last executing test programs:

2m50.607131846s ago: executing program 3 (id=820):
socket$nl_route(0x10, 0x3, 0x0)
openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102)
writev(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x0, 0x804, 0x388}, &(0x7f0000000100)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd=r0, 0xffffffffffffff7f, 0x0, 0x0, 0x4})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)

2m48.392734475s ago: executing program 3 (id=825):
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000180)="0912f7b179d91aebdd36958c70", 0xd}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="ac2032d95fa30d76efd223848bb74a174682c1816c8d1e10209d95f1eec34f520023d0bc0f1f41aeb00a7cc375ff368441dc0f389683b198b0e7080f791292aad935fde5a325365277753f77c88f30318189f27edfa0e6f438b6ff486eddbde81087c7ca13369b6d3d8972fdde9de5560297f8", 0x73}, {&(0x7f0000000400)="fcea50680173131d5d451188b94e1cd1e64f3bbca06484be2509a5dbeed2631c2e256baea8b797b7220fc9fdeb513a986078e79cb96c5e09195f4f22c7b1d7805d1c0ae706582ee358416f31046d602805aeee7bd33eada48a61d413467290820fe82baab19fbe2b8547f0433a8a7139b8ad84cc3e8cc66745f8c98cd80bc77f35d96710ead4cbd59ff847b4eb33fd8a88f296e1715c3b0dbd5af99ac7ffcc6b8ed551bef240aec47ec135d167e7079b09a3b33e0215a9", 0xb7}, {&(0x7f0000000500)}, {0x0}], 0x9, &(0x7f00000007c0)=[{0xf8, 0x114, 0xffff, "4fb5095e1e0e4b4ee1d53343541bd86221f0636fc07f534576a79efb779b2bf5ba90c5a1c231fe2b37259f35e161047e38fd9faf626b1793fa6d5457b3b605a81644851919f3c5676ddc21aec2bcf7e41dfef1aee53f5b0c3725352bf10fbda8c845f71b67c4550f291c95248b8d4af3caae2783325e86699b39fef4f5f90d8fd9d3cb36fd1cf8f77e2a51a159e771a6eccc8f53de82f43832bb9f7b0e992feff55373a1bc281eeb78dfc26d694aa43623ef447b5f5fb7ee066983fc847a1500c5140159f85ab4715d2e3ea6af5aebe7970f251a5cb0a86efdfc11316a033b6b4f7b77facff5bbd5"}, {0xc8, 0x117, 0xffff0000, "4c99e29437f4d64175c19c1d6926ce841cf3da2ef9fb61dc3922458b13e852520dacfba429d811f62697be049eb2e97ca359e9970cddfe89846d75057819c5831fd4f2372e6257d4c97559e97c6050cf7e77d80a71d1f3293d76237f2d2b442047c053e12cd8f6106a84d85294b1f8e686626b2076debd7799b55cdeab33558205901fd753a72a6c21687c8d40cfc4ffe94946510ddf387e946cf8328f0c3b7a4b293406cbaff0f3083d040b919a49ba4bd4525e72d8"}, {0x80, 0x6, 0x4, "034ee23293b07d5ff0976f9407114a06aac9d3af74e4d11c9f681a70b49608827cf83ec007697538fb0ab9f94919eddb287ec731dcb67489cdfc99efb2f8275943c72e4163105a6e45519c142ac788f5cc1b4c4ba77600ef89de7a07db6a7c22247c97536a692db1b41cb6dbcb"}, {0x10, 0x102, 0x8}, {0x48, 0x117, 0xffffffcb, "6a3a25da76bf30434677db446e625f45d347a55ab61bbaef87f058793cd7194526bc27183d68f61a4f4211ff43efba22c7e7"}], 0x298}, 0x80)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="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")
ioctl$KDSETMODE(r1, 0x4b3a, 0x1)
ioctl$TCXONC(r1, 0x4b3a, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5)

2m46.501892227s ago: executing program 3 (id=827):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet(0x2b, 0x801, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r2)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x4000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3d)
r8 = syz_clone3(&(0x7f0000000540)={0x200, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x16}, &(0x7f00000003c0)=""/182, 0xb6, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)
rt_tgsigqueueinfo(0x0, r8, 0x2b, &(0x7f00000005c0)={0x2, 0x1, 0x8})
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
ptrace$pokeuser(0x6, r9, 0x107, 0x4)
ptrace$pokeuser(0x6, r9, 0x118, 0x20000000)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="010028bd7000fddbdf25000400000400f400"/33], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
setrlimit(0x2, &(0x7f00000000c0))
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x90)

2m45.534090295s ago: executing program 3 (id=830):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f00000003c0), 0x1, 0x55e, &(0x7f0000001bc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x40)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}})
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000180), 0x8, &(0x7f0000000a40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]})

2m44.959564233s ago: executing program 3 (id=835):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0xbbf, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)

2m42.530713502s ago: executing program 3 (id=840):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a40000000206050000000000000000030000fffd54000704a70004404e210000050003000500000008000a400000000008000a400000000308000640f800000f060004404e230000060004404e2200020800064000000c630500140008000000080013400000000905000400000000000900020073797a3100000000e37c782c050003001f0000000c00018008000140ffffffff05000500020000000500010006000000"], 0xa4}}, 0x20008000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4048060}, 0x20004080)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="280000000104030000000000000000000300200405000100010000000a000600000000040200"], 0x28}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000044)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r7 = userfaultfd(0x1)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xa0})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x0)
madvise(&(0x7f0000939000/0x3000)=nil, 0x3000, 0x18)
socket(0x11, 0x800, 0x5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socket$nl_generic(0x10, 0x3, 0x10)

2m42.220367317s ago: executing program 32 (id=840):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a40000000206050000000000000000030000fffd54000704a70004404e210000050003000500000008000a400000000008000a400000000308000640f800000f060004404e230000060004404e2200020800064000000c630500140008000000080013400000000905000400000000000900020073797a3100000000e37c782c050003001f0000000c00018008000140ffffffff05000500020000000500010006000000"], 0xa4}}, 0x20008000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4048060}, 0x20004080)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="280000000104030000000000000000000300200405000100010000000a000600000000040200"], 0x28}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000044)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r7 = userfaultfd(0x1)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xa0})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x0)
madvise(&(0x7f0000939000/0x3000)=nil, 0x3000, 0x18)
socket(0x11, 0x800, 0x5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socket$nl_generic(0x10, 0x3, 0x10)

2m33.9831325s ago: executing program 1 (id=856):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet(0x2b, 0x801, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r2)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x4000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3d)
r8 = syz_clone3(&(0x7f0000000540)={0x200, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x16}, &(0x7f00000003c0)=""/182, 0xb6, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)
rt_tgsigqueueinfo(0x0, r8, 0x2b, &(0x7f00000005c0)={0x2, 0x1, 0x8})
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
ptrace$pokeuser(0x6, r9, 0x107, 0x4)
ptrace$pokeuser(0x6, r9, 0x118, 0x20000000)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="010028bd7000fddbdf25000400000400f400"/33], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
setrlimit(0x2, &(0x7f00000000c0))
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x90)

2m33.114520022s ago: executing program 1 (id=858):
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
connect$llc(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x228, &(0x7f0000002380)="$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")

2m31.876891763s ago: executing program 1 (id=860):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source', &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\\\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
sched_setattr(0x0, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0)
shutdown(r4, 0x1)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x405e, 0x4)
recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

2m31.395234647s ago: executing program 1 (id=864):
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0044159743df776a5de9392543da7d297b3dea"], 0xf, 0xa02, &(0x7f0000001ec0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

2m30.281159471s ago: executing program 1 (id=868):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r1, 0x402c542c, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r4, 0xffffc000)

2m28.551194876s ago: executing program 1 (id=870):
syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
r2 = syz_pidfd_open(r1, 0x0)
pidfd_send_signal(r2, 0x11, 0x0, 0x4)

2m13.082292824s ago: executing program 33 (id=870):
syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
r2 = syz_pidfd_open(r1, 0x0)
pidfd_send_signal(r2, 0x11, 0x0, 0x4)

22.659228331s ago: executing program 5 (id=1130):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r2, 0xda90)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0)

18.612767028s ago: executing program 5 (id=1136):
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c05c}, 0x20040811)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200000034000380080001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880)

18.010562098s ago: executing program 5 (id=1138):
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000180)="0912f7b179d91aebdd36958c70", 0xd}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="ac2032d95fa30d76efd223848bb74a174682c1816c8d1e10209d95f1eec34f520023d0bc0f1f41aeb00a7cc375ff368441dc0f389683b198b0e7080f791292aad935fde5a325365277753f77c88f30318189f27edfa0e6f438b6ff486eddbde81087c7ca13369b6d3d8972fdde9de5560297f8", 0x73}, {&(0x7f0000000400)="fcea50680173131d5d451188b94e1cd1e64f3bbca06484be2509a5dbeed2631c2e256baea8b797b7220fc9fdeb513a986078e79cb96c5e09195f4f22c7b1d7805d1c0ae706582ee358416f31046d602805aeee7bd33eada48a61d413467290820fe82baab19fbe2b8547f0433a8a7139b8ad84cc3e8cc66745f8c98cd80bc77f35d96710ead4cbd59ff847b4eb33fd8a88f296e1715c3b0dbd5af99ac7ffcc6b8ed551bef240aec47ec135d167e7079b09a3b33e0215a9", 0xb7}, {&(0x7f0000000500)}, {&(0x7f0000000640)="5e4db21c69bfe929de9a26285a77f9228a8c404887a8c83811c670b0d074cce6b8cc438e4cd9caf25a6f7385d6e21b869deecde1eeb35409a43d677778d16efed00b496b168caf8b5cdfffebd01b8ec910ec35c536b2c04c96f56d42a92d926b6fde9f70f744a2f6c911b3b15962a0d68246506c9d0094073d11608b6ba79e3ac495b36b2d", 0x85}], 0x9, &(0x7f00000007c0)=[{0xf8, 0x114, 0xffff, "4fb5095e1e0e4b4ee1d53343541bd86221f0636fc07f534576a79efb779b2bf5ba90c5a1c231fe2b37259f35e161047e38fd9faf626b1793fa6d5457b3b605a81644851919f3c5676ddc21aec2bcf7e41dfef1aee53f5b0c3725352bf10fbda8c845f71b67c4550f291c95248b8d4af3caae2783325e86699b39fef4f5f90d8fd9d3cb36fd1cf8f77e2a51a159e771a6eccc8f53de82f43832bb9f7b0e992feff55373a1bc281eeb78dfc26d694aa43623ef447b5f5fb7ee066983fc847a1500c5140159f85ab4715d2e3ea6af5aebe7970f251a5cb0a86efdfc11316a033b6b4f7b77facff5bbd5"}, {0xc8, 0x117, 0xffff0000, "4c99e29437f4d64175c19c1d6926ce841cf3da2ef9fb61dc3922458b13e852520dacfba429d811f62697be049eb2e97ca359e9970cddfe89846d75057819c5831fd4f2372e6257d4c97559e97c6050cf7e77d80a71d1f3293d76237f2d2b442047c053e12cd8f6106a84d85294b1f8e686626b2076debd7799b55cdeab33558205901fd753a72a6c21687c8d40cfc4ffe94946510ddf387e946cf8328f0c3b7a4b293406cbaff0f3083d040b919a49ba4bd4525e72d8"}, {0x80, 0x6, 0x4, "034ee23293b07d5ff0976f9407114a06aac9d3af74e4d11c9f681a70b49608827cf83ec007697538fb0ab9f94919eddb287ec731dcb67489cdfc99efb2f8275943c72e4163105a6e45519c142ac788f5cc1b4c4ba77600ef89de7a07db6a7c22247c97536a692db1b41cb6dbcb"}, {0x10, 0x102, 0x8}, {0x48, 0x117, 0xffffffcb, "6a3a25da76bf30434677db446e625f45d347a55ab61bbaef87f058793cd7194526bc27183d68f61a4f4211ff43efba22c7e7"}], 0x298}, 0x80)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="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")
ioctl$KDSETMODE(r1, 0x4b3a, 0x1)
ioctl$TCXONC(r1, 0x4b3a, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5)

16.971366739s ago: executing program 6 (id=1141):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0)
syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x0)
r0 = syz_io_uring_setup(0xb5b, &(0x7f0000000640)={0x0, 0xa607, 0x80, 0x0, 0x2b6}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0xf27, 0x0, 0x0, 0x0, 0x0)

13.539633577s ago: executing program 4 (id=1149):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x0)

12.295767728s ago: executing program 5 (id=1152):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000340)=[@free_buffer, @register_looper], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0x48, &(0x7f0000002180)=0xd, 0x4)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0)

11.371961864s ago: executing program 6 (id=1153):
r0 = socket(0xa, 0x3, 0x3a)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$AUTOFS_IOC_READY(r1, 0x400442c8, 0x200000f3)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pselect6(0x40, &(0x7f00000000c0)={0x9, 0xce0e, 0x6, 0x3fc, 0x19a2, 0x9, 0x0, 0x7}, &(0x7f0000000200)={0x5, 0x7, 0x20006, 0x8000000000000001, 0x7fff, 0x7, 0x2, 0xc}, &(0x7f0000000240)={0xd16, 0x5, 0x2, 0x8000000000000000, 0x3, 0x9, 0x8001, 0x800}, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480)={[0xffdf]}, 0x8})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40)
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x20000000)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000640)="4403020259040e9e1200002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a3691a14b8a34f90186cee8440000e6070000000019b0fb0bba37e93467756af5531b1272749db73611606dca648a1afa8747a5b89a1c13deb1edf791aaa90a7e0bc244fecb019616dce97b58266ff461958439b01fede5fbea32ea34", 0x84}, {&(0x7f0000000840)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x16a}, {&(0x7f0000000780)="6fe4dd9eeb85271de1b87ef9440284929c22c5dc1eb8d4f909ac95111f32fd1abcc527678f525656398c9f2983316b7b466e0dd5ec350f6cfb0570144fb0ea75ccc9a707dacf67e1d8ec9f9068247b437ba9f80eea1c05017cc329b4a04edbd82dd06dd7192dc4f909b2c10d2bc1b8d813246c18b2029bc4181fda753b1951353ae4c0c8788941e901a80010d6de66fd7d02523af93eaf0551b206d022db69815cb0f3f0568db6ebeb3c96781fd9ec3f", 0xb0}], 0x4}, 0x20008090)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, 0x0, 0x0)
r8 = accept$inet(r7, 0x0, &(0x7f0000000040))
connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0)
setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000000180)=@bpq0, 0x10)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4)

