  412.755424][ T4197] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  412.829812][ T4197] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  412.850695][ T4197] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  412.877457][ T4197] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  412.897880][ T4197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.993930][ T7902] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  413.030021][ T7902] blk_update_request: I/O error, dev loop3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  413.045857][ T7902] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  413.067162][ T7902] blk_update_request: I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  413.088661][ T7902] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  413.108613][ T7902] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  413.133751][ T7902] blk_update_request: I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  413.149175][ T7902] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  413.167959][ T7902] blk_update_request: I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  413.195392][ T7902] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  413.239565][ T7902] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  413.252038][ T4197] usb 5-1: GET_CAPABILITIES returned 0
[  413.265406][ T4197] usbtmc 5-1:16.0: can't read capabilities
[  413.307069][ T7902] blk_update_request: I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  413.354547][ T7902] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  413.374269][ T7902] blk_update_request: I/O error, dev loop3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  413.389936][ T7902] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  413.409919][ T7902] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  413.429258][ T7902] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  413.448100][ T7902] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  413.472550][ T7902] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  418.102803][ T5453] usb 5-1: USB disconnect, device number 10
[  419.009844][ T7931] loop3: detected capacity change from 0 to 256
[  419.082960][ T7931] exfat: Deprecated parameter 'utf8'
[  419.208534][ T7931] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  419.282058][   T25] audit: type=1800 audit(1781639759.634:34): pid=7931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.888" name="file1" dev="loop3" ino=1048618 res=0 errno=0
[  419.600612][ T1357] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  419.638845][ T7940] 9pnet_virtio: no channels available for device syz
[  419.991340][ T1357] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  421.863270][ T1357] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  422.046265][ T1357] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  422.076750][ T1357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.091871][ T4192] 
[  422.094238][ T4192] ======================================================
[  422.101247][ T4192] WARNING: possible circular locking dependency detected
[  422.108252][ T4192] syzkaller #0 Not tainted
[  422.112726][ T4192] ------------------------------------------------------
[  422.119715][ T4192] syz-executor/4192 is trying to acquire lock:
[  422.125929][ T4192] ffff888027798938 ((wq_completion)loop3){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0
[  422.135767][ T4192] 
[  422.135767][ T4192] but task is already holding lock:
[  422.143121][ T4192] ffff888146e97468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90
[  422.152159][ T4192] 
[  422.152159][ T4192] which lock already depends on the new lock.
[  422.152159][ T4192] 
[  422.162674][ T4192] 
[  422.162674][ T4192] the existing dependency chain (in reverse order) is:
[  422.171679][ T4192] 
[  422.171679][ T4192] -> #8 (&lo->lo_mutex){+.+.}-{3:3}:
