last executing test programs:

10m14.633689881s ago: executing program 4 (id=297):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
bind$packet(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

10m14.46865354s ago: executing program 4 (id=298):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)

10m14.277963709s ago: executing program 4 (id=299):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0)
close(r4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x35dfdbf8, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xffffffff, 0x3, 0x1, 0x7fff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff2, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240440f0}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"})

10m13.712056328s ago: executing program 4 (id=304):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4804, 0x5}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e00)=ANY=[@ANYBLOB="180000001600010a000000000000000000000000a015"], 0x78}}, 0x0)
dup(0xffffffffffffffff)
epoll_create(0x7)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0)
syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101)

10m13.019817484s ago: executing program 3 (id=309):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a05060200"], 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)

10m12.857585443s ago: executing program 3 (id=311):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4000004)

10m12.699804781s ago: executing program 3 (id=313):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x543, 0xe621, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0xe0, 0x63}}}}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f0000000780), 0x0}, 0x0)

10m12.641916404s ago: executing program 0 (id=314):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x35dfdbf8, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xffffffff, 0x3, 0x1, 0x7fff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff2, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240440f0}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"})

10m12.603210176s ago: executing program 2 (id=315):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x4}, 0x50)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00')
preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0xb6, 0x0)

10m12.476264652s ago: executing program 2 (id=316):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0xfffe}], 0x1)

10m12.411116445s ago: executing program 2 (id=317):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="f367365e0f001d080000000f01d7670f013966baf80cb8de8a8682ef66bafc0cb0e9eec4a1f9d0f63626f343e100f342a766baf80cb80f469386ef66bafc0cb07cee410f766f000f009986000000", 0x4e}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10m12.363199838s ago: executing program 0 (id=318):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000)

10m12.178313258s ago: executing program 0 (id=319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x13, 0x3, "91abc12404cf378042f26c43f91f68"}]}], {0x14}}, 0x7c}}, 0x0)

10m12.048072834s ago: executing program 0 (id=320):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
sendmsg$sock(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000019c0)="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", 0x5de}], 0x1}, 0x90)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000000)={0xf0000000, 0x79d})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000140)})
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10m11.469696144s ago: executing program 2 (id=321):
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
mkdir(0x0, 0xd0939199c36b4d28)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket(0x10, 0x803, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r1 = syz_open_dev$sg(0x0, 0x0, 0x401)
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)

10m11.101363273s ago: executing program 0 (id=323):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, 0x0, 0x4000)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

10m10.881595825s ago: executing program 2 (id=326):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

10m10.563908121s ago: executing program 2 (id=328):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x35dfdbf8, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xffffffff, 0x3, 0x1, 0x7fff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff2, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240440f0}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"})

10m10.473533046s ago: executing program 4 (id=330):
socket(0x400000000010, 0x3, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f00004ba000/0x2000)=nil, 0x2000}})
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000800)}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
clock_getres(0x8, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000300)=0xffffff7f, 0x4)

10m10.159813992s ago: executing program 3 (id=331):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1)
mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x6b}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r2 = add_key$user(0x0, 0x0, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fe", 0x35, 0xfffffffffffffffe)
r3 = add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
rmdir(0x0)
symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00')
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047453, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}})
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f0000000280)=""/83, 0x53, 0x0)
socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x4180)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000340))
close(r4)

10m10.159219702s ago: executing program 0 (id=332):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x800)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r2, r2, 0x0, 0x2000fb)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x1, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}})
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
io_setup(0x7, &(0x7f0000000280)=<r4=>0x0)
r5 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0)
io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0xfffffc98}])
readv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38)
shutdown(r6, 0x1)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
sendfile(r6, r7, 0x0, 0xffffffff004)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)

10m8.466589689s ago: executing program 3 (id=333):
unshare(0x8000400)
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)

10m8.382016304s ago: executing program 3 (id=334):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

10m8.320158377s ago: executing program 4 (id=335):
unshare(0x24020400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080)=0x7e, 0x4)

9m55.354809616s ago: executing program 32 (id=329):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1)
dup(r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940))
pipe(&(0x7f0000000080))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x13f, 0x5}}, 0x20)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

9m55.294972349s ago: executing program 33 (id=328):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x35dfdbf8, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xffffffff, 0x3, 0x1, 0x7fff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff2, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240440f0}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"})

9m54.861083941s ago: executing program 34 (id=332):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x800)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r2, r2, 0x0, 0x2000fb)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x1, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}})
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
io_setup(0x7, &(0x7f0000000280)=<r4=>0x0)
r5 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0)
io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0xfffffc98}])
readv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38)
shutdown(r6, 0x1)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
sendfile(r6, r7, 0x0, 0xffffffff004)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)

9m52.814011687s ago: executing program 35 (id=334):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

9m52.75293716s ago: executing program 36 (id=335):
unshare(0x24020400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080)=0x7e, 0x4)

2m57.541692346s ago: executing program 8 (id=1795):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4890)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)

2m54.863758725s ago: executing program 8 (id=1800):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000040)={[{@utf8}, {@dmask={'dmask', 0x3d, 0x6}}, {@uid={'uid', 0x3d, 0xee00}}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x1}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@errors_remount}, {@errors_continue}]}, 0xfe, 0x1535, &(0x7f0000002fc0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)

2m54.535760592s ago: executing program 8 (id=1803):
socket$inet6(0xa, 0x80002, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1a, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x32, '\x00', 0x0, @tracing=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r4, r5})
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000400)="03362a247861461b950daf81800a038f1ee4d8", 0x13}], 0x2}}], 0x1, 0x40)

2m53.503360165s ago: executing program 8 (id=1806):
syz_usb_connect(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0)

2m50.012223805s ago: executing program 8 (id=1811):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
readv(r0, &(0x7f00000017c0)=[{&(0x7f0000000640)=""/164, 0xa4}], 0x1)
io_setup(0x20, &(0x7f0000001140))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8010844}, 0x48000)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00`\x00'}}}]}, 0x48}}, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)

2m47.611440489s ago: executing program 8 (id=1820):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009040000", @ANYBLOB], 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x10400, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'})
io_setup(0x2278, &(0x7f0000000180))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_clone(0x40900100, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})

2m31.770572457s ago: executing program 37 (id=1820):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009040000", @ANYBLOB], 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x10400, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'})
io_setup(0x2278, &(0x7f0000000180))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_clone(0x40900100, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})

10.8037622s ago: executing program 7 (id=2311):
socket$inet6(0xa, 0x80002, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1a, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x32, '\x00', 0x0, @tracing=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r6 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5})
sendmmsg$inet(r6, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000400)="03362a247861461b950daf81800a038f1ee4d8", 0x13}], 0x2}}], 0x1, 0x40)

8.718524299s ago: executing program 6 (id=2317):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x15, 0x7, 0xfe}, {0x24}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000640)=0x1, 0x4)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0xb1e1})
ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401)
r2 = socket$kcm(0x23, 0x5, 0x0)
listen(r2, 0x800)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$tun(r5, 0x0, 0x3db)
accept4(r2, 0x0, 0x0, 0x80000)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000003c0), 0x8, &(0x7f0000000440))

8.384235476s ago: executing program 5 (id=2318):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x5, &(0x7f0000001e00)={[{@order_strict}, {@norecovery}]}, 0x41, 0xa0f, &(0x7f00000013c0)="$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")

8.139733868s ago: executing program 5 (id=2321):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="d01ca2363ef44116df4e1a55ffef08005ad00c2622b1ac4a"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172000}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000001000)='dns_resolver\x00', 0x0, &(0x7f0000001080)='\x00', 0x0)
request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280)='btrfs\x00', 0x418, 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='msdos\x00', 0x201001, &(0x7f00000000c0)='usrquota')
chdir(0x0)
ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@default, @default})
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
bind$tipc(r4, 0x0, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x3, 0x1}, 0x10)
bind$tipc(r3, 0x0, 0x0)
close(r3)

6.887189743s ago: executing program 5 (id=2322):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0x4003a, 0x10001000, 0x3a, 0xa50, 0xff, 0x38}, 0x1c)

6.871694244s ago: executing program 6 (id=2323):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9febbb00180000000000000024000000240000e80a00"], &(0x7f0000000380)=""/2, 0x46, 0x2, 0x1}, 0x28)

6.792155098s ago: executing program 1 (id=2324):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd2", 0x98}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x4, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6.75809372s ago: executing program 6 (id=2325):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x600, 0xc, 0xc, 0x2, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}}, 0x0, 0x26}, 0x28)

6.652119326s ago: executing program 5 (id=2327):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000180)=ANY=[], 0xfe, 0xa7f, &(0x7f0000000b40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf)
pwrite64(r1, &(0x7f00000000c0)='^', 0x1, 0x97)
creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0x10)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsmount(0xffffffffffffffff, 0x0, 0x8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0)
r4 = fsopen(&(0x7f0000000080)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r5 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9)
request_key(&(0x7f00000000c0)='cifs.spnego\x00', 0x0, &(0x7f00000001c0)='\x00', r5)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x1008000, 0x0)

6.599518558s ago: executing program 6 (id=2328):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000008b}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SCAN_REQ(r0, 0x0, 0x90)
creat(0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_clone(0x20000000, 0x0, 0x8, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace(0x8, r3)
r4 = syz_pidfd_open(r3, 0x0)
process_mrelease(r4, 0x700000000000000)

6.56736682s ago: executing program 7 (id=2329):
r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x76, 0x101301)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffc08000340000000010900010073797a30"], 0xd8}}, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000440)=@urb_type_interrupt={0x1, {0x4, 0x1}, 0x401, 0xa4, &(0x7f0000000080)="f4eac1ace4c959449d2c7f11d4a21237f4a58a8da2ce4a244fbb133d4d8c66b2", 0x20, 0x2, 0x11d, 0x0, 0x81, 0x1, &(0x7f00000000c0)})
r1 = socket(0x8000000010, 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000002240)={<r2=>0xffffffffffffffff}, 0x80)
r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xe0)
pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x9f)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
socket(0x80000000000000a, 0x2, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)

6.441183366s ago: executing program 1 (id=2330):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x2)

5.682283655s ago: executing program 9 (id=2332):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="18010000540001002abd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB], 0x118}}, 0x20000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2a}, 0x94)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_open_dev$usbfs(0x0, 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$int_in(r2, 0x5421, 0x0)
connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
connect$netrom(r2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)}, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x4080})
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x4)
socket$igmp6(0xa, 0x3, 0x2)

5.583788331s ago: executing program 7 (id=2333):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x15, 0x7, 0xfe}, {0x24}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000640)=0x1, 0x4)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0xb1e1})
ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401)
r2 = socket$kcm(0x23, 0x5, 0x0)
listen(r2, 0x800)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$tun(r5, 0x0, 0x3db)
accept4(r2, 0x0, 0x0, 0x80000)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000003c0), 0x8, &(0x7f0000000440))

5.473785366s ago: executing program 9 (id=2334):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(0x0, 0x31)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084)
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, 0x0)

5.256465018s ago: executing program 9 (id=2335):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1, 0x7ffffe, 0x0, 0x0)

5.01586605s ago: executing program 5 (id=2336):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
readv(r0, &(0x7f00000017c0)=[{&(0x7f0000000640)=""/164, 0xa4}], 0x1)
io_setup(0x20, &(0x7f0000001140))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010844}, 0x48000)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00`\x00'}}}]}, 0x48}}, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)

4.968660932s ago: executing program 9 (id=2337):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8)
fanotify_init(0x40, 0x1000)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0x0)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000140)={0xe, {0x8, 0x6, 0x6cf, 0xfffffff7}, {0x1, 0xfffffff7, 0x71d, 0x10000}, {0x80000000, 0x496}})
setresgid(0x0, 0x0, 0xee01)
keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r4)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000019c0)={0x14, r5, 0x311, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c4)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000004380)=ANY=[], 0x110)
setns(0xffffffffffffffff, 0x20000)
dup(0xffffffffffffffff)

4.116528127s ago: executing program 7 (id=2338):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port0\x00', 0x72, 0x360c30, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000000c0)={0x800080, 0x6, 0x5, 0x9, 0x0, 0x55a})

4.048199571s ago: executing program 9 (id=2339):
socket$inet6(0xa, 0x80002, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1a, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x32, '\x00', 0x0, @tracing=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r6 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5})
sendmmsg$inet(r6, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000400)="03362a247861461b950daf81800a038f1ee4d8", 0x13}], 0x2}}], 0x1, 0x40)

3.931980626s ago: executing program 7 (id=2340):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd2", 0x98}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x4, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3.806686543s ago: executing program 1 (id=2341):
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x40011, r0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0)

3.700151308s ago: executing program 6 (id=2342):
socket(0x2c, 0xa, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\rW\xef\x10\xd6d#\xf2\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8\x1f\xb2C\xf8\'?]\x16C\x166\xc0\xbcJT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8', 0x2)
pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000880)="eb", 0x1}], 0x1, 0x7ffffd, 0x8)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
sendfile(r4, r2, 0x0, 0x2000081)

3.589063254s ago: executing program 7 (id=2343):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r1, 0xfffffffffffffffd, 0x58)

1.396792988s ago: executing program 1 (id=2344):
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9)

1.382891838s ago: executing program 6 (id=2345):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="18010000540001002abd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB], 0x118}}, 0x20000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2a}, 0x94)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_open_dev$usbfs(0x0, 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$int_in(r2, 0x5421, 0x0)
connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
connect$netrom(r2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000})
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)}, 0x0)
sendmsg$rds(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x4080})
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x4)
socket$igmp6(0xa, 0x3, 0x2)

1.322024481s ago: executing program 5 (id=2346):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000180)=ANY=[], 0xfe, 0xa7f, &(0x7f0000000b40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf)
pwrite64(r1, &(0x7f00000000c0)='^', 0x1, 0x97)
creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0x10)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsmount(0xffffffffffffffff, 0x0, 0x8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0)
r4 = fsopen(&(0x7f0000000080)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r5 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9)
request_key(&(0x7f00000000c0)='cifs.spnego\x00', 0x0, &(0x7f00000001c0)='\x00', r5)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x1008000, 0x0)

1.196022298s ago: executing program 1 (id=2347):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(0x0, 0x31)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084)
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, 0x0)

111.234333ms ago: executing program 1 (id=2348):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x81}, 0xe)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x400000007fff, 0x2)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'})
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@fd={0x6, 0x1, 0x4, 0x800, 0xc, {0x77359400}, {0x4, 0x1, 0xc, 0x3, 0xfb, 0x2}, 0x1, 0x4, {}, 0xfffffffb})
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3})
add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e", 0x2c, 0xfffffffffffffffe)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x4e24, 0x1, 0x4e21, 0x0, 0xa, 0x0, 0x20, 0x11}, {0x2, 0xd5, 0x2, 0x1, 0x3ff, 0x0, 0xb35, 0x7}, {0x8, 0x5, 0x8, 0x4}, 0x64706490, 0x6e6bc0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d6, 0x2b}, 0xa, @in6=@private0, 0x3503, 0x4, 0x0, 0x7, 0x81, 0x7ffc, 0x5}}, 0xe8)
add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)