10.556881133s ago: executing program 6 (id=1155):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x129000, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x8000, 0xffffffffffffffff, 0x2})
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

10.261498587s ago: executing program 6 (id=1158):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005)
ioctl$SG_IO(r1, 0x2285, 0x0)
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e240003000000f7c08b0e278ad10ab08ba900b92d276d720984d211fbdf23ea32db0e8f21d5bc27d85e44751170", 0x31}], 0x2)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$sg(&(0x7f0000000e40), 0x0, 0x20080)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r2, &(0x7f0000000580)={0x21e, 0x2, 0x0, {{0x500, 0xa8, 0x0, 0x0, {}, 0x3810000, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0xffffffffffffffb0, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x21e)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0)
write$P9_RWALK(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="640000006f010007000202000000040000000000000010040000080400000000000000800200000008000000000000008004000000000000000000000004030000000000000000000000020100000000009ee092ee000020020000000200000000000000"], 0x64)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20000400000040010500fcfec454d7c57ef704b125459f3fb936b199bea7b6ff0e4773c0cd324867d6cbb8faeae029cab2d1db41d7898114b2b94779000aaf2d4c3ea0601515921bb69993c6fff632dbac133b2b4a8cb53a7a00bc34"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10.142718383s ago: executing program 2 (id=1159):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x6e60, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0042f5})
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x40100001, 0x80000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r3, <r4=>0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0})
ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x4, 0x5002)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000011c0)={0x0, 0x0, r4, r5, 0x2, 0x0, 0xc, 0x802, {0xac7e, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x492f, 0xe154, 0x881, 0x0, 0xb3bf, 0xc0000, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}})

10.095643756s ago: executing program 4 (id=1160):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x5}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000)

9.994010821s ago: executing program 2 (id=1161):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x400000)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0xf4)
recvfrom(r3, 0x0, 0x0, 0x500, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

8.879296805s ago: executing program 2 (id=1163):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r5, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r7, &(0x7f0000000000)=0x922, 0x12)

8.878583145s ago: executing program 4 (id=1164):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000005640), 0x1, 0x559e, &(0x7f0000005680)="$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")

7.666798065s ago: executing program 2 (id=1165):
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

7.111829082s ago: executing program 6 (id=1167):
socket$inet_smc(0x2b, 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)

4.336546058s ago: executing program 2 (id=1169):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
write(r1, &(0x7f0000000480)="0e", 0x1)
write(r1, &(0x7f0000000400)='\"M', 0x2)

4.125304598s ago: executing program 0 (id=1171):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet(0x2b, 0x801, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r2)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x4000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r6 = syz_clone3(&(0x7f0000000540)={0x200, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x16}, &(0x7f00000003c0)=""/182, 0xb6, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)
rt_tgsigqueueinfo(0x0, r6, 0x2b, &(0x7f00000005c0)={0x2, 0x1, 0x8})
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$pokeuser(0x6, r7, 0x107, 0x4)
ptrace$pokeuser(0x6, r7, 0x118, 0x20000000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf25000400000400f400"/33], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
setrlimit(0x2, &(0x7f00000000c0))
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x90)

4.099773969s ago: executing program 4 (id=1172):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
socket$packet(0x11, 0x3, 0x300)
mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x2, 0xcc7, 0x8, 0x7, 0x654, 0x100, 0x2, 0x1, 0x6, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x6, 0x40000003, 0x89, 0x3, 0xf23, 0x6, 0xb, 0x8, 0x3, 0x8, 0x4, 0x10000, 0xfffffff8]})

3.846887042s ago: executing program 6 (id=1173):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000083, &(0x7f0000000080)={[{@nouuid}, {@swalloc}, {@lazytime}, {@nogrpid}, {@gquota}, {@nouuid}, {@pquota}, {@usrquota}, {@nogrpid}]}, 0x1, 0x97b0, &(0x7f0000012f40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

3.737584267s ago: executing program 0 (id=1174):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48000, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x800, 0x4000000000000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xfdff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0)

3.313245428s ago: executing program 5 (id=1175):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r2, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0)

3.312206718s ago: executing program 0 (id=1185):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x802, 0x0)
write(r3, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000340)=[@free_buffer, @register_looper], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0x48, &(0x7f0000002180)=0xd, 0x4)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0)

3.093468109s ago: executing program 4 (id=1176):
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000180)="0912f7b179d91aebdd36958c70", 0xd}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="ac2032d95fa30d76efd223848bb74a174682c1816c8d1e10209d95f1eec34f520023d0bc0f1f41aeb00a7cc375ff368441dc0f389683b198b0e7080f791292aad935fde5a325365277753f77c88f30318189f27edfa0e6f438b6ff486eddbde81087c7ca13369b6d3d8972fdde9de5560297f8", 0x73}, {&(0x7f0000000400)="fcea50680173131d5d451188b94e1cd1e64f3bbca06484be2509a5dbeed2631c2e256baea8b797b7220fc9fdeb513a986078e79cb96c5e09195f4f22c7b1d7805d1c0ae706582ee358416f31046d602805aeee7bd33eada48a61d413467290820fe82baab19fbe2b8547f0433a8a7139b8ad84cc3e8cc66745f8c98cd80bc77f35d96710ead4cbd59ff847b4eb33fd8a88f296e1715c3b0dbd5af99ac7ffcc6b8ed551bef240aec47ec135d167e7079b09a3b33e0215a9", 0xb7}, {&(0x7f0000000640)="5e4db21c69bfe929de9a26285a77f9228a8c404887a8c83811c670b0d074cce6b8cc438e4cd9caf25a6f7385d6e21b869deecde1eeb35409a43d677778d16efed00b496b168caf8b5cdfffebd01b8ec910ec35c536b2c04c96f56d42a92d926b6fde9f70f744a2f6c911b3b15962a0d68246506c9d0094073d11608b6ba79e3ac495b36b2d85", 0x86}], 0x8, &(0x7f00000007c0)=[{0xf8, 0x114, 0xffff, "4fb5095e1e0e4b4ee1d53343541bd86221f0636fc07f534576a79efb779b2bf5ba90c5a1c231fe2b37259f35e161047e38fd9faf626b1793fa6d5457b3b605a81644851919f3c5676ddc21aec2bcf7e41dfef1aee53f5b0c3725352bf10fbda8c845f71b67c4550f291c95248b8d4af3caae2783325e86699b39fef4f5f90d8fd9d3cb36fd1cf8f77e2a51a159e771a6eccc8f53de82f43832bb9f7b0e992feff55373a1bc281eeb78dfc26d694aa43623ef447b5f5fb7ee066983fc847a1500c5140159f85ab4715d2e3ea6af5aebe7970f251a5cb0a86efdfc11316a033b6b4f7b77facff5bbd5"}, {0xc8, 0x117, 0xffff0000, "4c99e29437f4d64175c19c1d6926ce841cf3da2ef9fb61dc3922458b13e852520dacfba429d811f62697be049eb2e97ca359e9970cddfe89846d75057819c5831fd4f2372e6257d4c97559e97c6050cf7e77d80a71d1f3293d76237f2d2b442047c053e12cd8f6106a84d85294b1f8e686626b2076debd7799b55cdeab33558205901fd753a72a6c21687c8d40cfc4ffe94946510ddf387e946cf8328f0c3b7a4b293406cbaff0f3083d040b919a49ba4bd4525e72d8"}, {0x80, 0x6, 0x4, "034ee23293b07d5ff0976f9407114a06aac9d3af74e4d11c9f681a70b49608827cf83ec007697538fb0ab9f94919eddb287ec731dcb67489cdfc99efb2f8275943c72e4163105a6e45519c142ac788f5cc1b4c4ba77600ef89de7a07db6a7c22247c97536a692db1b41cb6dbcb"}, {0x10, 0x102, 0x8}, {0x48, 0x117, 0xffffffcb, "6a3a25da76bf30434677db446e625f45d347a55ab61bbaef87f058793cd7194526bc27183d68f61a4f4211ff43efba22c7e7"}], 0x298}, 0x80)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="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")
ioctl$KDSETMODE(r1, 0x4b3a, 0x1)
ioctl$TCXONC(r1, 0x4b3a, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5)

2.340697505s ago: executing program 0 (id=1177):
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0xeb}, 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.383704723s ago: executing program 0 (id=1178):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
setrlimit(0xf, 0x0)
write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '+{\''}]}, 0xf)
sendfile(r2, r0, 0x0, 0x40001)
sendfile(r2, r1, 0x0, 0x7ffff000)

254.630048ms ago: executing program 0 (id=1179):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181242, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fe, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x35})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

126.224704ms ago: executing program 4 (id=1180):
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000100)='.\x00', 0x10005f1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
preadv(r1, &(0x7f0000000640)=[{&(0x7f0000001440)=""/134, 0x86}], 0x1, 0x0, 0x0)

93.780416ms ago: executing program 2 (id=1181):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
read$hiddev(0xffffffffffffffff, &(0x7f00000000c0)=""/141, 0x8d)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x5a, 0xb8, 0x7b, 0x20, 0x2001, 0x3310, 0xf736, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x8, 0x10, 0x8, "", [{{0x9, 0x4, 0x7a, 0x5, 0x0, 0xff, 0xff, 0xff, 0x6}}]}}]}}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r0)

0s ago: executing program 5 (id=1182):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000510000001801000075"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b04bd7000fcdbdf257a000d0000", @ANYRES32=0x0, @ANYBLOB="0010000020900000400012800b0001006272696467650000300002800c0023000100000000000080050016000000000008001b004b0f00000500250001000000050024"], 0x60}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
r5 = socket(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r7, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x8d, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0)
sendmmsg$unix(r5, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r7, &(0x7f0000000400)="f8323857a3f947f670edaa6f9cdde0d54500ab053f3d356d07aa45913980fb79ea7447a6a119d1653254d6b14e2136445c6de750acbbc501afec92a75fa27ce0e48362fd27bc945571d1e8187d8c1ff6c9c85056e33ffb226e7b05d7067a", &(0x7f0000000480)=@tcp6=r7, 0x4}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', <r8=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000200)={'ip_vti0\x00', <r9=>0x0, 0x7800, 0x7, 0x81, 0xd, {{0x12, 0x4, 0x1, 0xe, 0x48, 0x66, 0x0, 0x6, 0x2f, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x34, 0xcc, 0x3, 0x6, [{@empty, 0xfffffffc}, {@local}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x8}, {@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x1800}, {@remote, 0xfffffffa}]}]}}}}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)={0x21c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r4}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc778}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044014)

kernel console output (not intermixed with test programs):