[  422.179162][ T4192]        __mutex_lock_common+0x1e3/0x2400
[  422.184955][ T4192]        mutex_lock_killable_nested+0x17/0x20
[  422.191015][ T4192]        lo_open+0x6a/0x100
[  422.195528][ T4192]        blkdev_get_whole+0x90/0x390
[  422.200870][ T4192]        blkdev_get_by_dev+0x2d0/0xa60
[  422.206314][ T4192]        blkdev_open+0x12d/0x2c0
[  422.211235][ T4192]        do_dentry_open+0x7ff/0xf80
[  422.216501][ T4192]        path_openat+0x26f5/0x2fa0
[  422.221713][ T4192]        do_filp_open+0x1e2/0x410
[  422.226728][ T4192]        do_sys_openat2+0x150/0x4b0
[  422.231914][ T4192]        __x64_sys_openat+0x135/0x160
[  422.237263][ T4192]        do_syscall_64+0x4c/0xa0
[  422.242258][ T4192]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  422.248699][ T4192] 
[  422.248699][ T4192] -> #7 (&disk->open_mutex){+.+.}-{3:3}:
[  422.256490][ T4192]        __mutex_lock_common+0x1e3/0x2400
[  422.262205][ T4192]        mutex_lock_nested+0x17/0x20
[  422.267471][ T4192]        bd_register_pending_holders+0x33/0x310
[  422.273746][ T4192]        device_add_disk+0x5a7/0xd40
[  422.279055][ T4192]        md_alloc+0x809/0xc00
[  422.283793][ T4192]        blk_request_module+0x26e/0x290
[  422.289318][ T4192]        blkdev_get_no_open+0x38/0x1d0
[  422.294759][ T4192]        blkdev_get_by_dev+0x77/0xa60
[  422.300115][ T4192]        blkdev_open+0x12d/0x2c0
[  422.305035][ T4192]        do_dentry_open+0x7ff/0xf80
[  422.310215][ T4192]        path_openat+0x26f5/0x2fa0
[  422.315315][ T4192]        do_filp_open+0x1e2/0x410
[  422.320338][ T4192]        do_sys_openat2+0x150/0x4b0
[  422.325518][ T4192]        __x64_sys_openat+0x135/0x160
[  422.330868][ T4192]        do_syscall_64+0x4c/0xa0
[  422.335787][ T4192]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  422.342181][ T4192] 
[  422.342181][ T4192] -> #6 (disks_mutex){+.+.}-{3:3}:
[  422.349538][ T4192]        __mutex_lock_common+0x1e3/0x2400
[  422.355257][ T4192]        mutex_lock_nested+0x17/0x20
[  422.360528][ T4192]        md_alloc+0x48/0xc00
[  422.365135][ T4192]        blk_request_module+0x26e/0x290
[  422.370670][ T4192]        blkdev_get_no_open+0x38/0x1d0
[  422.376105][ T4192]        blkdev_get_by_dev+0x77/0xa60
[  422.381457][ T4192]        blkdev_open+0x12d/0x2c0
[  422.386374][ T4192]        do_dentry_open+0x7ff/0xf80
[  422.391560][ T4192]        path_openat+0x26f5/0x2fa0
[  422.396666][ T4192]        do_filp_open+0x1e2/0x410
[  422.401675][ T4192]        do_sys_openat2+0x150/0x4b0
[  422.406851][ T4192]        __x64_sys_openat+0x135/0x160
[  422.412208][ T4192]        do_syscall_64+0x4c/0xa0
[  422.417125][ T4192]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  422.423525][ T4192] 
[  422.423525][ T4192] -> #5 (major_names_lock){+.+.}-{3:3}:
[  422.431260][ T4192]        __mutex_lock_common+0x1e3/0x2400
[  422.436963][ T4192]        mutex_lock_nested+0x17/0x20
[  422.442228][ T4192]        blk_request_module+0x31/0x290
[  422.447673][ T4192]        blkdev_get_no_open+0x38/0x1d0
[  422.453112][ T4192]        blkdev_get_by_dev+0x77/0xa60
[  422.458461][ T4192]        swsusp_check+0xa1/0x2b0
[  422.463413][ T4192]        software_resume+0xc6/0x3b0
[  422.468588][ T4192]        resume_store+0xe4/0x130
[  422.473503][ T4192]        kernfs_fop_write_iter+0x379/0x4c0
[  422.479363][ T4192]        vfs_write+0x745/0xd60
[  422.484104][ T4192]        ksys_write+0x152/0x260
[  422.488931][ T4192]        do_syscall_64+0x4c/0xa0
[  422.493850][ T4192]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  422.500251][ T4192] 
[  422.500251][ T4192] -> #4 (system_transition_mutex/1){+.+.}-{3:3}:
[  422.508738][ T4192]        __mutex_lock_common+0x1e3/0x2400
[  422.514437][ T4192]        mutex_lock_nested+0x17/0x20
[  422.519701][ T4192]        software_resume+0x7c/0x3b0
[  422.524878][ T4192]        resume_store+0xe4/0x130
