last executing test programs:

17m31.018338538s ago: executing program 3 (id=1805):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))

17m29.973028937s ago: executing program 3 (id=1808):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdab2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x12)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003cddcb00000000001100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005)

17m29.725070443s ago: executing program 3 (id=1810):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000000c0)={0x4, "ccc0dde4b00a6d2c16b99a7fd0d48117b817abfccfa3806091bcc9f67e3de361a9172be4c429adba1c63d1674a55890c3e46ca658ca8939b7fc9c8f133dd3351"})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

17m29.17055415s ago: executing program 3 (id=1813):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x15, 0x5, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180))
syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f0000000180), 0x9, 0x50f6, &(0x7f0000000340)="$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")
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
rename(&(0x7f0000000080)='./file0/file0\x00', 0x0)

17m27.44107748s ago: executing program 3 (id=1816):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x2, &(0x7f0000000e40)=ANY=[@ANYRES64=0x0, @ANYBLOB="2f57cb32e20267d8735e1071cc38dd62715ade65dc655a19ad861d05de6a9c4b123f70794c61ae8426a38f88309a3deba163c84cda2987f8b9f0d287b8f6e7b2b3945a4e473b6d385d828a04", @ANYRES16=0x0, @ANYRESHEX], 0x1, 0x6224, &(0x7f0000007240)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40)
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x840013, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(0x0, 0x9)
mkdir(&(0x7f0000000480)='./bus\x00', 0x0)
rmdir(&(0x7f0000000040)='./bus\x00')

17m23.662477458s ago: executing program 3 (id=1827):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffffffffffffff, 0x20000000000000b, 0xfffffffffffffffd, 0x200, 0x8, 0x28, 0x80000005, 0x2})
ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0)

17m22.684385724s ago: executing program 32 (id=1827):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffffffffffffff, 0x20000000000000b, 0xfffffffffffffffd, 0x200, 0x8, 0x28, 0x80000005, 0x2})
ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0)

16m36.179430609s ago: executing program 1 (id=1909):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000180)={0xa, 0x4}, 0xc)

16m34.902181428s ago: executing program 1 (id=1913):
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x48201, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r2=>0x0}, &(0x7f0000000180)=0xc)
write$P9_RSTATu(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0], 0x18b)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65)
r3 = socket$kcm(0x2b, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4)
listen(0xffffffffffffffff, 0x80)
pipe2$9p(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
close_range(0xffffffffffffffff, r3, 0x2)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)

16m31.606798484s ago: executing program 1 (id=1916):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x1b32, 0x100, 0x2, 0x335}, 0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x1})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

16m30.893214956s ago: executing program 1 (id=1918):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
poll(&(0x7f0000000100)=[{r0, 0x4001}], 0x1, 0x7)

16m29.132697779s ago: executing program 1 (id=1921):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000180)={0xa, 0x4}, 0xc)

16m27.237192432s ago: executing program 1 (id=1926):
recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$video(0x0, 0x1d24, 0x0)
r3 = socket$inet(0x2b, 0x801, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, 0x0, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}, 0x1, 0xffff000000000000}, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c)
r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]})
sendfile(r7, r7, 0x0, 0x2000fb)
preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
readv(r4, &(0x7f0000000340)=[{&(0x7f0000000140)=""/144, 0x8c}], 0x1000000000000360)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1}}]}}, 0x0)

16m20.943188367s ago: executing program 4 (id=1933):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000150a05000000000000000000000000010900010073797a31000000005109000000000000000000039900080041b754d2331a466cfd73f73a1eb9ee577c0ac83ea9aa0ddbad66ca72c5c34400563d15482f0caf22f1bd2645f06e3384a0a21eb2"], 0xd4}, 0x1, 0x0, 0x0, 0xc5764608bcdc9ea1}, 0x1)
socket$kcm(0x10, 0x2, 0x10)
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4000000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x200000, 0x0)

16m19.572315495s ago: executing program 4 (id=1935):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000180)={0xa, 0x4}, 0xc)

16m18.397460887s ago: executing program 4 (id=1938):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r0=>0x0)
getpgid(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
preadv(r4, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2, 0xe9b4, 0x2)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00'})
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x3c}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0)

16m16.103677992s ago: executing program 4 (id=1941):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x15, 0x5, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180))
syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f0000000180), 0x9, 0x50f6, &(0x7f0000000340)="$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")
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0))

16m14.203863334s ago: executing program 4 (id=1943):
r0 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000003f40), 0x2b01, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000003f80))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x113, 0x6}}, 0x20)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x40102)
writev(r3, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="72bc70fdcabcf3be047c86d09dd09e76e21c2e9265a818a94059fcfaf354ffd9392bdff0cd2a8ca229bc51476cae07fc7a8dc043b13c764425ab54b30681b88733e504873e156347aa77ea9095771af50ef5abbcaf35fe8a5a44f3d9d5972c9615911670e28a3d2baa423bd9c12966ed23aa4baba857e94827ffc05258244532b0cd2e78982b00466f2db2ca", 0x8c)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'veth1_to_bond\x00', 0x5}, 0x18)
syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc3, 0xa1, 0xd7, 0x8, 0xccd, 0x99, 0x950d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

16m13.378430942s ago: executing program 4 (id=1944):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

16m12.663367305s ago: executing program 33 (id=1944):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

16m11.672543317s ago: executing program 34 (id=1926):
recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$video(0x0, 0x1d24, 0x0)
r3 = socket$inet(0x2b, 0x801, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, 0x0, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}, 0x1, 0xffff000000000000}, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c)
r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]})
sendfile(r7, r7, 0x0, 0x2000fb)
preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
readv(r4, &(0x7f0000000340)=[{&(0x7f0000000140)=""/144, 0x8c}], 0x1000000000000360)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1}}]}}, 0x0)

13.005261671s ago: executing program 5 (id=3767):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xb}, {0x0, 0x0, 0xfffffffffffffffd}, 0x10000005, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000001040)={0x1f, @any, 0x47}, 0xa)
syz_open_dev$vim2m(&(0x7f0000000000), 0x100000000b, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x30, 0xffffffffffffffff, 0x35f3f000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2100, 0x0)
munlock(&(0x7f0000a34000/0x2000)=nil, 0x2000)

8.909120277s ago: executing program 2 (id=3770):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$addseals(r0, 0x409, 0x9)

7.74636299s ago: executing program 5 (id=3773):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x2c020400)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000240)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x3400, 0x1})
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f0000002480)={0x2020, 0x0, <r7=>0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r10, 0x4020aeb2, &(0x7f0000000000)={0x0, 0x6, 0x1, 0xffff, 0x4})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={<r11=>0x0}, &(0x7f0000000280)=0xc)
kcmp$KCMP_EPOLL_TFD(r11, r8, 0x7, r3, &(0x7f0000000400)={r2, r2, 0x6})
read$FUSE(r6, &(0x7f00000065c0)={0x2020, 0x0, <r12=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r12}, 0x10)
r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
dup3(r13, r6, 0x0)
getsockopt$rose(r13, 0x104, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0)

7.74620327s ago: executing program 2 (id=3774):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)

5.991088832s ago: executing program 2 (id=3775):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
unshare(0x2c020400)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x300, 0x0, 0xffeffc03}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x3400, 0x1})
io_uring_enter(r0, 0x351e, 0x483, 0x0, 0x0, 0x0)

5.734407476s ago: executing program 0 (id=3777):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000580)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0xca}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0)

5.34592998s ago: executing program 2 (id=3778):
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x1c}}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r1, 0x8028640c, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
io_uring_setup(0x5, 0x0)
sendmsg$inet_sctp(r3, 0x0, 0x24000000)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
pread64(r4, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)

4.951758303s ago: executing program 6 (id=3779):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x1)
mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x480)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000064010000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c"], 0x254}}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)

4.75837041s ago: executing program 5 (id=3780):
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = fsopen(&(0x7f0000000bc0)='binder\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

4.16832937s ago: executing program 6 (id=3781):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xb}, {0x0, 0x0, 0xfffffffffffffffd}, 0x10000005, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000001040)={0x1f, @any, 0x47}, 0xa)
syz_open_dev$vim2m(&(0x7f0000000000), 0x100000000b, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x30, 0xffffffffffffffff, 0x35f3f000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2100, 0x0)
munlock(&(0x7f0000a34000/0x2000)=nil, 0x2000)

3.556547535s ago: executing program 2 (id=3782):
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3})
io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r4, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="d7", 0x1}], 0x2)
syz_usb_disconnect(r0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000140))

3.107422516s ago: executing program 5 (id=3783):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10022)
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r1, 0xa, 0x12)
dup2(r1, r2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x3, 0x7ffc0001}]})
fcntl$setown(r2, 0x8, r0)
tkill(r0, 0x13)

2.790394136s ago: executing program 5 (id=3784):
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0)
syz_clone(0x8021000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$alg(0x26, 0x5, 0x0)
syz_io_uring_setup(0x229, &(0x7f0000019140)={0x0, 0xb6e4, 0x8, 0x0, 0x100002cf}, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r0=>0x0], 0x400000000000021e})
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x200, 0x1, &(0x7f00000000c0)=[r0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x4})

2.186118832s ago: executing program 0 (id=3785):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x14)
sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010)

2.169084639s ago: executing program 6 (id=3786):
unshare(0x2c020400)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x300, 0x0, 0xffeffc03}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x3400, 0x1})
io_uring_enter(r0, 0x351e, 0x483, 0x0, 0x0, 0x0)

1.978115267s ago: executing program 5 (id=3787):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000011c0), 0x402, 0x0)
ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000001200)=0x4)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
semget$private(0x0, 0x4000, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x15)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1)
open$dir(0x0, 0x1, 0x19d)
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900})
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0)
sendmmsg$alg(r7, &(0x7f0000000040), 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r8 = msgget$private(0x0, 0x3ac)
msgsnd(r8, &(0x7f0000000000)=ANY=[@ANYBLOB='w\x00\t'], 0x8, 0x0)

1.931430916s ago: executing program 0 (id=3788):
recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

1.868339792s ago: executing program 6 (id=3789):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x1)
mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x480)
socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)

1.81430721s ago: executing program 0 (id=3790):
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x1c}}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r1, 0x8028640c, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
io_uring_setup(0x5, 0x0)
sendmsg$inet_sctp(r3, 0x0, 0x24000000)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
pread64(r4, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)

1.198644765s ago: executing program 2 (id=3791):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0x837, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0)

1.091741181s ago: executing program 6 (id=3792):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpgid(0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
syz_open_dev$admmidi(0x0, 0x20, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sysinfo(&(0x7f0000000280)=""/24)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20)
recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)

913.763771ms ago: executing program 0 (id=3793):
r0 = socket$tipc(0x1e, 0x2, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x40000001, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x2}}, 0x10, &(0x7f0000000580)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x10)

398.421268ms ago: executing program 0 (id=3794):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000480)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

0s ago: executing program 6 (id=3795):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xb}, {0x0, 0x0, 0xfffffffffffffffd}, 0x10000005, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000001040)={0x1f, @any, 0x47}, 0xa)
syz_open_dev$vim2m(&(0x7f0000000000), 0x100000000b, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x30, 0xffffffffffffffff, 0x35f3f000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2100, 0x0)
munlock(&(0x7f0000a34000/0x2000)=nil, 0x2000)

kernel console output (not intermixed with test programs):