vice strings: Mfr=0, Product=0, SerialNumber=0
[  235.216082][ T4225] usb 2-1: config 0 descriptor??
[  235.257840][ T4225] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  235.305534][ T4227] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  235.330730][ T4227] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping
[  235.365571][ T4227] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  236.325538][ T4227] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  236.346847][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.355734][ T4227] usb 4-1: Product: syz
[  236.360789][ T4227] usb 4-1: Manufacturer: syz
[  236.366174][ T4227] usb 4-1: SerialNumber: syz
[  236.552620][ T4227] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  236.561992][ T4227] imon 4-1:155.0: unable to initialize intf0, err -19
[  236.583562][ T4227] imon:imon_probe: failed to initialize context!
[  236.613086][ T4227] imon 4-1:155.0: unable to register, err -19
[  237.272616][ T4225] usb 2-1: USB disconnect, device number 5
[  238.517034][ T4280] usb 4-1: USB disconnect, device number 7
[  238.745423][ T6025] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  239.564503][ T6043] loop2: detected capacity change from 0 to 7
[  239.597086][ T4372] Dev loop2: unable to read RDB block 7
[  239.603549][ T4372]  loop2: AHDI p1 p2 p3
[  239.610207][ T4372] loop2: partition table partially beyond EOD, truncated
[  239.621057][ T4372] loop2: p1 start 1818582900 is beyond EOD, truncated
[  239.630357][ T4372] loop2: p3 start 335544320 is beyond EOD, truncated
[  239.648992][ T6043] Dev loop2: unable to read RDB block 7
[  239.674866][ T6043]  loop2: AHDI p1 p2 p3
[  239.686178][ T6043] loop2: partition table partially beyond EOD, truncated
[  239.701248][ T6043] loop2: p1 start 1818582900 is beyond EOD, truncated
[  239.710738][ T6043] loop2: p3 start 335544320 is beyond EOD, truncated
[  242.815437][ T6082] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  243.925371][ T4280] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  244.195369][ T4280] usb 2-1: Using ep0 maxpacket: 8
[  244.355538][ T4280] usb 2-1: unable to get BOS descriptor or descriptor too short
[  244.445516][ T4280] usb 2-1: config 8 has an invalid interface number: 134 but max is 0
[  244.462959][ T4280] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  244.502912][ T4280] usb 2-1: config 8 has no interface number 0
[  244.675679][ T4280] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=fa.e6
[  244.693678][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.713481][ T4280] usb 2-1: Product: ᐁ
[  244.718944][ T4280] usb 2-1: Manufacturer: Й
[  244.733956][ T4280] usb 2-1: SerialNumber: syz
[  245.445586][ T6106] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  246.711558][ T4225] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  246.846411][ T4280] kvaser_usb 2-1:8.134: Cannot get usb endpoint(s)
[  247.085467][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.141254][ T4280] usb 2-1: USB disconnect, device number 6
[  247.197551][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.235171][ T4225] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  247.334460][ T4225] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  247.480931][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.519852][ T4225] usb 1-1: config 0 descriptor??
[  248.275448][ T6119] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  249.118564][ T4225] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  249.289661][ T4225] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  249.685379][ T4184] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  250.874855][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'.
[  250.885633][ T4184] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  250.885666][ T4184] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  250.885708][ T4184] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  250.885733][ T4184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.892975][ T4184] usb 3-1: config 0 descriptor??
[  250.975649][ T6128] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  250.998328][ T4184] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  252.001752][ T4222] usb 1-1: USB disconnect, device number 4
[  252.915428][ T6160] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  253.474544][ T1110] usb 3-1: USB disconnect, device number 7
[  254.225522][ T1110] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  254.512488][ T1110] usb 4-1: Using ep0 maxpacket: 16
[  255.285452][ T1110] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  255.296474][ T1110] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[  255.325305][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.356134][ T1110] usb 4-1: config 0 descriptor??
[  255.401955][ T1110] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  255.654143][ T6168] device team_slave_0 entered promiscuous mode
[  255.661273][ T6168] device team_slave_1 entered promiscuous mode
[  255.721950][ T6168] device vlan2 entered promiscuous mode
[  255.733950][ T6189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.572'.
[  255.775394][ T6168] device team0 entered promiscuous mode
[  255.787902][ T6189] netlink: 'syz.0.572': attribute type 6 has an invalid length.
[  256.044217][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  256.055641][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  256.256844][ T4280] usb 4-1: USB disconnect, device number 8
[  257.112564][ T6204] loop0: detected capacity change from 0 to 2048
[  258.128605][ T6200] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  258.157467][ T4372]  loop0: p1 < > p4
[  258.158290][ T4372] loop0: p4 size 722688 extends beyond EOD, truncated
[  258.175331][ T6204]  loop0: p1 < > p4
[  258.176217][ T6204] loop0: p4 size 722688 extends beyond EOD, truncated
[  258.612605][ T4372] udevd[4372]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  259.451869][ T6219] tipc: Started in network mode
[  259.463994][ T6219] tipc: Node identity ac14140f, cluster identity 4711
[  259.492625][ T4572] udevd[4572]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  259.525661][ T6219] tipc: New replicast peer: 255.255.255.255
[  259.555677][ T6219] tipc: Enabled bearer <udp:syz2>, priority 10
[  259.689915][ T4372] udevd[4372]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  259.706080][ T4259] udevd[4259]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  259.907597][ T6231] netlink: 40 bytes leftover after parsing attributes in process `syz.4.586'.
[  259.968608][ T6231] netlink: 'syz.4.586': attribute type 6 has an invalid length.
[  260.135512][   T21] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  260.146324][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  260.146483][   T26] audit: type=1326 audit(1773808241.800:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  260.245697][ T4225] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  260.346171][   T26] audit: type=1326 audit(1773808241.840:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  260.371037][   T26] audit: type=1326 audit(1773808241.850:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  260.394661][    C1] vkms_vblank_simulate: vblank timer overrun
[  260.487960][ T4224] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  260.566756][   T26] audit: type=1326 audit(1773808241.850:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  260.591070][    C1] vkms_vblank_simulate: vblank timer overrun
[  260.723224][ T4184] tipc: Node number set to 2886997007
[  260.736759][   T21] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[  260.754485][   T26] audit: type=1326 audit(1773808241.860:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  260.778932][ T4225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.811305][   T21] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  260.835771][ T4225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.865372][   T26] audit: type=1326 audit(1773808241.860:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  260.884261][   T21] usb 1-1: config 0 interface 0 has no altsetting 0
[  260.889297][   T26] audit: type=1326 audit(1773808241.860:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  260.897874][ T4225] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  260.919264][   T26] audit: type=1326 audit(1773808241.870:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  260.959554][   T26] audit: type=1326 audit(1773808241.870:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6881e4cfce code=0x7ffc0000
[  260.984431][   T26] audit: type=1326 audit(1773808241.870:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  261.038752][ T4225] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  261.059203][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.091977][ T4225] usb 3-1: config 0 descriptor??
[  261.125615][ T4224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.159868][ T4224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.195466][   T21] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  261.206695][ T4224] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  261.222656][   T21] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  261.234470][ T4224] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  261.248394][   T21] usb 1-1: Product: syz
[  261.252953][   T21] usb 1-1: Manufacturer: syz
[  261.273655][ T4224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.282240][   T21] usb 1-1: SerialNumber: syz
[  261.287428][   T21] usb 1-1: config 0 descriptor??
[  261.328529][   T21] usb 1-1: selecting invalid altsetting 0
[  261.373016][ T4224] usb 4-1: config 0 descriptor??
[  261.471928][ T4184] usb 1-1: USB disconnect, device number 5
[  261.736243][ T4225] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  261.758033][ T4225] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  262.008318][ T4224] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  262.087656][ T4224] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  263.160521][ T1110] usb 4-1: USB disconnect, device number 9
[  263.891234][ T4184] usb 3-1: USB disconnect, device number 8
[  264.744164][ T6274] netlink: 'syz.2.598': attribute type 7 has an invalid length.
[  264.916408][ T6276] netlink: 40 bytes leftover after parsing attributes in process `syz.0.599'.
[  264.966947][ T6276] netlink: 'syz.0.599': attribute type 6 has an invalid length.
[  266.297186][   T26] kauditd_printk_skb: 63 callbacks suppressed
[  266.297201][   T26] audit: type=1326 audit(1773808247.960:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6805c0b799 code=0x7ffc0000
[  266.511033][   T26] audit: type=1326 audit(1773808247.990:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6805c0b799 code=0x7ffc0000
[  266.565845][   T26] audit: type=1326 audit(1773808248.000:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6805c0b799 code=0x7ffc0000
[  266.811509][   T26] audit: type=1326 audit(1773808248.000:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6805c0b799 code=0x7ffc0000
[  266.844676][   T26] audit: type=1326 audit(1773808248.000:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6805c0b799 code=0x7ffc0000
[  266.877527][   T26] audit: type=1326 audit(1773808248.000:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6805c0b799 code=0x7ffc0000
[  266.908772][   T26] audit: type=1326 audit(1773808248.000:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6805c0b799 code=0x7ffc0000
[  267.385593][ T6289] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  268.302878][   T26] audit: type=1326 audit(1773808248.020:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6805bcbfce code=0x7ffc0000
[  268.434260][   T26] audit: type=1326 audit(1773808248.030:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6805c0b799 code=0x7ffc0000
[  268.572164][   T26] audit: type=1326 audit(1773808248.030:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6805bcbfce code=0x7ffc0000
[  269.825378][ T4229] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  270.246092][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.278969][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.330698][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  270.400131][ T4229] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  270.445447][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.654581][ T4229] usb 1-1: config 0 descriptor??
[  271.925888][ T6321] netlink: 40 bytes leftover after parsing attributes in process `syz.2.614'.
[  271.955968][ T6321] netlink: 'syz.2.614': attribute type 6 has an invalid length.
[  272.515485][ T6324] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  273.306012][ T4229] usbhid 1-1:0.0: can't add hid device: -71
[  273.313363][ T4229] usbhid: probe of 1-1:0.0 failed with error -71
[  273.421174][ T4229] usb 1-1: USB disconnect, device number 6
[  273.965305][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  273.965321][   T26] audit: type=1326 audit(1773808255.620:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  274.862675][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'.
[  274.902731][ T6335] IPv6: sit2: Disabled Multicast RS
[  275.024440][   T26] audit: type=1326 audit(1773808255.620:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  275.077844][   T26] audit: type=1326 audit(1773808255.660:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  275.120211][   T26] audit: type=1326 audit(1773808255.660:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  275.185348][   T26] audit: type=1326 audit(1773808255.660:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  275.561878][   T26] audit: type=1326 audit(1773808255.660:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  275.588002][   T26] audit: type=1326 audit(1773808255.660:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  275.613272][   T26] audit: type=1326 audit(1773808255.660:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  275.648838][   T26] audit: type=1326 audit(1773808255.660:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  275.874225][   T26] audit: type=1326 audit(1773808255.660:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  276.388131][ T6368] loop1: detected capacity change from 0 to 2048
[  276.458177][ T4372]  loop1: p1 < > p4
[  276.471996][ T4372] loop1: p4 size 722688 extends beyond EOD, truncated
[  276.581398][ T6368]  loop1: p1 < > p4
[  276.590510][ T6368] loop1: p4 size 722688 extends beyond EOD, truncated
[  277.275685][ T6371] netlink: 104 bytes leftover after parsing attributes in process `syz.2.628'.
[  278.587458][ T6388] netlink: 40 bytes leftover after parsing attributes in process `syz.4.634'.
[  278.641725][ T6388] netlink: 'syz.4.634': attribute type 6 has an invalid length.
[  279.369564][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  279.369579][   T26] audit: type=1326 audit(1773808261.030:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  279.470796][   T26] audit: type=1326 audit(1773808261.030:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  279.565434][   T26] audit: type=1326 audit(1773808261.060:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  279.805872][   T26] audit: type=1326 audit(1773808261.060:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  280.043447][   T26] audit: type=1326 audit(1773808261.060:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  280.394946][   T26] audit: type=1326 audit(1773808261.060:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  280.692038][   T26] audit: type=1326 audit(1773808261.060:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  281.094214][   T26] audit: type=1326 audit(1773808261.060:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  281.482463][   T26] audit: type=1326 audit(1773808261.060:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  281.525304][   T26] audit: type=1326 audit(1773808261.060:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6881e8c799 code=0x7ffc0000
[  282.606359][ T6416] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  283.235402][ T1108] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  283.675604][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.761183][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.882836][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  284.012877][ T1108] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  284.084035][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.114224][ T1108] usb 4-1: config 0 descriptor??
[  284.368374][ T6441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.648'.
[  284.429217][ T6443] loop0: detected capacity change from 0 to 2048
[  284.697600][ T6441] netlink: 'syz.1.648': attribute type 6 has an invalid length.
[  284.742991][ T4572]  loop0: p1 < > p4
[  284.945301][ T1108] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  284.948148][ T4572] loop0: p4 size 722688 extends beyond EOD, 
[  285.015022][ T1108] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  285.032228][ T4572] truncated
[  285.198875][ T6443]  loop0: p1 < > p4
[  285.211181][ T6443] loop0: p4 size 722688 extends beyond EOD, truncated
[  285.500838][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  285.500896][   T26] audit: type=1326 audit(1773808267.110:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7928d48799 code=0x7ffc0000
[  286.393413][   T26] audit: type=1326 audit(1773808267.160:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7928d48799 code=0x7ffc0000
[  287.619284][ T4372] udevd[4372]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  287.632521][ T4259] udevd[4259]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  288.229206][ T6471] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  288.807593][ T1108] usb 4-1: USB disconnect, device number 10