0s ago: executing program 9 (id=2349):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x15, 0x7, 0xfe}, {0x24}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000640)=0x1, 0x4)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0xb1e1})
ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401)
r2 = socket$kcm(0x23, 0x5, 0x0)
listen(r2, 0x800)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$tun(r5, 0x0, 0x3db)
accept4(r2, 0x0, 0x0, 0x80000)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000003c0), 0x8, &(0x7f0000000440))

kernel console output (not intermixed with test programs):

 loop9: detected capacity change from 0 to 32768
[  495.556343][T10042] gspca_zc3xx: reg_w_i err -110
[  495.561487][T10042] gspca_zc3xx: probe of 6-1:0.0 failed with error -110
[  495.615199][T10567] XFS (loop9): Mounting V5 Filesystem
[  495.637907][ T7482] usb 6-1: USB disconnect, device number 75
[  495.888751][T10583] SQUASHFS error: Unable to read inode 0xa7
[  495.895797][T10583] SQUASHFS error: Unable to read inode 0xa7
[  495.911074][T10567] XFS (loop9): Ending clean mount
[  495.923028][T10567] XFS (loop9): Quotacheck needed: Please wait.
[  496.034718][T10567] XFS (loop9): Quotacheck: Done.
[  496.327655][T10585] netlink: 'syz.9.1560': attribute type 1 has an invalid length.
[  496.335647][T10585] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1560'.
[  496.403809][   T26] audit: type=1800 audit(2000000250.280:19): pid=10585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1560" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=4429 res=0 errno=0
[  496.779100][T10591] device syzkaller0 entered promiscuous mode
[  496.789712][ T5391] XFS (loop9): Unmounting Filesystem
[  498.016706][T10608] loop5: detected capacity change from 0 to 8
[  498.302983][   T21] usb 7-1: new high-speed USB device number 98 using dummy_hcd
[  498.445645][T10613] device syzkaller0 entered promiscuous mode
[  498.649958][T10615] SQUASHFS error: Unable to read inode 0xa7
[  498.656632][T10615] SQUASHFS error: Unable to read inode 0xa7
[  498.983395][ T7477] usb 10-1: new high-speed USB device number 66 using dummy_hcd
[  499.012973][   T21] usb 7-1: Using ep0 maxpacket: 16
[  499.085607][T10619] loop5: detected capacity change from 0 to 2048
[  499.108195][T10620] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  499.133133][   T21] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  499.151459][   T21] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  499.190451][T10621] libceph: resolve '0..' (ret=-3): failed
[  499.203684][  T150] block nbd5: Attempted send on invalid socket
[  499.210413][  T150] blk_update_request: I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  499.222744][  T150] gfs2: error 10 reading superblock
[  499.260411][   T21] usb 7-1: config 0 interface 0 has no altsetting 0
[  499.317283][   T21] usb 7-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00
[  499.374884][   T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.475901][   T21] usb 7-1: config 0 descriptor??
[  500.282804][   T21] usb 7-1: string descriptor 0 read error: -71
[  500.415946][ T7477] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  500.423411][   T21] usbhid 7-1:0.0: can't add hid device: -71
[  500.436226][   T21] usbhid: probe of 7-1:0.0 failed with error -71
[  500.500023][   T21] usb 7-1: USB disconnect, device number 98
[  501.516369][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  501.522902][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  501.528034][ T5586] usb 8-1: Direct firmware load for ti_3410.fw failed with error -2
[  501.882887][ T7477] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.101412][ T7477] usb 10-1: Product: syz
[  502.105846][ T7477] usb 10-1: Manufacturer: syz
[  502.110669][ T7477] usb 10-1: SerialNumber: syz
[  502.115550][ T5586] usb 8-1: Falling back to sysfs fallback for: ti_3410.fw
[  502.152948][ T7477] usb 10-1: can't set config #1, error -71
[  502.162356][ T7477] usb 10-1: USB disconnect, device number 66
[  502.520329][T10643] device syzkaller0 entered promiscuous mode
[  502.586014][ T4270] usb 7-1: new full-speed USB device number 99 using dummy_hcd
[  503.066305][ T4270] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  503.350079][ T4270] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  503.407157][ T4270] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.443571][T10649] device syzkaller0 entered promiscuous mode
[  503.464172][ T4270] usb 7-1: config 0 descriptor??
[  503.852907][ T7477] usb 10-1: new high-speed USB device number 67 using dummy_hcd
[  503.972808][ T7482] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  504.033044][ T4270] ath6kl: Failed to submit usb control message: -71
[  504.040250][ T4270] ath6kl: unable to send the bmi data to the device: -71
[  504.047997][ T4270] ath6kl: Unable to send get target info: -71
[  504.102127][ T4270] ath6kl: Failed to init ath6kl core: -71
[  504.125484][ T7477] usb 10-1: Using ep0 maxpacket: 16
[  504.154301][ T4270] ath6kl_usb: probe of 7-1:0.0 failed with error -71
[  504.181133][ T4270] usb 7-1: USB disconnect, device number 99
[  504.242858][ T7482] usb 6-1: Using ep0 maxpacket: 8
[  504.263104][ T7477] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  504.286119][ T7477] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  504.306628][ T7477] usb 10-1: config 0 interface 0 has no altsetting 0
[  504.317781][ T7477] usb 10-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00
[  504.327724][ T7477] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.353968][ T7477] usb 10-1: config 0 descriptor??
[  504.543145][ T7482] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  504.561642][ T7482] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  504.590904][ T7482] usb 6-1: Product: syz
[  504.611228][ T7482] usb 6-1: Manufacturer: syz
[  504.621397][ T7482] usb 6-1: SerialNumber: syz
[  504.621437][T10655] fuse: Bad value for 'fd'
[  504.657960][ T7482] usb 6-1: config 0 descriptor??
[  504.715439][ T7482] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  504.784373][T10669] loop6: detected capacity change from 0 to 2048
[  504.821550][T10671] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  504.902990][ T7477] usb 10-1: string descriptor 0 read error: -71
[  504.944679][  T150] block nbd6: Attempted send on invalid socket
[  504.951004][  T150] blk_update_request: I/O error, dev nbd6, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  504.963804][  T150] gfs2: error 10 reading superblock
[  505.422976][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1589'.
[  505.692821][ T7482] gspca_zc3xx: reg_w_i err -110
[  506.094277][ T7482] gspca_zc3xx: probe of 6-1:0.0 failed with error -110
[  507.139405][ T7477] usbhid 10-1:0.0: can't add hid device: -71
[  507.793521][ T7482] usb 6-1: USB disconnect, device number 76
[  507.799875][ T7477] usbhid: probe of 10-1:0.0 failed with error -71
[  507.811394][ T7477] usb 10-1: USB disconnect, device number 67
[  507.928791][T10684] device syzkaller0 entered promiscuous mode
[  508.437339][T10692] loop8: detected capacity change from 0 to 1024
[  509.642810][   T21] usb 7-1: new full-speed USB device number 100 using dummy_hcd
[  509.747143][ T7475] usb 10-1: new high-speed USB device number 68 using dummy_hcd
[  510.012955][   T21] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  510.032896][ T7475] usb 10-1: Using ep0 maxpacket: 16
[  510.054026][   T21] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  510.142694][   T21] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  510.152944][ T7475] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  510.182766][ T7475] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  510.193646][   T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.225325][ T7475] usb 10-1: config 0 interface 0 has no altsetting 0
[  510.252595][ T7475] usb 10-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00
[  510.273457][   T21] usb 7-1: config 0 descriptor??
[  510.292758][ T7475] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.353467][ T7475] usb 10-1: config 0 descriptor??
[  510.599743][T10703] fuse: Bad value for 'fd'
[  510.702812][ T7477] usb 6-1: new full-speed USB device number 77 using dummy_hcd
[  510.892948][ T7475] usb 10-1: string descriptor 0 read error: -71
[  511.007509][ T7475] usbhid 10-1:0.0: can't add hid device: -71
[  511.026076][ T7475] usbhid: probe of 10-1:0.0 failed with error -71
[  511.054013][ T7475] usb 10-1: USB disconnect, device number 68
[  511.072965][ T7477] usb 6-1: config 8 has an invalid interface number: 177 but max is 0
[  511.090264][ T7477] usb 6-1: config 8 has no interface number 0
[  511.106823][ T7477] usb 6-1: config 8 interface 177 altsetting 9 has an invalid endpoint with address 0xE8, skipping
[  511.128009][ T7477] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  511.149288][ T7477] usb 6-1: config 8 interface 177 has no altsetting 0
[  511.169781][ T7477] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  511.182916][ T7477] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.188660][   T21] ath6kl: Failed to submit usb control message: -71
[  511.218378][   T21] ath6kl: unable to send the bmi data to the device: -71
[  511.238176][   T21] ath6kl: Unable to send get target info: -71
[  511.245083][T10711] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  511.293462][T10722] loop9: detected capacity change from 0 to 8
[  511.313784][   T21] ath6kl: Failed to init ath6kl core: -71
[  511.378425][   T21] ath6kl_usb: probe of 7-1:0.0 failed with error -71
[  511.404035][   T21] usb 7-1: USB disconnect, device number 100
[  511.572992][ T7477] usb 6-1: string descriptor 0 read error: -71
[  511.584882][ T7477] ir_toy 6-1:8.177: required endpoints not found
[  511.624499][ T7477] usb 6-1: USB disconnect, device number 77
[  511.656687][T10722] SQUASHFS error: Unable to read inode 0xa7
[  511.663550][T10722] SQUASHFS error: Unable to read inode 0xa7
[  511.890461][T10728] device syzkaller0 entered promiscuous mode
[  512.380550][T10732] loop5: detected capacity change from 0 to 32768
[  513.084792][T10732] XFS (loop5): Mounting V5 Filesystem
[  513.248659][T10732] XFS (loop5): Ending clean mount
[  513.256880][T10732] XFS (loop5): Quotacheck needed: Please wait.
[  513.496456][T10732] XFS (loop5): Quotacheck: Done.
[  513.686295][   T26] audit: type=1800 audit(2000000267.640:20): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1611" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0
[  513.729448][T10732] netlink: 'syz.5.1611': attribute type 1 has an invalid length.
[  513.737278][T10732] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1611'.
[  513.826599][ T5380] XFS (loop5): Unmounting Filesystem
[  514.367880][ T7475] usb 10-1: new high-speed USB device number 69 using dummy_hcd
[  514.622840][ T7475] usb 10-1: Using ep0 maxpacket: 16
[  514.743584][ T7475] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  514.800519][ T7475] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  514.850667][ T7475] usb 10-1: config 0 interface 0 has no altsetting 0
[  514.877977][ T7475] usb 10-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00
[  514.926752][ T7475] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.990801][ T7475] usb 10-1: config 0 descriptor??
[  515.130736][T10770] loop8: detected capacity change from 0 to 8
[  515.264623][T10759] fuse: Bad value for 'fd'
[  515.375469][T10770] SQUASHFS error: Unable to read inode 0xa7
[  515.381987][T10770] SQUASHFS error: Unable to read inode 0xa7
[  515.582983][ T7475] usb 10-1: string descriptor 0 read error: -71
[  515.598668][T10773] device syzkaller0 entered promiscuous mode
[  515.652195][T10775] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1623'.
[  515.714443][ T7475] usbhid 10-1:0.0: can't add hid device: -71
[  515.720687][ T7475] usbhid: probe of 10-1:0.0 failed with error -71
[  515.752878][ T7475] usb 10-1: USB disconnect, device number 69
[  517.312785][T10792] loop6: detected capacity change from 0 to 32768
[  517.444351][T10792] XFS (loop6): Mounting V5 Filesystem
[  517.532815][T10042] usb 10-1: new high-speed USB device number 70 using dummy_hcd
[  517.545543][T10792] XFS (loop6): Ending clean mount
[  517.553517][T10792] XFS (loop6): Quotacheck needed: Please wait.
[  517.572806][T10808] loop5: detected capacity change from 0 to 8
[  517.680136][T10792] XFS (loop6): Quotacheck: Done.
[  517.692966][   T26] audit: type=1800 audit(2000000271.640:21): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1628" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4429 res=0 errno=0
[  517.736297][T10792] netlink: 'syz.6.1628': attribute type 1 has an invalid length.
[  517.744572][T10792] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1628'.
[  517.806116][ T5382] XFS (loop6): Unmounting Filesystem
[  517.812871][T10042] usb 10-1: Using ep0 maxpacket: 8
[  517.942276][T10812] device syzkaller0 entered promiscuous mode
[  517.983376][T10808] SQUASHFS error: Unable to read inode 0xa7
[  517.990082][T10808] SQUASHFS error: Unable to read inode 0xa7
[  518.132900][T10042] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  518.155760][T10042] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  518.175291][T10042] usb 10-1: Product: syz
[  518.184843][T10042] usb 10-1: Manufacturer: syz
[  518.189605][T10042] usb 10-1: SerialNumber: syz
[  518.214183][T10815] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1635'.
[  518.225838][T10042] usb 10-1: config 0 descriptor??
[  518.286370][T10042] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  518.951379][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1629'.
[  518.962922][T10042] gspca_zc3xx: reg_w_i err -71
[  518.971421][T10042] gspca_zc3xx: probe of 10-1:0.0 failed with error -71
[  518.988587][T10042] usb 10-1: USB disconnect, device number 70
[  519.432246][T10829] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  519.458533][T10829] tipc: Resetting bearer <eth:syzkaller0>
[  519.489792][T10828] tipc: Disabling bearer <eth:syzkaller0>
[  520.648310][   T21] usb 7-1: new full-speed USB device number 101 using dummy_hcd
[  520.708926][T10850] loop8: detected capacity change from 0 to 8
[  520.912076][T10848] loop9: detected capacity change from 0 to 32768
[  521.023174][T10850] SQUASHFS error: Unable to read inode 0xa7
[  521.029918][T10850] SQUASHFS error: Unable to read inode 0xa7
[  521.080208][T10848] XFS (loop9): Mounting V5 Filesystem
[  521.093055][   T21] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  521.113006][   T21] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  521.136602][   T21] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  521.176922][   T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.228558][   T21] usb 7-1: config 0 descriptor??
[  521.239366][T10848] XFS (loop9): Ending clean mount
[  521.248497][T10861] device syzkaller0 entered promiscuous mode
[  521.258432][T10848] XFS (loop9): Quotacheck needed: Please wait.
[  521.340646][T10848] XFS (loop9): Quotacheck: Done.
[  521.355192][   T26] audit: type=1800 audit(2000000275.310:22): pid=10848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1644" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=4429 res=0 errno=0
[  521.398016][T10848] netlink: 'syz.9.1644': attribute type 1 has an invalid length.
[  521.406096][T10848] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1644'.
[  521.444107][ T5391] XFS (loop9): Unmounting Filesystem
[  522.024495][   T21] ath6kl: Failed to submit usb control message: -71
[  522.031209][   T21] ath6kl: unable to send the bmi data to the device: -71
[  522.048206][   T21] ath6kl: Unable to send get target info: -71
[  522.106337][   T21] ath6kl: Failed to init ath6kl core: -71
[  522.175632][   T21] ath6kl_usb: probe of 7-1:0.0 failed with error -71
[  522.201045][   T21] usb 7-1: USB disconnect, device number 101
[  522.402805][ T7473] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  523.053056][ T7473] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  523.105992][ T7473] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.289433][ T7473] usb 6-1: Product: syz
[  523.416458][ T7473] usb 6-1: Manufacturer: syz
[  523.421132][ T7473] usb 6-1: SerialNumber: syz
[  523.587040][T10890] netlink: 136 bytes leftover after parsing attributes in process `syz.9.1655'.
[  523.698372][T10896] loop9: detected capacity change from 0 to 8
[  523.800005][T10899] device syzkaller0 entered promiscuous mode
[  523.859452][ T7475] usb 7-1: new high-speed USB device number 102 using dummy_hcd
[  524.107146][ T7475] usb 7-1: Using ep0 maxpacket: 16
[  524.232868][ T7475] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  524.262015][ T7475] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  524.286013][T10904] SQUASHFS error: Unable to read inode 0xa7