uct=0, SerialNumber=0
[ 1260.268164][T12292] usb 1-1: config 0 descriptor??
[ 1260.285507][   T42] usb 7-1: config 0 has no interfaces?
[ 1260.295227][   T42] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1260.304496][   T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1260.312519][   T42] usb 7-1: Product: syz
[ 1260.317171][   T42] usb 7-1: Manufacturer: syz
[ 1260.321822][   T42] usb 7-1: SerialNumber: syz
[ 1260.330770][   T42] usb 7-1: config 0 descriptor??
[ 1260.520345][T15926] loop5: detected capacity change from 0 to 32768
[ 1260.572248][T15926] read_mapping_page failed!
[ 1260.578478][T15926] ERROR: (device loop5): txCommit: 
[ 1260.578478][T15926] 
[ 1260.592989][    T8] usb 7-1: USB disconnect, device number 41
[ 1260.983669][T12292] usbhid 1-1:0.0: can't add hid device: -71
[ 1260.990767][T12292] usbhid: probe of 1-1:0.0 failed with error -71
[ 1261.028769][T12292] usb 1-1: USB disconnect, device number 91
[ 1261.928507][T15938] xt_TCPMSS: Only works on TCP SYN packets
[ 1262.541936][T15944] overlayfs: overlapping lowerdir path
[ 1263.561461][T15947] lo speed is unknown, defaulting to 1000
[ 1263.567566][T15947] lo speed is unknown, defaulting to 1000
[ 1264.014442][T15947] lo speed is unknown, defaulting to 1000
[ 1264.054142][T15947] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1264.067957][T15953] netlink: 'syz.5.2618': attribute type 10 has an invalid length.
[ 1264.079299][T15953] bond0: (slave wlan1): Opening slave failed
[ 1264.096561][T15947] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1264.199242][T15947] lo speed is unknown, defaulting to 1000
[ 1264.216431][T15947] lo speed is unknown, defaulting to 1000
[ 1264.225095][T15947] lo speed is unknown, defaulting to 1000
[ 1264.234921][T15947] lo speed is unknown, defaulting to 1000
[ 1264.245310][T15947] lo speed is unknown, defaulting to 1000
[ 1264.251958][ T5865] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 1264.770768][T12292] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 1265.540717][T15969] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1265.823329][ T5865] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1265.844421][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1265.870194][ T5865] usb 7-1: Product: syz
[ 1265.880192][ T5865] usb 7-1: Manufacturer: syz
[ 1265.890414][ T5865] usb 7-1: SerialNumber: syz
[ 1266.148199][ T5865] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1266.573651][ T5865] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1266.975429][T12292] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1266.996069][T12292] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[ 1267.015437][T12292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1267.046392][T12292] usb 3-1: config 0 descriptor??
[ 1267.133549][T12292] usb 3-1: can't set config #0, error -71
[ 1267.171229][T12292] usb 3-1: USB disconnect, device number 58
[ 1267.255036][T15982] lo speed is unknown, defaulting to 1000
[ 1267.359641][T11950] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1267.578247][T11950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1267.596053][T11950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1267.607188][T11950] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1267.626568][T11950] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1267.635957][T11950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1267.652060][T11950] usb 6-1: config 0 descriptor??
[ 1267.913489][ T5865] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32
[ 1267.939209][ T5865] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1267.949684][ T5865] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1267.975135][ T5865] lan78xx: probe of 7-1:1.0 failed with error -32
[ 1268.763844][T11950] usbhid 6-1:0.0: can't add hid device: -71
[ 1268.852218][T11950] usbhid: probe of 6-1:0.0 failed with error -71
[ 1268.888157][T11950] usb 6-1: USB disconnect, device number 40
[ 1268.970517][   T23] usb 7-1: USB disconnect, device number 42
[ 1269.284126][T15998] loop6: detected capacity change from 0 to 32768
[ 1269.348768][T15998] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1269.767498][T15998] XFS (loop6): Ending clean mount
[ 1270.798019][  T788] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1271.050276][  T788] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1271.077596][  T788] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1271.143419][T12910] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1271.158068][  T788] usb 6-1: New USB device found, idVendor=12d1, idProduct=6748, bcdDevice=49.0b
[ 1271.197616][  T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1271.205903][  T788] usb 6-1: Product: syz
[ 1271.235351][  T788] usb 6-1: Manufacturer: syz
[ 1271.250671][  T788] usb 6-1: SerialNumber: syz
[ 1271.270018][  T788] usb 6-1: config 0 descriptor??
[ 1271.417559][   T23] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 1271.530127][  T788] usb 6-1: USB disconnect, device number 41
[ 1271.927958][   T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1271.962894][   T23] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[ 1271.972944][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1271.983060][   T23] usb 1-1: config 0 descriptor??
[ 1272.013156][   T23] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1273.142096][T16029] lo speed is unknown, defaulting to 1000
[ 1274.311546][    T8] usb 1-1: USB disconnect, device number 93
[ 1275.515411][  T788] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 1275.688465][T16053] loop2: detected capacity change from 0 to 2048
[ 1275.715291][    T8] usb 6-1: new full-speed USB device number 42 using dummy_hcd
[ 1275.755654][  T788] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1275.792667][T16056] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1275.809635][  T788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1275.865967][  T788] usb 7-1: Product: syz
[ 1275.870232][  T788] usb 7-1: Manufacturer: syz
[ 1275.932627][    T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1275.943537][  T788] usb 7-1: SerialNumber: syz
[ 1275.972228][    T8] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1276.010016][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1276.051485][    T8] usb 6-1: config 0 descriptor??
[ 1276.084276][    T8] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1276.183593][  T788] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1276.232348][  T788] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1276.291830][   T23] usb 6-1: USB disconnect, device number 42
[ 1276.804253][T16065] overlayfs: failed to clone upperpath
[ 1276.873003][T16063] lo speed is unknown, defaulting to 1000
[ 1277.064730][   T23] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1277.244480][   T23] usb 3-1: device descriptor read/64, error -71
[ 1277.295503][  T788] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32
[ 1277.324836][  T788] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1277.363368][  T788] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1277.386280][  T788] lan78xx: probe of 7-1:1.0 failed with error -32
[ 1277.484616][ T5865] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1277.543284][   T23] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1277.754271][   T23] usb 3-1: device descriptor read/64, error -71
[ 1277.884487][   T23] usb usb3-port1: attempt power cycle
[ 1277.902561][ T5865] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1277.918793][ T5865] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[ 1277.948379][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1277.969418][ T5865] usb 6-1: config 0 descriptor??
[ 1278.098507][ T5865] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1279.015419][T11950] usb 7-1: USB disconnect, device number 43
[ 1279.025232][   T23] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1279.064370][   T23] usb 3-1: device descriptor read/8, error -71
[ 1279.374224][   T23] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1279.434557][   T23] usb 3-1: device descriptor read/8, error -71
[ 1279.506381][T11950] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1279.573596][   T23] usb usb3-port1: unable to enumerate USB device
[ 1279.707124][T11950] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1279.720614][T11950] usb 7-1: config 7 has 0 interfaces, different from the descriptor's value: 1
[ 1279.736299][T11950] usb 7-1: New USB device found, idVendor=79ee, idProduct=ea27, bcdDevice=e1.44
[ 1279.748789][T11950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1279.760064][T11950] usb 7-1: Product: syz
[ 1279.768168][T11950] usb 7-1: Manufacturer: syz
[ 1279.774610][T11950] usb 7-1: SerialNumber: syz
[ 1280.009992][T11950] usb 7-1: USB disconnect, device number 44
[ 1280.259595][  T788] usb 6-1: USB disconnect, device number 43
[ 1280.403294][    T8] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1280.611898][T16107] overlayfs: failed to clone upperpath
[ 1280.618097][    T8] usb 3-1: Using ep0 maxpacket: 32
[ 1280.907531][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1280.918817][    T8] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=ff.79
[ 1281.255254][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1281.285967][    T8] usb 3-1: config 0 descriptor??
[ 1281.304437][    T8] hub 3-1:0.0: bad descriptor, ignoring hub
[ 1281.312747][    T8] hub: probe of 3-1:0.0 failed with error -5
[ 1281.449792][T16111] lo speed is unknown, defaulting to 1000
[ 1281.702314][ T5836] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 1281.866304][ T5836] usb 7-1: device descriptor read/64, error -71
[ 1281.896725][   T23] usb 3-1: reset high-speed USB device number 63 using dummy_hcd
[ 1282.183983][ T5836] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 1282.352664][ T5836] usb 7-1: device descriptor read/64, error -71
[ 1282.436031][   T23] usb 3-1: USB disconnect, device number 63
[ 1282.472425][ T5836] usb usb7-port1: attempt power cycle
[ 1282.902607][ T5836] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 1282.984262][ T5836] usb 7-1: device descriptor read/8, error -71
[ 1283.721450][ T5836] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[ 1283.985210][ T5836] usb 7-1: device descriptor read/8, error -71
[ 1284.111595][ T5836] usb usb7-port1: unable to enumerate USB device
[ 1284.238819][T16153] loop2: detected capacity change from 0 to 512
[ 1284.316765][T16153] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1284.517628][T16153] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[ 1284.526288][T16153] System zones: 1-12
[ 1284.539819][T16153] EXT4-fs (loop2): 1 truncate cleaned up
[ 1284.560418][T16153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1284.880688][ T5836] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1284.941452][ T5865] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 1285.092026][ T5836] usb 3-1: Using ep0 maxpacket: 32
[ 1285.115413][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1285.147745][ T5836] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1285.167987][ T5865] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1285.180802][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1285.197974][ T5865] usb 7-1: Product: syz
[ 1285.203880][ T5865] usb 7-1: Manufacturer: syz
[ 1285.208777][ T5865] usb 7-1: SerialNumber: syz
[ 1285.229076][ T5836] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1285.248712][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1285.259887][ T5836] usb 3-1: Product: syz
[ 1285.265412][ T5836] usb 3-1: Manufacturer: syz
[ 1285.270489][ T5836] usb 3-1: SerialNumber: syz
[ 1285.279661][ T5836] usb 3-1: config 0 descriptor??
[ 1285.462108][ T5865] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1285.481866][ T5865] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1286.562573][ T5865] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32
[ 1286.581217][ T5865] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1286.593497][ T5865] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1287.285892][ T5865] lan78xx: probe of 7-1:1.0 failed with error -32
[ 1287.374495][ T5865] usb 3-1: USB disconnect, device number 64
[ 1287.418254][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1287.699352][   T23] usb 7-1: USB disconnect, device number 49
[ 1287.972133][ T5865] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1288.149538][T16202] loop6: detected capacity change from 0 to 2048
[ 1288.180835][ T5865] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1288.201528][T16204] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1288.319538][ T5865] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[ 1288.337160][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1288.352405][ T5865] usb 6-1: config 0 descriptor??
[ 1288.394387][ T5865] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1288.792157][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2683'.
[ 1291.551767][T12292] usb 6-1: USB disconnect, device number 45
[ 1291.631030][T11347] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 1291.884566][T16233] loop5: detected capacity change from 0 to 32768
[ 1291.942576][T16233] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1291.995309][T11347] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1292.004562][T11347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1292.013113][T11347] usb 3-1: Product: syz
[ 1292.017671][T11347] usb 3-1: Manufacturer: syz
[ 1292.022304][T11347] usb 3-1: SerialNumber: syz
[ 1292.093531][T16233] XFS (loop5): Ending clean mount
[ 1292.276815][T12896] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1292.321807][T11347] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1292.379871][T11347] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1292.804780][T16249] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2695'.
[ 1293.737260][T11347] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32
[ 1293.809827][T11347] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1293.866563][T11347] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1293.876405][    T8] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1293.918623][T11347] lan78xx: probe of 3-1:1.0 failed with error -32
[ 1294.187467][    T8] usb 6-1: Using ep0 maxpacket: 16
[ 1294.219720][    T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1294.243765][    T8] usb 6-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[ 1294.263583][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1294.315085][    T8] usb 6-1: config 0 descriptor??
[ 1294.328208][    T8] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1294.359674][T16258] loop6: detected capacity change from 0 to 4096
[ 1294.475008][T16258] ntfs: volume version 3.1.
[ 1294.569856][T11950] usb 6-1: USB disconnect, device number 46
[ 1294.867576][T11347] usb 3-1: USB disconnect, device number 65
[ 1295.319091][T11950] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 1295.943724][T11950] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1295.990421][T11950] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[ 1296.025085][T11950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1296.056418][T11950] usb 7-1: config 0 descriptor??
[ 1296.170067][T11950] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1297.103111][T12188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1297.117341][T12188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1297.125489][T12188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1297.133919][T12188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1297.142153][T12188] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1297.260319][T12188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1297.854444][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1297.862095][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1297.874543][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1297.885193][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1297.892986][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1297.902009][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1298.382782][T16288] lo speed is unknown, defaulting to 1000