[  288.833809][ T6463] fido_id[6463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  289.057091][ T4259] udevd[4259]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  289.087441][ T4572] udevd[4572]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  289.247488][ T4372] udevd[4372]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  289.293492][ T4572] udevd[4572]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  289.403595][ T6486] loop0: detected capacity change from 0 to 2048
[  289.500428][ T6486]  loop0: p1 < > p4
[  289.524321][ T6486] loop0: p4 size 722688 extends beyond EOD, truncated
[  289.610020][ T3560]  loop0: p1 < > p4
[  289.633938][ T3560] loop0: p4 size 722688 extends beyond EOD, truncated
[  290.039289][ T6491] device netdevsim0 entered promiscuous mode
[  290.283885][ T6498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.662'.
[  290.364472][ T6498] netlink: 'syz.2.662': attribute type 6 has an invalid length.
[  291.106536][   T26] audit: type=1326 audit(1773808272.770:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  291.185681][   T26] audit: type=1326 audit(1773808272.770:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  291.265351][   T26] audit: type=1326 audit(1773808272.770:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  291.306086][   T26] audit: type=1326 audit(1773808272.770:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  291.337112][   T26] audit: type=1326 audit(1773808272.810:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  291.366656][   T26] audit: type=1326 audit(1773808272.810:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  291.411620][   T26] audit: type=1326 audit(1773808272.810:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  291.435466][ T6501] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  291.481004][   T26] audit: type=1326 audit(1773808272.810:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  291.546657][   T26] audit: type=1326 audit(1773808272.810:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  291.638085][   T26] audit: type=1326 audit(1773808272.810:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  291.795563][ T6501] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.829221][ T6501] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.850349][ T6501] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  291.882089][ T6501] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  291.905491][ T6501] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.937899][ T6501] usb 5-1: config 0 descriptor??
[  292.468472][ T6501] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  293.220108][ T6501] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  293.416269][ T6516] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  293.444275][ T6501] usb 5-1: USB disconnect, device number 4
[  293.616301][ T6520] fido_id[6520]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  296.795411][ T6561] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  298.005478][ T6501] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  298.485458][ T6501] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.521198][ T6501] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.563359][ T6501] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  298.605056][ T6501] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  298.630643][ T6501] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.672662][ T6501] usb 5-1: config 0 descriptor??
[  298.853255][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'.
[  298.863244][ T6576] netlink: 'syz.3.685': attribute type 1 has an invalid length.
[  298.899184][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.685'.
[  299.209643][ T6501] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  299.231183][ T6501] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  300.529877][ T4225] usb 5-1: USB disconnect, device number 5
[  302.425425][ T6620] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  303.739568][ T6626] netlink: 'syz.1.697': attribute type 1 has an invalid length.
[  303.916380][ T6626] 8021q: adding VLAN 0 to HW filter on device bond1
[  303.974479][ T6633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.697'.
[  304.045080][ T6633] device bond1 entered promiscuous mode
[  305.415380][ T4225] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  306.445455][ T6661] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  307.459644][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.483445][ T6664] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  307.496865][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.125451][ T6667] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  308.655324][ T4225] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  308.669052][ T4225] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  308.678694][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.890374][ T4225] usb 1-1: config 0 descriptor??
[  309.055491][ T4225] usb 1-1: can't set config #0, error -71
[  309.088478][ T4225] usb 1-1: USB disconnect, device number 7
[  309.840428][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  309.840446][   T26] audit: type=1326 audit(1773808291.500:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  309.929753][   T26] audit: type=1326 audit(1773808291.500:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  309.961572][   T26] audit: type=1326 audit(1773808291.540:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  310.071448][   T26] audit: type=1326 audit(1773808291.540:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  310.109042][   T26] audit: type=1326 audit(1773808291.540:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  310.229216][   T26] audit: type=1326 audit(1773808291.540:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  310.253447][    C1] vkms_vblank_simulate: vblank timer overrun
[  310.350576][   T26] audit: type=1326 audit(1773808291.540:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  310.382936][   T26] audit: type=1326 audit(1773808291.540:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  310.460551][ T6693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.715'.
[  310.527600][   T26] audit: type=1326 audit(1773808291.760:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  310.552670][   T26] audit: type=1326 audit(1773808291.760:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  310.588972][ T6693] netlink: 'syz.0.715': attribute type 6 has an invalid length.
[  311.219714][ T6696] tipc: Started in network mode
[  311.247260][ T6696] tipc: Node identity 42ab360e6ed6, cluster identity 4711
[  311.273498][ T6696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.300692][ T6699] device syzkaller0 entered promiscuous mode
[  311.331737][ T6701] loop0: detected capacity change from 0 to 2048
[  311.365047][ T6696] tipc: Resetting bearer <eth:syzkaller0>
[  311.405979][ T6695] tipc: Resetting bearer <eth:syzkaller0>
[  311.443857][ T6695] tipc: Disabling bearer <eth:syzkaller0>
[  311.484487][ T6703] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  311.510740][ T6704] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  311.742702][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  311.806290][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  311.828952][ T6707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  312.030771][ T6717] loop5: detected capacity change from 0 to 7
[  312.328615][ T6717] Dev loop5: unable to read RDB block 7
[  312.365590][ T6717]  loop5: unable to read partition table
[  312.380433][ T6717] loop5: partition table beyond EOD, truncated
[  312.425104][ T6717] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  312.967811][ T6730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.729'.
[  313.058140][ T6730] netlink: 'syz.3.729': attribute type 6 has an invalid length.
[  314.074475][ T6748] xt_hashlimit: size too large, truncated to 1048576
[  314.352709][ T6755] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns
[  314.392838][ T6755] pit: kvm: requested 135771 ns i8254 timer period limited to 200000 ns
[  314.423098][ T6755] pit: kvm: requested 75428 ns i8254 timer period limited to 200000 ns
[  314.454109][ T6755] pit: kvm: requested 82133 ns i8254 timer period limited to 200000 ns
[  314.472202][ T6755] pit: kvm: requested 182704 ns i8254 timer period limited to 200000 ns
[  314.492484][ T6755] pit: kvm: requested 82133 ns i8254 timer period limited to 200000 ns
[  314.513917][ T6755] pit: kvm: requested 23466 ns i8254 timer period limited to 200000 ns
[  314.537900][ T6755] pit: kvm: requested 82133 ns i8254 timer period limited to 200000 ns
[  314.557961][ T6755] pit: kvm: requested 129066 ns i8254 timer period limited to 200000 ns
[  314.580297][ T6755] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns
[  314.882928][ T6764] kvm: pic: single mode not supported
[  314.883175][ T6764] kvm: pic: level sensitive irq not supported
�3��� )�T&��*ӁD(ç�[  314.897823][ T6764] kvm: pic: single mode not supported
[  317.457717][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.495145][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.995438][ T6816] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  318.345382][ T4280] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  318.760655][ T4280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.804237][ T4280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.861841][ T4280] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  318.956166][ T4280] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  318.991830][ T4280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.043104][ T4280] usb 4-1: config 0 descriptor??
[  319.618260][ T4280] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving
[  319.692181][ T4280] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  319.735450][ T6844] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  319.901856][ T4280] usb 4-1: USB disconnect, device number 11
[  320.075129][ T6855] fido_id[6855]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  321.905458][ T6883] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  322.493150][ T6890] netlink: 40 bytes leftover after parsing attributes in process `syz.3.783'.
[  322.561593][ T6890] netlink: 'syz.3.783': attribute type 6 has an invalid length.
[  322.836710][ T4224] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  323.264675][ T6897] block device autoloading is deprecated and will be removed.
[  323.305584][   T26] kauditd_printk_skb: 95 callbacks suppressed
[  323.305600][   T26] audit: type=1326 audit(1773808304.970:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  323.385324][ T4224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.411178][   T26] audit: type=1326 audit(1773808304.970:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  323.425411][ T4224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.475137][ T4224] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  323.504996][   T26] audit: type=1326 audit(1773808305.020:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  323.515402][ T4224] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  323.527993][    C1] vkms_vblank_simulate: vblank timer overrun
[  323.588222][   T26] audit: type=1326 audit(1773808305.020:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  323.612365][    C1] vkms_vblank_simulate: vblank timer overrun
[  323.633482][ T4224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.637716][ T6904] trusted_key: encrypted_key: insufficient parameters specified
[  323.673270][ T4224] usb 2-1: config 0 descriptor??
[  323.692968][   T26] audit: type=1326 audit(1773808305.020:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  323.785813][   T26] audit: type=1326 audit(1773808305.200:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  323.808661][    C1] vkms_vblank_simulate: vblank timer overrun
[  323.828783][   T26] audit: type=1326 audit(1773808305.200:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  324.115007][   T26] audit: type=1326 audit(1773808305.210:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  324.140865][    C1] vkms_vblank_simulate: vblank timer overrun
[  324.245100][ T4224] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  324.593323][   T26] audit: type=1326 audit(1773808305.210:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  324.718057][ T4224] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  324.742357][ T4224] usb 2-1: USB disconnect, device number 7
[  324.773002][   T26] audit: type=1326 audit(1773808305.210:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91093e5799 code=0x7ffc0000
[  324.916736][ T6924] fido_id[6924]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  325.835388][ T6932] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  326.905461][ T6941] netlink: 40 bytes leftover after parsing attributes in process `syz.2.800'.
[  326.962108][ T6941] netlink: 'syz.2.800': attribute type 6 has an invalid length.
[  328.232890][    T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  328.763007][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  328.763022][   T26] audit: type=1326 audit(1773808310.420:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  328.836449][   T26] audit: type=1326 audit(1773808310.420:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  328.915786][   T26] audit: type=1326 audit(1773808310.420:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  329.021655][   T26] audit: type=1326 audit(1773808310.420:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  329.051940][   T26] audit: type=1326 audit(1773808310.420:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  329.083965][   T26] audit: type=1326 audit(1773808310.460:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  329.122505][   T26] audit: type=1326 audit(1773808310.460:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  329.201103][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.205466][   T26] audit: type=1326 audit(1773808310.460:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  329.224893][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.282711][    T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  329.312748][    T7] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  329.337516][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.376587][    T7] usb 5-1: config 0 descriptor??
[  329.402514][   T26] audit: type=1326 audit(1773808310.460:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  329.471158][   T26] audit: type=1326 audit(1773808310.460:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x7ffc0000
[  329.495490][    C1] vkms_vblank_simulate: vblank timer overrun
[  329.938095][    T7] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving
[  330.255405][ T6975] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  331.102387][    T7] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  331.173489][ T6982] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  331.228710][    T7] usb 5-1: USB disconnect, device number 6
[  331.261182][ T6982] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  331.420184][ T6983] fido_id[6983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  333.136465][ T6994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.819'.
[  333.297119][ T6994] netlink: 'syz.2.819': attribute type 6 has an invalid length.
[  333.666562][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'.
[  333.765742][   T26] kauditd_printk_skb: 31 callbacks suppressed
[  333.765760][   T26] audit: type=1326 audit(1773808315.430:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56dc655fce code=0x7ffc0000
[  333.795248][    C1] vkms_vblank_simulate: vblank timer overrun
[  333.864465][   T26] audit: type=1326 audit(1773808315.470:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56dc655fce code=0x7ffc0000
[  333.892298][   T26] audit: type=1326 audit(1773808315.480:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56dc655fce code=0x7ffc0000
[  334.106233][   T26] audit: type=1326 audit(1773808315.480:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56dc655fce code=0x7ffc0000
[  334.309250][   T26] audit: type=1326 audit(1773808315.480:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56dc655fce code=0x7ffc0000
[  334.404198][   T26] audit: type=1326 audit(1773808315.480:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56dc655fce code=0x7ffc0000
[  334.494652][ T7006] loop4: detected capacity change from 0 to 4096
[  334.527678][   T26] audit: type=1326 audit(1773808315.480:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56dc655fce code=0x7ffc0000
[  334.672543][   T26] audit: type=1326 audit(1773808315.490:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56dc655fce code=0x7ffc0000
[  334.695924][    C1] vkms_vblank_simulate: vblank timer overrun
[  334.776279][   T26] audit: type=1326 audit(1773808315.490:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56dc655fce code=0x7ffc0000
[  334.918720][   T26] audit: type=1326 audit(1773808315.490:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f56dc655fce code=0x7ffc0000
[  334.942700][    C1] vkms_vblank_simulate: vblank timer overrun
[  335.430883][ T4193] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  335.459903][ T4193] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  336.225410][ T7015] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  338.179391][ T7028] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  338.188046][ T7026] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  338.351421][ T7035] loop3: detected capacity change from 0 to 1024
[  338.488570][ T7036] loop1: detected capacity change from 0 to 4096
[  338.505823][ T7035] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  338.525343][ T4258] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  338.574496][ T7035] EXT4-fs (loop3): shut down requested (2)
[  338.628035][ T7035] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only