[  422.529882][ T4192]        kernfs_fop_write_iter+0x379/0x4c0
[  422.535668][ T4192]        vfs_write+0x745/0xd60
[  422.540847][ T4192]        ksys_write+0x152/0x260
[  422.545676][ T4192]        do_syscall_64+0x4c/0xa0
[  422.550591][ T4192]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  422.556990][ T4192] 
[  422.556990][ T4192] -> #3 (&of->mutex){+.+.}-{3:3}:
[  422.564175][ T4192]        __mutex_lock_common+0x1e3/0x2400
[  422.569887][ T4192]        mutex_lock_nested+0x17/0x20
[  422.575248][ T4192]        kernfs_seq_start+0x51/0x3c0
[  422.580578][ T4192]        seq_read_iter+0x3c4/0xd50
[  422.585697][ T4192]        vfs_read+0x759/0xd60
[  422.590353][ T4192]        ksys_read+0x152/0x260
[  422.595098][ T4192]        do_syscall_64+0x4c/0xa0
[  422.600020][ T4192]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  422.606415][ T4192] 
[  422.606415][ T4192] -> #2 (&p->lock){+.+.}-{3:3}:
[  422.613425][ T4192]        __mutex_lock_common+0x1e3/0x2400
[  422.619125][ T4192]        mutex_lock_nested+0x17/0x20
[  422.624388][ T4192]        seq_read_iter+0xad/0xd50
[  422.629391][ T4192]        do_iter_readv_writev+0x47e/0x5f0
[  422.635089][ T4192]        do_iter_read+0x20b/0x7c0
[  422.640093][ T4192]        loop_process_work+0x16dd/0x24a0
[  422.645704][ T4192]        process_one_work+0x85f/0x1010
[  422.651141][ T4192]        worker_thread+0xaa6/0x1290
[  422.656339][ T4192]        kthread+0x436/0x520
[  422.660961][ T4192]        ret_from_fork+0x1f/0x30
[  422.665891][ T4192] 
[  422.665891][ T4192] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}:
[  422.674980][ T4192]        process_one_work+0x7bb/0x1010
[  422.680419][ T4192]        worker_thread+0xaa6/0x1290
[  422.685598][ T4192]        kthread+0x436/0x520
[  422.690163][ T4192]        ret_from_fork+0x1f/0x30
[  422.695078][ T4192] 
[  422.695078][ T4192] -> #0 ((wq_completion)loop3){+.+.}-{0:0}:
[  422.703130][ T4192]        __lock_acquire+0x2c42/0x7d10
[  422.708566][ T4192]        lock_acquire+0x19e/0x400
[  422.713566][ T4192]        flush_workqueue+0x16c/0x13d0
[  422.718916][ T4192]        drain_workqueue+0xcf/0x380
[  422.724093][ T4192]        destroy_workqueue+0x7b/0xb20
[  422.729443][ T4192]        __loop_clr_fd+0x234/0xb90
[  422.734533][ T4192]        blkdev_put+0x53f/0x7d0
[  422.739361][ T4192]        deactivate_locked_super+0x93/0xf0
[  422.745150][ T4192]        cleanup_mnt+0x42d/0x4e0
[  422.750091][ T4192]        task_work_run+0x125/0x1a0
[  422.755187][ T4192]        exit_to_user_mode_loop+0x10f/0x130
[  422.761138][ T4192]        exit_to_user_mode_prepare+0xee/0x180
[  422.767183][ T4192]        syscall_exit_to_user_mode+0x16/0x40
[  422.773140][ T4192]        do_syscall_64+0x58/0xa0
[  422.778055][ T4192]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  422.784446][ T4192] 
[  422.784446][ T4192] other info that might help us debug this:
[  422.784446][ T4192] 
[  422.794655][ T4192] Chain exists of:
[  422.794655][ T4192]   (wq_completion)loop3 --> &disk->open_mutex --> &lo->lo_mutex
[  422.794655][ T4192] 
[  422.808272][ T4192]  Possible unsafe locking scenario:
[  422.808272][ T4192] 
[  422.815697][ T4192]        CPU0                    CPU1
[  422.821046][ T4192]        ----                    ----
[  422.826384][ T4192]   lock(&lo->lo_mutex);
[  422.830599][ T4192]                                lock(&disk->open_mutex);
[  422.837678][ T4192]                                lock(&lo->lo_mutex);
[  422.844413][ T4192]   lock((wq_completion)loop3);
[  422.849244][ T4192] 
[  422.849244][ T4192]  *** DEADLOCK ***
[  422.849244][ T4192] 
[  422.857371][ T4192] 2 locks held by syz-executor/4192:
[  422.862648][ T4192]  #0: ffff88802094d918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0
[  422.871925][ T4192]  #1: ffff888146e97468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90
[  422.881117][ T4192] 