[ 1299.898535][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1299.911988][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1299.978745][T12188] Bluetooth: hci0: command tx timeout
[ 1300.227770][ T5865] usb 7-1: USB disconnect, device number 51
[ 1300.711595][T16288] chnl_net:caif_netlink_parms(): no params data found
[ 1300.873178][ T5865] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 1301.266596][ T5865] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1301.278453][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1301.297277][ T5865] usb 7-1: Product: syz
[ 1301.301575][ T5865] usb 7-1: Manufacturer: syz
[ 1301.307041][ T5865] usb 7-1: SerialNumber: syz
[ 1301.465191][T16288] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1301.483030][T16288] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1301.490816][T16288] bridge_slave_0: entered allmulticast mode
[ 1301.523558][T16288] bridge_slave_0: entered promiscuous mode
[ 1301.546653][T16288] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1301.582573][ T5865] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1301.602568][T16288] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1301.609847][T16288] bridge_slave_1: entered allmulticast mode
[ 1301.669861][T16371] xt_TCPMSS: Only works on TCP SYN packets
[ 1301.715779][T16288] bridge_slave_1: entered promiscuous mode
[ 1301.742356][ T5865] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1301.929904][T16288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1301.987343][T16288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1302.052883][T12188] Bluetooth: hci0: command tx timeout
[ 1302.074566][T16288] team0: Port device team_slave_0 added
[ 1302.143843][T16288] team0: Port device team_slave_1 added
[ 1302.304705][T16288] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1302.321985][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1302.461834][T16288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1302.498586][T16288] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1302.522038][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1303.934145][T16288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1304.147270][T12188] Bluetooth: hci0: command tx timeout
[ 1304.186816][ T5865] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71
[ 1304.198523][ T5865] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1304.219452][ T5865] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1304.306800][ T5865] lan78xx: probe of 7-1:1.0 failed with error -71
[ 1304.371244][ T5865] usb 7-1: USB disconnect, device number 52
[ 1305.245601][T16390] xt_TCPMSS: Only works on TCP SYN packets
[ 1306.105880][T16288] hsr_slave_0: entered promiscuous mode
[ 1306.224177][T12188] Bluetooth: hci0: command tx timeout
[ 1306.250091][T11950] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1306.374693][T16288] hsr_slave_1: entered promiscuous mode
[ 1306.471777][T11950] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1306.512598][T11950] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1306.538208][T11950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1306.568846][T11950] usb 6-1: config 0 descriptor??
[ 1306.581300][T11950] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1306.670009][T16288] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1306.677691][T16288] Cannot create hsr debugfs directory
[ 1306.922035][T16288] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1307.029717][T16288] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1307.245199][T16288] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1307.944094][T16407] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1307.952192][T16407] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1308.959233][T16407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1309.028370][T16407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1309.143172][   T23] usb 6-1: USB disconnect, device number 47
[ 1309.374054][T16417] xt_TCPMSS: Only works on TCP SYN packets
[ 1310.398165][T16407] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1310.427429][T16407] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1310.460603][T16407] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1310.475645][T16407] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1310.817457][T16288] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1311.214508][T16423] lo speed is unknown, defaulting to 1000
[ 1311.227690][ T5865] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[ 1311.366906][T16288] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1311.383175][T16288] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1311.391019][ T5865] usb 7-1: device descriptor read/64, error -71
[ 1311.437643][T12292] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1311.454358][T16288] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1311.469782][T16288] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1311.648639][T12292] usb 6-1: Using ep0 maxpacket: 16
[ 1311.660463][T16288] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1311.667747][ T5865] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 1311.678521][T12292] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1311.698771][T12292] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1311.718322][T12292] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1311.727540][T12292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1311.735552][T12292] usb 6-1: Product: syz
[ 1311.742321][T12292] usb 6-1: Manufacturer: syz
[ 1311.746968][T12292] usb 6-1: SerialNumber: syz
[ 1311.754576][T12292] r8152-cfgselector 6-1: config 0 descriptor??
[ 1311.789206][T16288] 8021q: adding VLAN 0 to HW filter on device team0
[ 1311.804917][T16346] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1311.812089][T16346] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1311.827445][ T5865] usb 7-1: device descriptor read/64, error -71
[ 1311.911792][T16350] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1311.919122][T16350] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1311.947457][ T5865] usb usb7-port1: attempt power cycle
[ 1311.972602][T12292] r8152-cfgselector 6-1: Unknown version 0x0000
[ 1312.076648][T16288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1312.204565][T12292] r8152-cfgselector 6-1: USB disconnect, device number 48
[ 1312.377276][ T5865] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[ 1312.425986][ T5865] usb 7-1: device descriptor read/8, error -71
[ 1312.511152][T16288] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1312.678534][T16288] veth0_vlan: entered promiscuous mode
[ 1312.700607][ T5865] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 1312.752241][T16288] veth1_vlan: entered promiscuous mode
[ 1312.787847][ T5865] usb 7-1: device descriptor read/8, error -71
[ 1313.927598][ T5865] usb usb7-port1: unable to enumerate USB device
[ 1313.947214][T16326] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1313.954679][T16326] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1313.996924][T16326] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1314.004402][T16326] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1314.073444][T16326] bridge_slave_1: left allmulticast mode
[ 1314.096764][T16326] bridge_slave_1: left promiscuous mode
[ 1314.102667][T16326] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1314.137100][T16326] bridge_slave_0: left allmulticast mode
[ 1314.153030][T16326] bridge_slave_0: left promiscuous mode
[ 1314.163410][T16326] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1314.254598][T16326] veth1_macvtap: left promiscuous mode
[ 1314.260408][T16326] veth0_macvtap: left promiscuous mode
[ 1314.270647][T16326] veth1_vlan: left promiscuous mode
[ 1314.291724][T16326] veth0_vlan: left promiscuous mode
[ 1315.119178][T16326] bond2 (unregistering): Released all slaves
[ 1316.255825][T16326] bond1 (unregistering): Released all slaves
[ 1318.176550][T16326] team0 (unregistering): Port device team_slave_1 removed
[ 1318.233978][T11347] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1318.246615][T16326] team0 (unregistering): Port device team_slave_0 removed
[ 1318.407036][T11347] usb 6-1: device descriptor read/64, error -71
[ 1318.693987][T11347] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1318.773989][T16485] trusted_key: encrypted_key: insufficient parameters specified
[ 1318.863946][T11347] usb 6-1: device descriptor read/64, error -71
[ 1319.008039][T11347] usb usb6-port1: attempt power cycle
[ 1319.563602][T11347] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1319.626545][T11347] usb 6-1: device descriptor read/8, error -71
[ 1319.666560][T16480] lo speed is unknown, defaulting to 1000
[ 1319.690273][T16288] veth0_macvtap: entered promiscuous mode
[ 1319.711982][T16288] veth1_macvtap: entered promiscuous mode
[ 1319.899192][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1319.920219][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1319.930934][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1319.933324][T11347] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1319.955643][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1319.983400][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1320.000002][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1320.012062][T16288] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1320.160308][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1320.212978][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1320.259769][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1320.294521][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1320.310124][T11347] usb 6-1: device descriptor read/8, error -71
[ 1320.342875][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1320.412835][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1320.439229][T11347] usb usb6-port1: unable to enumerate USB device
[ 1320.451935][T16288] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1320.487093][T16288] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1320.504076][T16288] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1320.513880][T16288] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1320.523267][T16288] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1320.680371][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1320.702135][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1320.990776][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1321.050410][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1321.552347][T11347] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 1321.752252][T11347] usb 7-1: Using ep0 maxpacket: 16
[ 1321.765193][T11347] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1321.787093][T11347] usb 7-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[ 1321.796322][T11347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1321.806713][T11347] usb 7-1: config 0 descriptor??
[ 1321.820335][T11347] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1322.038442][T11347] usb 7-1: USB disconnect, device number 57
[ 1323.238281][T16529] lo speed is unknown, defaulting to 1000
[ 1323.481515][   T23] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[ 1323.685631][   T23] usb 7-1: Using ep0 maxpacket: 8
[ 1323.802763][   T23] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1323.835154][   T23] usb 7-1: no configurations
[ 1323.839813][   T23] usb 7-1: can't read configurations, error -22
[ 1327.359407][  T788] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[ 1328.182938][T16564] xt_TCPMSS: Only works on TCP SYN packets
[ 1329.125303][T16570] lo speed is unknown, defaulting to 1000
[ 1329.448423][T11347] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[ 1329.618275][T11347] usb 7-1: device descriptor read/64, error -71
[ 1329.908210][T11347] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[ 1330.068148][T11347] usb 7-1: device descriptor read/64, error -71
[ 1330.198559][T11347] usb usb7-port1: attempt power cycle
[ 1330.575928][T16599] xt_TCPMSS: Only works on TCP SYN packets
[ 1330.637937][T11347] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[ 1330.648088][  T788] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 1330.681234][T11347] usb 7-1: device descriptor read/8, error -71
[ 1330.874223][  T788] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1330.887181][  T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1330.897435][  T788] usb 3-1: Product: syz
[ 1330.903518][  T788] usb 3-1: Manufacturer: syz
[ 1330.911515][  T788] usb 3-1: SerialNumber: syz
[ 1330.952414][T11347] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[ 1330.999145][T11347] usb 7-1: device descriptor read/8, error -71
[ 1331.119885][T11347] usb usb7-port1: unable to enumerate USB device
[ 1331.141602][  T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1331.164037][  T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1332.977099][  T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32
[ 1333.046306][  T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32
[ 1333.172575][T11950] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[ 1333.286752][    T8] usb 6-1: new full-speed USB device number 53 using dummy_hcd
[ 1333.312525][  T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32
[ 1333.563465][T11950] usb 7-1: Using ep0 maxpacket: 16
[ 1333.588543][T11950] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1333.614891][T11950] usb 7-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[ 1333.630630][T11950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1333.642815][T11950] usb 7-1: config 0 descriptor??
[ 1333.649502][T11950] usb 7-1: can't set config #0, error -71
[ 1333.678692][T11950] usb 7-1: USB disconnect, device number 65
[ 1333.695138][  T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71
[ 1333.709651][  T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71
[ 1333.723712][  T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71
[ 1333.743777][  T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71
[ 1333.757575][  T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71
[ 1333.770791][  T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1333.783394][  T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1333.802874][  T788] lan78xx: probe of 3-1:1.0 failed with error -71
[ 1333.841476][  T788] usb 3-1: USB disconnect, device number 66
[ 1334.428044][T16636] xt_TCPMSS: Only works on TCP SYN packets
[ 1334.582960][T16640] lo speed is unknown, defaulting to 1000
[ 1334.689190][T16644] loop6: detected capacity change from 0 to 512
[ 1334.709547][T16644] EXT4-fs: Ignoring removed orlov option
[ 1334.752002][T16644] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[ 1334.798694][T16644] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec198, mo2=0002]
[ 1334.812404][T16644] System zones: 1-12
[ 1334.827960][T16644] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.2793: corrupted in-inode xattr: e_value size too large
[ 1334.848600][T16644] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.2793: couldn't read orphan inode 15 (err -117)
[ 1334.869595][T16644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1334.886856][T11347] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1335.116784][T11347] usb 3-1: device descriptor read/64, error -71
[ 1335.734108][T11347] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1335.763271][    T8] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1335.773071][    T8] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1335.782241][    T8] usb 6-1: can't read configurations, error -71
[ 1335.924251][T16656] No such timeout policy "syz1"
[ 1335.968148][T11347] usb 3-1: device descriptor read/64, error -71
[ 1336.138744][T11347] usb usb3-port1: attempt power cycle