[  524.298598][ T7475] usb 7-1: config 0 interface 0 has no altsetting 0
[  524.304814][T10904] SQUASHFS error: Unable to read inode 0xa7
[  524.325322][ T7475] usb 7-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00
[  524.355209][ T7475] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.396676][ T7475] usb 7-1: config 0 descriptor??
[  524.633567][ T7473] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42
[  524.934420][ T7473] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42
[  525.092957][ T7475] usb 7-1: string descriptor 0 read error: -71
[  525.110730][T10917] loop8: detected capacity change from 0 to 1024
[  525.202916][ T7475] usbhid 7-1:0.0: can't add hid device: -71
[  525.209082][ T7475] usbhid: probe of 7-1:0.0 failed with error -71
[  525.267346][ T7475] usb 7-1: USB disconnect, device number 102
[  525.963122][ T7475] usb 6-1: USB disconnect, device number 78
[  525.971743][ T7475] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM
[  526.397174][T10939] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1669'.
[  527.575954][T10947] device syzkaller0 entered promiscuous mode
[  527.876122][   T21] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  528.027422][T10961] fuse: Bad value for 'fd'
[  528.162865][   T21] usb 6-1: Using ep0 maxpacket: 8
[  528.412850][ T7475] usb 7-1: new high-speed USB device number 103 using dummy_hcd
[  528.466588][T10977] loop7: detected capacity change from 0 to 8
[  528.523365][   T21] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  528.552871][   T21] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  528.566347][   T21] usb 6-1: Product: syz
[  528.570596][   T21] usb 6-1: Manufacturer: syz
[  528.592722][   T21] usb 6-1: SerialNumber: syz
[  528.602896][ T6276] usb 10-1: new high-speed USB device number 71 using dummy_hcd
[  528.627805][   T21] usb 6-1: config 0 descriptor??
[  528.662809][ T7475] usb 7-1: Using ep0 maxpacket: 16
[  528.705297][   T21] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  528.784105][ T7475] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  528.798397][ T7475] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  528.812076][ T7475] usb 7-1: config 0 interface 0 has no altsetting 0
[  528.819137][ T7475] usb 7-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00
[  528.829115][ T7475] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.839954][ T7475] usb 7-1: config 0 descriptor??
[  529.051305][T10986] SQUASHFS error: Unable to read inode 0xa7
[  529.065813][T10986] SQUASHFS error: Unable to read inode 0xa7
[  529.313008][ T6276] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  529.322214][ T6276] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.352770][ T6276] usb 10-1: Product: syz
[  529.357104][ T6276] usb 10-1: Manufacturer: syz
[  529.363668][ T6276] usb 10-1: SerialNumber: syz
[  529.422994][ T7475] usb 7-1: string descriptor 0 read error: -71
[  529.429416][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1672'.
[  529.529879][   T21] gspca_zc3xx: reg_w_i err -71
[  529.534904][   T21] gspca_zc3xx: probe of 6-1:0.0 failed with error -71
[  529.548650][ T7475] usbhid 7-1:0.0: can't add hid device: -71
[  529.554674][   T21] usb 6-1: USB disconnect, device number 79
[  529.579949][ T7475] usbhid: probe of 7-1:0.0 failed with error -71
[  529.607445][ T7475] usb 7-1: USB disconnect, device number 103
[  529.753778][T10994] loop8: detected capacity change from 0 to 2048
[  529.830622][T10996] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  529.954366][  T264] block nbd8: Attempted send on invalid socket
[  529.960865][  T264] blk_update_request: I/O error, dev nbd8, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  529.973930][  T264] gfs2: error 10 reading superblock
[  530.512903][ T6276] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42
[  531.179724][T11003] netlink: 'syz.6.1681': attribute type 1 has an invalid length.
[  531.188505][T11003] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1681'.
[  532.770723][ T6276] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM, 42:42:42:42:42:42
[  532.793695][ T6276] usb 10-1: USB disconnect, device number 71
[  532.821450][ T6276] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM
[  533.081251][T11013] device syzkaller0 entered promiscuous mode
[  533.161931][T11018] fuse: Bad value for 'fd'
[  533.222845][T10041] usb 7-1: new high-speed USB device number 104 using dummy_hcd
[  533.582895][T10041] usb 7-1: device descriptor read/64, error -71
[  533.872884][T10041] usb 7-1: new high-speed USB device number 105 using dummy_hcd
[  534.072988][T10041] usb 7-1: device descriptor read/64, error -71
[  534.215160][T10041] usb usb7-port1: attempt power cycle
[  534.557600][T11035] loop9: detected capacity change from 0 to 8
[  534.642765][T10041] usb 7-1: new high-speed USB device number 106 using dummy_hcd
[  534.772970][T10041] usb 7-1: device descriptor read/8, error -71
[  535.072065][T11039] SQUASHFS error: Unable to read inode 0xa7
[  535.078210][ T7482] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  535.086579][T11039] SQUASHFS error: Unable to read inode 0xa7
[  535.092839][T10041] usb 7-1: new high-speed USB device number 107 using dummy_hcd
[  535.213044][T10041] usb 7-1: device descriptor read/8, error -71
[  535.332977][T10041] usb usb7-port1: unable to enumerate USB device
[  535.612855][ T7482] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  535.621984][ T7482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.630890][ T7482] usb 6-1: Product: syz
[  535.635389][ T7482] usb 6-1: Manufacturer: syz
[  535.640030][ T7482] usb 6-1: SerialNumber: syz
[  535.781400][T11041] loop9: detected capacity change from 0 to 2048
[  535.818980][T11042] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  535.912339][  T264] block nbd9: Attempted send on invalid socket
[  535.920354][  T264] blk_update_request: I/O error, dev nbd9, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  535.933269][  T264] gfs2: error 10 reading superblock
[  536.733173][T11047] netlink: 'syz.6.1696': attribute type 1 has an invalid length.
[  536.741752][T11047] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1696'.
[  537.313750][ T7482] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42
[  537.589384][ T7482] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42
[  538.827599][ T7473] usb 6-1: USB disconnect, device number 80
[  538.850595][ T7473] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM
[  539.597126][T11086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  539.639812][T11086] device syzkaller0 entered promiscuous mode
[  539.708618][T11086] tipc: Resetting bearer <eth:syzkaller0>
[  539.736685][T11084] tipc: Resetting bearer <eth:syzkaller0>
[  539.786039][T11084] tipc: Disabling bearer <eth:syzkaller0>
[  540.052730][T10041] usb 7-1: new high-speed USB device number 108 using dummy_hcd
[  540.272735][T10041] usb 7-1: device descriptor read/64, error -71
[  540.432774][ T7473] usb 10-1: new high-speed USB device number 72 using dummy_hcd
[  540.562771][T10041] usb 7-1: new high-speed USB device number 109 using dummy_hcd
[  540.682767][ T7473] usb 10-1: Using ep0 maxpacket: 8
[  540.782731][T10041] usb 7-1: device descriptor read/64, error -71
[  540.926864][T10041] usb usb7-port1: attempt power cycle
[  540.965892][ T7473] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  540.984921][ T7473] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  541.012825][ T7473] usb 10-1: Product: syz
[  541.017234][ T7473] usb 10-1: Manufacturer: syz
[  541.021964][ T7473] usb 10-1: SerialNumber: syz
[  541.035948][ T7473] usb 10-1: config 0 descriptor??
[  541.078088][ T7473] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  541.097580][T11121] loop5: detected capacity change from 0 to 1024
[  541.382841][T10041] usb 7-1: new high-speed USB device number 110 using dummy_hcd
[  541.503041][T10041] usb 7-1: device descriptor read/8, error -71
[  541.750510][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1708'.
[  541.782966][ T7473] gspca_zc3xx: reg_w_i err -71
[  541.783099][T10041] usb 7-1: new high-speed USB device number 111 using dummy_hcd
[  541.788122][ T7473] gspca_zc3xx: probe of 10-1:0.0 failed with error -71
[  541.834860][ T7473] usb 10-1: USB disconnect, device number 72
[  542.106982][T11131] netlink: 'syz.5.1712': attribute type 1 has an invalid length.
[  542.115124][T11131] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1712'.
[  542.831116][T10041] usb 7-1: device descriptor read/8, error -71
[  542.878535][T11135] loop9: detected capacity change from 0 to 2048
[  542.902389][T11138] device syzkaller0 entered promiscuous mode
[  542.913754][T11139] loop5: detected capacity change from 0 to 8
[  542.963848][T10041] usb usb7-port1: unable to enumerate USB device
[  542.976021][T11140] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  543.145406][T11143] libceph: resolve '0..' (ret=-3): failed
[  543.158448][  T264] block nbd9: Attempted send on invalid socket
[  543.165139][  T264] blk_update_request: I/O error, dev nbd9, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  543.177289][  T264] gfs2: error 10 reading superblock
[  544.380919][T11145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  544.653739][T11146] tipc: Resetting bearer <eth:syzkaller0>
[  544.940448][T11144] tipc: Disabling bearer <eth:syzkaller0>
[  546.064180][T11154] SQUASHFS error: Unable to read inode 0xa7
[  546.250881][T11158] netlink: 136 bytes leftover after parsing attributes in process `syz.9.1721'.
[  546.353072][   T21] usb 7-1: new full-speed USB device number 112 using dummy_hcd
[  546.703064][   T21] usb 7-1: too many configurations: 109, using maximum allowed: 8
[  546.843536][   T21] usb 7-1: unable to read config index 0 descriptor/start: -61
[  546.851282][   T21] usb 7-1: can't read configurations, error -61
[  546.992814][T10040] usb 10-1: new high-speed USB device number 73 using dummy_hcd
[  547.032921][   T21] usb 7-1: new full-speed USB device number 113 using dummy_hcd
[  547.262911][T10040] usb 10-1: Using ep0 maxpacket: 8
[  547.343268][   T21] usb 7-1: too many configurations: 109, using maximum allowed: 8
[  547.488934][   T21] usb 7-1: unable to read config index 0 descriptor/start: -61
[  547.508128][   T21] usb 7-1: can't read configurations, error -61
[  547.547701][   T21] usb usb7-port1: attempt power cycle
[  547.576827][T11166] loop5: detected capacity change from 0 to 32768
[  547.593349][T10040] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  547.603424][T10040] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  547.611551][T10040] usb 10-1: Product: syz
[  547.616537][T10040] usb 10-1: Manufacturer: syz
[  547.621258][T10040] usb 10-1: SerialNumber: syz
[  547.651892][T10040] usb 10-1: config 0 descriptor??
[  547.667232][T11166] XFS (loop5): Mounting V5 Filesystem
[  547.707839][T11166] XFS (loop5): Ending clean mount
[  547.711518][T10040] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  547.721683][T11166] XFS (loop5): Quotacheck needed: Please wait.
[  547.777052][T11166] XFS (loop5): Quotacheck: Done.
[  547.982960][   T21] usb 7-1: new full-speed USB device number 114 using dummy_hcd
[  548.065434][T11180] netlink: 'syz.5.1725': attribute type 1 has an invalid length.
[  548.073507][T11180] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1725'.
[  548.084772][   T26] audit: type=1800 audit(2000000302.010:23): pid=11180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1725" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0
[  548.213278][   T21] usb 7-1: too many configurations: 109, using maximum allowed: 8
[  548.366077][   T21] usb 7-1: unable to read config index 0 descriptor/start: -61
[  548.384245][   T21] usb 7-1: can't read configurations, error -61
[  548.408477][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1723'.
[  548.492945][T10040] gspca_zc3xx: reg_w_i err -71
[  548.504655][T10040] gspca_zc3xx: probe of 10-1:0.0 failed with error -71
[  548.528854][T10040] usb 10-1: USB disconnect, device number 73
[  548.551628][ T5380] XFS (loop5): Unmounting Filesystem
[  548.553088][   T21] usb 7-1: new full-speed USB device number 115 using dummy_hcd
[  548.703125][   T21] usb 7-1: too many configurations: 109, using maximum allowed: 8
[  548.842918][   T21] usb 7-1: unable to read config index 0 descriptor/start: -61
[  548.850771][   T21] usb 7-1: can't read configurations, error -61
[  548.857882][   T21] usb usb7-port1: unable to enumerate USB device
[  548.862223][T11185] device syzkaller0 entered promiscuous mode
[  548.970412][T11187] loop5: detected capacity change from 0 to 1024
[  549.159929][T11189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  549.168819][T11189] device syzkaller0 entered promiscuous mode
[  549.195503][T11189] tipc: Resetting bearer <eth:syzkaller0>
[  549.218661][T11188] tipc: Resetting bearer <eth:syzkaller0>
[  549.257310][T11188] tipc: Disabling bearer <eth:syzkaller0>
[  549.400972][T11197] loop9: detected capacity change from 0 to 2048
[  549.465424][T11198] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  549.562219][T11199] libceph: resolve '0..' (ret=-3): failed
[  549.575759][  T150] block nbd9: Attempted send on invalid socket
[  549.583380][  T150] blk_update_request: I/O error, dev nbd9, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  549.595272][  T150] gfs2: error 10 reading superblock
[  551.403044][T11204] loop7: detected capacity change from 0 to 8
[  552.767441][T11215] device syzkaller0 entered promiscuous mode
[  553.035362][T11219] loop8: detected capacity change from 0 to 32768
[  553.120316][T11221] SQUASHFS error: Unable to read inode 0xa7
[  553.187280][T11219] XFS (loop8): Mounting V5 Filesystem
[  553.193531][   T21] usb 6-1: new full-speed USB device number 81 using dummy_hcd
[  553.345730][T11219] XFS (loop8): Ending clean mount
[  553.358502][T11219] XFS (loop8): Quotacheck needed: Please wait.
[  553.464532][T11219] XFS (loop8): Quotacheck: Done.
[  553.686326][T11234] loop6: detected capacity change from 0 to 1024
[  553.703125][ T7485] usb 10-1: new high-speed USB device number 74 using dummy_hcd
[  553.777871][T11235] netlink: 'syz.8.1740': attribute type 1 has an invalid length.
[  553.785858][T11235] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1740'.
[  553.883281][   T26] audit: type=1800 audit(2000000307.730:24): pid=11235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1740" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=4429 res=0 errno=0
[  554.204020][ T5389] XFS (loop8): Unmounting Filesystem
[  554.222827][   T21] usb 6-1: unable to read config index 0 descriptor/start: -61
[  554.230568][   T21] usb 6-1: can't read configurations, error -61
[  554.243048][ T7485] usb 10-1: Using ep0 maxpacket: 8
[  554.400970][   T21] usb 6-1: new full-speed USB device number 82 using dummy_hcd
[  554.410464][T11238] loop6: detected capacity change from 0 to 2048
[  554.523447][T11243] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  554.623173][ T7485] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  554.639651][  T264] block nbd6: Attempted send on invalid socket
[  554.646441][  T264] blk_update_request: I/O error, dev nbd6, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  554.661175][  T264] gfs2: error 10 reading superblock
[  554.711002][ T7485] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  554.791424][ T7485] usb 10-1: Product: syz
[  554.822804][   T21] usb 6-1: unable to read config index 0 descriptor/start: -61
[  554.828748][ T7485] usb 10-1: Manufacturer: syz
[  554.884783][ T7485] usb 10-1: SerialNumber: syz
[  554.995823][ T7485] usb 10-1: config 0 descriptor??
[  555.216971][ T7485] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  555.889042][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1742'.
[  556.152987][ T7485] gspca_zc3xx: reg_w_i err -110
[  556.159659][ T7485] gspca_zc3xx: probe of 10-1:0.0 failed with error -110
[  556.460748][   T21] usb 6-1: can't read configurations, error -61
[  557.354716][   T21] usb usb6-port1: attempt power cycle
[  557.379047][ T7485] usb 10-1: USB disconnect, device number 74
[  557.389522][T11257] fuse: Bad value for 'fd'
[  557.676908][T11266] device syzkaller0 entered promiscuous mode
[  557.762721][   T21] usb 6-1: new full-speed USB device number 83 using dummy_hcd
[  557.904528][T11273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  557.912224][T11273] device syzkaller0 entered promiscuous mode
[  557.947403][T11273] tipc: Resetting bearer <eth:syzkaller0>
[  557.964333][T11272] tipc: Resetting bearer <eth:syzkaller0>
[  557.991649][T11272] tipc: Disabling bearer <eth:syzkaller0>
[  558.022854][   T21] usb 6-1: device descriptor read/8, error -71