[  339.985935][ T4258] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.015727][ T4258] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.063111][ T4258] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  340.104065][ T4258] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  340.124712][ T4258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.304098][ T4258] usb 5-1: config 0 descriptor??
[  340.328827][ T7060] loop2: detected capacity change from 0 to 512
[  340.784453][ T7060] EXT4-fs (loop2): Ignoring removed nobh option
[  340.885640][ T7060] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  340.899629][ T7060] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  340.995111][ T7060] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  341.109964][ T7060] EXT4-fs (loop2): 1 truncate cleaned up
[  341.135290][ T7060] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000981,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,,errors=continue. Quota mode: none.
[  341.239630][ T4413] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.278710][ T4258] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving
[  341.308195][ T4258] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  341.430188][ T4413] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.506557][ T4258] usb 5-1: USB disconnect, device number 7
[  341.573217][ T7067] fido_id[7067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  341.600041][ T4413] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.744430][ T4413] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.535590][ T7074] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  343.488023][ T7066] loop1: detected capacity change from 0 to 32768
[  343.616403][ T7083] loop2: detected capacity change from 0 to 512
[  344.000080][ T7083] EXT4-fs (loop2): 1 truncate cleaned up
[  344.006272][ T7083] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  344.034624][   T26] kauditd_printk_skb: 21 callbacks suppressed
[  344.034643][   T26] audit: type=1800 audit(1773808325.690:348): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.845" name="file1" dev="loop2" ino=15 res=0 errno=0
[  344.445638][   T26] audit: type=1800 audit(1773808325.780:349): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.845" name="file1" dev="loop2" ino=15 res=0 errno=0
[  344.475909][ T7086] netlink: 40 bytes leftover after parsing attributes in process `syz.4.844'.
[  344.482455][   T26] audit: type=1326 audit(1773808325.840:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.2.845" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56dc695799 code=0x0
[  345.480499][ T7095] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  345.628284][ T7097] JFS: discard option not supported on device
[  345.643563][ T7097] Mount JFS Failure: -22
[  345.648014][ T7097] jfs_mount failed w/return code = -22
[  347.601312][ T6501] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  347.668748][ T7079] chnl_net:caif_netlink_parms(): no params data found
[  347.949861][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.977493][ T4226] Bluetooth: hci1: command 0x0409 tx timeout
[  347.990607][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.020506][ T6501] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.032433][ T6501] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.043554][ T6501] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  348.058597][ T6501] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  348.061871][ T7079] device bridge_slave_0 entered promiscuous mode
[  348.069365][ T6501] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.094888][ T6501] usb 5-1: config 0 descriptor??
[  348.116612][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.155550][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.196780][ T7079] device bridge_slave_1 entered promiscuous mode
[  348.290281][ T7079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.343117][ T7079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.657086][ T7137] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  349.588578][ T7079] team0: Port device team_slave_0 added
[  349.631938][ T7079] team0: Port device team_slave_1 added
[  349.766326][ T6501] usbhid 5-1:0.0: can't add hid device: -71
[  349.773767][ T6501] usbhid: probe of 5-1:0.0 failed with error -71
[  349.814379][ T6501] usb 5-1: USB disconnect, device number 8
[  350.058018][ T4280] Bluetooth: hci1: command 0x041b tx timeout
[  350.375781][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_0
[  350.405379][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  350.432164][    C1] vkms_vblank_simulate: vblank timer overrun
[  350.503263][ T7079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  350.586555][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_1
[  350.677173][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  350.704572][    C1] vkms_vblank_simulate: vblank timer overrun
[  350.843860][ T7079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  350.930371][ T7161] loop1: detected capacity change from 0 to 8
[  351.031992][ T7161] SQUASHFS error: xz decompression failed, data probably corrupt
[  351.040666][ T7161] SQUASHFS error: Failed to read block 0x108: -5
[  351.047599][ T7161] SQUASHFS error: Unable to read metadata cache entry [106]
[  351.055340][ T7161] SQUASHFS error: Unable to read inode 0x11f
[  352.039571][ T7079] device hsr_slave_0 entered promiscuous mode
[  352.071789][ T7079] device hsr_slave_1 entered promiscuous mode
[  352.105839][ T7079] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  352.144560][ T7079] Cannot create hsr debugfs directory
[  352.361528][ T7181] netlink: 72 bytes leftover after parsing attributes in process `syz.2.863'.
[  352.414046][ T7184] loop1: detected capacity change from 0 to 2048
[  352.425446][    T7] Bluetooth: hci1: command 0x040f tx timeout
[  352.628532][ T7181] device syzkaller0 entered promiscuous mode
[  352.662566][ T7184] NILFS (loop1): invalid segment: Magic number mismatch
[  352.725271][    T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  352.737628][ T7184] NILFS (loop1): trying rollback from an earlier position
[  352.863134][ T7184] NILFS (loop1): recovery complete
[  352.926953][ T7196] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  353.145715][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.179862][ T7079] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  353.206850][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  353.279038][    T7] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  353.332720][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.398434][    T7] usb 3-1: config 0 descriptor??
[  353.451014][ T7079] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  353.513125][ T7079] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  353.515812][ T1108] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  353.890985][ T7079] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  355.028792][    T7] hid-steam 0003:28DE:1142.0015: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[  355.048396][    T7] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[  355.074251][ T4226] Bluetooth: hci1: command 0x0419 tx timeout
[  355.125385][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  355.150813][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  355.162175][ T1108] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  355.177057][ T1108] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  355.625312][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.819018][ T1108] usb 1-1: config 0 descriptor??
[  355.835594][ T1108] usb 1-1: can't set config #0, error -71
[  355.872988][ T1108] usb 1-1: USB disconnect, device number 8
[  356.256526][ T7225] loop0: detected capacity change from 0 to 4096
[  356.389961][ T4413] device hsr_slave_0 left promiscuous mode
[  356.414584][ T7230] loop2: detected capacity change from 0 to 512
[  356.441037][ T4413] device hsr_slave_1 left promiscuous mode
[  356.465348][    T7] hid-steam 0003:28DE:1142.0015: Steam wireless receiver connected
[  356.477144][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  356.487079][    T7] usb 3-1: USB disconnect, device number 9
[  356.512256][ T7230] EXT4-fs (loop2): Ignoring removed bh option
[  356.578821][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_0
[  356.649058][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  356.693626][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.777641][ T4413] device bridge_slave_1 left promiscuous mode
[  356.787093][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.826490][ T7232] fido_id[7232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  356.859200][ T4413] device bridge_slave_0 left promiscuous mode
[  356.882709][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.940815][ T7230] EXT4-fs (loop2): Test dummy encryption mode enabled
[  356.960174][ T4413] device veth1_macvtap left promiscuous mode
[  356.976285][ T7230] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  356.995711][ T4413] device veth0_macvtap left promiscuous mode
[  357.007948][ T7230] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  357.019523][ T4413] device veth1_vlan left promiscuous mode
[  357.029082][ T7230] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,bh,delalloc,prjquota,usrquota,min_batch_time=0x000000000000001a,usrjquota=min_batch_time=0x00000000fffffffc,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  357.061432][ T4413] device veth0_vlan left promiscuous mode
[  357.129148][    T7] hid-steam 0003:28DE:1142.0015: Steam wireless receiver disconnected
[  357.138097][ T7225] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  357.187812][ T7230] EXT4-fs (loop2): shut down requested (1)
[  357.469993][ T4413] bond1 (unregistering): (slave bridge1): Releasing active interface
[  357.507947][ T7247] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  357.547456][ T4413] bond1 (unregistering): Released all slaves
[  357.799871][ T4413] device team_slave_1 left promiscuous mode
[  357.814009][ T4413] team0 (unregistering): Port device team_slave_1 removed
[  357.846729][ T4413] device team_slave_0 left promiscuous mode
[  357.854559][ T4413] team0 (unregistering): Port device team_slave_0 removed
[  357.882981][ T4413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.912174][ T4413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  358.089170][ T4413] bond0 (unregistering): Released all slaves
[  358.226627][ T7241] tipc: Started in network mode
[  358.232124][ T7241] tipc: Node identity 12c0320a8e6, cluster identity 4711
[  358.255406][ T7241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.270013][ T7079] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.350427][ T7079] 8021q: adding VLAN 0 to HW filter on device team0
[  358.368087][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  358.382523][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  358.415125][ T7241] tipc: Disabling bearer <eth:syzkaller0>
[  358.557725][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  358.599116][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  358.642911][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.650384][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state
[  359.000166][ T7262] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  359.781967][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  359.782611][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  359.783156][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  359.783574][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.783657][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state
[  359.784191][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  359.785021][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  359.787841][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  359.790214][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  359.791591][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  360.161482][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  360.176509][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  360.247129][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  360.283341][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  360.336095][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  360.369683][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  360.420393][ T7079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  361.024305][ T7290] loop0: detected capacity change from 0 to 1024
[  361.104811][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  361.125788][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  361.184605][ T7079] 8021q: adding VLAN 0 to HW filter on device batadv0
[  361.248149][ T7290] hfsplus: b-tree write err: -5, ino 2
[  361.430179][    T9] hfsplus: b-tree write err: -5, ino 25
[  361.471972][    T9] hfsplus: b-tree write err: -5, ino 4
[  362.041957][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  362.076278][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  362.174979][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  362.196404][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  362.213226][ T7079] device veth0_vlan entered promiscuous mode
[  362.233408][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  363.131338][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  363.281451][ T7079] device veth1_vlan entered promiscuous mode
[  363.698108][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  363.736230][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  364.203391][ T7309] loop0: detected capacity change from 0 to 32768
[  364.212128][ T7079] device veth0_macvtap entered promiscuous mode
[  364.287553][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  364.322538][ T7079] device veth1_macvtap entered promiscuous mode
[  364.332003][ T7309] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.886 (7309)
[  364.463542][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.632833][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.690349][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.735412][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.755257][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.820368][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.821492][ T7309] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  364.893359][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.266200][ T7309] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  365.311513][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  365.321300][ T7309] BTRFS info (device loop0): use zstd compression, level 3
[  365.357952][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  365.373955][ T7309] BTRFS info (device loop0): using free space tree
[  365.406413][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  365.425666][ T7309] BTRFS info (device loop0): has skinny extents
[  365.448482][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.528202][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  365.662753][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.703974][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  365.736642][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.774860][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.813375][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  365.888750][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  365.940035][ T7079] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.032530][ T7079] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.060370][ T7079] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.235329][ T7079] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.327236][ T7309] BTRFS error (device loop0): open_ctree failed: -12
[  366.682683][ T4560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.721422][ T4560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.880192][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  366.941986][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.962900][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.981729][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  367.435455][ T7371] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  368.232396][ T7391] loop2: detected capacity change from 0 to 256
[  369.990039][ T7419] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  370.591885][ T7419] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  370.946024][ T7436] loop4: detected capacity change from 0 to 1024
[  371.005723][ T7334] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  371.056175][ T7436] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  371.073116][ T7435] loop2: detected capacity change from 0 to 4096
[  371.099197][   T26] audit: type=1800 audit(1773808352.760:351): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.904" name="file1" dev="loop4" ino=15 res=0 errno=0
[  371.453017][ T7435] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  371.485489][ T7334] usb 6-1: unable to get BOS descriptor or descriptor too short
[  371.535610][ T7334] usb 6-1: not running at top speed; connect to a high speed hub
[  371.645624][ T7334] usb 6-1: config 1 has an invalid interface number: 49 but max is 0
[  371.678919][ T7334] usb 6-1: config 1 has no interface number 0
[  371.874884][ T7443] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3885: comm syz.4.904: Allocating blocks 449-513 which overlap fs metadata
[  371.915578][ T7334] usb 6-1: New USB device found, idVendor=055f, idProduct=c650, bcdDevice=81.c9
[  371.965449][ T7334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.014627][ T7334] usb 6-1: Product: syz
[  372.025403][ T7449] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  372.065219][ T7334] usb 6-1: Manufacturer: syz
[  372.079017][ T7334] usb 6-1: SerialNumber: syz