[ 1336.472560][T16658] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1336.509320][T16658] bond1: (slave lo): Enslaving as an active interface with an up link
[ 1336.572442][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1336.575346][T11347] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 1336.595262][T16658] net_ratelimit: 1 callbacks suppressed
[ 1336.595273][T16658] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1336.622677][   T23] lo speed is unknown, defaulting to 1000
[ 1336.630355][  T789] lo speed is unknown, defaulting to 1000
[ 1336.636762][ T5836] lo speed is unknown, defaulting to 1000
[ 1336.685101][T11347] usb 3-1: device descriptor read/8, error -71
[ 1337.091480][T16657] loop5: detected capacity change from 0 to 32768
[ 1337.132665][T11347] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1337.175207][T11347] usb 3-1: device descriptor read/8, error -71
[ 1337.193626][T16657] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1337.205133][    T8] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[ 1337.239232][T16657] XFS (loop5): Ending clean mount
[ 1337.304684][T11347] usb usb3-port1: unable to enumerate USB device
[ 1337.384555][    T8] usb 7-1: Using ep0 maxpacket: 16
[ 1337.408142][    T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1337.430599][    T8] usb 7-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[ 1337.446892][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1337.482284][    T8] usb 7-1: config 0 descriptor??
[ 1337.517888][    T8] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1338.252251][    T8] usb 7-1: USB disconnect, device number 66
[ 1340.025138][T12896] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1340.069548][T16712] lo speed is unknown, defaulting to 1000
[ 1340.354036][    T8] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[ 1340.602989][    T8] usb 7-1: device descriptor read/64, error -71
[ 1340.916616][    T8] usb 7-1: new high-speed USB device number 68 using dummy_hcd
[ 1341.104761][    T8] usb 7-1: device descriptor read/64, error -71
[ 1341.272629][   T23] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1341.341776][    T8] usb usb7-port1: attempt power cycle
[ 1341.498749][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1341.556555][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1341.611528][   T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1341.711503][   T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1341.827004][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1342.100750][   T23] usb 3-1: config 0 descriptor??
[ 1342.524488][    T8] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[ 1342.793783][    T8] usb 7-1: device descriptor read/8, error -71
[ 1343.081209][    T8] usb 7-1: new high-speed USB device number 70 using dummy_hcd
[ 1343.360262][   T23] usbhid 3-1:0.0: can't add hid device: -71
[ 1345.121742][   T23] usbhid: probe of 3-1:0.0 failed with error -71
[ 1345.144825][    T8] usb 7-1: device descriptor read/8, error -71
[ 1345.170662][   T23] usb 3-1: USB disconnect, device number 71
[ 1345.272779][    T8] usb usb7-port1: unable to enumerate USB device
[ 1346.017390][T16757] loop2: detected capacity change from 0 to 8192
[ 1346.044868][T16757] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1346.120055][T16757] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[ 1346.129334][T16757] REISERFS (device loop2): using ordered data mode
[ 1346.226770][T16757] reiserfs: using flush barriers
[ 1346.272493][T16757] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1346.335477][T16757] REISERFS (device loop2): checking transaction log (loop2)
[ 1346.356568][T16757] REISERFS (device loop2): Using r5 hash to sort names
[ 1346.374384][T16757] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[ 1346.579842][T11950] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[ 1346.779672][T11950] usb 7-1: Using ep0 maxpacket: 16
[ 1346.802123][T11950] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1346.839652][T11950] usb 7-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[ 1346.875492][T11950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1346.906814][T11950] usb 7-1: config 0 descriptor??
[ 1346.934652][T11950] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1347.149802][T11950] usb 7-1: USB disconnect, device number 71
[ 1347.632285][T16774] loop5: detected capacity change from 0 to 32768
[ 1347.663686][T16774] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1347.898779][T16774] XFS (loop5): Ending clean mount
[ 1347.939914][T16774] XFS (loop5): Quotacheck needed: Please wait.
[ 1348.076869][T16797] xt_TCPMSS: Only works on TCP SYN packets
[ 1348.215981][T16774] XFS (loop5): Quotacheck: Done.
[ 1349.058560][  T789] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1349.259160][  T789] usb 6-1: Using ep0 maxpacket: 16
[ 1349.276126][  T789] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1349.309178][  T789] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1349.343835][  T789] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1349.367415][  T789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1349.394044][  T789] usb 6-1: Product: syz
[ 1349.410081][  T789] usb 6-1: Manufacturer: syz
[ 1349.422650][  T789] usb 6-1: SerialNumber: syz
[ 1349.445592][  T789] usb 6-1: config 0 descriptor??
[ 1350.583076][T16867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1350.634653][T16867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1351.288762][T16864] loop6: detected capacity change from 0 to 32768
[ 1351.331136][T16864] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1351.449551][T16864] XFS (loop6): Ending clean mount
[ 1352.162662][T16624] usb 6-1: USB disconnect, device number 55
[ 1352.214038][T12896] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1354.386261][T16890] xt_TCPMSS: Only works on TCP SYN packets
[ 1355.838601][T12910] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1359.588138][   T27] audit: type=1326 audit(1772286886.698:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16905 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d27d9c799 code=0x7ffc0000
[ 1359.666372][   T27] audit: type=1326 audit(1772286886.698:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16905 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d27d9c799 code=0x7ffc0000
[ 1359.719502][   T27] audit: type=1326 audit(1772286886.698:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16905 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d27d9c799 code=0x7ffc0000
[ 1359.794951][   T27] audit: type=1326 audit(1772286886.698:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16905 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d27d9c799 code=0x7ffc0000
[ 1359.853213][   T27] audit: type=1326 audit(1772286886.698:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16905 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d27d9c799 code=0x7ffc0000
[ 1359.894243][   T27] audit: type=1326 audit(1772286886.698:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16905 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1d27d9c799 code=0x7ffc0000
[ 1359.903375][   T23] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 1359.923639][T11950] usb 7-1: new high-speed USB device number 72 using dummy_hcd
[ 1359.963225][   T27] audit: type=1326 audit(1772286886.698:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16905 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d27d9c799 code=0x7ffc0000
[ 1360.013255][   T27] audit: type=1326 audit(1772286886.698:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16905 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d27d9c799 code=0x7ffc0000
[ 1360.068010][   T27] audit: type=1326 audit(1772286886.698:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16905 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1d27d9c799 code=0x7ffc0000
[ 1360.123156][   T27] audit: type=1326 audit(1772286886.698:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16905 comm="syz.6.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d27d9c799 code=0x7ffc0000
[ 1360.172998][T11950] usb 7-1: Using ep0 maxpacket: 32
[ 1360.190215][T11950] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1360.207891][T11950] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1360.220928][T11950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1360.236581][T11950] usb 7-1: config 0 descriptor??
[ 1360.256933][T11950] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1360.343319][   T23] usb 3-1: Using ep0 maxpacket: 16
[ 1360.355813][   T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1360.386746][   T23] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[ 1360.427892][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1360.482262][   T23] usb 3-1: config 0 descriptor??
[ 1360.515154][   T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1360.734309][ T5836] usb 3-1: USB disconnect, device number 72
[ 1361.069845][T16931] xt_TCPMSS: Only works on TCP SYN packets
[ 1361.309022][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.315549][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.381960][T11950] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1362.424819][ T5836] usb 7-1: USB disconnect, device number 72
[ 1362.751885][T11950] usb 3-1: Using ep0 maxpacket: 16
[ 1362.764793][T11950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1362.783091][T11950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1362.794357][T16934] loop5: detected capacity change from 0 to 32768
[ 1362.807219][T11950] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1362.843627][T11950] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1362.853076][T11950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1362.861197][T11950] usb 3-1: Product: syz
[ 1362.870276][T11950] usb 3-1: Manufacturer: syz
[ 1362.875336][T11950] usb 3-1: SerialNumber: syz
[ 1362.883904][T11950] usb 3-1: config 0 descriptor??
[ 1362.898443][T11950] mcba_usb 3-1:0.0: Can't find endpoints
[ 1362.905837][T16934] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1363.100680][T16934] XFS (loop5): Ending clean mount
[ 1363.111584][ T5836] usb 7-1: new high-speed USB device number 73 using dummy_hcd
[ 1363.452037][ T5836] usb 7-1: too many configurations: 9, using maximum allowed: 8
[ 1365.136967][ T5836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1365.237871][ T5836] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1365.274567][ T5836] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1365.285040][ T5836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1365.301143][ T5836] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1365.312496][ T5836] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1365.323495][ T5836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1365.332879][ T5836] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1365.344916][ T5836] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1365.568435][ T5836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1365.577707][ T5836] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1365.589260][ T5836] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1365.810884][ T5836] usb 7-1: unable to read config index 4 descriptor/start: -71
[ 1365.818505][ T5836] usb 7-1: can't read configurations, error -71
[ 1365.911856][T16978] autofs4:pid:16978:autofs_fill_super: called with bogus options
[ 1366.977197][T16986] xt_TCPMSS: Only works on TCP SYN packets
[ 1367.823526][T16624] usb 3-1: USB disconnect, device number 73
[ 1368.289230][ T5836] usb 7-1: new high-speed USB device number 74 using dummy_hcd
[ 1369.418414][ T5836] usb 7-1: Using ep0 maxpacket: 16
[ 1371.076486][ T5836] usb 7-1: unable to read config index 0 descriptor/all
[ 1371.103247][ T5836] usb 7-1: can't read configurations, error -71
[ 1371.126207][ T5836] usb usb7-port1: attempt power cycle
[ 1371.159032][T17016] autofs4:pid:17016:autofs_fill_super: called with bogus options
[ 1371.171438][T17018] xt_TCPMSS: Only works on TCP SYN packets
[ 1372.546809][T16624] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1372.555364][T12896] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1373.537726][T16624] usb 3-1: Using ep0 maxpacket: 16
[ 1373.548482][T16624] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1373.582634][T16624] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1374.426742][T16624] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 1374.436161][T16624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1374.444212][T16624] usb 3-1: Product: syz
[ 1374.448561][T16624] usb 3-1: Manufacturer: syz
[ 1374.453195][T16624] usb 3-1: SerialNumber: syz
[ 1374.470209][T16624] usb 3-1: config 0 descriptor??
[ 1374.543019][T17044] xt_TCPMSS: Only works on TCP SYN packets
[ 1374.636382][T17049] autofs4:pid:17049:autofs_fill_super: called with bogus options
[ 1374.745956][   T23] usb 3-1: USB disconnect, device number 74
[ 1374.795987][ T5836] usb 7-1: new high-speed USB device number 76 using dummy_hcd
[ 1375.505488][ T5836] usb 7-1: Using ep0 maxpacket: 16
[ 1375.773208][ T5836] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1375.783657][ T5836] usb 7-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[ 1375.812206][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1375.844026][ T5836] usb 7-1: config 0 descriptor??
[ 1375.926755][ T5836] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1376.119006][ T5836] usb 7-1: USB disconnect, device number 76
[ 1377.993456][T17061] loop2: detected capacity change from 0 to 32768
[ 1378.078143][T17080] xt_TCPMSS: Only works on TCP SYN packets
[ 1378.186625][T17061] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1378.244040][ T5836] usb 7-1: new high-speed USB device number 77 using dummy_hcd
[ 1378.273634][T17061] XFS (loop2): Ending clean mount
[ 1378.476282][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1378.523946][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1378.592631][ T5836] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1378.843688][ T5836] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1379.613043][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1379.686391][ T5836] usb 7-1: config 0 descriptor??
[ 1380.774204][ T5836] usbhid 7-1:0.0: can't add hid device: -71
[ 1380.780617][ T5836] usbhid: probe of 7-1:0.0 failed with error -71
[ 1380.890185][ T5836] usb 7-1: USB disconnect, device number 77
[ 1385.772784][T16288] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1388.534452][T17163] xt_TCPMSS: Only works on TCP SYN packets
[ 1388.936627][T17172] loop2: detected capacity change from 0 to 4096
[ 1388.998885][T17136] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1392.565997][T17198] Cannot find del_set index 2 as target
[ 1393.060362][  T789] usb 7-1: new high-speed USB device number 78 using dummy_hcd
[ 1395.105834][  T789] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1395.145149][  T789] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1395.184475][  T789] usb 7-1: can't read configurations, error -71
[ 1399.510789][T17240] netlink: 'syz.0.2932': attribute type 10 has an invalid length.
[ 1399.518718][T17240] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2932'.
[ 1399.527748][T17240] bond0: entered promiscuous mode
[ 1399.532787][T17240] bond_slave_0: entered promiscuous mode
[ 1399.538629][T17240] bond_slave_1: entered promiscuous mode
[ 1399.544745][T17240] bridge0: port 3(bond0) entered blocking state
[ 1399.551159][T17240] bridge0: port 3(bond0) entered disabled state
[ 1399.557629][T17240] bond0: entered allmulticast mode
[ 1399.562767][T17240] bond_slave_0: entered allmulticast mode
[ 1399.568554][T17240] bond_slave_1: entered allmulticast mode
[ 1399.577538][T17240] bridge0: port 3(bond0) entered blocking state
[ 1399.583970][T17240] bridge0: port 3(bond0) entered forwarding state
[ 1399.828016][T17233] loop5: detected capacity change from 0 to 32768
[ 1399.890801][T17233] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1400.025781][T17233] XFS (loop5): Ending clean mount