[  558.292871][   T21] usb 6-1: new full-speed USB device number 84 using dummy_hcd
[  558.337180][T11276] loop8: detected capacity change from 0 to 32768
[  558.401487][   T21] usb 6-1: device descriptor read/8, error -71
[  558.490632][T11276] XFS (loop8): Mounting V5 Filesystem
[  558.522972][   T21] usb usb6-port1: unable to enumerate USB device
[  558.562336][T11287] loop9: detected capacity change from 0 to 1024
[  558.587131][T11276] XFS (loop8): Ending clean mount
[  558.598290][T11276] XFS (loop8): Quotacheck needed: Please wait.
[  558.847713][T11276] XFS (loop8): Quotacheck: Done.
[  559.155278][T11296] netlink: 'syz.8.1755': attribute type 1 has an invalid length.
[  559.163707][T11296] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1755'.
[  559.173657][   T26] audit: type=1800 audit(2000000313.100:25): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1755" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=4429 res=0 errno=0
[  559.292841][   T21] usb 10-1: new full-speed USB device number 75 using dummy_hcd
[  559.617122][T11299] loop5: detected capacity change from 0 to 2048
[  559.674431][ T5389] XFS (loop8): Unmounting Filesystem
[  559.742968][   T21] usb 10-1: unable to read config index 0 descriptor/start: -61
[  559.761605][   T21] usb 10-1: can't read configurations, error -61
[  559.782861][T11300] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  559.927381][  T264] block nbd5: Attempted send on invalid socket
[  559.934247][  T264] blk_update_request: I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  559.946104][  T264] gfs2: error 10 reading superblock
[  559.992874][   T21] usb 10-1: new full-speed USB device number 76 using dummy_hcd
[  561.999045][T11310] fuse: Bad value for 'fd'
[  562.192776][   T21] usb 10-1: device descriptor read/all, error -71
[  563.580415][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  563.587172][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  563.595551][ T5586] usb 8-1: ti_download_firmware - firmware not found
[  563.602451][ T5586] ti_usb_3410_5052: probe of 8-1:14.193 failed with error -2
[  563.764350][ T4231] usb 9-1: ti_download_firmware - firmware not found
[  563.772024][ T4231] ti_usb_3410_5052: probe of 9-1:14.193 failed with error -2
[  563.779852][   T21] usb usb10-port1: attempt power cycle
[  563.788534][ T4231] usb 9-1: USB disconnect, device number 79
[  563.851357][ T5586] usb 8-1: USB disconnect, device number 68
[  563.872260][T11313] device syzkaller0 entered promiscuous mode
[  563.924722][T11326] loop7: detected capacity change from 0 to 2048
[  564.043694][T11330] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  564.090672][T11333] loop6: detected capacity change from 0 to 1024
[  564.202927][   T21] usb 10-1: new full-speed USB device number 77 using dummy_hcd
[  564.212486][  T150] block nbd7: Attempted send on invalid socket
[  564.219248][  T150] blk_update_request: I/O error, dev nbd7, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  564.231024][ T4231] usb 9-1: new full-speed USB device number 80 using dummy_hcd
[  564.239540][  T150] gfs2: error 10 reading superblock
[  564.261252][T11335] libceph: resolve '0..' (ret=-3): failed
[  564.362887][   T21] usb 10-1: device descriptor read/8, error -71
[  564.632888][   T21] usb 10-1: new full-speed USB device number 78 using dummy_hcd
[  564.643073][ T4231] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  565.517699][ T4231] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  565.572800][   T21] usb 10-1: device descriptor read/8, error -71
[  565.641409][ T4231] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.719640][   T21] usb usb10-port1: unable to enumerate USB device
[  565.782104][ T4231] usb 9-1: config 0 descriptor??
[  565.873410][ T4231] usb 9-1: can't set config #0, error -71
[  565.961065][ T4231] usb 9-1: USB disconnect, device number 80
[  566.869257][T11346] loop6: detected capacity change from 0 to 8
[  567.484134][T11352] fuse: Bad value for 'fd'
[  567.720931][T11359] SQUASHFS error: Unable to read inode 0xa7
[  567.792917][   T21] usb 8-1: new high-speed USB device number 69 using dummy_hcd
[  567.812978][ T6276] usb 10-1: new full-speed USB device number 79 using dummy_hcd
[  568.032975][   T21] usb 8-1: Using ep0 maxpacket: 8
[  568.222777][ T6276] usb 10-1: unable to read config index 0 descriptor/start: -61
[  568.232994][ T6276] usb 10-1: can't read configurations, error -61
[  568.313076][   T21] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  568.326607][   T21] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  568.344380][   T21] usb 8-1: Product: syz
[  568.354002][   T21] usb 8-1: Manufacturer: syz
[  568.363978][   T21] usb 8-1: SerialNumber: syz
[  568.392811][ T6276] usb 10-1: new full-speed USB device number 80 using dummy_hcd
[  568.403214][   T21] usb 8-1: config 0 descriptor??
[  568.455137][   T21] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  568.630210][T11363] loop8: detected capacity change from 0 to 2048
[  568.723502][T11364] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  568.812903][ T6276] usb 10-1: unable to read config index 0 descriptor/start: -61
[  568.831164][  T264] block nbd8: Attempted send on invalid socket
[  568.838218][  T264] blk_update_request: I/O error, dev nbd8, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  568.849761][  T264] gfs2: error 10 reading superblock
[  569.120178][T11366] loop5: detected capacity change from 0 to 1024
[  569.292561][T11354] device vlan2 entered promiscuous mode
[  569.413883][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1776'.
[  569.423217][   T21] gspca_zc3xx: reg_w_i err -110
[  570.062381][   T21] gspca_zc3xx: probe of 8-1:0.0 failed with error -110
[  570.574852][ T6276] usb 10-1: can't read configurations, error -61
[  570.723475][T11370] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT
[  571.613280][   T21] usb 8-1: USB disconnect, device number 69
[  571.619502][ T6276] usb usb10-port1: attempt power cycle
[  571.749504][T11373] device syzkaller0 entered promiscuous mode
[  571.789677][T11366] hfsplus: request for non-existent node 33423360 in B*Tree
[  571.797242][T11366] hfsplus: request for non-existent node 33423360 in B*Tree
[  572.039777][T11381] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  572.046985][T11383] loop5: detected capacity change from 0 to 1024
[  572.054892][T11381] device syzkaller0 entered promiscuous mode
[  572.106807][T11381] tipc: Resetting bearer <eth:syzkaller0>
[  572.120706][T11380] tipc: Resetting bearer <eth:syzkaller0>
[  572.176141][T11380] tipc: Disabling bearer <eth:syzkaller0>
[  572.243092][   T21] usb 9-1: new full-speed USB device number 81 using dummy_hcd
[  572.473221][ T7485] usb 7-1: new full-speed USB device number 116 using dummy_hcd
[  572.803210][   T21] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  572.876437][   T21] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  572.992204][   T21] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.430874][   T21] usb 9-1: config 0 descriptor??
[  573.490277][ T7485] usb 7-1: device descriptor read/64, error -71
[  573.609449][T11391] loop5: detected capacity change from 0 to 32768
[  573.907266][T11391] XFS (loop5): Mounting V5 Filesystem
[  573.922753][ T7485] usb 7-1: new full-speed USB device number 117 using dummy_hcd
[  574.012838][ T7482] usb 8-1: new full-speed USB device number 70 using dummy_hcd
[  574.222785][ T7485] usb 7-1: device descriptor read/64, error -71
[  574.292271][T11391] XFS (loop5): Ending clean mount
[  574.309135][T11391] XFS (loop5): Quotacheck needed: Please wait.
[  574.346351][ T7485] usb usb7-port1: attempt power cycle
[  574.431838][T11391] XFS (loop5): Quotacheck: Done.
[  574.504412][   T21] ath6kl: Failed to submit usb control message: -71
[  574.511122][   T21] ath6kl: unable to send the bmi data to the device: -71
[  574.513634][ T7482] usb 8-1: unable to read config index 0 descriptor/start: -61
[  574.518651][   T21] ath6kl: Unable to send get target info: -71
[  574.569209][ T7482] usb 8-1: can't read configurations, error -61
[  574.658911][   T21] ath6kl: Failed to init ath6kl core: -71
[  574.696723][T11418] loop9: detected capacity change from 0 to 2048
[  574.727957][   T21] ath6kl_usb: probe of 9-1:0.0 failed with error -71
[  574.748749][   T21] usb 9-1: USB disconnect, device number 81
[  574.763912][ T7485] usb 7-1: new full-speed USB device number 118 using dummy_hcd
[  574.771974][ T7482] usb 8-1: new full-speed USB device number 71 using dummy_hcd
[  574.806020][T11419] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  574.883179][ T7485] usb 7-1: device descriptor read/8, error -71
[  574.925867][T11420] libceph: resolve '0..' (ret=-3): failed
[  574.944401][  T264] block nbd9: Attempted send on invalid socket
[  574.950951][  T264] blk_update_request: I/O error, dev nbd9, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  574.963762][  T264] gfs2: error 10 reading superblock
[  575.172782][ T7485] usb 7-1: new full-speed USB device number 119 using dummy_hcd
[  575.183379][ T7482] usb 8-1: unable to read config index 0 descriptor/start: -61
[  575.208461][ T7482] usb 8-1: can't read configurations, error -61
[  575.284319][ T7482] usb usb8-port1: attempt power cycle
[  575.372960][ T7485] usb 7-1: device descriptor read/8, error -71
[  575.523594][ T7485] usb usb7-port1: unable to enumerate USB device
[  575.753294][ T7482] usb 8-1: new full-speed USB device number 72 using dummy_hcd
[  575.967398][T11424] loop6: detected capacity change from 0 to 8
[  576.033078][ T7482] usb 8-1: unable to read config index 0 descriptor/start: -61
[  576.054108][ T7482] usb 8-1: can't read configurations, error -61
[  576.372698][ T7482] usb 8-1: new full-speed USB device number 73 using dummy_hcd
[  576.773731][ T7482] usb 8-1: device descriptor read/8, error -71
[  576.914017][ T7482] usb usb8-port1: unable to enumerate USB device
[  577.478104][ T5380] XFS (loop5): Unmounting Filesystem
[  578.044907][T11436] SQUASHFS error: Unable to read inode 0xa7
[  578.121019][T11436] SQUASHFS error: Unable to read inode 0xa7
[  578.131513][T11439] loop8: detected capacity change from 0 to 256
[  578.302585][T11439] exfat: Deprecated parameter 'utf8'
[  578.309042][T11439] exfat: Unknown parameter 'keep_last_dots'
[  578.709069][T11452] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  579.708383][T11461] loop5: detected capacity change from 0 to 1024
[  579.737116][ T7473] usb 9-1: new full-speed USB device number 82 using dummy_hcd
[  579.747886][ T7482] usb 8-1: new full-speed USB device number 74 using dummy_hcd
[  579.963404][ T7473] usb 9-1: device descriptor read/64, error -71
[  580.132905][ T7482] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  580.163034][ T7482] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  580.192743][ T7482] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.216972][ T7482] usb 8-1: config 0 descriptor??
[  580.233194][ T7473] usb 9-1: new full-speed USB device number 83 using dummy_hcd
[  580.255533][ T4230] usb 6-1: new full-speed USB device number 85 using dummy_hcd
[  580.436261][ T7473] usb 9-1: device descriptor read/64, error -71
[  580.603248][ T7473] usb usb9-port1: attempt power cycle
[  580.679704][ T4230] usb 6-1: unable to read config index 0 descriptor/start: -61
[  580.697808][ T4230] usb 6-1: can't read configurations, error -61
[  580.852916][ T7482] ath6kl: Failed to submit usb control message: -71
[  580.862785][ T4230] usb 6-1: new full-speed USB device number 86 using dummy_hcd
[  580.880872][ T7482] ath6kl: unable to send the bmi data to the device: -71
[  580.890992][ T7482] ath6kl: Unable to send get target info: -71
[  580.905689][T11470] loop9: detected capacity change from 0 to 2048
[  580.920867][ T7482] ath6kl: Failed to init ath6kl core: -71
[  580.980658][ T7482] ath6kl_usb: probe of 8-1:0.0 failed with error -71
[  580.992728][T11471] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  581.012728][ T7473] usb 9-1: new full-speed USB device number 84 using dummy_hcd
[  581.024241][ T7482] usb 8-1: USB disconnect, device number 74
[  581.124021][ T7473] usb 9-1: device descriptor read/8, error -71
[  581.143087][T11472] libceph: resolve '0..' (ret=-3): failed
[  581.159651][  T264] block nbd9: Attempted send on invalid socket
[  581.167025][  T264] blk_update_request: I/O error, dev nbd9, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  581.180736][  T264] gfs2: error 10 reading superblock
[  581.292892][ T4230] usb 6-1: unable to read config index 0 descriptor/start: -61
[  581.318407][ T4230] usb 6-1: can't read configurations, error -61
[  581.416525][ T4230] usb usb6-port1: attempt power cycle
[  581.422945][ T7473] usb 9-1: new full-speed USB device number 85 using dummy_hcd
[  581.523238][ T7473] usb 9-1: device descriptor read/8, error -71
[  581.674219][ T7473] usb usb9-port1: unable to enumerate USB device
[  581.776144][T11466] loop6: detected capacity change from 0 to 32768
[  581.903454][ T4230] usb 6-1: new full-speed USB device number 87 using dummy_hcd
[  582.131840][T11466] XFS (loop6): Mounting V5 Filesystem
[  582.183214][ T4230] usb 6-1: unable to read config index 0 descriptor/start: -61
[  582.223685][ T4230] usb 6-1: can't read configurations, error -61
[  582.482917][ T4230] usb 6-1: new full-speed USB device number 88 using dummy_hcd
[  582.734850][T11466] XFS (loop6): Ending clean mount
[  582.773137][ T4230] usb 6-1: unable to read config index 0 descriptor/start: -61
[  582.804460][T11483] device syzkaller0 entered promiscuous mode
[  582.820176][ T4230] usb 6-1: can't read configurations, error -61
[  582.923891][ T4230] usb usb6-port1: unable to enumerate USB device
[  583.027766][T11466] XFS (loop6): Quotacheck needed: Please wait.
[  583.986337][T11466] XFS (loop6): Quotacheck: Done.
[  584.376509][ T5382] XFS (loop6): Unmounting Filesystem
[  584.469906][T11500] loop9: detected capacity change from 0 to 64
[  584.962216][T11504] loop5: detected capacity change from 0 to 1024
[  585.300351][T11506] loop9: detected capacity change from 0 to 32768
[  585.347139][T11506] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.1818 (11506)
[  585.552370][T11506] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm
[  585.561243][T11506] BTRFS info (device loop9): turning on sync discard
[  585.568259][T11506] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  585.577817][T11506] BTRFS info (device loop9): use zstd compression, level 3
[  585.586091][T11506] BTRFS info (device loop9): turning on async discard
[  585.593409][T11506] BTRFS warning (device loop9): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  585.604233][T11506] BTRFS info (device loop9): trying to use backup root at mount time
[  585.612649][T11506] BTRFS info (device loop9): enabling auto defrag
[  585.619473][T11506] BTRFS info (device loop9): using free space tree
[  585.626161][T11506] BTRFS info (device loop9): has skinny extents
[  586.045578][T11523] netlink: 'syz.5.1821': attribute type 4 has an invalid length.
[  586.157500][ T4227] BTRFS warning (device loop9): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  586.215460][T11506] BTRFS warning (device loop9): failed to read root (objectid=2): -5
[  586.228018][  T154] BTRFS warning (device loop9): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  586.244361][T11506] BTRFS warning (device loop9): couldn't read tree root
[  586.275815][ T4230] usb 9-1: new full-speed USB device number 86 using dummy_hcd
[  586.283662][T11506] BTRFS error (device loop9): parent transid verify failed on 5255168 wanted 5 found 7
[  586.293709][T11506] BTRFS warning (device loop9): couldn't read tree root
[  586.309910][T11537] loop5: detected capacity change from 0 to 128
[  586.370539][T11506] BTRFS info (device loop9): enabling ssd optimizations
[  586.378298][T11506] BTRFS info (device loop9): clearing free space tree
[  586.385284][T11506] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  586.395050][T11506] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  586.417300][T11506] BTRFS info (device loop9): creating free space tree
[  586.425190][T11506] BTRFS info (device loop9): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  586.435108][T11506] BTRFS info (device loop9): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  586.556107][T11534] loop7: detected capacity change from 0 to 2048
[  586.694620][ T4230] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  586.711788][ T4230] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  586.734801][ T4230] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.771222][T11547] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  586.875432][ T4230] usb 9-1: config 0 descriptor??