[  372.330126][ T7442] chnl_net:caif_netlink_parms(): no params data found
[  372.498238][ T7334] gspca_main: sunplus-2.14.0 probing 055f:c650
[  372.535438][ T7334] gspca_sunplus: reg_r err -71
[  372.552689][ T7334] sunplus: probe of 6-1:1.49 failed with error -71
[  372.637412][ T7334] usb 6-1: USB disconnect, device number 2
[  372.794697][ T7442] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.835929][ T7442] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.870233][ T7442] device bridge_slave_0 entered promiscuous mode
[  372.903135][ T7442] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.947205][ T7442] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.005483][ T7442] device bridge_slave_1 entered promiscuous mode
[  373.131197][ T7442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  373.178348][ T7442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  373.334618][ T7442] team0: Port device team_slave_0 added
[  373.380512][ T7442] team0: Port device team_slave_1 added
[  373.385986][ T7353] Bluetooth: hci5: command 0x0409 tx timeout
[  373.457331][ T7442] batman_adv: batadv0: Adding interface: batadv_slave_0
[  373.495111][ T7442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.578759][ T7442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  373.609121][ T7442] batman_adv: batadv0: Adding interface: batadv_slave_1
[  373.625418][ T7442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.724009][ T7442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  373.888698][ T7442] device hsr_slave_0 entered promiscuous mode
[  373.897870][   T26] audit: type=1800 audit(1773808355.560:352): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.904" name="file1" dev="loop4" ino=15 res=0 errno=0
[  373.952418][ T7442] device hsr_slave_1 entered promiscuous mode
[  374.005587][ T7436] EXT4-fs (loop4): pa ffff8880747d7540: logic 48, phys. 177, len 21
[  374.014721][ T7436] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 4
[  374.031807][ T7442] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  374.065404][ T7442] Cannot create hsr debugfs directory
[  374.514271][ T4388] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.645135][ T4388] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.753717][ T4388] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.837809][ T7502] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  374.975581][ T7504] netlink: 72 bytes leftover after parsing attributes in process `syz.0.915'.
[  374.993465][ T7504] device syzkaller0 entered promiscuous mode
[  375.022920][ T4388] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.067251][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'.
[  375.817770][ T7442] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  375.848760][ T7353] Bluetooth: hci5: command 0x041b tx timeout
[  375.896308][ T7442] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  375.938077][ T4388] tipc: Left network mode
[  375.947074][ T7442] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  375.991642][ T7442] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  376.032871][   T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  376.455512][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.677594][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.883874][   T13] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  376.905764][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.508646][   T13] usb 1-1: config 0 descriptor??
[  378.912516][ T7334] Bluetooth: hci5: command 0x040f tx timeout
[  378.921986][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  378.928654][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  378.989440][ T7442] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.115535][   T13] usbhid 1-1:0.0: can't add hid device: -71
[  379.122003][   T13] usbhid: probe of 1-1:0.0 failed with error -71
[  379.142382][   T13] usb 1-1: USB disconnect, device number 9
[  379.313254][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  379.325977][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  379.370639][ T7442] 8021q: adding VLAN 0 to HW filter on device team0
[  379.534677][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  379.586261][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  379.841230][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.848628][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.049138][ T4184] Bluetooth: hci5: command 0x0419 tx timeout
[  381.165712][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  381.218762][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  381.427279][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  381.447842][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.455239][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  382.305232][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  382.372740][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  382.406425][ T7585] netlink: 72 bytes leftover after parsing attributes in process `syz.4.933'.
[  382.517077][ T7595] ptrace attach of "./syz-executor exec"[4191] was attempted by "./syz-executor exec"[7595]
[  383.096189][ T7585] device syzkaller0 entered promiscuous mode
[  383.109821][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  383.122446][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  383.133891][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  383.166367][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  383.194260][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  383.259659][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  383.278101][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  383.295801][ T4184] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  383.310312][ T7442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  383.330367][ T7442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  383.340340][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  383.351489][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  383.494521][ T4388] device hsr_slave_0 left promiscuous mode
[  383.521459][ T4388] device hsr_slave_1 left promiscuous mode
[  383.535331][   T21] Bluetooth: hci5: command 0x0407 tx timeout
[  383.559987][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  383.576346][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_0
[  383.600831][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  383.621052][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_1
[  383.643725][ T4388] device bridge_slave_1 left promiscuous mode
[  383.670060][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.676187][ T4184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  383.711881][ T4184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  383.728525][ T4388] device bridge_slave_0 left promiscuous mode
[  383.738114][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.760535][ T4184] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  383.781341][ T4184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.825700][ T4184] usb 5-1: config 0 descriptor??
[  383.936780][ T4388] device veth1_macvtap left promiscuous mode
[  383.945390][ T4388] device veth0_macvtap left promiscuous mode
[  383.954927][ T4388] device veth1_vlan left promiscuous mode
[  383.961142][ T4388] device veth0_vlan left promiscuous mode
[  384.775345][ T4184] usbhid 5-1:0.0: can't add hid device: -71
[  384.782031][ T4184] usbhid: probe of 5-1:0.0 failed with error -71
[  384.967068][ T4184] usb 5-1: USB disconnect, device number 9
[  385.064401][ T7623] loop2: detected capacity change from 0 to 2048
[  385.362142][ T4388] bond1 (unregistering): Released all slaves
[  385.454817][ T4572]  loop2: p1 < > p4
[  385.468863][ T4572] loop2: p4 size 722688 extends beyond EOD, truncated
[  385.515311][ T7623]  loop2: p1 < > p4
[  385.521294][ T7623] loop2: p4 size 722688 extends beyond EOD, truncated
[  385.806825][ T4372] udevd[4372]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  385.807088][ T4259] udevd[4259]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  387.679026][ T4572] udevd[4572]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  387.708701][ T4372] udevd[4372]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  387.903310][ T4388] team0 (unregistering): Port device team_slave_1 removed
[  387.993697][ T4388] team0 (unregistering): Port device team_slave_0 removed
[  388.012140][ T7622] loop0: detected capacity change from 0 to 40427
[  388.043930][ T4388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.155133][ T4388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  389.900163][ T4388] bond0 (unregistering): Released all slaves
[  390.899248][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  390.933325][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  390.968453][ T7442] 8021q: adding VLAN 0 to HW filter on device batadv0
[  391.277665][ T7675] loop0: detected capacity change from 0 to 2048
[  392.190359][ T7675]  loop0: p1 < > p4
[  392.204972][ T7675] loop0: p4 size 722688 extends beyond EOD, truncated
[  392.357588][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'.
[  392.867556][ T3560]  loop0: p1 < > p4
[  392.874367][ T3560] loop0: p4 size 722688 extends beyond EOD, truncated
[  394.059024][ T7692] binder: 7686:7692 ioctl 4018620d 0 returned -22
[  394.311317][ T7691] loop5: detected capacity change from 0 to 131072
[  394.393291][ T7691] F2FS-fs (loop5): Invalid log sectorsize (67108873)
[  394.402181][ T7691] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  394.418790][ T7691] F2FS-fs (loop5): invalid crc value
[  394.473765][ T7696] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  394.518399][ T7691] F2FS-fs (loop5): Found nat_bits in checkpoint
[  394.523360][ T7700] loop0: detected capacity change from 0 to 512
[  394.587004][ T7691] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  394.594764][ T7691] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  394.702713][ T7700] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  394.847403][ T4372] udevd[4372]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  394.868898][ T4373] udevd[4373]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  395.085632][ T7700] EXT4-fs (loop0): 1 truncate cleaned up
[  395.092175][ T7700] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x000000000000000d,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,data_err=ignore,dioread_lock,. Quota mode: none.
[  396.250380][ T7442] device veth0_vlan entered promiscuous mode
[  396.376837][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  396.412233][ T4259] udevd[4259]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  396.423549][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  396.454566][ T4372] udevd[4372]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  396.476169][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  396.512059][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  396.582503][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  396.625006][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  396.718489][ T7442] device veth1_vlan entered promiscuous mode
[  397.758755][ T7725] netlink: 72 bytes leftover after parsing attributes in process `syz.0.958'.
[  397.999363][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  398.028492][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  398.080694][ T7442] device veth0_macvtap entered promiscuous mode
[  398.116781][ T7442] device veth1_macvtap entered promiscuous mode
[  398.241536][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.255530][   T21] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  398.294995][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.339361][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.403424][ T7746] loop2: detected capacity change from 0 to 2048
[  398.420427][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.459692][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.518278][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.547930][ T7748] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  398.579180][ T7442] batman_adv: batadv0: Interface activated: batadv_slave_0
[  398.636474][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  398.655751][   T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  398.669504][   T26] audit: type=1800 audit(1773808380.330:353): pid=7753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.962" name="file1" dev="loop2" ino=15 res=0 errno=0
[  398.680177][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  398.705260][   T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  398.755230][   T21] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  398.786149][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  398.817238][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.855315][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  398.872071][   T21] usb 1-1: config 0 descriptor??
[  398.915081][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.977764][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.016421][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.055194][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.093701][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.135215][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.184141][ T7442] batman_adv: batadv0: Interface activated: batadv_slave_1
[  399.300313][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  399.331847][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  399.407853][ T7763] binder: 7757:7763 ioctl 4018620d 0 returned -22
[  399.456786][   T21] usbhid 1-1:0.0: can't add hid device: -71
[  399.479253][   T21] usbhid: probe of 1-1:0.0 failed with error -71
[  399.641340][   T21] usb 1-1: USB disconnect, device number 10
[  400.117473][ T7442] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.182026][ T7442] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  400.227201][ T7442] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  400.259715][ T7442] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  400.600398][   T21] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  400.728718][ T4732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.744502][ T4732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.952260][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  401.197961][ T7783] loop5: detected capacity change from 0 to 512
[  401.207878][   T21] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  401.217943][   T21] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  401.239385][   T21] usb 5-1: Product: syz
[  401.275212][   T21] usb 5-1: Manufacturer: syz
[  401.300608][   T21] usb 5-1: SerialNumber: syz
[  401.321739][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.332516][   T21] usb 5-1: config 0 descriptor??
[  401.338722][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.365530][ T7783] EXT4-fs (loop5): Ignoring removed oldalloc option
[  401.431791][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  401.588892][ T7783] EXT4-fs (loop5): 1 truncate cleaned up
[  402.171305][ T7783] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000001,. Quota mode: writeback.
[  402.561030][   T21] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[  402.675517][   T21] peak_usb 5-1:0.0 can0: sending command failure: -22
[  402.728030][   T21] peak_usb 5-1:0.0 can0: sending command failure: -22
[  402.815614][   T21] peak_usb 5-1:0.0 can0: sending command failure: -22
[  403.525562][ T7797] loop2: detected capacity change from 0 to 4096
[  403.776763][ T7797] NILFS (loop2): unrecognized mount option "keyring"
[  403.866506][ T7814] binder: 7806:7814 ioctl 4018620d 0 returned -22
[  404.622274][   T21] peak_usb: probe of 5-1:0.0 failed with error -22
[  404.666360][   T21] usb 5-1: USB disconnect, device number 10
[  404.756471][ T7797] loop2: detected capacity change from 0 to 8
[  404.835979][ T7797] squashfs: Unknown parameter '18446744073709551615'
[  406.211336][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  406.222546][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  406.230737][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  406.251827][ T7833] device netdevsim0 left promiscuous mode
[  406.499588][ T7832] loop0: detected capacity change from 0 to 40427
[  406.921182][ T7832] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value
[  410.475581][ T7868] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  411.552163][ T7876] binder: 7865:7876 ioctl c0306201 0 returned -14
[  412.835285][ T7350] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  413.875718][ T7350] usb 3-1: Using ep0 maxpacket: 32
[  413.995779][ T7350] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  414.019621][ T7350] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  414.255477][ T4222] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  414.276942][ T7899] loop0: detected capacity change from 0 to 32768
[  414.555441][ T4222] usb 7-1: Using ep0 maxpacket: 16
[  414.998742][ T7923] binder: 7919:7923 ioctl c0306201 0 returned -14
[  415.453598][ T7899] JBD2: Ignoring recovery information on journal
[  415.605477][ T7350] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.32
[  415.630494][ T7350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.686492][ T7899] JBD2: recovery failed
[  415.705730][ T4222] usb 7-1: config index 0 descriptor too short (expected 65, got 36)
[  415.714459][ T4222] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  415.726417][ T4222] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  415.730437][ T7899] (syz.0.995,7899,0):ocfs2_journal_load:1105 ERROR: Failed to load journal!
[  415.740827][ T4222] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  415.740886][ T4222] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.769559][ T7899] (syz.0.995,7899,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5