[ 1403.272856][T17278] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1403.293375][T12896] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1403.316273][T17278] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1403.480787][T17278] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[ 1403.553427][T17278] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[ 1403.584838][T17278] overlayfs: d_ino too big (35, ino=9223372036854776017, xinobits=3)
[ 1403.624829][T17278] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[ 1403.650376][T17278] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[ 1403.681058][T17278] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[ 1403.722079][T17278] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[ 1403.748506][T17278] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[ 1403.779353][T17278] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3)
[ 1403.812717][T17278] overlayfs: d_ino too big (io.pressure, ino=4611686018427387915, xinobits=3)
[ 1404.349757][T17289] delete_channel: no stack
[ 1404.558451][T17292] loop5: detected capacity change from 0 to 8192
[ 1404.571411][T17292] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1404.584783][T17292] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[ 1404.594605][T17292] REISERFS (device loop5): using ordered data mode
[ 1404.601650][T17292] reiserfs: using flush barriers
[ 1404.627549][T17292] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1404.665698][T17292] REISERFS (device loop5): checking transaction log (loop5)
[ 1404.686160][T17292] REISERFS (device loop5): Using r5 hash to sort names
[ 1404.726739][T17292] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[ 1405.147203][T17298] autofs4:pid:17298:autofs_fill_super: called with bogus options
[ 1407.135055][  T788] IPVS: starting estimator thread 0...
[ 1407.140008][T17305] loop2: detected capacity change from 0 to 32768
[ 1407.169793][T17305] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1407.254231][T17305] XFS (loop2): Ending clean mount
[ 1407.259928][T17315] IPVS: using max 18 ests per chain, 43200 per kthread
[ 1408.865794][T16288] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1409.005154][T17337] loop6: detected capacity change from 0 to 512
[ 1409.326263][T17337] EXT4-fs (loop6): 1 truncate cleaned up
[ 1409.338425][T17337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1410.037349][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1410.889725][T17346] loop5: detected capacity change from 0 to 8192
[ 1410.933605][T17357] autofs4:pid:17357:autofs_fill_super: called with bogus options
[ 1410.944536][T17346] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1411.127592][T17346] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[ 1411.183387][T17346] REISERFS (device loop5): using ordered data mode
[ 1411.218427][T17346] reiserfs: using flush barriers
[ 1411.227581][T17346] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1411.331286][T17346] REISERFS (device loop5): checking transaction log (loop5)
[ 1411.961148][T17346] REISERFS (device loop5): Using r5 hash to sort names
[ 1412.027437][T17346] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[ 1412.763293][T17377] loop5: detected capacity change from 0 to 1024
[ 1412.942837][T16341] hfsplus: b-tree write err: -5, ino 4
[ 1413.307341][T17385] autofs4:pid:17385:autofs_fill_super: called with bogus options
[ 1414.656608][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2970'.
[ 1414.668125][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2970'.
[ 1414.677259][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2970'.
[ 1414.686634][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2970'.
[ 1415.875790][T17403] loop6: detected capacity change from 0 to 8192
[ 1415.884762][T17403] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1415.920411][T17403] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[ 1415.940549][T17403] REISERFS (device loop6): using ordered data mode
[ 1415.965926][T17403] reiserfs: using flush barriers
[ 1416.000206][T17403] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1416.070452][T17403] REISERFS (device loop6): checking transaction log (loop6)
[ 1416.112373][T17403] REISERFS (device loop6): Using r5 hash to sort names
[ 1416.137396][T17403] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[ 1417.405377][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2978'.
[ 1417.415070][T17420] netlink: zone id is out of range
[ 1419.316004][T17418] loop6: detected capacity change from 0 to 32768
[ 1419.507709][T17418] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1419.660741][T17418] XFS (loop6): Ending clean mount
[ 1421.733770][T11950] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1421.929410][T11950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1421.946363][T11950] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1421.962277][T11950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1421.995540][T11950] usb 6-1: config 0 descriptor??
[ 1422.208874][T11950] usbhid 6-1:0.0: can't add hid device: -71
[ 1422.232242][T11950] usbhid: probe of 6-1:0.0 failed with error -71
[ 1422.282021][T11950] usb 6-1: USB disconnect, device number 56
[ 1422.312570][T12910] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1422.375001][T16624] IPVS: starting estimator thread 0...
[ 1422.491856][T17466] IPVS: using max 18 ests per chain, 43200 per kthread
[ 1422.561280][T17471] loop2: detected capacity change from 0 to 256
[ 1422.629884][T17471] FAT-fs (loop2): Directory bread(block 64) failed
[ 1422.637427][T17471] FAT-fs (loop2): Directory bread(block 65) failed
[ 1422.644211][T17471] FAT-fs (loop2): Directory bread(block 66) failed
[ 1422.650874][T17471] FAT-fs (loop2): Directory bread(block 67) failed
[ 1422.657614][T17471] FAT-fs (loop2): Directory bread(block 68) failed
[ 1422.664248][T17471] FAT-fs (loop2): Directory bread(block 69) failed
[ 1422.670916][T17471] FAT-fs (loop2): Directory bread(block 70) failed
[ 1422.677560][T17471] FAT-fs (loop2): Directory bread(block 71) failed
[ 1422.684272][T17471] FAT-fs (loop2): Directory bread(block 72) failed
[ 1422.690850][T17471] FAT-fs (loop2): Directory bread(block 73) failed
[ 1422.742671][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1422.749154][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1422.841809][T11950] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1424.893533][ T5775] Bluetooth: hci0: command 0x0406 tx timeout
[ 1425.060590][T11950] usb 6-1: Using ep0 maxpacket: 32
[ 1425.197588][T11950] usb 6-1: device descriptor read/all, error -71
[ 1425.529324][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2997'.
[ 1426.677962][T17494] loop6: detected capacity change from 0 to 32768
[ 1426.760868][T17494] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1427.803528][T17494] XFS (loop6): Ending clean mount
[ 1428.482923][T17515] loop5: detected capacity change from 0 to 128
[ 1429.607056][T17524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3004'.
[ 1431.189001][T12910] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1431.396421][T17538] lo speed is unknown, defaulting to 1000
[ 1434.101483][T17571] lo speed is unknown, defaulting to 1000
[ 1434.423909][T17576] lo speed is unknown, defaulting to 1000
[ 1434.636476][T11347] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1434.855739][T11347] usb 6-1: Using ep0 maxpacket: 8
[ 1435.873513][T11347] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1435.922091][T11347] usb 6-1: no configurations
[ 1435.956673][T11347] usb 6-1: can't read configurations, error -22
[ 1438.990115][T17621] lo speed is unknown, defaulting to 1000
[ 1439.027111][   T27] kauditd_printk_skb: 5 callbacks suppressed
[ 1439.027132][   T27] audit: type=1326 audit(1772286966.178:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.2.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25659c799 code=0x7ffc0000
[ 1439.390207][   T27] audit: type=1326 audit(1772286966.208:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.2.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25659c799 code=0x7ffc0000
[ 1440.383663][   T27] audit: type=1326 audit(1772286966.208:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.2.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc25659c799 code=0x7ffc0000
[ 1440.392449][T17632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3038'.
[ 1440.759891][   T27] audit: type=1326 audit(1772286966.208:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.2.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25659c799 code=0x7ffc0000
[ 1441.212017][   T27] audit: type=1326 audit(1772286966.208:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.2.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25659c799 code=0x7ffc0000
[ 1442.093416][   T27] audit: type=1326 audit(1772286966.208:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.2.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc25659c799 code=0x7ffc0000
[ 1442.515074][   T27] audit: type=1326 audit(1772286966.218:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.2.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25659c799 code=0x7ffc0000
[ 1442.631086][   T27] audit: type=1326 audit(1772286966.218:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.2.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25659c799 code=0x7ffc0000
[ 1442.832551][   T27] audit: type=1326 audit(1772286966.218:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.2.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fc25659c799 code=0x7ffc0000
[ 1442.981604][   T27] audit: type=1326 audit(1772286967.389:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.2.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25659c799 code=0x7ffc0000
[ 1445.124188][T17662] lo speed is unknown, defaulting to 1000
[ 1455.655378][ T5775] Bluetooth: hci0: command 0x0406 tx timeout
[ 1455.665045][T17721] loop2: detected capacity change from 0 to 4096
[ 1455.873569][T17721] ntfs3: loop2: ino=3, ntfs_set_state failed, -22.
[ 1455.915125][T17721] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[ 1456.210841][T17728] loop6: detected capacity change from 0 to 1024
[ 1456.246786][   T48] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22.
[ 1456.274988][T16288] ntfs3: loop2: ino=3, ntfs_set_state failed, -22.
[ 1456.281569][T16288] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[ 1456.323446][T16288] ntfs3: loop2: ino=3, ntfs_set_state failed, -22.
[ 1456.350821][   T48] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22.
[ 1456.584989][T16341] hfsplus: b-tree write err: -5, ino 8
[ 1457.537943][T17740] lo speed is unknown, defaulting to 1000
[ 1457.784242][T11347] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1458.024076][T11347] usb 6-1: Using ep0 maxpacket: 8
[ 1458.162185][T11347] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1458.182644][T11347] usb 6-1: no configurations
[ 1458.193974][T11347] usb 6-1: can't read configurations, error -22
[ 1459.591446][T11347] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1459.883361][T11347] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1459.923352][T11347] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[ 1459.963145][T11347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1459.990382][T11347] usb 6-1: config 0 descriptor??
[ 1460.044141][T11347] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1460.761245][   T27] kauditd_printk_skb: 5 callbacks suppressed
[ 1460.761261][   T27] audit: type=1326 audit(1772286987.919:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.0.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030b39c799 code=0x7ffc0000
[ 1460.843532][T17766] lo speed is unknown, defaulting to 1000
[ 1460.882096][T17767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3077'.
[ 1460.941451][   T27] audit: type=1326 audit(1772286987.939:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.0.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f030b39c799 code=0x7ffc0000
[ 1460.981937][   T27] audit: type=1326 audit(1772286987.939:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.0.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030b39c799 code=0x7ffc0000
[ 1461.098915][T17770] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3078'.
[ 1461.133870][   T27] audit: type=1326 audit(1772286987.949:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.0.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030b39c799 code=0x7ffc0000
[ 1462.389339][T17778] lo speed is unknown, defaulting to 1000
[ 1462.988989][ T5836] usb 6-1: USB disconnect, device number 63
[ 1463.253876][T17786] random: crng reseeded on system resumption
[ 1467.215576][T17803] capability: warning: `syz.6.3090' uses deprecated v2 capabilities in a way that may be insecure
[ 1467.221370][T17807] syzkaller0: entered promiscuous mode
[ 1467.269413][T17807] syzkaller0: entered allmulticast mode
[ 1468.467660][T17818] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3086'.
[ 1468.572998][T17818] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1468.898766][T11347] usb 7-1: new high-speed USB device number 80 using dummy_hcd
[ 1468.913781][T17822] mmap: syz.2.3088 (17822) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1469.112387][T11347] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1469.200073][T11347] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[ 1469.215671][T11347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1469.244410][T11347] usb 7-1: config 0 descriptor??
[ 1469.281066][T11347] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1470.537553][T17829] autofs4:pid:17829:autofs_fill_super: called with bogus options
[ 1473.552387][   T23] usb 7-1: USB disconnect, device number 80
[ 1473.980469][T16624] IPVS: starting estimator thread 0...
[ 1474.326196][T17851] IPVS: using max 16 ests per chain, 38400 per kthread
[ 1474.677569][T17861] autofs4:pid:17861:autofs_fill_super: called with bogus options
[ 1475.976736][T17869] loop6: detected capacity change from 0 to 32768
[ 1476.803106][T17869] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1476.851196][T17870] No such timeout policy "syz1"
[ 1476.929521][T17869] XFS (loop6): Ending clean mount
[ 1477.840845][T12910] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1479.643609][T11347] usb 7-1: new high-speed USB device number 81 using dummy_hcd
[ 1479.710952][T17917] autofs4:pid:17917:autofs_fill_super: called with bogus options
[ 1482.175528][T17937] loop2: detected capacity change from 0 to 32768
[ 1482.267122][T17937] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1482.599344][T17937] XFS (loop2): Ending clean mount
[ 1483.957228][T16288] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1484.128793][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.135529][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1485.204112][  T788] IPVS: starting estimator thread 0...
[ 1485.410540][T17963] IPVS: using max 21 ests per chain, 50400 per kthread
[ 1486.689870][T11347] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1486.889916][T11347] usb 3-1: Using ep0 maxpacket: 16
[ 1486.897021][T11347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1486.921800][T11347] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[ 1486.983050][T11347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1487.070351][T11347] usb 3-1: config 0 descriptor??
[ 1487.124720][T11347] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1487.477846][T16624] usb 3-1: USB disconnect, device number 75
[ 1489.875017][T17993] loop6: detected capacity change from 0 to 32768
[ 1489.959142][T17993] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1490.044848][T17993] XFS (loop6): Ending clean mount
[ 1490.966274][T12910] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1491.077690][T12292] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1491.372905][T12292] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1491.373657][T18029] loop6: detected capacity change from 0 to 512
[ 1491.435998][T12292] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[ 1491.458852][T18029] EXT4-fs: Ignoring removed orlov option