[  587.014882][T11552] libceph: resolve '0..' (ret=-3): failed
[  587.036390][  T264] block nbd7: Attempted send on invalid socket
[  587.043278][  T264] blk_update_request: I/O error, dev nbd7, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  587.071853][  T264] gfs2: error 10 reading superblock
[  588.003065][ T4230] ath6kl: Failed to submit usb control message: -110
[  588.057086][ T4230] ath6kl: unable to send the bmi data to the device: -110
[  588.192949][ T4230] ath6kl: Unable to send get target info: -110
[  589.535506][ T4230] ath6kl: Failed to init ath6kl core: -110
[  590.183017][ T4230] ath6kl_usb: probe of 9-1:0.0 failed with error -110
[  590.514408][T11588] loop9: detected capacity change from 0 to 1024
[  591.481137][T11597] loop7: detected capacity change from 0 to 512
[  592.911863][T11612] loop9: detected capacity change from 0 to 2048
[  592.925885][T11597] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  592.962534][T11616] IPv6: ADDRCONF(NETDEV_CHANGE): rose5: link becomes ready
[  594.403555][T11622] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  594.454875][T11623] device syzkaller0 entered promiscuous mode
[  594.528642][T11624] libceph: resolve '0..' (ret=-3): failed
[  594.540891][  T264] block nbd9: Attempted send on invalid socket
[  594.547610][  T264] blk_update_request: I/O error, dev nbd9, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  594.559680][  T264] gfs2: error 10 reading superblock
[  596.153785][T11627] loop7: detected capacity change from 0 to 16
[  597.071128][T11627] erofs: (device loop7): mounted with root inode @ nid 36.
[  597.848953][T11634] loop5: detected capacity change from 0 to 256
[  597.930077][T11634] FAT-fs (loop5): Unrecognized mount option "iocharseu=cp861" or missing value
[  598.018117][T11638] loop6: detected capacity change from 0 to 8
[  599.324872][   T26] audit: type=1800 audit(2000000353.280:26): pid=11646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1845" name="file2" dev="loop6" ino=3 res=0 errno=0
[  599.495385][T11650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  599.527694][T11650] device syzkaller0 entered promiscuous mode
[  599.605130][T11650] tipc: Resetting bearer <eth:syzkaller0>
[  599.637490][T11654] loop9: detected capacity change from 0 to 128
[  599.650667][T11648] tipc: Resetting bearer <eth:syzkaller0>
[  599.696737][T11652] syz.6.1849 (11652) used greatest stack depth: 18512 bytes left
[  599.705226][T11648] tipc: Disabling bearer <eth:syzkaller0>
[  599.857772][T11655] attempt to access beyond end of device
[  599.857772][T11655] loop9: rw=2049, want=625, limit=128
[  600.137368][T11659] loop7: detected capacity change from 0 to 32768
[  600.197976][T11662] loop5: detected capacity change from 0 to 2048
[  600.204706][T11659] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1852 (11659)
[  600.239702][T11654] attempt to access beyond end of device
[  600.239702][T11654] loop9: rw=524288, want=369, limit=128
[  600.265660][T11659] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  600.274543][T11659] BTRFS info (device loop7): setting nodatasum
[  600.280760][T11659] BTRFS info (device loop7): force zlib compression, level 3
[  600.288327][T11659] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8)
[  600.297644][T11659] BTRFS info (device loop7): use lzo compression, level 0
[  600.304902][T11659] BTRFS info (device loop7): turning on flush-on-commit
[  600.311892][T11659] BTRFS info (device loop7): enabling auto defrag
[  600.318834][T11659] BTRFS info (device loop7): max_inline at 4096
[  600.325730][T11659] BTRFS info (device loop7): using free space tree
[  600.332296][T11659] BTRFS info (device loop7): has skinny extents
[  600.362167][T11654] attempt to access beyond end of device
[  600.362167][T11654] loop9: rw=0, want=153, limit=128
[  600.377600][T11654] attempt to access beyond end of device
[  600.377600][T11654] loop9: rw=0, want=153, limit=128
[  600.383654][T11666] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  600.390535][T11654] attempt to access beyond end of device
[  600.390535][T11654] loop9: rw=0, want=153, limit=128
[  600.410829][T11654] attempt to access beyond end of device
[  600.410829][T11654] loop9: rw=0, want=153, limit=128
[  600.422278][T11654] attempt to access beyond end of device
[  600.422278][T11654] loop9: rw=0, want=153, limit=128
[  600.434091][T11654] attempt to access beyond end of device
[  600.434091][T11654] loop9: rw=0, want=153, limit=128
[  600.445402][T11654] attempt to access beyond end of device
[  600.445402][T11654] loop9: rw=0, want=153, limit=128
[  600.456619][T11654] attempt to access beyond end of device
[  600.456619][T11654] loop9: rw=0, want=153, limit=128
[  600.611140][T11683] libceph: resolve '0..' (ret=-3): failed
[  600.624927][  T150] block nbd5: Attempted send on invalid socket
[  600.631762][  T150] blk_update_request: I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  600.643688][  T150] gfs2: error 10 reading superblock
[  600.699740][T11659] BTRFS info (device loop7): enabling ssd optimizations
[  604.646920][T11707] netlink: 'syz.5.1858': attribute type 2 has an invalid length.
[  607.059286][T11713] chnl_net:caif_netlink_parms(): no params data found
[  607.283613][T11733] Bluetooth: hci0: command 0x0409 tx timeout
[  607.403422][T11713] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.411102][T11713] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.428591][T11713] device bridge_slave_0 entered promiscuous mode
[  607.900337][T11713] bridge0: port 2(bridge_slave_1) entered blocking state
[  607.909310][T11713] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.920435][T11713] device bridge_slave_1 entered promiscuous mode
[  610.314587][T11713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  610.438582][ T6265] Bluetooth: hci0: command 0x041b tx timeout
[  610.508902][ T5157] Bluetooth: hci1: Frame reassembly failed (-84)
[  610.517721][T11755] loop7: detected capacity change from 0 to 8
[  610.541863][T11756] loop5: detected capacity change from 0 to 2048
[  610.551395][T11713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  610.561130][ T5157] Bluetooth: hci1: Frame reassembly failed (-84)
[  610.605531][T11713] team0: Port device team_slave_0 added
[  610.615832][T11713] team0: Port device team_slave_1 added
[  610.665126][T11713] batman_adv: batadv0: Adding interface: batadv_slave_0
[  610.673105][T11713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  610.701521][T11713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  610.855649][T11713] batman_adv: batadv0: Adding interface: batadv_slave_1
[  610.875642][T11713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  610.946893][T11760] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  610.966793][T11713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  610.980275][T11755] SQUASHFS error: Unable to read inode 0xa7
[  611.041920][T11759] device syzkaller0 entered promiscuous mode
[  611.266294][T11713] device hsr_slave_0 entered promiscuous mode
[  611.324390][T11713] device hsr_slave_1 entered promiscuous mode
[  611.340629][T11763] libceph: resolve '0..' (ret=-3): failed
[  611.361632][  T264] block nbd5: Attempted send on invalid socket
[  611.369115][  T264] blk_update_request: I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  611.381506][  T264] gfs2: error 10 reading superblock
[  613.520626][T10039] Bluetooth: hci0: command 0x040f tx timeout
[  613.527317][T10039] Bluetooth: hci1: command 0x1003 tx timeout
[  613.534158][ T4186] Bluetooth: hci1: sending frame failed (-49)
[  613.913144][T11776] netlink: 'syz.5.1872': attribute type 2 has an invalid length.
[  614.052088][T11772] loop9: detected capacity change from 0 to 40427
[  614.062813][T11734] usb 8-1: new full-speed USB device number 75 using dummy_hcd
[  614.094047][T11772] F2FS-fs (loop9): Unrecognized mount option "age_extent_cache" or missing value
[  614.235018][T11564] usb 9-1: USB disconnect, device number 86
[  614.291937][ T5157] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.485015][T11734] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  614.520764][T11734] usb 8-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[  615.325559][T11734] usb 8-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  615.335061][T11734] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.368325][ T5157] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.430648][T11798] loop9: detected capacity change from 0 to 64
[  615.592927][T11734] Bluetooth: hci1: command 0x1001 tx timeout
[  615.602524][ T4186] Bluetooth: hci1: sending frame failed (-49)
[  615.608940][T11734] Bluetooth: hci0: command 0x0419 tx timeout
[  615.692216][T11564] usb 8-1: USB disconnect, device number 75
[  616.214888][ T5157] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.580770][ T5157] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.405939][T11810] device syzkaller0 entered promiscuous mode
[  617.647475][T11827] loop5: detected capacity change from 0 to 8
[  617.672852][ T6269] Bluetooth: hci1: command 0x1009 tx timeout
[  617.744219][ T5157] tipc: Left network mode
[  617.929078][T11713] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  617.964368][T11713] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  618.111819][T11839] SQUASHFS error: Unable to read inode 0xa7
[  619.594888][T11713] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  619.993780][T11844] netlink: 'syz.5.1884': attribute type 2 has an invalid length.
[  620.053070][T11713] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  620.312235][T11713] 8021q: adding VLAN 0 to HW filter on device bond0
[  620.359848][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  620.377052][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  620.395547][T11713] 8021q: adding VLAN 0 to HW filter on device team0
[  620.407610][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  620.427738][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  620.448314][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.455543][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  620.463499][ T6265] usb 10-1: new full-speed USB device number 82 using dummy_hcd
[  620.509233][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  620.523545][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  620.543863][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  620.552633][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.559745][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  620.625596][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  620.787807][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  620.835475][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  620.858940][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  620.877984][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  620.886977][ T6265] usb 10-1: config 8 has an invalid interface number: 177 but max is 0
[  620.917074][ T6265] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  620.945519][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  620.963349][ T6265] usb 10-1: config 8 has no interface number 0
[  620.997423][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  621.012232][ T6265] usb 10-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  621.058421][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  621.129376][T11713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  621.884584][ T6265] usb 10-1: config 8 interface 177 has no altsetting 0
[  621.892506][T11713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  621.980447][ T6265] usb 10-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  622.052782][ T6265] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.251560][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  622.261992][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  622.311504][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  622.391721][T11891] device syzkaller0 entered promiscuous mode
[  622.408956][T11904] loop5: detected capacity change from 0 to 8
[  622.423095][ T6265] usb 10-1: string descriptor 0 read error: -71
[  622.445146][ T6265] ir_toy 10-1:8.177: required endpoints not found
[  622.481737][ T6265] usb 10-1: USB disconnect, device number 82
[  623.196583][T11916] SQUASHFS error: Unable to read inode 0xa7
[  623.471256][T11918] loop7: detected capacity change from 0 to 16
[  623.573322][T11918] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  623.808588][T11713] 8021q: adding VLAN 0 to HW filter on device batadv0
[  623.840360][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  623.871231][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  624.200486][T11925] netlink: 'syz.6.1897': attribute type 9 has an invalid length.
[  624.377066][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1897'.
[  624.589012][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  624.595437][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  624.641376][T11925] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  624.650664][T11925] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  624.659498][T11925] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  624.668337][T11925] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  624.701682][T11932] netlink: 'syz.5.1898': attribute type 2 has an invalid length.
[  624.762198][T11925] netlink: 'syz.6.1897': attribute type 9 has an invalid length.
[  624.817176][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1897'.
[  624.896445][T11713] device veth0_vlan entered promiscuous mode
[  624.984327][T11713] device veth1_vlan entered promiscuous mode
[  625.025134][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  625.048817][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  625.188971][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  625.373378][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  625.836533][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  625.851494][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  625.863804][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  626.311081][ T5157] device hsr_slave_0 left promiscuous mode
[  626.535937][T11962] sg_write: data in/out 394205/258 bytes for SCSI command 0x0-- guessing data in;
[  626.535937][T11962]    program syz.9.1905 not setting count and/or reply_len properly
[  627.373643][ T5157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  627.402055][ T5157] batman_adv: batadv0: Removing interface: batadv_slave_0
[  627.426137][T11969] loop5: detected capacity change from 0 to 8
[  627.431678][ T5157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  627.450404][ T5157] batman_adv: batadv0: Removing interface: batadv_slave_1
[  627.461819][ T5157] device bridge_slave_1 left promiscuous mode
[  627.471456][ T5157] bridge0: port 2(bridge_slave_1) entered disabled state
[  627.481002][ T5157] device bridge_slave_0 left promiscuous mode
[  627.510999][ T5157] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.551784][ T5157] device veth1_macvtap left promiscuous mode
[  627.575688][ T5157] device veth0_macvtap left promiscuous mode
[  627.607693][ T5157] device veth1_vlan left promiscuous mode
[  627.632914][ T5157] device veth0_vlan left promiscuous mode
[  627.867605][T11976] SQUASHFS error: Unable to read inode 0xa7
[  629.462094][ T5157] team0 (unregistering): Port device team_slave_1 removed
[  629.486399][ T5157] team0 (unregistering): Port device team_slave_0 removed
[  629.539981][ T5157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  629.577741][ T5157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  629.671811][ T5157] bond0 (unregistering): Released all slaves
[  629.738106][T11988] netlink: 'syz.7.1912': attribute type 2 has an invalid length.
[  629.768553][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  629.782260][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  629.880068][T11713] device veth0_macvtap entered promiscuous mode
[  629.902036][T11713] device veth1_macvtap entered promiscuous mode
[  629.951782][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  630.002418][T12004] loop9: detected capacity change from 0 to 256
[  630.005276][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.019342][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  630.038370][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.050228][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  630.069013][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.089345][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  630.107681][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.120036][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  630.140191][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.162322][T11713] batman_adv: batadv0: Interface activated: batadv_slave_0