[  415.781035][ T7899] (syz.0.995,7899,1):ocfs2_check_volume:2493 ERROR: status = -5
[  415.827688][ T7350] usb 3-1: can't set config #1, error -71
[  415.854902][ T7350] usb 3-1: USB disconnect, device number 10
[  415.905710][ T7899] (syz.0.995,7899,0):ocfs2_mount_volume:1824 ERROR: status = -5
[  416.009372][ T4222] usb 7-1: config 0 descriptor??
[  416.324007][ T7936] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  416.749249][ T4222] pxrc 7-1:0.0: Could not find endpoint
[  416.766271][ T4222] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  416.870366][ T7899] (syz.0.995,7899,1):ocfs2_fill_super:1177 ERROR: status = -5
[  416.979652][   T13] usb 7-1: USB disconnect, device number 2
[  417.081611][ T7943] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  417.890513][ T7951] loop5: detected capacity change from 0 to 512
[  418.038730][ T7951] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #15: comm syz.5.1009: corrupted inode contents
[  418.202829][ T7951] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  418.307920][ T7951] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #15: comm syz.5.1009: corrupted inode contents
[  418.988532][ T7951] EXT4-fs error (device loop5): ext4_evict_inode:330: inode #15: comm syz.5.1009: mark_inode_dirty error
[  419.032805][ T7951] EXT4-fs (loop5): 1 orphan inode deleted
[  419.746169][ T7951] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  420.021358][ T7969] loop0: detected capacity change from 0 to 512
[  420.155797][ T7969] EXT4-fs (loop0): 1 truncate cleaned up
[  420.162114][ T7969] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  420.188061][   T26] audit: type=1800 audit(1773808401.850:354): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1008" name="file1" dev="loop0" ino=15 res=0 errno=0
[  420.414087][   T26] audit: type=1800 audit(1773808401.930:355): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1008" name="file1" dev="loop0" ino=15 res=0 errno=0
[  423.252884][ T7988] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  423.362068][ T7995] tmpfs: Unknown parameter 'usrquota'
[  424.281466][ T8003] JFS: discard option not supported on device
[  424.291060][ T8003] Mount JFS Failure: -22
[  424.295506][ T8003] jfs_mount failed w/return code = -22
[  425.553344][ T8017] netlink: 'syz.4.1023': attribute type 21 has an invalid length.
[  425.562107][ T8017] netlink: 'syz.4.1023': attribute type 6 has an invalid length.
[  425.570904][ T8017] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1023'.
[  428.570685][   T26] audit: type=1326 audit(1773808410.230:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  429.215497][ T8047] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  429.726394][   T26] audit: type=1326 audit(1773808410.230:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa60ff1cbec code=0x7ffc0000
[  429.752717][   T26] audit: type=1326 audit(1773808410.230:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa60ff1cc4e code=0x7ffc0000
[  429.776268][    C1] vkms_vblank_simulate: vblank timer overrun
[  430.233086][   T26] audit: type=1326 audit(1773808410.230:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa60ff6042b code=0x7ffc0000
[  430.546159][   T26] audit: type=1326 audit(1773808410.230:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  431.609730][   T26] audit: type=1326 audit(1773808410.230:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  431.655339][   T26] audit: type=1326 audit(1773808410.260:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  431.769137][ T8068] loop5: detected capacity change from 0 to 256
[  431.823497][   T26] audit: type=1326 audit(1773808410.300:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  431.919959][   T26] audit: type=1326 audit(1773808410.300:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  432.274060][   T26] audit: type=1326 audit(1773808410.300:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  433.172487][ T8085] sctp: [Deprecated]: syz.4.1038 (pid 8085) Use of int in max_burst socket option deprecated.
[  433.172487][ T8085] Use struct sctp_assoc_value instead
[  433.578811][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  433.578831][   T26] audit: type=1326 audit(1773808411.730:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  433.609850][   T26] audit: type=1326 audit(1773808411.730:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  433.795407][   T26] audit: type=1326 audit(1773808411.730:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  434.028064][   T26] audit: type=1326 audit(1773808411.780:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  434.062760][   T26] audit: type=1326 audit(1773808411.780:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  434.221256][   T26] audit: type=1326 audit(1773808411.780:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  434.245230][   T26] audit: type=1326 audit(1773808411.780:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  434.357812][   T26] audit: type=1326 audit(1773808411.790:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  434.406407][   T26] audit: type=1326 audit(1773808411.790:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  434.501099][   T26] audit: type=1326 audit(1773808411.790:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff60799 code=0x7ffc0000
[  434.944105][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888062690000: rx timeout, send abort
[  435.171507][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888062690000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  435.231129][ T8109] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  435.275519][ T1108] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  435.855650][ T1108] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  435.868673][ T1108] usb 1-1: config 0 has no interface number 0
[  435.915093][ T1108] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  436.026720][ T1108] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  436.531507][ T8126] loop4: detected capacity change from 0 to 131072
[  436.573345][ T1108] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  436.645329][ T8126] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  436.652630][ T8126] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  436.679118][ T8126] F2FS-fs (loop4): invalid crc value
[  436.741136][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.836114][ T1108] usb 1-1: config 0 descriptor??
[  436.868045][ T8096] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  436.929479][ T8126] F2FS-fs (loop4): Found nat_bits in checkpoint
[  437.129937][ T8140] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1048'.
[  437.130987][ T8126] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  437.147615][ T8126] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  437.335886][ T1108] usb 1-1: can't set config #0, error -71
[  437.373577][ T1108] usb 1-1: USB disconnect, device number 11
[  440.339188][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  440.346419][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  442.130394][ T8179] loop0: detected capacity change from 0 to 262144
[  442.864104][ T8179] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.1055 (8179)
[  442.974885][ T8179] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  442.986337][ T8179] BTRFS info (device loop0): using free space tree
[  442.993003][ T8179] BTRFS info (device loop0): has skinny extents
[  442.999391][ T8179] BTRFS info (device loop0): flagging fs with big metadata feature
[  443.105291][ T7350] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  443.356634][ T7350] usb 3-1: Using ep0 maxpacket: 8
[  443.385520][ T8179] BTRFS info (device loop0): enabling ssd optimizations
[  443.566223][ T7350] usb 3-1: unable to get BOS descriptor or descriptor too short
[  443.576962][ T8223] netlink: 'syz.4.1050': attribute type 1 has an invalid length.
[  443.650522][ T8223] netlink: 'syz.4.1050': attribute type 2 has an invalid length.
[  443.662984][ T8223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1050'.
[  443.716505][ T7350] usb 3-1: config 8 has an invalid interface number: 134 but max is 0
[  444.204587][ T7350] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  444.264972][ T7350] usb 3-1: config 8 has no interface number 0
[  444.525632][ T7350] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=fa.e6
[  444.565326][ T7350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.594512][ T7350] usb 3-1: Product: ᐁ
[  444.635631][ T7350] usb 3-1: Manufacturer: Й
[  444.640954][ T7350] usb 3-1: SerialNumber: syz
[  444.849480][ T8244] JFS: discard option not supported on device
[  444.857914][ T8244] Mount JFS Failure: -22
[  444.862841][ T8244] jfs_mount failed w/return code = -22
[  445.716840][ T8249] loop4: detected capacity change from 0 to 32768
[  445.975891][ T8249] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1066 (8249)
[  446.058284][ T8249] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  446.068779][ T8249] BTRFS info (device loop4): enabling disk space caching
[  446.076101][ T8249] BTRFS info (device loop4): force clearing of disk cache
[  446.083531][ T8249] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  446.093264][ T8249] BTRFS info (device loop4): use zstd compression, level 3
[  446.101369][ T8249] BTRFS info (device loop4): disk space caching is enabled
[  446.105604][ T4572] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 9 /dev/loop0 scanned by udevd (4572)
[  446.108987][ T8249] BTRFS info (device loop4): has skinny extents
[  446.287413][ T8266] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1061'.
[  446.305000][ T8259] loop5: detected capacity change from 0 to 4096
[  446.369286][ T8266] device syzkaller0 entered promiscuous mode
[  446.672196][ T8249] BTRFS info (device loop4): enabling ssd optimizations
[  446.696729][ T8249] BTRFS info (device loop4): clearing free space tree
[  446.706226][ T8249] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  446.717426][ T8249] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  446.756135][ T6501] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  447.185454][ T6501] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.231526][ T6501] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.547980][ T6501] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  447.579023][ T6501] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.638593][ T7079] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  447.646604][ T6501] usb 1-1: config 0 descriptor??
[  447.665775][ T7079] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  447.889462][ T4259] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop4 scanned by udevd (4259)
[  448.165611][ T6501] hid-steam 0003:28DE:1142.0017: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  448.805500][ T8309] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  449.569296][ T6501] hid-steam 0003:28DE:1142.0018: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  449.655309][ T6501] hid-steam 0003:28DE:1142.0017: Steam wireless receiver connected
[  449.886294][ T7350] kvaser_usb 3-1:8.134: Cannot get usb endpoint(s)
[  450.186327][ T8323] usb 1-1: USB disconnect, device number 12
[  450.288187][ T8323] hid-steam 0003:28DE:1142.0017: Steam wireless receiver disconnected
[  451.446596][ T8333] loop5: detected capacity change from 0 to 8
[  451.609524][ T8333] SQUASHFS error: xz decompression failed, data probably corrupt
[  451.618681][ T8333] SQUASHFS error: Failed to read block 0x108: -5
[  451.626071][ T8333] SQUASHFS error: Unable to read metadata cache entry [106]
[  451.634041][ T8333] SQUASHFS error: Unable to read inode 0x11f
[  451.757980][ T4224] usb 3-1: USB disconnect, device number 11
[  453.958995][ T8364] loop5: detected capacity change from 0 to 2048
[  455.024816][ T8364] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  455.176756][ T4224] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  455.289107][ T8364] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1077: bg 0: block 234: padding at end of block bitmap is not set
[  455.464449][ T8364] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 88 with error 28
[  455.478593][ T4224] usb 7-1: Using ep0 maxpacket: 32
[  455.583788][ T8364] EXT4-fs (loop5): This should not happen!! Data will be lost
[  455.583788][ T8364] 
[  455.615578][ T4224] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  455.666759][ T4224] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  455.785332][ T8364] EXT4-fs (loop5): Total free blocks count 0
[  455.786788][ T8393] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  455.876575][ T8364] EXT4-fs (loop5): Free/Dirty block details
[  455.882886][ T8364] EXT4-fs (loop5): free_blocks=0
[  455.935608][ T4224] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  455.975813][ T4224] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  455.984665][ T4224] usb 7-1: Product: syz
[  455.995317][ T8364] EXT4-fs (loop5): dirty_blocks=96
[  456.017617][ T8364] EXT4-fs (loop5): Block reservation details
[  456.092134][ T8364] EXT4-fs (loop5): i_reserved_data_blocks=6
[  456.099242][ T4224] usb 7-1: Manufacturer: syz
[  456.196541][ T4224] hub 7-1:4.0: USB hub found
[  456.404462][ T8406] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  456.515418][ T4224] hub 7-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  456.816312][ T8411] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1086'.
[  457.405575][ T8321] usb 7-1: USB disconnect, device number 3
[  458.630617][ T8423] loop6: detected capacity change from 0 to 1024
[  458.735285][ T7350] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  458.920529][ T4668] hfsplus: b-tree write err: -5, ino 25
[  458.979974][ T4668] hfsplus: b-tree write err: -5, ino 4
[  459.005653][ T4668] hfsplus: b-tree write err: -5, ino 2
[  459.035522][ T7350] usb 6-1: Using ep0 maxpacket: 8
[  459.205413][ T7350] usb 6-1: unable to get BOS descriptor or descriptor too short
[  459.873978][ T7350] usb 6-1: config 8 has an invalid interface number: 134 but max is 0
[  459.883286][ T7350] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  459.911050][ T7350] usb 6-1: config 8 has no interface number 0
[  460.125354][ T7350] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=fa.e6
[  460.144047][ T7350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.167425][ T8443] loop6: detected capacity change from 0 to 2048
[  460.194557][ T7350] usb 6-1: Product: ᐁ
[  460.200607][ T7350] usb 6-1: Manufacturer: Й
[  460.235232][ T7350] usb 6-1: SerialNumber: syz
[  460.296416][ T8445] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  460.434907][ T8430] loop2: detected capacity change from 0 to 32768
[  460.625396][ T8321] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  461.725259][ T8430] (syz.2.1091,8430,1):ocfs2_initialize_super:2313 ERROR: status = -12
[  461.825529][ T8430] (syz.2.1091,8430,0):ocfs2_fill_super:1177 ERROR: status = -12
[  461.916260][ T7350] kvaser_usb 6-1:8.134: Cannot get usb endpoint(s)
[  462.041613][ T7350] usb 6-1: USB disconnect, device number 3
[  462.232089][ T8463] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  465.298176][ T8321] usb 7-1: device descriptor read/all, error -71
[  465.401474][ T8470] loop5: detected capacity change from 0 to 128
[  465.474020][ T8468] mkiss: ax0: crc mode is auto.
[  465.521115][ T8467] loop2: detected capacity change from 0 to 2048
[  465.590050][ T8470] EXT4-fs (loop5): Unrecognized mount option "hash" or missing value
[  467.356589][ T8467] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,errors=remount-ro,usrjquota=,. Quota mode: none.
[  467.563048][ T8467] loop7: detected capacity change from 0 to 16384
[  468.185522][ T7350] Bluetooth: hci1: command 0x0406 tx timeout
[  468.760009][ T8486] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  468.767036][ T8492] loop0: detected capacity change from 0 to 32768
[  468.862007][ T8486] EXT4-fs (loop2): Remounting filesystem read-only
[  468.869045][ T8493] loop_set_status: loop7 () has still dirty pages (nrpages=128)
[  469.831663][ T8513] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1107'.
[  470.751537][ T8520] loop0: detected capacity change from 0 to 4096
[  471.274512][ T8522] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  472.015903][ T8260] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  472.108108][ T8520] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  472.255417][ T8260] usb 7-1: Using ep0 maxpacket: 8
[  472.304208][   T26] kauditd_printk_skb: 41 callbacks suppressed
[  472.304224][   T26] audit: type=1800 audit(1773808453.950:419): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1108" name="file0" dev="loop0" ino=13 res=0 errno=0
[  472.405258][ T8323] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  472.425911][ T8260] usb 7-1: unable to get BOS descriptor or descriptor too short
[  472.525668][ T8260] usb 7-1: config 8 has an invalid interface number: 134 but max is 0
[  472.547847][ T8260] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  472.625231][ T8260] usb 7-1: config 8 has no interface number 0
[  472.821631][ T8323] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  472.847478][ T8260] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=fa.e6
[  472.880187][ T8323] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  472.880212][ T8260] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.926263][ T8323] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  472.944023][ T8323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.949925][ T8260] usb 7-1: Product: ᐁ
[  472.989080][ T8260] usb 7-1: Manufacturer: Й
[  472.991063][ T8323] usb 3-1: config 0 descriptor??
[  473.015090][ T8260] usb 7-1: SerialNumber: syz
[  473.059498][ T8323] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  473.941373][ T8546] Cannot find del_set index 2 as target