[ 1491.483857][T18029] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[ 1491.525293][T18029] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec198, mo2=0002]
[ 1491.547400][T18029] System zones: 1-12
[ 1491.565447][T12292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1492.816646][T18029] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.3138: corrupted in-inode xattr: e_value size too large
[ 1493.068741][T12292] usb 6-1: config 0 descriptor??
[ 1493.119344][T18029] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.3138: couldn't read orphan inode 15 (err -117)
[ 1493.234817][T18029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1495.254174][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1496.348845][T18061] MPI: mpi too large (130952 bits)
[ 1497.739271][T12292] usb 6-1: can't set config #0, error -71
[ 1497.750673][T12292] usb 6-1: USB disconnect, device number 64
[ 1497.821669][T18071] random: crng reseeded on system resumption
[ 1498.017011][T18075] loop2: detected capacity change from 0 to 512
[ 1498.037244][T18075] EXT4-fs: Ignoring removed orlov option
[ 1498.066784][T18075] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[ 1498.154386][T18075] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec198, mo2=0002]
[ 1498.254081][T18075] System zones: 1-12
[ 1498.362468][T18075] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.3152: corrupted in-inode xattr: e_value size too large
[ 1498.555612][T18075] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.3152: couldn't read orphan inode 15 (err -117)
[ 1498.660167][T18075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1500.221891][T16288] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1500.275935][T18089] syzkaller0: entered promiscuous mode
[ 1500.281465][T18089] syzkaller0: entered allmulticast mode
[ 1502.258525][T18119] loop2: detected capacity change from 0 to 512
[ 1502.304977][T18119] EXT4-fs: Ignoring removed orlov option
[ 1502.521204][T18119] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[ 1503.387771][T18119] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec198, mo2=0002]
[ 1503.426381][T18119] System zones: 1-12
[ 1503.471306][T18119] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.3164: corrupted in-inode xattr: e_value size too large
[ 1503.549711][T18119] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.3164: couldn't read orphan inode 15 (err -117)
[ 1503.564011][T18119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1503.581369][T18128] random: crng reseeded on system resumption
[ 1504.429512][T16288] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1507.173730][T18148] loop6: detected capacity change from 0 to 4096
[ 1508.255666][T18147] 9pnet_fd: p9_fd_create_tcp (18147): problem connecting socket to 127.0.0.1
[ 1508.408889][   T23] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1508.758709][   T23] usb 6-1: Using ep0 maxpacket: 16
[ 1508.825702][   T23] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1508.873418][   T23] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1508.883785][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1508.895002][   T23] usb 6-1: Product: syz
[ 1508.921164][   T23] usb 6-1: Manufacturer: syz
[ 1508.925996][   T23] usb 6-1: SerialNumber: syz
[ 1509.568950][T18166] random: crng reseeded on system resumption
[ 1509.756767][   T23] usb 6-1: USB disconnect, device number 65
[ 1512.776778][T11347] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1514.071773][    T8] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1514.193775][T11347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1514.354784][T11347] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[ 1514.364824][T11347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1514.380314][    T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1514.387947][T11347] usb 3-1: config 0 descriptor??
[ 1514.416237][    T8] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1514.428275][    T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1514.437963][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1514.459007][T11347] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1514.470112][T18203] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1514.509945][    T8] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[ 1514.730387][T18214] random: crng reseeded on system resumption
[ 1515.515122][T12292] usb 6-1: USB disconnect, device number 66
[ 1515.735435][    T8] usb 7-1: new high-speed USB device number 82 using dummy_hcd
[ 1515.950638][    T8] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1515.975160][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1515.994101][    T8] usb 7-1: Product: syz
[ 1515.999097][    T8] usb 7-1: Manufacturer: syz
[ 1516.003749][    T8] usb 7-1: SerialNumber: syz
[ 1516.113390][   T23] usb 3-1: USB disconnect, device number 76
[ 1516.250595][    T8] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[ 1516.281970][    T8] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[ 1516.306879][    T8] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[ 1516.324386][    T8] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1516.337979][    T8] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1516.349751][    T8] lan78xx: probe of 7-1:1.0 failed with error -71
[ 1516.495598][    T8] usb 7-1: USB disconnect, device number 82
[ 1518.952937][T18228] loop2: detected capacity change from 0 to 32768
[ 1519.090512][T18228] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1519.153121][T18257] random: crng reseeded on system resumption
[ 1519.583288][T18228] XFS (loop2): Ending clean mount
[ 1519.605950][T18228] XFS (loop2): Quotacheck needed: Please wait.
[ 1520.258508][T18228] XFS (loop2): Quotacheck: Done.
[ 1520.299447][T16288] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1522.562406][T18289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3209'.
[ 1522.571381][T18289] netlink: zone id is out of range
[ 1522.889291][T18290] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3208'.
[ 1527.146362][T18301] random: crng reseeded on system resumption
[ 1530.388868][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3218'.
[ 1530.398049][T18326] netlink: zone id is out of range
[ 1531.047525][   T23] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1531.315870][   T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1531.390002][   T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[ 1531.653624][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1531.693000][   T23] usb 3-1: config 0 descriptor??
[ 1531.749761][   T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1534.603331][    T8] usb 3-1: USB disconnect, device number 77
[ 1539.225331][T18366] Set syz1 is full, maxelem 65536 reached
[ 1540.452812][  T788] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1540.682079][  T788] usb 6-1: Using ep0 maxpacket: 32
[ 1540.744464][  T788] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1540.866765][  T788] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1540.962892][  T788] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32
[ 1541.031086][  T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1541.202543][  T788] usb 6-1: Product: syz
[ 1541.221665][  T788] usb 6-1: Manufacturer: syz
[ 1541.282116][  T788] usb 6-1: SerialNumber: syz
[ 1541.423652][  T788] usb 6-1: config 0 descriptor??
[ 1541.880737][  T788] usb 6-1: USB disconnect, device number 67
[ 1542.489273][T18418] loop2: detected capacity change from 0 to 32768
[ 1542.570339][T18418] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3235 (18418)
[ 1542.731886][T18418] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1542.776702][T18418] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[ 1542.877473][T18418] BTRFS info (device loop2): using free space tree
[ 1544.156442][T18418] BTRFS info (device loop2): enabling ssd optimizations
[ 1544.236871][T18418] BTRFS info (device loop2): auto enabling async discard
[ 1544.805140][T16288] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1545.595177][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.607074][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.899858][T18474] binder: 18471:18474 ioctl c0306201 0 returned -14
[ 1547.122059][T17697] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (17697)
[ 1547.128419][T18477] binder: 18471:18477 ioctl c0306201 0 returned -14
[ 1547.167150][T18481] binder: 18471:18481 ioctl c0306201 0 returned -14
[ 1554.405123][T18518] MPI: mpi too large (128392 bits)
[ 1555.175514][ T5836] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1555.395397][ T5836] usb 6-1: Using ep0 maxpacket: 16
[ 1555.402609][ T5836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1555.525454][ T5836] usb 6-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00
[ 1555.561625][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1555.618504][ T5836] usb 6-1: config 0 descriptor??
[ 1555.700927][ T5836] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1555.917362][T12292] usb 6-1: USB disconnect, device number 68
[ 1557.624882][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3258'.
[ 1557.633885][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3258'.
[ 1557.694259][T18536] wireguard0: entered promiscuous mode
[ 1557.699785][T18536] wireguard0: entered allmulticast mode
[ 1558.192870][T18545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3253'.
[ 1558.265882][T18548] overlayfs: failed to clone upperpath
[ 1560.446759][T18555] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3263'.
[ 1561.739068][  T789] usb 7-1: new high-speed USB device number 83 using dummy_hcd
[ 1562.444985][  T789] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1562.491339][  T789] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[ 1562.721205][  T789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1562.888582][  T789] usb 7-1: config 0 descriptor??
[ 1562.932987][  T789] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1563.369424][T18571] loop2: detected capacity change from 0 to 1024
[ 1563.507367][T18571] hfsplus: bad catalog entry type
[ 1563.668625][   T11] hfsplus: b-tree write err: -5, ino 4
[ 1567.118236][   T23] usb 7-1: USB disconnect, device number 83
[ 1567.564256][T16624] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1568.469145][T16624] usb 6-1: Using ep0 maxpacket: 8
[ 1568.479828][T18597] loop6: detected capacity change from 0 to 1024
[ 1568.488603][T16624] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[ 1568.505332][T18597] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[ 1568.516558][T16624] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[ 1569.683994][T16624] usb 6-1: New USB device found, idVendor=12d1, idProduct=141b, bcdDevice= 0.00
[ 1569.689418][T18597] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[ 1569.698374][T16624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1569.731863][T18597] EXT4-fs (loop6): filesystem has both journal inode and journal device!
[ 1569.749480][T16624] usb 6-1: Product: syz
[ 1569.753920][T16624] usb 6-1: Manufacturer: syz
[ 1569.773319][T16624] usb 6-1: SerialNumber: syz
[ 1570.504038][T18604] netlink: 'syz.6.3277': attribute type 10 has an invalid length.
[ 1570.512171][T18604] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3277'.
[ 1570.522281][T18604] bond0: entered promiscuous mode
[ 1570.527449][T18604] bond_slave_0: entered promiscuous mode
[ 1570.535267][T18604] bond_slave_1: entered promiscuous mode
[ 1570.550294][T18604] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1570.560417][T18604] bridge0: port 3(bond0) entered blocking state
[ 1570.567416][T18604] bridge0: port 3(bond0) entered disabled state
[ 1570.574926][T18604] bond0: entered allmulticast mode
[ 1570.580324][T18604] bond_slave_0: entered allmulticast mode
[ 1570.586183][T18604] bond_slave_1: entered allmulticast mode
[ 1571.560732][T16624] usb 6-1: can't set config #5, error -71
[ 1571.569202][T16624] usb 6-1: USB disconnect, device number 69
[ 1572.646744][T16624] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 1574.216574][T16624] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1574.247828][T16624] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[ 1574.405998][T16624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1574.580240][T16624] usb 6-1: config 0 descriptor??
[ 1576.614957][T16624] usb 6-1: can't set config #0, error -71
[ 1576.648003][T16624] usb 6-1: USB disconnect, device number 70
[ 1577.202490][T18640] random: crng reseeded on system resumption
[ 1577.510254][T18642] syzkaller0: entered promiscuous mode
[ 1577.520285][T18642] syzkaller0: entered allmulticast mode
[ 1578.847119][T18644] netlink: 'syz.0.3289': attribute type 10 has an invalid length.
[ 1578.855121][T18644] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3289'.
[ 1583.578758][T18671] loop5: detected capacity change from 0 to 512
[ 1583.633094][T18671] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.3298: corrupted in-inode xattr: e_value out of bounds
[ 1583.698087][T18671] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.3298: couldn't read orphan inode 15 (err -117)
[ 1583.752496][T18671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1584.723248][T18678] netlink: 'syz.0.3299': attribute type 10 has an invalid length.
[ 1584.731268][T18678] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3299'.
[ 1585.211338][T18685] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1585.632610][T12896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1585.855238][T18687] loop5: detected capacity change from 0 to 512
[ 1585.880294][   T23] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1585.891246][T18687] EXT4-fs: Ignoring removed orlov option
[ 1585.931150][T18687] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[ 1585.952943][T18687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec198, mo2=0002]
[ 1585.970174][T18687] System zones: 1-12
[ 1585.990318][T18687] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.3301: corrupted in-inode xattr: e_value size too large
[ 1586.038512][T18687] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.3301: couldn't read orphan inode 15 (err -117)
[ 1586.101055][T18687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1586.114194][   T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1586.135228][   T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[ 1586.169748][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1586.202828][   T23] usb 3-1: config 0 descriptor??
[ 1586.221925][   T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1586.843895][T12896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1589.038121][T11347] usb 3-1: USB disconnect, device number 78
[ 1590.510590][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3310'.
[ 1590.519885][T18716] netlink: zone id is out of range
[ 1593.001404][   T23] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1593.240172][   T23] usb 6-1: Using ep0 maxpacket: 8
[ 1593.304178][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3304'.
[ 1594.739322][T11347] usb 7-1: new high-speed USB device number 84 using dummy_hcd
[ 1594.967268][T11347] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1594.987009][T11347] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[ 1595.025501][T11347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1595.057222][T11347] usb 7-1: config 0 descriptor??
[ 1595.119035][T11347] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1596.194090][   T23] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1596.954560][   T23] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1596.964535][   T23] usb 6-1: can't read configurations, error -71
[ 1597.944606][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3320'.
[ 1597.953569][T18758] netlink: zone id is out of range
[ 1598.188320][T16624] usb 7-1: USB disconnect, device number 84
[ 1603.820665][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3331'.