[  630.172202][T12006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  630.183742][T12004] exfat: Deprecated parameter 'utf8'
[  630.189219][T12004] exfat: Deprecated parameter 'namecase'
[  630.213155][T12008] device syzkaller0 entered promiscuous mode
[  630.240352][T12004] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  630.267141][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  630.293292][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  630.324744][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  630.381622][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  630.401920][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  630.431164][T12015] loop7: detected capacity change from 0 to 1024
[  630.451267][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.493821][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  630.513092][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.529616][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  630.542263][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.555100][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  630.572725][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.597839][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  630.612094][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.625554][T11713] batman_adv: batadv0: Interface activated: batadv_slave_1
[  630.641549][T12012] tipc: Resetting bearer <eth:syzkaller0>
[  630.709999][T12015] EXT4-fs (loop7): Ignoring removed bh option
[  630.753254][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1918'.
[  630.763867][T12015] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  630.842171][T12012] tipc: Disabling bearer <eth:syzkaller0>
[  630.987044][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  631.021035][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  631.045535][T11713] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  631.059366][T11713] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  631.073715][T11713] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  631.083040][T11713] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  631.302948][T12022] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1920'.
[  632.029256][T12046] device syzkaller0 entered promiscuous mode
[  632.262368][T12058] netlink: 'syz.5.1926': attribute type 2 has an invalid length.
[  632.336103][T11693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  632.371932][T12062] loop9: detected capacity change from 0 to 8
[  632.379753][T11693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  632.443336][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  632.519968][ T5143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  632.548905][ T5143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  632.585830][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  634.054557][T12081] loop6: detected capacity change from 0 to 1024
[  634.167423][T12081] EXT4-fs (loop6): Ignoring removed bh option
[  634.753219][T12086] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1933'.
[  634.754638][T12081] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  635.745662][   T26] audit: type=1326 audit(2000000389.410:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9e860819 code=0x7ffc0000
[  635.817621][T12101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  635.915225][T12104] device syzkaller0 entered promiscuous mode
[  635.990923][   T26] audit: type=1326 audit(2000000389.410:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9e860819 code=0x7ffc0000
[  636.013988][   T26] audit: type=1326 audit(2000000389.420:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fda9e860819 code=0x7ffc0000
[  636.130357][   T26] audit: type=1326 audit(2000000389.430:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9e860819 code=0x7ffc0000
[  636.172720][   T26] audit: type=1326 audit(2000000389.430:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9e860819 code=0x7ffc0000
[  636.199888][T12101] tipc: Resetting bearer <eth:syzkaller0>
[  636.236558][   T26] audit: type=1326 audit(2000000389.430:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fda9e860819 code=0x7ffc0000
[  636.259612][T12098] tipc: Resetting bearer <eth:syzkaller0>
[  636.284034][T12098] tipc: Disabling bearer <eth:syzkaller0>
[  636.338519][T12111] device syzkaller0 entered promiscuous mode
[  636.359625][   T26] audit: type=1326 audit(2000000389.440:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9e860819 code=0x7ffc0000
[  636.485700][T12122] netlink: 'syz.5.1940': attribute type 2 has an invalid length.
[  636.497486][   T26] audit: type=1326 audit(2000000389.440:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9e860819 code=0x7ffc0000
[  636.556525][T12129] loop1: detected capacity change from 0 to 8
[  636.660398][   T26] audit: type=1326 audit(2000000389.440:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda9e860819 code=0x7ffc0000
[  636.732649][T12134] loop9: detected capacity change from 0 to 64
[  636.749438][   T26] audit: type=1326 audit(2000000389.450:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.9.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9e860819 code=0x7ffc0000
[  636.925016][T12134] BFS-fs: bfs_fill_super(): loop9 is unclean, continuing
[  637.041292][T12139] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1945'.
[  637.090057][T12143] loop6: detected capacity change from 0 to 512
[  637.223071][T12144] SQUASHFS error: Unable to read inode 0xa7
[  637.528172][T12143] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  637.674346][T12143] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  637.733808][T12143] System zones: 1-12
[  637.797093][T12143] EXT4-fs (loop6): 1 truncate cleaned up
[  637.892835][T12143] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,debug,,errors=continue. Quota mode: none.
[  638.972769][ T6265] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  639.046999][T12166] loop9: detected capacity change from 0 to 128
[  639.078909][ T6265] Bluetooth: hci0: Injecting HCI hardware error event
[  639.271248][ T4186] Bluetooth: hci0: hardware error 0x00
[  639.550246][T12166] EXT4-fs (loop9): Ignoring removed nobh option
[  640.084829][T12166] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none.
[  640.105984][T12174] device syzkaller0 entered promiscuous mode
[  640.167789][T12166] ext4 filesystem being mounted at /364/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  640.496642][T12186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  640.584072][T12194] netlink: 'syz.9.1957': attribute type 2 has an invalid length.
[  640.741028][T12200] loop7: detected capacity change from 0 to 1024
[  640.755066][T12186] tipc: Disabling bearer <eth:syzkaller0>
[  640.781392][T12202] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1959'.
[  640.877212][T12206] loop6: detected capacity change from 0 to 8
[  641.209574][T12213] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1961'.
[  641.292800][T12214] SQUASHFS error: Unable to read inode 0xa7
[  641.953341][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'.
[  642.002168][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'.
[  642.075611][T12218] loop9: detected capacity change from 0 to 8
[  642.618292][T12235] loop7: detected capacity change from 0 to 64
[  643.918188][T12239] SQUASHFS error: Unable to read inode 0xa7
[  644.158132][T12246] device syzkaller0 entered promiscuous mode
[  644.220056][T12253] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1971'.
[  644.377428][T12256] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  644.673533][T12269] netlink: 'syz.1.1973': attribute type 2 has an invalid length.
[  644.944984][T12273] loop7: detected capacity change from 0 to 32768
[  645.032713][T12273] XFS (loop7): Mounting V5 Filesystem
[  645.187698][T12288] loop9: detected capacity change from 0 to 1024
[  645.236905][T12273] XFS (loop7): Ending clean mount
[  645.280717][T12288] EXT4-fs (loop9): inline encryption not supported
[  645.580951][T12288] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000006,norecovery,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,norecovery,,errors=continue. Quota mode: writeback.
[  646.430797][T12309] loop6: detected capacity change from 0 to 8
[  647.690039][ T5385] XFS (loop7): Unmounting Filesystem
[  648.172569][T12321] SQUASHFS error: Unable to read inode 0xa7
[  649.367212][T12331] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1984'.
[  649.475156][T12333] device syzkaller0 entered promiscuous mode
[  650.009503][T12337] loop7: detected capacity change from 0 to 4096
[  650.170416][T12347] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  650.210880][T12349] netlink: 'syz.6.1989': attribute type 2 has an invalid length.
[  650.355808][T12353] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  650.373661][T12337] NILFS (loop7): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed
[  650.390187][T12353] device syzkaller0 entered promiscuous mode
[  650.436211][T12353] tipc: Resetting bearer <eth:syzkaller0>
[  650.459176][T12351] tipc: Resetting bearer <eth:syzkaller0>
[  650.494826][T12351] tipc: Disabling bearer <eth:syzkaller0>
[  650.714865][T12366] loop7: detected capacity change from 0 to 64
[  650.721990][T12365] loop1: detected capacity change from 0 to 8
[  650.866363][T12370] netlink: 'syz.9.1994': attribute type 2 has an invalid length.
[  651.177218][T12345] loop5: detected capacity change from 0 to 32768
[  652.212203][T12386] SQUASHFS error: Unable to read inode 0xa7
[  652.218870][T12387] SQUASHFS error: Unable to read inode 0xa7
[  652.300521][T12345] XFS (loop5): Mounting V5 Filesystem
[  652.576907][T12402] device syzkaller0 entered promiscuous mode
[  652.588921][T12345] XFS (loop5): Starting recovery (logdev: internal)
[  653.402518][T12411] loop7: detected capacity change from 0 to 256
[  653.494064][T12411] exfat: Deprecated parameter 'utf8'
[  653.499494][T12411] exfat: Deprecated parameter 'utf8'
[  653.534831][T12345] XFS (loop5): Ending recovery (logdev: internal)
[  653.593721][T12411] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  653.752263][T12419] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  653.800112][T12419] device syzkaller0 entered promiscuous mode
[  653.829975][T12419] tipc: Resetting bearer <eth:syzkaller0>
[  653.921054][T12418] tipc: Resetting bearer <eth:syzkaller0>
[  653.960373][T12418] tipc: Disabling bearer <eth:syzkaller0>
[  654.090308][T12431] netlink: 'syz.7.2006': attribute type 2 has an invalid length.
[  655.205455][T12448] loop9: detected capacity change from 0 to 8
[  655.224576][ T5380] XFS (loop5): Unmounting Filesystem
[  655.551339][T12456] device syzkaller0 entered promiscuous mode
[  657.563589][T12471] SQUASHFS error: Unable to read inode 0xa7
[  660.996002][T12500] netlink: 'syz.5.2021': attribute type 2 has an invalid length.
[  661.309608][T12513] loop1: detected capacity change from 0 to 8
[  661.330061][T12511] device syzkaller0 entered promiscuous mode
[  662.420436][T12526] loop6: detected capacity change from 0 to 64
[  662.436984][T12530] loop5: detected capacity change from 0 to 16
[  662.461513][T12532] loop9: detected capacity change from 0 to 64
[  662.641691][T12530] erofs: (device loop5): mounted with root inode @ nid 36.
[  662.807152][T12536] SQUASHFS error: Unable to read inode 0xa7
[  662.816365][T12536] SQUASHFS error: Unable to read inode 0xa7
[  662.873082][T12532] BFS-fs: bfs_fill_super(): loop9 is unclean, continuing
[  662.899502][T12530] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89
[  663.126464][ T4186] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192]
[  663.160494][T12530] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192]
[  663.335244][   T26] kauditd_printk_skb: 8 callbacks suppressed
[  663.335263][   T26] audit: type=1800 audit(2000000417.290:45): pid=12530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2029" name="file3" dev="loop5" ino=89 res=0 errno=0
[  664.710832][T12569] netlink: 'syz.1.2038': attribute type 2 has an invalid length.
[  665.000978][T12585] device syzkaller0 entered promiscuous mode
[  665.306064][T12593] loop7: detected capacity change from 0 to 8
[  665.320988][T12590] loop9: detected capacity change from 0 to 64
[  666.042374][T12607] SQUASHFS error: Unable to read inode 0xa7
[  666.052326][T12607] SQUASHFS error: Unable to read inode 0xa7
[  666.646401][T12624] netlink: 'syz.6.2054': attribute type 2 has an invalid length.
[  666.930519][T12629] device syzkaller0 entered promiscuous mode
[  667.292162][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2055'.
[  668.410955][T12655] loop1: detected capacity change from 0 to 128
[  668.432829][T12654] loop9: detected capacity change from 0 to 64
[  668.542649][ T7473] usb 6-1: new full-speed USB device number 89 using dummy_hcd
[  668.761257][T12665] loop7: detected capacity change from 0 to 8
[  669.003007][ T7473] usb 6-1: config 8 has an invalid interface number: 177 but max is 0
[  669.031789][ T7473] usb 6-1: config 8 has no interface number 0
[  669.451779][ T7473] usb 6-1: config 8 interface 177 altsetting 9 has an invalid endpoint with address 0xE8, skipping
[  669.501398][ T7473] usb 6-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  669.573087][ T7473] usb 6-1: config 8 interface 177 has no altsetting 0
[  669.579970][ T7473] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  669.664457][ T7473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.904119][T12690] SQUASHFS error: Unable to read inode 0xa7
[  669.920500][T12690] SQUASHFS error: Unable to read inode 0xa7
[  670.885341][T12689] netlink: 'syz.9.2069': attribute type 2 has an invalid length.
[  670.932635][    C0] raw-gadget.0 gadget: ignoring, device is not running
[  670.940358][ T7473] usb 6-1: can't set config #8, error -32
[  670.952961][T11563] usb 6-1: USB disconnect, device number 89
[  672.144849][T12719] loop1: detected capacity change from 0 to 64
[  672.557235][T12723] loop7: detected capacity change from 0 to 64
[  673.181265][T12738] netlink: 'syz.6.2083': attribute type 2 has an invalid length.
[  673.303341][T12741] loop1: detected capacity change from 0 to 512
[  673.997621][T12741] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  674.010036][T12741] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  674.020315][T12741] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2077: Corrupt directory, running e2fsck is recommended
[  674.050993][T12741] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  674.060687][T12741] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.2077: corrupted in-inode xattr
[  674.083686][T12741] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.2077: couldn't read orphan inode 15 (err -117)
[  674.096403][T12741] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,grpquota,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  675.239628][T12766] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2087'.
[  675.551131][T12773] loop5: detected capacity change from 0 to 64
[  675.912465][T12788] netlink: 'syz.7.2094': attribute type 2 has an invalid length.
[  676.914045][T12824] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2098'.
[  677.967170][T12829] loop1: detected capacity change from 0 to 1024
[  678.079510][T12829] EXT4-fs (loop1): Ignoring removed bh option
[  678.191280][T12829] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  678.329491][T12839] netlink: 136 bytes leftover after parsing attributes in process `syz.7.2104'.
[  680.037805][   T26] audit: type=1326 audit(2000000433.990:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12873 comm="syz.7.2113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66be8b6819 code=0x0
[  680.323218][T11563] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  680.602878][T11563] usb 6-1: Using ep0 maxpacket: 8
[  680.982906][T11563] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  681.000354][T11563] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  681.033486][T11563] usb 6-1: Product: syz
[  681.052746][T11563] usb 6-1: Manufacturer: syz
[  681.073857][T11563] usb 6-1: SerialNumber: syz
[  681.114329][T11563] usb 6-1: config 0 descriptor??
[  681.305235][T11563] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  681.388090][T12895] loop7: detected capacity change from 0 to 2048
[  681.493763][T12895] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  681.757870][T12914] capability: warning: `syz.1.2122' uses deprecated v2 capabilities in a way that may be insecure
[  681.934097][T12919] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2123'.
[  682.029952][T12926] loop1: detected capacity change from 0 to 8