[  473.956225][ T8260] kvaser_usb 7-1:8.134: Cannot get usb endpoint(s)
[  473.997569][ T8260] usb 7-1: USB disconnect, device number 6
[  475.587422][ T8315] usb 3-1: USB disconnect, device number 12
[  475.605331][ T8323] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  475.714215][ T8561] loop4: detected capacity change from 0 to 128
[  475.809788][ T8560] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  475.827640][ T8561] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  475.869734][ T8561] hpfs: filesystem error: improperly stopped
[  475.885653][ T8560] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  475.909723][ T8561] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  475.959590][ T8561] hpfs: You really don't want any checks? You are crazy...
[  476.006294][ T8561] hpfs: hpfs_map_sector(): read error
[  476.035401][ T8561] hpfs: code page support is disabled
[  476.046470][ T8561] hpfs: hpfs_map_4sectors(): unaligned read
[  476.061177][ T8323] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[  476.064324][ T8561] hpfs: hpfs_map_4sectors(): unaligned read
[  476.069711][ T8310] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  476.083988][ T8323] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  476.115316][ T8561] hpfs: filesystem error: unable to find root dir
[  476.311260][ T8323] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  476.331448][ T8323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.369424][ T8323] usb 6-1: Product: syz
[  476.373768][ T8323] usb 6-1: Manufacturer: syz
[  476.396386][ T8323] usb 6-1: SerialNumber: syz
[  476.936922][ T8310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.097730][ T8310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  477.112924][ T8310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  477.442760][ T8310] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  477.535371][ T8323] usb 6-1: can't set config #1, error -71
[  477.553837][ T8323] usb 6-1: USB disconnect, device number 4
[  477.617804][ T8310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.913358][ T8310] usb 1-1: config 0 descriptor??
[  478.955574][ T8595] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  479.885537][ T8323] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  480.101055][ T8310] usbhid 1-1:0.0: can't add hid device: -71
[  480.108437][ T8310] usbhid: probe of 1-1:0.0 failed with error -71
[  480.126176][ T8310] usb 1-1: USB disconnect, device number 13
[  480.162709][ T8605] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6
[  481.265586][ T8323] usb 6-1: device not accepting address 5, error -71
[  482.282675][ T8310] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  482.705223][ T8310] usb 1-1: Using ep0 maxpacket: 8
[  484.569458][ T8310] usb 1-1: unable to get BOS descriptor or descriptor too short
[  484.736458][ T8310] usb 1-1: unable to read config index 0 descriptor/start: -71
[  484.745023][ T8310] usb 1-1: can't read configurations, error -71
[  486.962559][ T8663] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  487.814191][ T8679] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  488.364105][ T8685] loop4: detected capacity change from 0 to 16
[  488.535200][ T4224] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  488.599111][ T8685] erofs: (device loop4): mounted with root inode @ nid 36.
[  489.074363][ T4224] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  489.225293][ T4224] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  489.285201][ T4224] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  489.325265][ T4224] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  489.356534][ T4224] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  489.375263][ T4224] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.448898][ T4224] usb 7-1: invalid MIDI out EP 0
[  490.161920][ T8678] loop2: detected capacity change from 0 to 32768
[  490.804450][ T4224] snd-usb-audio: probe of 7-1:27.0 failed with error -22
[  490.817604][ T4224] usb 7-1: USB disconnect, device number 7
[  490.987841][ T8702] loop0: detected capacity change from 0 to 128
[  491.037224][ T8702] FAT-fs (loop0): Unrecognized mount option "18446744073709551615���" or missing value
[  491.065867][ T4788] udevd[4788]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  491.426554][ T8717] loop2: detected capacity change from 0 to 128
[  493.362825][ T8732] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  493.785313][ T8321] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  494.825364][ T8321] usb 7-1: Using ep0 maxpacket: 32
[  494.978167][ T8770] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  495.905949][ T8773] block device autoloading is deprecated and will be removed.
[  496.172381][ T8776] tipc: Started in network mode
[  496.273098][ T8776] tipc: Node identity 9250a1157182, cluster identity 4711
[  496.285415][ T8321] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.297681][ T8321] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  496.323654][ T8776] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  496.336989][ T8781] device syzkaller0 entered promiscuous mode
[  496.460236][ T8776] tipc: Resetting bearer <eth:syzkaller0>
[  496.537436][ T8775] tipc: Resetting bearer <eth:syzkaller0>
[  496.565411][ T8321] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  497.728456][ T8321] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  497.738096][ T8321] usb 7-1: Product: syz
[  497.751310][ T8775] tipc: Disabling bearer <eth:syzkaller0>
[  498.553592][ T8321] usb 7-1: can't set config #4, error -71
[  498.576122][ T8321] usb 7-1: USB disconnect, device number 8
[  498.650247][   T13] tipc: Node number set to 3822231829
[  499.332937][ T8793] netlink: 'syz.0.1168': attribute type 32 has an invalid length.
[  499.477884][ T8800] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  501.778278][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  501.786174][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  502.460975][ T8843] loop0: detected capacity change from 0 to 1024
[  502.545426][ T8843] EXT4-fs (loop0): Ignoring removed oldalloc option
[  502.604196][ T8843] EXT4-fs (loop0): Ignoring removed bh option
[  502.644424][ T8814] loop6: detected capacity change from 0 to 32768
[  502.665287][ T8843] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  502.839699][ T8843] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  502.875624][ T8844] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  502.916501][ T8814] XFS (loop6): Mounting V5 Filesystem
[  503.076379][   T26] audit: type=1804 audit(1773808484.730:420): pid=8843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1178" name="/newroot/253/file1/bus" dev="loop0" ino=18 res=1 errno=0
[  503.622693][ T8814] XFS (loop6): log mount failed
[  503.711462][ T8870] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  503.746000][ T4195] 
[  503.748653][ T4195] ======================================================
[  503.756196][ T4195] WARNING: possible circular locking dependency detected
[  503.763526][ T4195] syzkaller #0 Not tainted
[  503.768290][ T4195] ------------------------------------------------------
[  503.776540][ T4195] syz-executor/4195 is trying to acquire lock:
[  503.783026][ T4195] ffff88807f047138 ((wq_completion)loop0){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0
[  503.793200][ T4195] 
[  503.793200][ T4195] but task is already holding lock:
[  503.801210][ T4195] ffff8880203eb468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90
[  503.810308][ T4195] 
[  503.810308][ T4195] which lock already depends on the new lock.
[  503.810308][ T4195] 
[  503.820865][ T4195] 
[  503.820865][ T4195] the existing dependency chain (in reverse order) is:
[  503.830454][ T4195] 
[  503.830454][ T4195] -> #6 (&lo->lo_mutex){+.+.}-{3:3}:
[  503.838582][ T4195]        __mutex_lock_common+0x1e3/0x2400
[  503.844400][ T4195]        mutex_lock_killable_nested+0x17/0x20
[  503.850899][ T4195]        lo_open+0x6a/0x100
[  503.855791][ T4195]        blkdev_get_whole+0x90/0x390
[  503.862346][ T4195]        blkdev_get_by_dev+0x2d0/0xa60
[  503.868225][ T4195]        blkdev_open+0x12d/0x2c0
[  503.873318][ T4195]        do_dentry_open+0x7ff/0xf80
[  503.879034][ T4195]        path_openat+0x26f5/0x2fa0
[  503.884952][ T4195]        do_filp_open+0x1e2/0x410
[  503.890432][ T4195]        do_sys_openat2+0x150/0x4b0
[  503.896232][ T4195]        __x64_sys_openat+0x135/0x160
[  503.901981][ T4195]        do_syscall_64+0x4c/0xa0
[  503.907252][ T4195]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  503.913836][ T4195] 
[  503.913836][ T4195] -> #5 (&disk->open_mutex){+.+.}-{3:3}:
[  503.921975][ T4195]        __mutex_lock_common+0x1e3/0x2400
[  503.928156][ T4195]        mutex_lock_nested+0x17/0x20
[  503.933843][ T4195]        blkdev_get_by_dev+0x157/0xa60
[  503.939430][ T4195]        swsusp_check+0xa1/0x2b0
[  503.944965][ T4195]        software_resume+0xc6/0x3b0
[  503.950602][ T4195]        resume_store+0xe4/0x130
[  503.955775][ T4195]        kernfs_fop_write_iter+0x379/0x4c0
[  503.962175][ T4195]        vfs_write+0x745/0xd60
[  503.967240][ T4195]        ksys_write+0x152/0x260
[  503.972842][ T4195]        do_syscall_64+0x4c/0xa0
[  503.977912][ T4195]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  503.984492][ T4195] 
[  503.984492][ T4195] -> #4 (system_transition_mutex/1){+.+.}-{3:3}:
[  503.993098][ T4195]        __mutex_lock_common+0x1e3/0x2400
[  503.999395][ T4195]        mutex_lock_nested+0x17/0x20
[  504.005602][ T4195]        software_resume+0x7c/0x3b0
[  504.011024][ T4195]        resume_store+0xe4/0x130
[  504.016020][ T4195]        kernfs_fop_write_iter+0x379/0x4c0
[  504.021871][ T4195]        vfs_write+0x745/0xd60
[  504.026943][ T4195]        ksys_write+0x152/0x260
[  504.032173][ T4195]        do_syscall_64+0x4c/0xa0
[  504.037718][ T4195]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  504.044552][ T4195] 
[  504.044552][ T4195] -> #3 (&of->mutex){+.+.}-{3:3}:
[  504.045727][ T6501] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  504.052191][ T4195]        __mutex_lock_common+0x1e3/0x2400
[  504.052224][ T4195]        mutex_lock_nested+0x17/0x20
[  504.052244][ T4195]        kernfs_seq_start+0x51/0x3c0
[  504.077180][ T4195]        seq_read_iter+0x3c4/0xd50
[  504.082732][ T4195]        vfs_read+0x759/0xd60
[  504.087992][ T4195]        ksys_read+0x152/0x260
[  504.093600][ T4195]        do_syscall_64+0x4c/0xa0
[  504.098914][ T4195]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  504.105684][ T4195] 
[  504.105684][ T4195] -> #2 (&p->lock){+.+.}-{3:3}:
[  504.113236][ T4195]        __mutex_lock_common+0x1e3/0x2400
[  504.119831][ T4195]        mutex_lock_nested+0x17/0x20
[  504.126121][ T4195]        seq_read_iter+0xad/0xd50
[  504.131856][ T4195]        do_iter_readv_writev+0x47e/0x5f0
[  504.138260][ T4195]        do_iter_read+0x20b/0x7c0
[  504.144112][ T4195]        loop_process_work+0x16dd/0x24a0
[  504.150142][ T4195]        process_one_work+0x85f/0x1010
[  504.156008][ T4195]        worker_thread+0xaa6/0x1290
[  504.162279][ T4195]        kthread+0x436/0x520
[  504.167301][ T4195]        ret_from_fork+0x1f/0x30
[  504.172998][ T4195] 
[  504.172998][ T4195] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}:
[  504.182950][ T4195]        process_one_work+0x7bb/0x1010
[  504.188851][ T4195]        worker_thread+0xaa6/0x1290
[  504.195441][ T4195]        kthread+0x436/0x520
[  504.200540][ T4195]        ret_from_fork+0x1f/0x30
[  504.206136][ T4195] 
[  504.206136][ T4195] -> #0 ((wq_completion)loop0){+.+.}-{0:0}:
[  504.215690][ T4195]        __lock_acquire+0x2c42/0x7d10
[  504.222050][ T4195]        lock_acquire+0x19e/0x400
[  504.227490][ T4195]        flush_workqueue+0x16c/0x13d0
[  504.233170][ T4195]        drain_workqueue+0xcf/0x380
[  504.239281][ T4195]        destroy_workqueue+0x7b/0xb20
[  504.245356][ T4195]        __loop_clr_fd+0x234/0xb90
[  504.250848][ T4195]        blkdev_put+0x53f/0x7d0
[  504.256131][ T4195]        deactivate_locked_super+0x93/0xf0
[  504.262595][ T4195]        cleanup_mnt+0x42d/0x4e0
[  504.268187][ T4195]        task_work_run+0x125/0x1a0
[  504.273891][ T4195]        exit_to_user_mode_loop+0x10f/0x130
[  504.280841][ T4195]        exit_to_user_mode_prepare+0xee/0x180
[  504.287042][ T4195]        syscall_exit_to_user_mode+0x16/0x40
[  504.293533][ T4195]        do_syscall_64+0x58/0xa0
[  504.299506][ T4195]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  504.307352][ T4195] 
[  504.307352][ T4195] other info that might help us debug this:
[  504.307352][ T4195] 
[  504.318172][ T4195] Chain exists of:
[  504.318172][ T4195]   (wq_completion)loop0 --> &disk->open_mutex --> &lo->lo_mutex
[  504.318172][ T4195] 
[  504.333672][ T4195]  Possible unsafe locking scenario:
[  504.333672][ T4195] 
[  504.341510][ T4195]        CPU0                    CPU1
[  504.347784][ T4195]        ----                    ----
[  504.353822][ T4195]   lock(&lo->lo_mutex);
[  504.358418][ T4195]                                lock(&disk->open_mutex);
[  504.365945][ T4195]                                lock(&lo->lo_mutex);
[  504.373415][ T4195]   lock((wq_completion)loop0);
[  504.378419][ T4195] 
[  504.378419][ T4195]  *** DEADLOCK ***
[  504.378419][ T4195] 
[  504.386990][ T4195] 2 locks held by syz-executor/4195:
[  504.393270][ T4195]  #0: ffff888020184518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0
[  504.403336][ T4195]  #1: ffff8880203eb468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90
[  504.414384][ T4195] 
[  504.414384][ T4195] stack backtrace:
[  504.422971][ T4195] CPU: 0 PID: 4195 Comm: syz-executor Not tainted syzkaller #0
[  504.431858][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  504.442371][ T4195] Call Trace:
[  504.445554][ T6501] usb 3-1: Using ep0 maxpacket: 32
[  504.445773][ T4195]  <TASK>
[  504.445784][ T4195]  dump_stack_lvl+0x188/0x250
[  504.458725][ T4195]  ? load_image+0x400/0x400
[  504.463533][ T4195]  ? show_regs_print_info+0x20/0x20
[  504.470013][ T4195]  ? print_circular_bug+0x12b/0x1a0
[  504.475739][ T4195]  check_noncircular+0x296/0x330
[  504.480955][ T4195]  ? add_chain_block+0x940/0x940
[  504.486764][ T4195]  ? lockdep_lock+0xf1/0x1f0
[  504.491777][ T4195]  ? mark_lock+0x94/0x320
[  504.496785][ T4195]  ? _find_first_zero_bit+0xce/0xf0
[  504.502566][ T4195]  __lock_acquire+0x2c42/0x7d10
[  504.508020][ T4195]  ? verify_lock_unused+0x140/0x140
[  504.513541][ T4195]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  504.519662][ T4195]  ? verify_lock_unused+0x140/0x140
[  504.525843][ T4195]  ? verify_lock_unused+0x140/0x140
[  504.531913][ T4195]  ? memset+0x1e/0x40
[  504.537491][ T4195]  lock_acquire+0x19e/0x400
[  504.542688][ T4195]  ? flush_workqueue+0x150/0x13d0
[  504.548900][ T4195]  ? __mutex_trylock_common+0x155/0x260
[  504.555478][ T4195]  ? read_lock_is_recursive+0x10/0x10
[  504.561824][ T4195]  ? __init_swait_queue_head+0xa5/0x150
[  504.568027][ T4195]  flush_workqueue+0x16c/0x13d0
[  504.573518][ T4195]  ? flush_workqueue+0x150/0x13d0
[  504.579357][ T4195]  ? __lock_acquire+0x7d10/0x7d10
[  504.584812][ T4195]  ? lock_chain_count+0x20/0x20
[  504.590224][ T4195]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  504.596021][ T4195]  ? lockdep_hardirqs_off+0x70/0x100
[  504.601621][ T4195]  ? rcu_work_rcufn+0x120/0x120
[  504.607038][ T4195]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  504.613253][ T4195]  ? finish_wait+0xc0/0x1d0
[  504.618464][ T4195]  drain_workqueue+0xcf/0x380
[  504.623844][ T4195]  destroy_workqueue+0x7b/0xb20
[  504.629878][ T4195]  __loop_clr_fd+0x234/0xb90
[  504.634585][ T4195]  ? lo_release+0x172/0x1f0
[  504.639705][ T4195]  ? lo_open+0x100/0x100
[  504.644241][ T4195]  blkdev_put+0x53f/0x7d0
[  504.651347][ T4195]  deactivate_locked_super+0x93/0xf0
[  504.657224][ T4195]  cleanup_mnt+0x42d/0x4e0
[  504.661848][ T4195]  ? lockdep_hardirqs_on+0x94/0x140
[  504.667775][ T4195]  task_work_run+0x125/0x1a0
[  504.673048][ T4195]  exit_to_user_mode_loop+0x10f/0x130
[  504.678976][ T4195]  exit_to_user_mode_prepare+0xee/0x180
[  504.685000][ T4195]  syscall_exit_to_user_mode+0x16/0x40
[  504.690580][ T4195]  do_syscall_64+0x58/0xa0
[  504.695037][ T4195]  ? clear_bhb_loop+0x30/0x80
[  504.700011][ T4195]  ? clear_bhb_loop+0x30/0x80
[  504.706003][ T4195]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  504.712610][ T4195] RIP: 0033:0x7f6805c0c9d7
[  504.717633][ T4195] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  504.741561][ T4195] RSP: 002b:00007ffca9961698 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  504.748142][ T6501] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  504.753576][ T4195] RAX: 0000000000000000 RBX: 00007f6805ca1050 RCX: 00007f6805c0c9d7
[  504.753600][ T4195] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca9961750
[  504.753612][ T4195] RBP: 00007ffca9961750 R08: 00007ffca9962750 R09: 00000000ffffffff
[  504.753626][ T4195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca99627e0
[  504.753640][ T4195] R13: 00007f6805ca1050 R14: 000000000007ae15 R15: 00007ffca9962820
[  504.810599][ T4195]  </TASK>
[  504.987208][ T6501] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  505.009515][ T6501] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  505.019215][ T6501] usb 3-1: Product: syz
[  505.024162][ T6501] usb 3-1: Manufacturer: syz
[  505.029426][ T6501] usb 3-1: SerialNumber: syz
[  505.046021][ T6501] usb 3-1: config 0 descriptor??
[  505.080350][ T8869] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  505.125771][ T6501] hub 3-1:0.0: bad descriptor, ignoring hub
[  505.132187][ T6501] hub: probe of 3-1:0.0 failed with error -5
[  505.982679][ T8911] udc-core: couldn't find an available UDC or it's busy
[  505.990174][ T8911] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  506.200108][ T8260] usb 3-1: USB disconnect, device number 13