[ 1603.829704][T18804] netlink: zone id is out of range
[ 1606.978178][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1606.984636][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1611.823537][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'.
[ 1611.945194][T18861] netlink: zone id is out of range
[ 1613.106417][T16624] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1613.326809][T16624] usb 3-1: Using ep0 maxpacket: 8
[ 1614.275292][T16624] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1614.276874][T16624] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1614.276891][T16624] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1614.278787][T16624] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0023, bcdDevice=e3.39
[ 1614.278817][T16624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1614.278830][T16624] usb 3-1: Product: syz
[ 1614.278839][T16624] usb 3-1: Manufacturer: syz
[ 1614.278849][T16624] usb 3-1: SerialNumber: syz
[ 1615.930957][T16624] usb 3-1: USB disconnect, device number 79
[ 1617.089740][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3355'.
[ 1617.115631][T18892] netlink: zone id is out of range
[ 1618.430968][T18899] loop5: detected capacity change from 0 to 1024
[ 1618.460240][T18899] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[ 1618.471597][T18899] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[ 1618.482552][T18899] EXT4-fs (loop5): filesystem has both journal inode and journal device!
[ 1619.309114][T18900] netlink: 'syz.5.3358': attribute type 10 has an invalid length.
[ 1619.317259][T18900] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3358'.
[ 1619.326473][T18900] bond0: entered promiscuous mode
[ 1619.331647][T18900] bond_slave_0: entered promiscuous mode
[ 1619.338527][T18900] bond_slave_1: entered promiscuous mode
[ 1619.346649][T18900] bridge0: port 3(bond0) entered blocking state
[ 1619.354235][T18900] bridge0: port 3(bond0) entered disabled state
[ 1619.361996][T18900] bond0: entered allmulticast mode
[ 1619.367368][T18900] bond_slave_0: entered allmulticast mode
[ 1619.373243][T18900] bond_slave_1: entered allmulticast mode
[ 1619.391395][T18900] bridge0: port 3(bond0) entered blocking state
[ 1619.398142][T18900] bridge0: port 3(bond0) entered forwarding state
[ 1624.276539][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3366'.
[ 1624.309036][T18944] netlink: zone id is out of range
[ 1624.364207][T18942] lo speed is unknown, defaulting to 1000
[ 1626.664083][T18963] IPVS: Unknown mcast interface: nicvf0
[ 1627.520912][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3377'.
[ 1627.530000][T18973] netlink: zone id is out of range
[ 1627.852070][T18981] loop5: detected capacity change from 0 to 512
[ 1627.862763][T18981] EXT4-fs: quotafile must be on filesystem root
[ 1632.848044][T19013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3387'.
[ 1632.857316][T19013] netlink: zone id is out of range
[ 1633.234082][T19018] loop6: detected capacity change from 0 to 1024
[ 1633.426611][T16326] hfsplus: b-tree write err: -5, ino 4
[ 1636.744889][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'.
[ 1636.754069][T19062] netlink: zone id is out of range
[ 1637.109568][T19073] input: syz0 as /devices/virtual/input/input73
[ 1640.811748][T19106] loop2: detected capacity change from 0 to 1024
[ 1640.861958][T19108] loop5: detected capacity change from 0 to 1024
[ 1640.883392][T19106] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1641.027616][T19106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1641.229096][   T11] hfsplus: b-tree write err: -5, ino 4
[ 1641.229539][T19114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3410'.
[ 1641.244192][T19114] netlink: zone id is out of range
[ 1641.382778][T16288] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1642.511810][ T5810] kworker/dying (5810) used greatest stack depth: 19920 bytes left
[ 1642.765675][T19127] input: syz0 as /devices/virtual/input/input74
[ 1644.500973][    T8] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1644.952440][    T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1645.031444][    T8] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1645.087233][    T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1645.120574][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1645.151307][T19138] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1645.514362][    T8] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[ 1645.761348][T19150] loop6: detected capacity change from 0 to 1024
[ 1645.871969][    T8] usb 6-1: USB disconnect, device number 73
[ 1645.948725][T16326] hfsplus: b-tree write err: -5, ino 4
[ 1645.974875][T17697] udevd[17697]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1646.200471][T11347] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1647.799907][T11347] usb 3-1: Using ep0 maxpacket: 16
[ 1647.821588][T11347] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1647.839004][T11347] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1647.853102][T11347] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1647.864330][T11347] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1647.877696][T11347] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1647.906824][T11347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1647.948974][T11347] usb 3-1: Product: syz
[ 1647.959442][T11347] usb 3-1: Manufacturer: syz
[ 1647.964090][T11347] usb 3-1: SerialNumber: syz
[ 1648.015430][T19164] loop5: detected capacity change from 0 to 512
[ 1648.030151][T19164] EXT4-fs: Ignoring removed orlov option
[ 1648.059122][T19164] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[ 1648.108285][T19164] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec198, mo2=0002]
[ 1648.164221][T19164] System zones: 1-12
[ 1648.238915][T11347] usb 3-1: 0:2 : does not exist
[ 1648.256709][T19164] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.3423: corrupted in-inode xattr: e_value size too large
[ 1648.445193][T19164] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.3423: couldn't read orphan inode 15 (err -117)
[ 1648.487008][T19164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1648.524996][T11347] usb 3-1: USB disconnect, device number 80
[ 1648.712950][T17697] udevd[17697]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1651.380521][T19190] loop6: detected capacity change from 0 to 1024
[ 1651.678649][T16352] hfsplus: b-tree write err: -5, ino 4
[ 1651.861764][T19196] loop2: detected capacity change from 0 to 64
[ 1651.978208][T12896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1656.552212][T19230] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1661.963478][T19262] loop5: detected capacity change from 0 to 512
[ 1662.084608][T19262] EXT4-fs: Ignoring removed orlov option
[ 1662.182282][T19262] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[ 1662.219621][T19262] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec198, mo2=0002]
[ 1662.278958][T19262] System zones: 1-12
[ 1662.342474][T19262] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.3449: corrupted in-inode xattr: e_value size too large
[ 1662.408509][T19262] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.3449: couldn't read orphan inode 15 (err -117)
[ 1662.454083][T19262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1664.733116][T12896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1666.478304][T19313] loop6: detected capacity change from 0 to 512
[ 1666.492302][T19313] EXT4-fs: Ignoring removed orlov option
[ 1666.618958][T19313] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[ 1666.662270][T19313] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec198, mo2=0002]
[ 1666.712802][T19313] System zones: 1-12
[ 1667.846767][T19313] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.3462: corrupted in-inode xattr: e_value size too large
[ 1667.884099][T19313] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.3462: couldn't read orphan inode 15 (err -117)
[ 1667.904791][T19313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1668.361537][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.368010][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1668.732869][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1674.651595][T19387] loop5: detected capacity change from 0 to 64
[ 1674.735890][T19387] Trying to free block not in datazone
[ 1677.082991][T19397] loop2: detected capacity change from 0 to 512
[ 1677.090619][T19397] EXT4-fs: Ignoring removed orlov option
[ 1677.108144][T19397] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[ 1677.145405][T19397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec198, mo2=0002]
[ 1677.164655][T19397] System zones: 1-12
[ 1677.186114][T19397] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.3474: corrupted in-inode xattr: e_value size too large
[ 1677.294541][T19397] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.3474: couldn't read orphan inode 15 (err -117)
[ 1677.345892][T19397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1678.445548][T16288] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1681.912427][T19430] loop2: detected capacity change from 0 to 32768
[ 1681.943571][T19430] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1681.991016][T19430] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1682.024027][T19430] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[ 1682.042489][   T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1682.052312][   T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1682.304630][   T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 252ms
[ 1682.353647][   T23] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1682.375756][T19430] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1682.404647][T19430] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[ 1682.481049][T19450] IPv6: Can't replace route, no match found
[ 1683.330212][T19455] loop5: detected capacity change from 0 to 512
[ 1683.369669][T19455] EXT4-fs: Ignoring removed orlov option
[ 1683.428410][T19455] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[ 1683.521687][T19455] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec198, mo2=0002]
[ 1683.529808][T19455] System zones: 1-12
[ 1683.581270][T19455] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.3497: corrupted in-inode xattr: e_value size too large
[ 1684.057299][T19455] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.3497: couldn't read orphan inode 15 (err -117)
[ 1684.122363][T19455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1685.917339][T19475] CUSE: unknown device info ""
[ 1685.922410][T19475] CUSE: zero length info key specified
[ 1686.956255][T12896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1705.390890][T19582] loop5: detected capacity change from 0 to 512
[ 1705.552059][T19582] EXT4-fs: Ignoring removed orlov option
[ 1705.822619][T19582] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[ 1705.951977][T19582] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec198, mo2=0002]
[ 1705.996060][T19582] System zones: 1-12
[ 1706.096790][T19582] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.3533: corrupted in-inode xattr: e_value size too large
[ 1706.535416][T19582] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.3533: couldn't read orphan inode 15 (err -117)
[ 1706.565290][T19582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1707.394896][T19593] loop2: detected capacity change from 0 to 32768
[ 1707.427637][T19593] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.3536 (19593)
[ 1707.477973][T19593] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1707.488272][T19593] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[ 1707.497167][T19593] BTRFS info (device loop2): enabling disk space caching
[ 1707.504272][T19593] BTRFS info (device loop2): force clearing of disk cache
[ 1707.511553][T19593] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1707.521230][T19593] BTRFS info (device loop2): use zstd compression, level 3
[ 1707.528477][T19593] BTRFS info (device loop2): disk space caching is enabled
[ 1707.670119][T19598] loop6: detected capacity change from 0 to 64
[ 1707.733564][T19598] Trying to free block not in datazone
[ 1708.427509][T12896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1708.587743][T19593] BTRFS info (device loop2): enabling ssd optimizations
[ 1708.594909][T19593] BTRFS info (device loop2): auto enabling async discard
[ 1708.609601][T19593] BTRFS info (device loop2): rebuilding free space tree
[ 1708.637880][T19593] BTRFS info (device loop2): disabling free space tree
[ 1708.645064][T19593] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1708.655034][T19593] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1710.029555][T16288] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1711.962302][T17697] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop2 scanned by udevd (17697)
[ 1712.126615][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3541'.
[ 1712.961365][T19642] loop2: detected capacity change from 0 to 512
[ 1712.987993][T19642] EXT4-fs: Ignoring removed orlov option
[ 1713.016499][T19642] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[ 1713.061839][T19642] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec198, mo2=0002]
[ 1713.085523][T19642] System zones: 1-12
[ 1713.092638][T19644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3547'.
[ 1713.153055][T19642] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.3546: corrupted in-inode xattr: e_value size too large
[ 1713.248436][T19642] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.3546: couldn't read orphan inode 15 (err -117)
[ 1713.461482][T19642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1714.693564][T16288] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1722.072260][T19696] loop5: detected capacity change from 0 to 64
[ 1723.632104][T19704] loop6: detected capacity change from 0 to 1024
[ 1723.701474][T19704] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[ 1723.745055][T19704] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[ 1723.851132][T19704] EXT4-fs (loop6): filesystem has both journal inode and journal device!
[ 1729.769061][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1729.775504][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1730.838569][T19740] netlink: 'syz.0.3574': attribute type 10 has an invalid length.
[ 1730.846444][T19740] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3574'.
[ 1738.115604][T19768] syz.2.3578 (19768) used greatest stack depth: 17864 bytes left
[ 1738.174131][   T23] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1738.553116][T19784] loop5: detected capacity change from 0 to 1024
[ 1738.570122][T19784] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[ 1738.591572][T19784] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[ 1738.617258][T19784] EXT4-fs (loop5): filesystem has both journal inode and journal device!
[ 1739.405958][T19789] netlink: 'syz.5.3583': attribute type 10 has an invalid length.
[ 1739.414015][T19789] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3583'.
[ 1743.285866][T19826] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3591'.
[ 1744.101963][T19829] loop5: detected capacity change from 0 to 1024
[ 1744.209635][T19829] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[ 1744.246208][T19829] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[ 1744.276678][T19829] EXT4-fs (loop5): filesystem has both journal inode and journal device!
[ 1745.110311][T19831] netlink: 'syz.5.3593': attribute type 10 has an invalid length.
[ 1745.118308][T19831] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3593'.
[ 1746.298490][T19834] loop6: detected capacity change from 0 to 32768
[ 1746.364947][T19834] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 11
[ 1746.561559][T17697] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1751.777779][T19860] netlink: 'syz.0.3602': attribute type 10 has an invalid length.
[ 1751.785704][T19860] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3602'.