[  682.043985][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2111'.
[  682.540799][T12933] loop9: detected capacity change from 0 to 1024
[  682.562873][T11563] gspca_zc3xx: reg_w_i err -110
[  682.568027][T11563] gspca_zc3xx: probe of 6-1:0.0 failed with error -110
[  682.602012][T12933] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  682.664634][T11734] usb 6-1: USB disconnect, device number 90
[  682.935058][T12933] EXT4-fs (loop9): mounted filesystem without journal. Opts: user_xattr,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback.
[  683.451542][T12933] ./file0: Can't open blockdev
[  683.706174][T12950] loop7: detected capacity change from 0 to 1024
[  683.913005][T12950] EXT4-fs (loop7): inline encryption not supported
[  683.986825][T12956] SQUASHFS error: Unable to read inode 0xa7
[  684.567257][T12950] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000006,norecovery,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,norecovery,,errors=continue. Quota mode: writeback.
[  685.254951][T12985] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2136'.
[  685.840232][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  685.846770][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  685.873433][T12979] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2134'.
[  686.314782][T12999] loop7: detected capacity change from 0 to 2048
[  687.205063][T13015] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  687.593197][  T150] block nbd7: Attempted send on invalid socket
[  687.600326][  T150] blk_update_request: I/O error, dev nbd7, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  687.612357][  T150] gfs2: error 10 reading superblock
[  688.131315][T13016] libceph: resolve '0..' (ret=-3): failed
[  688.777364][T13023] loop5: detected capacity change from 0 to 1024
[  689.025434][T13023] EXT4-fs (loop5): Ignoring removed bh option
[  689.226245][T13023] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  689.878492][T13038] loop1: detected capacity change from 0 to 1024
[  689.897735][T13042] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2149'.
[  689.988804][T13038] EXT4-fs (loop1): inline encryption not supported
[  690.244758][T13053] trusted_key: encrypted_key: insufficient parameters specified
[  690.298011][T13038] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000006,norecovery,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,norecovery,,errors=continue. Quota mode: writeback.
[  691.175918][T13073] loop7: detected capacity change from 0 to 64
[  691.332815][ T6267] usb 10-1: new high-speed USB device number 83 using dummy_hcd
[  691.602743][ T6267] usb 10-1: Using ep0 maxpacket: 16
[  691.731929][T13083] loop5: detected capacity change from 0 to 2048
[  691.808776][ T6267] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1088, setting to 1024
[  691.866395][T13087] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  691.878646][T13089] loop7: detected capacity change from 0 to 8
[  691.968246][T13090] libceph: resolve '0..' (ret=-3): failed
[  691.986720][  T150] block nbd5: Attempted send on invalid socket
[  691.993491][  T150] blk_update_request: I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  692.018114][ T6267] usb 10-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40
[  692.027754][  T150] gfs2: error 10 reading superblock
[  692.037149][ T6267] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.045499][ T6267] usb 10-1: Product: syz
[  692.049907][ T6267] usb 10-1: Manufacturer: syz
[  692.054757][ T6267] usb 10-1: SerialNumber: syz
[  692.196781][T13097] loop1: detected capacity change from 0 to 16
[  692.207682][T13098] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2161'.
[  692.249022][T13097] erofs: (device loop1): mounted with root inode @ nid 36.
[  692.433006][ T6267] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  692.501610][ T6267] usb 10-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8204 device_setup=1 to enable and report any issues to g@b4.vu
[  692.605877][ T6267] usb 10-1: USB disconnect, device number 83
[  692.674974][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  694.672666][T11734] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  694.788953][T13135] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2173'.
[  695.163333][T11734] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  695.342288][T11734] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  695.839858][T11734] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  695.849326][T11734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.923236][T13129] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  696.365472][T13145] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  696.439337][T11734] usb 2-1: USB disconnect, device number 12
[  696.729408][T13140] loop7: detected capacity change from 0 to 131072
[  696.863618][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2177'.
[  696.917748][   T26] audit: type=1326 audit(2000000450.870:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47806ea819 code=0x7ffc0000
[  696.954648][T13140] F2FS-fs (loop7): invalid crc value
[  697.395267][T13140] F2FS-fs (loop7): Found nat_bits in checkpoint
[  697.449996][T13140] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  697.557751][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  697.593639][   T26] audit: type=1326 audit(2000000450.900:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47806ea819 code=0x7ffc0000
[  697.792310][   T26] audit: type=1326 audit(2000000450.930:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47806ea819 code=0x7ffc0000
[  697.852712][ T6276] usb 10-1: new high-speed USB device number 84 using dummy_hcd
[  697.937522][   T26] audit: type=1326 audit(2000000450.930:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f47806ea819 code=0x7ffc0000
[  698.037321][   T26] audit: type=1326 audit(2000000450.930:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47806ea819 code=0x7ffc0000
[  698.099391][   T26] audit: type=1326 audit(2000000450.930:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47806ea819 code=0x7ffc0000
[  698.103358][ T6276] usb 10-1: Using ep0 maxpacket: 16
[  698.136070][   T26] audit: type=1326 audit(2000000450.930:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47806ea819 code=0x7ffc0000
[  698.233153][T13180] loop5: detected capacity change from 0 to 8
[  698.293237][ T6276] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1088, setting to 1024
[  698.305930][   T26] audit: type=1326 audit(2000000450.940:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f47806ea819 code=0x7ffc0000
[  698.457112][   T26] audit: type=1326 audit(2000000450.950:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47806ab04e code=0x7ffc0000
[  698.692794][ T6276] usb 10-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40
[  698.755823][ T6276] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.782790][ T6276] usb 10-1: Product: syz
[  698.787309][ T6276] usb 10-1: Manufacturer: syz
[  698.795407][ T6276] usb 10-1: SerialNumber: syz
[  699.029034][   T26] audit: type=1326 audit(2000000451.060:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.1.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47806ab04e code=0x7ffc0000
[  699.179827][T13188] loop7: detected capacity change from 0 to 2048
[  699.246527][ T6276] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  699.286130][ T6276] usb 10-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8204 device_setup=1 to enable and report any issues to g@b4.vu
[  699.325446][T13188] NILFS (loop7): corrupt root inode
[  699.406011][ T6276] usb 10-1: USB disconnect, device number 84
[  699.839860][T13199] loop9: detected capacity change from 0 to 8
[  699.926862][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  700.007979][T13204] loop5: detected capacity change from 0 to 16
[  700.091076][T13204] erofs: (device loop5): mounted with root inode @ nid 36.
[  700.103455][T13204] handle_bad_sector: 1479 callbacks suppressed
[  700.103478][T13204] attempt to access beyond end of device
[  700.103478][T13204] loop5: rw=524288, want=1072, limit=16
[  700.129758][ T4186] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  700.161542][T13204] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89
[  700.171296][T13204] attempt to access beyond end of device
[  700.171296][T13204] loop5: rw=524288, want=56, limit=16
[  700.185697][T13204] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  700.325640][T13211] loop1: detected capacity change from 0 to 1024
[  700.468694][T13211] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  700.504804][T13211] EXT4-fs error (device loop1): ext4_get_first_dir_block:3597: inode #11: comm syz.1.2192: Directory hole found for htree leaf block 0
[  701.330341][T13239] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2197'.
[  702.105926][T13226] loop1: detected capacity change from 0 to 4096
[  702.262258][T13247] SQUASHFS error: Unable to read inode 0xa7
[  702.328722][T13249] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  702.649874][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  702.649892][   T26] audit: type=1800 audit(2000000456.600:62): pid=13226 uid=0 auid=0 ses=1 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2194" name="file1" dev="loop1" ino=30 res=0 errno=0
[  703.794235][T13272] loop7: detected capacity change from 0 to 1024
[  704.064962][T13272] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 2: comm syz.7.2204: lblock 2 mapped to illegal pblock 2 (length 1)
[  704.083054][T13272] Quota error (device loop7): qtree_write_dquot: dquota write failed
[  704.154175][T13272] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 48: comm syz.7.2204: lblock 0 mapped to illegal pblock 48 (length 1)
[  704.213042][T13272] Quota error (device loop7): v2_write_file_info: Can't write info structure
[  704.248920][T13272] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.2204: Failed to acquire dquot type 0
[  704.300853][T13272] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  704.346990][T13272] EXT4-fs error (device loop7): ext4_evict_inode:284: inode #11: comm syz.7.2204: mark_inode_dirty error
[  704.375334][T13287] loop1: detected capacity change from 0 to 2048
[  704.421812][T13272] EXT4-fs warning (device loop7): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  704.487505][T13290] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  704.514090][T13272] EXT4-fs (loop7): 1 orphan inode deleted
[  704.540520][T13272] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[  704.572909][  T155] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  704.720452][T13293] libceph: resolve '0..' (ret=-3): failed
[  704.763227][  T155] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  704.881569][  T150] block nbd1: Attempted send on invalid socket
[  704.888206][  T150] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  704.899893][  T150] gfs2: error 10 reading superblock
[  704.959613][  T155] EXT4-fs error (device loop7): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0
[  705.137379][T11693] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  705.292727][T11693] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  705.330934][T11693] EXT4-fs error (device loop7): ext4_release_dquot:6272: comm kworker/u4:11: Failed to release dquot type 0
[  705.413439][ T5385] EXT4-fs error (device loop7): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  705.519870][ T5385] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  705.609184][ T5385] EXT4-fs error (device loop7): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  705.935001][T13303] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2209'.
[  706.771791][T13312] loop5: detected capacity change from 0 to 16
[  708.015273][T13312] erofs: (device loop5): mounted with root inode @ nid 36.
[  708.026543][T13312] attempt to access beyond end of device
[  708.026543][T13312] loop5: rw=524288, want=1072, limit=16
[  708.091014][ T4186] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  708.422921][T13312] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89
[  708.432117][T13312] attempt to access beyond end of device
[  708.432117][T13312] loop5: rw=524288, want=56, limit=16
[  708.443455][T13312] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  708.467549][   T26] audit: type=1800 audit(2000000462.420:63): pid=13312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2210" name="file2" dev="loop5" ino=89 res=0 errno=0
[  708.792301][T13325] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2215'.
[  709.022643][ T6269] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[  710.004755][ T6269] usb 6-1: Using ep0 maxpacket: 16
[  710.142819][ T6269] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1088, setting to 1024
[  711.233142][ T6269] usb 6-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40
[  711.247955][ T6269] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.262279][ T6269] usb 6-1: Product: syz
[  711.290227][ T6269] usb 6-1: Manufacturer: syz
[  711.309228][T13352] loop7: detected capacity change from 0 to 512
[  711.317583][ T6269] usb 6-1: SerialNumber: syz
[  711.333288][T13353] loop9: detected capacity change from 0 to 8
[  711.448134][T13352] EXT4-fs (loop7): orphan cleanup on readonly fs
[  711.505645][T13352] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13
[  711.603393][T13352] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  711.653248][T13352] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.2220: attempt to clear invalid blocks 2 len 1
[  711.721202][T13352] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2220: invalid indirect mapped block 1819239214 (level 0)
[  711.753063][T13352] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2220: invalid indirect mapped block 1819239214 (level 1)
[  711.772886][ T6269] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  711.802744][ T6269] usb 6-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8204 device_setup=1 to enable and report any issues to g@b4.vu
[  711.872898][T13363] SQUASHFS error: Unable to read inode 0xa7
[  711.955566][T13352] EXT4-fs (loop7): 1 truncate cleaned up
[  711.971710][T13352] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback.
[  712.009929][ T6269] usb 6-1: USB disconnect, device number 91
[  712.295675][T13352] EXT4-fs error (device loop7): ext4_lookup:1855: inode #2: comm syz.7.2220: 'file1' linked to parent dir
[  712.398666][T10005] udevd[10005]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  713.599725][T13376] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2226'.
[  713.842460][T13379] loop7: detected capacity change from 0 to 2048
[  714.275665][T13394] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  714.906302][  T264] block nbd7: Attempted send on invalid socket
[  714.913474][  T264] blk_update_request: I/O error, dev nbd7, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  714.924938][  T264] gfs2: error 10 reading superblock
[  716.481212][T13410] loop1: detected capacity change from 0 to 8
[  718.054443][T13430] loop7: detected capacity change from 0 to 64
[  719.564705][T13445] loop7: detected capacity change from 0 to 1024
[  719.615005][T13445] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  719.793519][T13445] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback.
[  721.114308][T13461] loop7: detected capacity change from 0 to 1024
[  721.242808][T13461] EXT4-fs (loop7): Ignoring removed bh option
[  721.358005][T13461] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  721.602631][ T6267] usb 10-1: new high-speed USB device number 85 using dummy_hcd
[  721.983018][ T6267] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  722.121023][T13486] loop7: detected capacity change from 0 to 512
[  722.155987][T13485] loop5: detected capacity change from 0 to 1024
[  722.379044][T13486] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  722.391800][T13486] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it
[  722.402283][T13486] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.2246: Corrupt directory, running e2fsck is recommended
[  722.434723][T13486] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  722.444723][T13486] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.2246: corrupted in-inode xattr
[  722.462360][T13486] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.2246: couldn't read orphan inode 15 (err -117)
[  722.476825][T13486] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,grpquota,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  722.572332][T13485] EXT4-fs (loop5): inline encryption not supported
[  722.850148][T13485] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000006,norecovery,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,norecovery,,errors=continue. Quota mode: writeback.