[  422.881117][ T4192] stack backtrace:
[  422.887011][ T4192] CPU: 0 PID: 4192 Comm: syz-executor Not tainted syzkaller #0
[  422.894531][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  422.904577][ T4192] Call Trace:
[  422.907896][ T4192]  <TASK>
[  422.910851][ T4192]  dump_stack_lvl+0x188/0x250
[  422.915668][ T4192]  ? load_image+0x400/0x400
[  422.920220][ T4192]  ? show_regs_print_info+0x20/0x20
[  422.925406][ T4192]  ? print_circular_bug+0x12b/0x1a0
[  422.930589][ T4192]  check_noncircular+0x296/0x330
[  422.935515][ T4192]  ? add_chain_block+0x940/0x940
[  422.940427][ T4192]  ? lockdep_lock+0xf1/0x1f0
[  422.945015][ T4192]  ? mark_lock+0x94/0x320
[  422.949323][ T4192]  __lock_acquire+0x2c42/0x7d10
[  422.954184][ T4192]  ? verify_lock_unused+0x140/0x140
[  422.959366][ T4192]  ? verify_lock_unused+0x140/0x140
[  422.964568][ T4192]  ? verify_lock_unused+0x140/0x140
[  422.969751][ T4192]  ? memset+0x1e/0x40
[  422.973768][ T4192]  lock_acquire+0x19e/0x400
[  422.978251][ T4192]  ? flush_workqueue+0x150/0x13d0
[  422.983250][ T4192]  ? __mutex_trylock_common+0x155/0x260
[  422.988771][ T4192]  ? read_lock_is_recursive+0x10/0x10
[  422.994120][ T4192]  ? __init_swait_queue_head+0xa5/0x150
[  422.999692][ T4192]  flush_workqueue+0x16c/0x13d0
[  423.004543][ T4192]  ? flush_workqueue+0x150/0x13d0
[  423.009546][ T4192]  ? __lock_acquire+0x7d10/0x7d10
[  423.014549][ T4192]  ? lock_chain_count+0x20/0x20
[  423.019379][ T4192]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  423.024822][ T4192]  ? lockdep_hardirqs_off+0x70/0x100
[  423.030089][ T4192]  ? rcu_work_rcufn+0x120/0x120
[  423.034916][ T4192]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  423.040536][ T4192]  ? finish_wait+0xc0/0x1d0
[  423.045036][ T4192]  drain_workqueue+0xcf/0x380
[  423.049714][ T4192]  destroy_workqueue+0x7b/0xb20
[  423.054543][ T4192]  __loop_clr_fd+0x234/0xb90
[  423.059122][ T4192]  ? lo_release+0x172/0x1f0
[  423.063605][ T4192]  ? lo_open+0x100/0x100
[  423.067832][ T4192]  blkdev_put+0x53f/0x7d0
[  423.072141][ T4192]  deactivate_locked_super+0x93/0xf0
[  423.077403][ T4192]  cleanup_mnt+0x42d/0x4e0
[  423.081808][ T4192]  ? lockdep_hardirqs_on+0x94/0x140
[  423.086985][ T4192]  task_work_run+0x125/0x1a0
[  423.091553][ T4192]  exit_to_user_mode_loop+0x10f/0x130
[  423.096906][ T4192]  exit_to_user_mode_prepare+0xee/0x180
[  423.102513][ T4192]  syscall_exit_to_user_mode+0x16/0x40
[  423.107950][ T4192]  do_syscall_64+0x58/0xa0
[  423.112341][ T4192]  ? clear_bhb_loop+0x30/0x80
[  423.116994][ T4192]  ? clear_bhb_loop+0x30/0x80
[  423.121651][ T4192]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  423.127537][ T4192] RIP: 0033:0x7fd03a209097
[  423.131987][ T4192] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  423.151702][ T4192] RSP: 002b:00007fff57ecc908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  423.160091][ T4192] RAX: 0000000000000000 RBX: 00007fd03a29d1ca RCX: 00007fd03a209097
[  423.168041][ T4192] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff57ecc9c0
[  423.175987][ T4192] RBP: 00007fff57ecc9c0 R08: 00007fff57ecd9c0 R09: 00000000ffffffff
[  423.183935][ T4192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff57ecda50
[  423.191967][ T4192] R13: 00007fd03a29d1ca R14: 00000000000667f4 R15: 00007fff57ecda90
[  423.199921][ T4192]  </TASK>
[  423.343249][ T7955] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  423.373004][ T7955] cramfs: wrong magic
[  423.394309][ T7955] netlink: 52 bytes leftover after parsing attributes in process `syz.0.895'.
[  423.596867][ T1357] usb 5-1: Product: syz
[  423.601120][ T1357] usb 5-1: Manufacturer: syz
[  423.605728][ T1357] usb 5-1: SerialNumber: syz
[  423.611693][ T1357] usb 5-1: config 0 descriptor??
[  423.630865][ T1357] usb 5-1: can't set config #0, error -71
[  423.652614][ T1357] usb 5-1: USB disconnect, device number 11