[ 1752.621875][T19881] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3605'.
[ 1756.069096][T19903] loop6: detected capacity change from 0 to 1024
[ 1756.113592][T19903] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[ 1756.247419][T19903] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[ 1756.298287][T19903] EXT4-fs (loop6): filesystem has both journal inode and journal device!
[ 1758.017113][T19903] netlink: 'syz.6.3611': attribute type 10 has an invalid length.
[ 1758.025095][T19903] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3611'.
[ 1758.445324][T19920] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3614'.
[ 1759.643766][T19925] overlayfs: overlapping lowerdir path
[ 1762.292346][T19939] loop2: detected capacity change from 0 to 1024
[ 1762.358781][T19939] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[ 1762.381808][T19939] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[ 1762.402121][T19939] EXT4-fs (loop2): filesystem has both journal inode and journal device!
[ 1763.167373][T19942] netlink: 'syz.2.3621': attribute type 10 has an invalid length.
[ 1763.175464][T19942] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3621'.
[ 1763.184781][T19942] bond0: entered promiscuous mode
[ 1763.189938][T19942] bond_slave_0: entered promiscuous mode
[ 1763.196872][T19942] bond_slave_1: entered promiscuous mode
[ 1763.204787][T19942] bridge0: port 3(bond0) entered blocking state
[ 1763.211544][T19942] bridge0: port 3(bond0) entered disabled state
[ 1763.219052][T19942] bond0: entered allmulticast mode
[ 1763.224493][T19942] bond_slave_0: entered allmulticast mode
[ 1763.230350][T19942] bond_slave_1: entered allmulticast mode
[ 1763.252581][T19942] bridge0: port 3(bond0) entered blocking state
[ 1763.259346][T19942] bridge0: port 3(bond0) entered forwarding state
[ 1764.288899][T19945] loop5: detected capacity change from 0 to 4096
[ 1764.702890][T19945] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[ 1764.953560][T19945] ntfs3: loop5: Failed to load $Extend (-22).
[ 1765.017804][T19945] ntfs3: loop5: Failed to initialize $Extend.
[ 1765.372837][   T27] audit: type=1800 audit(1772287292.671:162): pid=19945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3618" name="file1" dev="loop5" ino=30 res=0 errno=0
[ 1765.581279][T19958] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3627'.
[ 1766.114733][T19959] overlayfs: overlapping lowerdir path
[ 1771.718345][T19995] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3636'.
[ 1772.713206][T20001] overlayfs: overlapping lowerdir path
[ 1775.415537][ T5836] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1775.797788][ T5836] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1775.811053][ T5836] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1775.824700][ T5836] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1775.841169][ T5836] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1776.694252][ T5836] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1776.721001][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1776.760508][ T5836] usb 3-1: Product: syz
[ 1776.782653][ T5836] usb 3-1: Manufacturer: syz
[ 1776.806364][ T5836] usb 3-1: SerialNumber: syz
[ 1777.087057][T20036] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3647'.
[ 1777.774817][T20036] overlayfs: failed to clone lowerpath
[ 1778.733883][ T5836] usb 3-1: 0:2 : does not exist
[ 1778.754586][ T5836] usb 3-1: USB disconnect, device number 82
[ 1779.274434][T17697] udevd[17697]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1780.945143][T20056] random: crng reseeded on system resumption
[ 1781.188726][T20060] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3649'.
[ 1782.654574][T20075] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3658'.
[ 1784.148726][T20077] overlayfs: overlapping lowerdir path
[ 1786.604209][T20096] random: crng reseeded on system resumption
[ 1788.314729][T20108] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3670'.
[ 1788.334744][T20108] dvmrp6: entered allmulticast mode
[ 1788.728754][    T8] usb 7-1: new low-speed USB device number 85 using dummy_hcd
[ 1788.878276][T20119] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3674'.
[ 1788.926023][    T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1790.340231][T20119] overlayfs: failed to clone lowerpath
[ 1790.660846][    T8] usb 7-1: string descriptor 0 read error: -22
[ 1790.668389][    T8] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1790.677984][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1790.760664][    T8] usb 7-1: bad CDC descriptors
[ 1790.848282][T20127] random: crng reseeded on system resumption
[ 1791.042920][ T5836] usb 7-1: USB disconnect, device number 85
[ 1791.221210][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.227947][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1791.757200][    T8] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1792.804797][    T8] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1792.824447][T20153] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3685'.
[ 1792.834146][    T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1792.849827][    T8] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1793.372204][T20155] overlayfs: overlapping lowerdir path
[ 1794.326667][    T8] usb 6-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=d0.22
[ 1794.350451][T20158] random: crng reseeded on system resumption
[ 1794.512183][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1794.526313][    T8] usb 6-1: Product: syz
[ 1794.532900][    T8] usb 6-1: Manufacturer: syz
[ 1794.548258][    T8] usb 6-1: SerialNumber: syz
[ 1794.578931][    T8] usb 6-1: can't set config #1, error -71
[ 1794.593120][    T8] usb 6-1: USB disconnect, device number 74
[ 1795.074517][T20168] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1795.083646][T20168] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1796.669081][T20182] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3695'.
[ 1797.400072][T20183] overlayfs: overlapping lowerdir path
[ 1798.586696][T20196] random: crng reseeded on system resumption
[ 1798.853615][T12292] usb 7-1: new full-speed USB device number 86 using dummy_hcd
[ 1799.287355][T12292] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1799.368383][T12292] usb 7-1: not running at top speed; connect to a high speed hub
[ 1799.390022][T12292] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[ 1799.424050][T12292] usb 7-1: config 128 has 0 interfaces, different from the descriptor's value: 1
[ 1799.465840][T12292] usb 7-1: New USB device found, idVendor=0421, idProduct=0071, bcdDevice=de.81
[ 1799.504171][T12292] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1799.517197][T12292] usb 7-1: Product: syz
[ 1799.521396][T12292] usb 7-1: Manufacturer: syz
[ 1799.537461][T12292] usb 7-1: SerialNumber: syz
[ 1799.773333][T12292] usb 7-1: USB disconnect, device number 86
[ 1799.807564][T17697] udevd[17697]: setting mode of /dev/bus/usb/007/086 to 020664 failed: No such file or directory
[ 1799.831789][T17697] udevd[17697]: setting owner of /dev/bus/usb/007/086 to uid=0, gid=0 failed: No such file or directory
[ 1800.448575][T20210] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1800.457936][T20210] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1801.098716][T20213] loop5: detected capacity change from 0 to 1024
[ 1801.126577][T20213] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1801.159353][T20213] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1801.186918][T20213] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[ 1801.232711][T20213] System zones: 0-1, 3-36
[ 1801.273755][T20213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1801.618849][T12896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1802.466755][T20230] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3706'.
[ 1802.504693][T20233] random: crng reseeded on system resumption
[ 1802.908277][T20234] overlayfs: overlapping lowerdir path
[ 1805.173429][T20255] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1805.182624][T20255] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1807.137659][T20270] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3718'.
[ 1807.736515][T20272] overlayfs: overlapping lowerdir path
[ 1808.812134][T20271] random: crng reseeded on system resumption
[ 1814.536300][T20323] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1818.567370][T20353] Malformed UNC in devname
[ 1818.567370][T20353] 
[ 1818.574434][T20353] CIFS: VFS: Malformed UNC in devname
[ 1819.783147][T20034] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 1819.996720][T20034] usb 3-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config
[ 1820.045415][T20034] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[ 1820.054932][T20034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1820.063331][T20034] usb 3-1: Product: syz
[ 1820.067720][T20034] usb 3-1: Manufacturer: syz
[ 1820.072413][T20034] usb 3-1: SerialNumber: syz
[ 1820.083586][T20034] usb 3-1: config 0 descriptor??
[ 1820.104626][T20034] ims_pcu 3-1:0.0: Missing CDC union descriptor
[ 1820.128024][T20034] ims_pcu: probe of 3-1:0.0 failed with error -22
[ 1821.349443][T20388] loop5: detected capacity change from 0 to 1024
[ 1824.725085][ T5836] usb 3-1: USB disconnect, device number 83
[ 1825.159767][T20415] overlayfs: failed to clone upperpath
[ 1829.939171][T20437] netlink: 284 bytes leftover after parsing attributes in process `syz.6.3768'.
[ 1832.154589][T20464] overlayfs: failed to clone upperpath
[ 1835.046700][T20485] netlink: 284 bytes leftover after parsing attributes in process `syz.6.3779'.
[ 1836.294728][T12292] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 1836.484470][T12292] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1836.533643][T12292] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1836.577550][   T27] audit: type=1326 audit(1772287363.917:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9a59c799 code=0x7ffc0000
[ 1836.610364][T12292] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1836.647766][T12292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1836.651481][   T27] audit: type=1326 audit(1772287363.917:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9a59c799 code=0x7ffc0000
[ 1836.727649][T12292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1836.814207][   T27] audit: type=1326 audit(1772287363.917:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9a59c799 code=0x7ffc0000
[ 1836.852164][T12292] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1836.871710][T12292] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1836.902022][T12292] usb 3-1: Product: syz
[ 1836.917283][T12292] usb 3-1: Manufacturer: syz
[ 1836.924735][   T27] audit: type=1326 audit(1772287363.917:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9a59c799 code=0x7ffc0000
[ 1836.951080][T12292] cdc_wdm 3-1:1.0: skipping garbage
[ 1836.967963][T12292] cdc_wdm 3-1:1.0: skipping garbage
[ 1837.002145][T12292] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1837.044386][T12292] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1837.050656][   T27] audit: type=1326 audit(1772287363.917:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fca9a59c799 code=0x7ffc0000
[ 1837.116888][   T27] audit: type=1326 audit(1772287363.917:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9a59c799 code=0x7ffc0000
[ 1837.215860][   T27] audit: type=1326 audit(1772287363.917:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9a59c799 code=0x7ffc0000
[ 1837.313804][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[ 1837.315543][ T5836] usb 3-1: USB disconnect, device number 84
[ 1837.321309][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[ 1837.332499][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1837.365246][T20495] cdc_wdm 3-1:1.0: Tx URB error: -19
[ 1837.387267][   T27] audit: type=1326 audit(1772287363.917:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9a59c799 code=0x7ffc0000
[ 1837.442765][   T27] audit: type=1326 audit(1772287363.917:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9a59c799 code=0x7ffc0000
[ 1837.527418][   T27] audit: type=1326 audit(1772287363.917:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fca9a59c799 code=0x7ffc0000
[ 1838.310380][T20527] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3787'.
[ 1839.027616][    T8] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 1839.233472][    T8] usb 3-1: Using ep0 maxpacket: 16
[ 1839.254690][    T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1839.414189][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1839.631802][    T8] usb 3-1: config 0 descriptor??
[ 1839.649287][    T8] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1839.722202][T20554] 
[ 1839.725081][T20554] =============================
[ 1839.729974][T20554] WARNING: suspicious RCU usage
[ 1839.735117][T20554] syzkaller #0 Not tainted
[ 1839.739564][T20554] -----------------------------
[ 1839.744534][T20554] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage!
[ 1839.753140][T20554] 
[ 1839.753140][T20554] other info that might help us debug this:
[ 1839.753140][T20554] 
[ 1839.763603][T20554] 
[ 1839.763603][T20554] rcu_scheduler_active = 2, debug_locks = 1
[ 1839.771703][T20554] 1 lock held by syz.0.3794/20554:
[ 1839.786658][T20554]  #0: ffffffff8d132180 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70
[ 1839.797226][T20554] 
[ 1839.797226][T20554] stack backtrace:
[ 1839.804728][T20554] CPU: 1 PID: 20554 Comm: syz.0.3794 Not tainted syzkaller #0
[ 1839.812228][T20554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1839.822347][T20554] Call Trace:
[ 1839.825690][T20554]  <TASK>
[ 1839.828659][T20554]  dump_stack_lvl+0x18c/0x250
[ 1839.833376][T20554]  ? show_regs_print_info+0x20/0x20
[ 1839.838627][T20554]  ? load_image+0x400/0x400
[ 1839.843199][T20554]  lockdep_rcu_suspicious+0x1e1/0x300
[ 1839.848635][T20554]  get_callchain_entry+0x2a9/0x3c0
[ 1839.853808][T20554]  get_perf_callchain+0xc6/0x510
[ 1839.858788][T20554]  ? put_callchain_entry+0xb0/0xb0
[ 1839.863944][T20554]  __bpf_get_stack+0x2e4/0x540
[ 1839.868756][T20554]  ? stack_map_get_build_id_offset+0x720/0x720
[ 1839.874955][T20554]  ? __cant_sleep+0x220/0x220
[ 1839.879680][T20554]  ? bpf_prog_14d9fb3786f83342+0x45/0x49
[ 1839.885347][T20554]  bpf_get_stack_raw_tp+0x1a9/0x210
[ 1839.890676][T20554]  bpf_prog_14d9fb3786f83342+0x45/0x49
[ 1839.896176][T20554]  bpf_prog_run_pin_on_cpu+0x64/0x150
[ 1839.901598][T20554]  bpf_prog_test_run_syscall+0x317/0x4a0
[ 1839.907290][T20554]  ? sock_gen_cookie+0x60/0x60
[ 1839.912103][T20554]  ? sock_gen_cookie+0x60/0x60
[ 1839.916910][T20554]  bpf_prog_test_run+0x321/0x390
[ 1839.921900][T20554]  __sys_bpf+0x49d/0x890
[ 1839.926187][T20554]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1839.931601][T20554]  ? __sys_connect+0x11e/0x470
[ 1839.936434][T20554]  ? lock_chain_count+0x20/0x20
[ 1839.941334][T20554]  __x64_sys_bpf+0x7c/0x90
[ 1839.945790][T20554]  do_syscall_64+0x55/0xa0
[ 1839.950256][T20554]  ? clear_bhb_loop+0x40/0x90
[ 1839.954975][T20554]  ? clear_bhb_loop+0x40/0x90
[ 1839.959705][T20554]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1839.965634][T20554] RIP: 0033:0x7f030b39c799
[ 1839.970089][T20554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1839.989734][T20554] RSP: 002b:00007f03095b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1839.998355][T20554] RAX: ffffffffffffffda RBX: 00007f030b616180 RCX: 00007f030b39c799
[ 1840.006361][T20554] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a
[ 1840.014382][T20554] RBP: 00007f030b432bd9 R08: 0000000000000000 R09: 0000000000000000
[ 1840.022397][T20554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1840.030427][T20554] R13: 00007f030b616218 R14: 00007f030b616180 R15: 00007fffc1a016d8
[ 1840.038485][T20554]  </TASK>
[ 1840.586118][    T8] gspca_sonixj: reg_r err -32
[ 1840.668001][    T8] sonixj: probe of 3-1:0.0 failed with error -32
[ 1841.968630][    T8] usb 3-1: USB disconnect, device number 85