[  723.142885][ T6267] usb 10-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  723.162483][ T6267] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.233113][ T6267] usb 10-1: Product: syz
[  723.237438][ T6267] usb 10-1: Manufacturer: syz
[  723.242173][ T6267] usb 10-1: SerialNumber: syz
[  723.295525][ T6267] usb 10-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  725.020868][ T6267] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  725.100307][T13515] loop5: detected capacity change from 0 to 128
[  725.134652][ T6267] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  725.173880][ T6267] usb 10-1: media controller created
[  725.267151][ T6267] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  725.404187][   T26] audit: type=1800 audit(2000000479.360:64): pid=13515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2256" name="file1" dev="loop5" ino=1048623 res=0 errno=0
[  726.590203][ T6267] usb 10-1: USB disconnect, device number 85
[  726.641286][T13532] loop5: detected capacity change from 0 to 8
[  728.585206][T13559] loop9: detected capacity change from 0 to 64
[  729.895703][T13587] loop7: detected capacity change from 0 to 2048
[  729.967199][T13587] NILFS (loop7): corrupt root inode
[  730.163373][T13562] loop1: detected capacity change from 0 to 32768
[  730.164308][T13594] loop7: detected capacity change from 0 to 1024
[  730.343037][T13594] EXT4-fs (loop7): inline encryption not supported
[  730.513598][T13594] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000006,norecovery,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,norecovery,,errors=continue. Quota mode: writeback.
[  731.316099][T13562] JBD2: Ignoring recovery information on journal
[  731.633260][T13607] loop7: detected capacity change from 0 to 32768
[  731.657779][T13562] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  731.811062][T13607] XFS (loop7): Mounting V5 Filesystem
[  731.941782][T13607] XFS (loop7): Ending clean mount
[  731.950533][T13607] XFS (loop7): Quotacheck needed: Please wait.
[  732.161951][T13625] loop5: detected capacity change from 0 to 32768
[  732.201419][T13607] XFS (loop7): Quotacheck: Done.
[  732.212358][   T26] audit: type=1800 audit(2000000486.160:65): pid=13607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2271" name="file2" dev="loop7" ino=4423 res=0 errno=0
[  732.299236][ T5385] XFS (loop7): Unmounting Filesystem
[  732.353068][T13625] XFS (loop5): Mounting V5 Filesystem
[  732.453742][T11713] ocfs2: Unmounting device (7,1) on (node local)
[  732.524352][T13625] XFS (loop5): Ending clean mount
[  732.531965][T13625] XFS (loop5): Quotacheck needed: Please wait.
[  732.684798][T13644] loop9: detected capacity change from 0 to 1024
[  732.813367][T13625] XFS (loop5): Quotacheck: Done.
[  733.135140][T13653] netlink: 'syz.5.2274': attribute type 1 has an invalid length.
[  733.143435][T13653] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2274'.
[  733.154366][   T26] audit: type=1800 audit(2000000487.080:66): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2274" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0
[  733.599687][ T5380] XFS (loop5): Unmounting Filesystem
[  733.835575][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2284'.
[  734.168662][T13668] loop1: detected capacity change from 0 to 512
[  735.053745][T13668] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  735.065374][T13668] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  735.075653][T13668] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2275: Corrupt directory, running e2fsck is recommended
[  735.089735][T13668] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  735.100289][T13668] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.2275: corrupted in-inode xattr
[  735.113572][T13668] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.2275: couldn't read orphan inode 15 (err -117)
[  735.126078][T13668] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,grpquota,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  735.785694][T13687] loop1: detected capacity change from 0 to 16
[  736.409936][T13687] erofs: (device loop1): mounted with root inode @ nid 36.
[  738.087735][T13713] loop9: detected capacity change from 0 to 32768
[  738.291730][T13713] XFS (loop9): Mounting V5 Filesystem
[  738.392129][T13713] XFS (loop9): Ending clean mount
[  738.400299][T13713] XFS (loop9): Quotacheck needed: Please wait.
[  738.547447][T13708] loop1: detected capacity change from 0 to 131072
[  738.588855][T13713] XFS (loop9): Quotacheck: Done.
[  738.618618][T13708] F2FS-fs (loop1): invalid crc value
[  738.664723][T13708] F2FS-fs (loop1): Found nat_bits in checkpoint
[  738.719171][T13708] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  738.751611][T13708] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  738.953596][T13733] netlink: 'syz.9.2293': attribute type 1 has an invalid length.
[  738.961772][T13733] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2293'.
[  738.972748][   T26] audit: type=1800 audit(2000000492.900:67): pid=13733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2293" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=4429 res=0 errno=0
[  739.476287][ T5391] XFS (loop9): Unmounting Filesystem
[  739.834781][T13744] tmpfs: Unknown parameter 'usrquota'
[  739.920478][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2298'.
[  739.990675][T13752] loop1: detected capacity change from 0 to 128
[  740.140534][T13752] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  740.199613][T13752] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  740.323756][T13752] EXT4-fs (loop1): shut down requested (2)
[  740.465078][T13758] loop9: detected capacity change from 0 to 1024
[  740.731240][T13762] loop1: detected capacity change from 0 to 1024
[  740.790470][T13762] EXT4-fs (loop1): Ignoring removed bh option
[  740.821942][T13766] loop9: detected capacity change from 0 to 2048
[  740.880262][T13762] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  741.036316][T13766] NILFS (loop9): corrupt root inode
[  742.172941][ T4230] usb 10-1: new high-speed USB device number 86 using dummy_hcd
[  742.714110][ T4230] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  742.853916][ T4230] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  743.112577][ T4230] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  743.182592][ T4230] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  743.303996][T13800] loop1: detected capacity change from 0 to 4096
[  743.351645][ T4230] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  743.391912][ T4230] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  743.472620][ T4230] usb 10-1: Manufacturer: syz
[  743.587157][ T4230] usb 10-1: config 0 descriptor??
[  744.135194][ T4230] usbhid 10-1:0.0: can't add hid device: -71
[  744.145010][ T4230] usbhid: probe of 10-1:0.0 failed with error -71
[  744.192652][ T4230] usb 10-1: USB disconnect, device number 86
[  744.304513][T13821] netlink: 'syz.6.2317': attribute type 2 has an invalid length.
[  744.560778][T13827] loop5: detected capacity change from 0 to 2048
[  744.673048][T13827] NILFS (loop5): corrupt root inode
[  744.704930][T13832] loop1: detected capacity change from 0 to 1024
[  744.803999][T13832] EXT4-fs (loop1): Ignoring removed bh option
[  745.083251][T13832] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  746.381079][T13856] loop5: detected capacity change from 0 to 2048
[  746.504190][   T26] audit: type=1326 audit(2000000500.460:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13866 comm="syz.7.2329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66be8b6819 code=0x0
[  746.532716][T13871] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  746.855420][T13878] libceph: resolve '0..' (ret=-3): failed
[  746.883283][ T4230] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  746.975228][  T150] block nbd5: Attempted send on invalid socket
[  746.981633][  T150] blk_update_request: I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  746.993387][  T150] gfs2: error 10 reading superblock
[  747.276248][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  747.282886][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  747.313071][T13887] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2332'.
[  747.333088][ T4230] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  747.384722][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  747.432272][T13889] netlink: 'syz.7.2333': attribute type 2 has an invalid length.
[  747.437248][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  747.485574][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  747.582124][T13893] netlink: 220 bytes leftover after parsing attributes in process `syz.9.2334'.
[  747.591387][T13893] tc_dump_action: action bad kind
[  747.602784][ T4230] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  747.618456][ T4230] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  747.640070][ T4230] usb 2-1: Manufacturer: syz
[  747.661772][ T4230] usb 2-1: config 0 descriptor??
[  747.746777][T13898] loop9: detected capacity change from 0 to 1024
[  747.792986][T13898] EXT4-fs (loop9): Ignoring removed bh option
[  747.842235][T13898] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  748.512437][ T4230] usbhid 2-1:0.0: can't add hid device: -71
[  748.694173][ T4230] usbhid: probe of 2-1:0.0 failed with error -71
[  748.813932][ T4230] usb 2-1: USB disconnect, device number 13
[  751.750816][T13940] loop5: detected capacity change from 0 to 2048
[  751.918661][T13945] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  751.972996][T13946] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2347'.
[  752.327255][T13946] tc_dump_action: action bad kind
[  753.022492][T13956] netlink: 'syz.9.2349': attribute type 2 has an invalid length.
[  753.085516][    C0] 
[  753.087921][    C0] ================================
[  753.093052][    C0] WARNING: inconsistent lock state
[  753.098193][    C0] syzkaller #0 Not tainted
[  753.102631][    C0] --------------------------------
[  753.107886][    C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[  753.114758][    C0] ksoftirqd/0/14 [HC0[0]:SC1[1]:HE1:SE0] takes:
[  753.121032][    C0] ffff88807a832620 (slock-AF_PHONET/1){+.?.}-{2:2}, at: __sk_receive_skb+0x17b/0x980
[  753.130570][    C0] {SOFTIRQ-ON-W} state was registered at:
[  753.136313][    C0]   lock_acquire+0x19e/0x400
[  753.140955][    C0]   _raw_spin_lock_nested+0x2e/0x40
[  753.146186][    C0]   __sk_receive_skb+0x17b/0x980
[  753.151160][    C0]   __release_sock+0x1e1/0x450
[  753.155960][    C0]   release_sock+0x5b/0x1b0
[  753.160493][    C0]   pep_sock_accept+0xc73/0x1190
[  753.165463][    C0]   pn_socket_accept+0x126/0x360
[  753.170428][    C0]   do_accept+0x509/0x6f0
[  753.174788][    C0]   __sys_accept4+0x103/0x170
[  753.179634][    C0]   __x64_sys_accept4+0x96/0xb0
[  753.184545][    C0]   do_syscall_64+0x4c/0xa0
[  753.189111][    C0]   entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  753.195142][    C0] irq event stamp: 2734782
[  753.199587][    C0] hardirqs last  enabled at (2734782): [<ffffffff87e65cb4>] process_backlog+0x644/0x790
[  753.209349][    C0] hardirqs last disabled at (2734781): [<ffffffff87e65af6>] process_backlog+0x486/0x790
[  753.219350][    C0] softirqs last  enabled at (2734734): [<ffffffff81497864>] run_ksoftirqd+0xa4/0x100
[  753.228869][    C0] softirqs last disabled at (2734739): [<ffffffff81497864>] run_ksoftirqd+0xa4/0x100
[  753.239004][    C0] 
[  753.239004][    C0] other info that might help us debug this:
[  753.247088][    C0]  Possible unsafe locking scenario:
[  753.247088][    C0] 
[  753.254592][    C0]        CPU0
[  753.257893][    C0]        ----
[  753.261198][    C0]   lock(slock-AF_PHONET/1);
[  753.265830][    C0]   <Interrupt>
[  753.269317][    C0]     lock(slock-AF_PHONET/1);
[  753.274124][    C0] 
[  753.274124][    C0]  *** DEADLOCK ***
[  753.274124][    C0] 
[  753.282303][    C0] 3 locks held by ksoftirqd/0/14:
[  753.287364][    C0]  #0: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  753.296742][    C0]  #1: ffff88807a8338e0 (slock-AF_PHONET){+.-.}-{2:2}, at: __sk_receive_skb+0x18a/0x980
[  753.306627][    C0]  #2: ffff88807a833960 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x7e4/0xc70
[  753.316093][    C0] 
[  753.316093][    C0] stack backtrace:
[  753.322028][    C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0
[  753.329350][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  753.339445][    C0] Call Trace:
[  753.342759][    C0]  <TASK>
[  753.345714][    C0]  dump_stack_lvl+0x188/0x250
[  753.350431][    C0]  ? show_regs_print_info+0x20/0x20
[  753.355665][    C0]  valid_state+0x13b/0x1d0
[  753.360113][    C0]  mark_lock_irq+0xa9/0x900
[  753.364687][    C0]  ? stack_trace_save+0xa6/0xf0
[  753.369568][    C0]  ? save_trace+0xa80/0xa80
[  753.374104][    C0]  ? arch_stack_walk+0x10c/0x140
[  753.379080][    C0]  ? lockdep_count_forward_deps+0x200/0x200
[  753.385015][    C0]  ? save_trace+0x5a/0xa80
[  753.389467][    C0]  mark_lock+0x208/0x320
[  753.393751][    C0]  __lock_acquire+0xc64/0x7d10
[  753.398658][    C0]  ? verify_lock_unused+0x140/0x140
[  753.403900][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  753.409931][    C0]  lock_acquire+0x19e/0x400
[  753.414476][    C0]  ? __sk_receive_skb+0x17b/0x980
[  753.419541][    C0]  ? read_lock_is_recursive+0x10/0x10
[  753.424949][    C0]  ? sk_filter_trim_cap+0x59c/0x810
[  753.430199][    C0]  _raw_spin_lock_nested+0x2e/0x40
[  753.435348][    C0]  ? __sk_receive_skb+0x17b/0x980
[  753.440410][    C0]  __sk_receive_skb+0x17b/0x980
[  753.445297][    C0]  ? pep_do_rcv+0x4ea/0x800
[  753.449838][    C0]  ? phonet_rcv+0x7e4/0xc70
[  753.454369][    C0]  __sk_receive_skb+0x42c/0x980
[  753.459240][    C0]  phonet_rcv+0x7e4/0xc70
[  753.463619][    C0]  ? phonet_proto_unregister+0x120/0x120
[  753.469392][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  753.475420][    C0]  ? read_lock_is_recursive+0x10/0x10
[  753.480807][    C0]  ? lock_chain_count+0x20/0x20
[  753.485677][    C0]  ? phonet_proto_unregister+0x120/0x120
[  753.491343][    C0]  __netif_receive_skb+0xcc/0x290
[  753.496388][    C0]  process_backlog+0x370/0x790
[  753.501166][    C0]  ? rps_trigger_softirq+0x210/0x210
[  753.506453][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  753.512557][    C0]  ? lock_chain_count+0x20/0x20
[  753.517452][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  753.523569][    C0]  __napi_poll+0xc0/0x430
[  753.527924][    C0]  ? net_rx_action+0x307/0xa10
[  753.532709][    C0]  net_rx_action+0x4d4/0xa10
[  753.537415][    C0]  ? lockdep_softirqs_on+0x580/0x580
[  753.542816][    C0]  ? net_tx_action+0x880/0x880
[  753.547597][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  753.553598][    C0]  ? lock_chain_count+0x20/0x20
[  753.558474][    C0]  handle_softirqs+0x339/0x830
[  753.563398][    C0]  ? run_ksoftirqd+0xa4/0x100
[  753.568098][    C0]  ? do_softirq+0x210/0x210
[  753.572615][    C0]  ? run_ksoftirqd+0x81/0x100
[  753.577312][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  753.582698][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  753.588013][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  753.593228][    C0]  run_ksoftirqd+0xa4/0x100
[  753.597765][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  753.602986][    C0]  smpboot_thread_fn+0x4f6/0x970
[  753.607948][    C0]  kthread+0x436/0x520
[  753.612026][    C0]  ? cpu_report_death+0x180/0x180
[  753.617103][    C0]  ? kthread_blkcg+0xd0/0xd0
[  753.621995][    C0]  ret_from_fork+0x1f/0x30
[  753.626429][    C0]  </TASK>
[  753.660762][T13935] loop7: detected capacity change from 0 to 32768
[  753.679911][T13935] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.2343 (13935)
[  754.185018][T13935] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  754.208401][T13935] BTRFS info (device loop7): setting nodatasum
[  754.225663][T13935] BTRFS info (device loop7): force zlib compression, level 3
[  754.244627][T13970] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2345'.
[  754.273848][T13935] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8)
[  754.292720][T13935] BTRFS info (device loop7): use lzo compression, level 0
[  754.302836][T13935] BTRFS info (device loop7): turning on flush-on-commit
[  754.310014][T13935] BTRFS info (device loop7): enabling auto defrag
[  754.326899][T13935] BTRFS info (device loop7): max_inline at 4096
[  754.334860][T13935] BTRFS info (device loop7): using free space tree
[  754.348485][T13935] BTRFS info (device loop7): has skinny extents
[  754.482655][T13935] BTRFS info (device loop7): enabling ssd optimizations