last executing test programs: 17m48.543936391s ago: executing program 0 (id=1656): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0x0, 0x0, 0x0, 0x1ff5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000180)=@ethtool_stats}) read$msr(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x61}, 0x18) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:'], 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r4, 0x2000004, 0x80010, 0xffffffffffffffff, 0x0) 17m47.606832519s ago: executing program 1 (id=1659): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r1, r1, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6e, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0x0, 0x401}, 0x10}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x80000400) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 17m45.525521449s ago: executing program 3 (id=1661): syz_open_dev$sndmidi(&(0x7f0000000080), 0x2000000000002, 0x1c1121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff4}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80800) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) lsetxattr$security_capability(&(0x7f0000000280)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000040)=@v2={0x2000000, [{0x6, 0x4}, {0x4, 0x1bf}]}, 0x14, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc0000000800110007000000", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17m44.253121333s ago: executing program 3 (id=1664): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x257, 0x1, &(0x7f0000000240)=[{}], 0x0) io_submit(r0, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x44800) 17m42.796395111s ago: executing program 3 (id=1666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 17m42.520279996s ago: executing program 1 (id=1667): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6], 0x34}}, 0x0) 17m42.258594171s ago: executing program 0 (id=1669): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000a20000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 17m41.482136936s ago: executing program 3 (id=1670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) pipe2(&(0x7f0000000100), 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x189, 0x100) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="002db2b8124b3a787944", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf2510000000080005000b000000300003801400020069703667726574617030000000000000060004000400000005"], 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x40400c0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a0501000000000000"], 0xc0}}, 0x0) 17m41.480882326s ago: executing program 1 (id=1671): gettid() r0 = epoll_create(0x20003fd) r1 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2}) r2 = socket$inet6(0xa, 0x80002, 0x0) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r5, 0x29, 0x17, 0x0, &(0x7f00000013c0)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3, 0x110, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) syz_io_uring_setup(0x18de, &(0x7f0000000280)={0x0, 0x4e72, 0x10000, 0x2, 0x225, 0x0, r3}, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x60002016}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x3, 0x12) 17m39.976219724s ago: executing program 0 (id=1672): syz_open_dev$sndmidi(&(0x7f0000000080), 0x2000000000002, 0x1c1121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff4}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80800) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) lsetxattr$security_capability(&(0x7f0000000280)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000040)=@v2={0x2000000, [{0x6, 0x4}, {0x4, 0x1bf}]}, 0x14, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17m39.360415836s ago: executing program 2 (id=1673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r4, 0x0, 0xd, 0xfffffffffffffffe) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 17m38.974636473s ago: executing program 3 (id=1674): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x257, 0x1, &(0x7f0000000240)=[{}], 0x0) io_submit(r0, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x44800) 17m38.515551062s ago: executing program 0 (id=1675): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6e, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0x0, 0x401}, 0x10}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x80000400) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 17m37.613009569s ago: executing program 2 (id=1676): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x257, 0x1, &(0x7f0000000240)=[{}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000001800000042a000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f2ff17000000000000001b00d88137f76d5b3d00"/35], 0x48) io_submit(r0, 0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xa}, @device_a, @device_b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44800) 17m36.899202903s ago: executing program 3 (id=1677): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0x0, 0x0, 0x0, 0x1ff5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000180)=@ethtool_stats}) read$msr(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x61}, 0x18) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:'], 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r4, 0x2000004, 0x80010, 0xffffffffffffffff, 0x0) 17m36.770731365s ago: executing program 2 (id=1678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, 0x0, 0x0) 17m35.740347534s ago: executing program 2 (id=1679): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x34}}, 0x0) 17m35.734168324s ago: executing program 1 (id=1680): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000a20000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 17m34.678181045s ago: executing program 0 (id=1681): socket$nl_generic(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_getevents(0x0, 0x257, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_submit(0x0, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x3c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xa}, @device_a, @device_b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44800) 17m34.589580976s ago: executing program 2 (id=1682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) pipe2(&(0x7f0000000100), 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x189, 0x100) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="002db2b8124b3a787944", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf2510000000080005000b000000300003801400020069703667726574617030000000000000060004000400000005"], 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x40400c0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a0501000000000000"], 0xc0}}, 0x0) 17m33.552344926s ago: executing program 1 (id=1683): syz_open_dev$sndmidi(&(0x7f0000000080), 0x2000000000002, 0x1c1121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff4}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80800) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) lsetxattr$security_capability(&(0x7f0000000280)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000040)=@v2={0x2000000, [{0x6, 0x4}, {0x4, 0x1bf}]}, 0x14, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17m33.509629377s ago: executing program 0 (id=1684): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000200)={0x1, 0x0, 0x2, 0x3, 0x5f, &(0x7f00000009c0)}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000180) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0xff, 0xfffffffffffff0af, 0xffffffffffffffff, 0x0, 0x10000, 0x103, 0x3}, 0x0, &(0x7f00000002c0)={0x3fe, 0xcd7f, 0x3, 0x7, 0x9, 0x45ff, 0xd68d, 0x40000000000}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80000800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000840)='comm\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x7, 0x0, &(0x7f0000001b40)=0x0) timer_settime(r6, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 17m32.592527444s ago: executing program 2 (id=1685): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x257, 0x1, &(0x7f0000000240)=[{}], 0x0) io_submit(r0, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x44800) 17m32.376305218s ago: executing program 1 (id=1686): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x257, 0x1, &(0x7f0000000240)=[{}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000001800000042a000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f2ff17000000000000001b00d88137f76d5b3d00"/35], 0x48) io_submit(r0, 0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xa}, @device_a, @device_b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44800) 17m12.946242926s ago: executing program 32 (id=1684): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000200)={0x1, 0x0, 0x2, 0x3, 0x5f, &(0x7f00000009c0)}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000180) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0xff, 0xfffffffffffff0af, 0xffffffffffffffff, 0x0, 0x10000, 0x103, 0x3}, 0x0, &(0x7f00000002c0)={0x3fe, 0xcd7f, 0x3, 0x7, 0x9, 0x45ff, 0xd68d, 0x40000000000}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80000800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000840)='comm\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x7, 0x0, &(0x7f0000001b40)=0x0) timer_settime(r6, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 17m12.812895379s ago: executing program 33 (id=1686): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x257, 0x1, &(0x7f0000000240)=[{}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000001800000042a000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f2ff17000000000000001b00d88137f76d5b3d00"/35], 0x48) io_submit(r0, 0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xa}, @device_a, @device_b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44800) 17m12.684736511s ago: executing program 34 (id=1685): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x257, 0x1, &(0x7f0000000240)=[{}], 0x0) io_submit(r0, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x44800) 17m12.547566213s ago: executing program 35 (id=1677): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0x0, 0x0, 0x0, 0x1ff5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000180)=@ethtool_stats}) read$msr(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x61}, 0x18) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:'], 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r4, 0x2000004, 0x80010, 0xffffffffffffffff, 0x0) 1m16.153251426s ago: executing program 7 (id=3806): socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x1, 0x2}, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000100)={0x1f, @none}, 0x8) 1m14.644632985s ago: executing program 7 (id=3810): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x201, {0x7, 0x29, 0x20001, 0x850010, 0xdcf, 0x7, 0xb, 0x800, 0x0, 0x0, 0x10, 0x2000009b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x43, &(0x7f0000000040), 0x3b) 1m14.492054158s ago: executing program 7 (id=3813): socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') syz_mount_image$exfat(0x0, &(0x7f0000000040)='./bus\x00', 0x3a21820, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='./file0\x00') 1m14.222682003s ago: executing program 7 (id=3814): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x88) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r3, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000780)='./bus\x00', 0x8001, &(0x7f0000001a80)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="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", @ANYRESHEX=r1, @ANYRESHEX, @ANYRES8=r2, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="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", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES8, @ANYRESOCT], 0x0, 0x1c4, &(0x7f0000000440)="$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") write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './bus'}, 0x9) 1m13.728019812s ago: executing program 7 (id=3818): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x1, 0x2}, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000100)={0x1f, @none}, 0x8) 1m10.331064387s ago: executing program 7 (id=3834): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x27, 0x3, 0xfffffffe) prlimit64(0x0, 0xf, &(0x7f0000000200)={0x8, 0x8a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x8, 0x5, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, 0x0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x60044884) 1m9.672864009s ago: executing program 36 (id=3834): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x27, 0x3, 0xfffffffe) prlimit64(0x0, 0xf, &(0x7f0000000200)={0x8, 0x8a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x8, 0x5, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r1, 0x0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x60044884) 8.347499571s ago: executing program 6 (id=4036): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000300)={[{@noauto_da_alloc}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {}, {@nodiscard}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x479, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x81) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x71e5b316, 0x3b, 0x3, 0xffffffff, 0xfffffffd}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x82180, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0xc402) 7.494729597s ago: executing program 6 (id=4039): syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(r2, &(0x7f00000000c0)={'a', ' *:* ', 'r\x00'}, 0x8) 6.920210457s ago: executing program 6 (id=4041): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000010000040000000000000000030000000000000000000000000000020000000000000000000000040000"], 0x0, 0x4a}, 0x28) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00", @ANYRES16=r5, @ANYBLOB="3b96006f36c290dca282c67409a562930479f7855116308fd05e6621ccae6aea71187f83bb", @ANYRES8=r8, @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x20000051}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r9 = shmat(r0, &(0x7f0000ff6000/0x4000)=nil, 0x7000) mremap(&(0x7f0000448000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000444000/0x1000)=nil) shmdt(r9) 6.347427819s ago: executing program 8 (id=4042): mkdir(0x0, 0x108) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x6, 0xfffffff0, 0x9}) 5.860309428s ago: executing program 8 (id=4044): syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 5.682810521s ago: executing program 5 (id=4046): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000040, &(0x7f00000022c0)=ANY=[], 0x1, 0x6dc, &(0x7f0000001180)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002100)="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", 0x2000, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x5, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x13c) r3 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0) getdents64(r2, 0x0, 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x8, 0xc1200) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000440)={0x2, "90f59b8ba8bcfd601d107fddec3c379836593a6a076c36a1606f88b60e163cbe0cba391eebc75aa307555353e4da69ff6eb7a11dec275ec964a1a6397bee079de613245fe88c0bd3c961376649a7838a369f72401f57e30d952e9b8dcc4433f67ef15912aef88b7bafb8af7a8d8f795c445bfdb04aad6b58f4056903aa98402c459a1f892eef931794530caa2c79261562228464d7785fad6c641c2196f157a54dd1d7aad6132915d9a8c54e988f99a432a2d166a87582672bbb5901e153ed0a607d91b1731c3fcf18f5a0492f3dc8268319e4f5308d1842fa43f7de8f4f904c7bd09b910facca711423bc82abf89dff7179358590cfe152b884e1c8355c78a0"}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 5.594450753s ago: executing program 8 (id=4047): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff8000edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x1a0, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x4000, 0x3ff, 0x0, r4, 0x4, 0xfffffffc}}, {0x1, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}, {{0x5, 0x2, 0x1ff, 0x91, 0x7fff, 0xe9e, {0x0, 0x7f, 0x0, 0x7fffffffffffffff, 0x6, 0x5cf6, 0x80000000, 0x3, 0x5, 0x4000, 0x3, r3, r4, 0xffffffff, 0x3}}, {0x5, 0x3ce, 0x29, 0x7f, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r5, &(0x7f0000000100)=""/134, 0x86) 5.308324688s ago: executing program 4 (id=4048): unshare(0x68040200) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.301876518s ago: executing program 5 (id=4049): syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(r2, &(0x7f00000000c0)={'a', ' *:* ', 'r\x00'}, 0x8) 4.660364251s ago: executing program 5 (id=4050): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x554, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvzCb59U9+JhURWxQDHipIt9larHpqe7GHggU9iHhoaDc1dNOEJAUTemjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7PJmuwmIWSdJPP5wOy+N2+T9747vMx7M/NIAKU1lr2kEScj4noSMdJRNhB54Vjrcyt/3LuRbUmsrr71exJJvq/9+SR/P55njkTEd5cjnqxsrnd+cen2RKNRn8vzZxemZ8/OLy6dmZqeuFW/Vb9TO/fq+Qvjr9XO1/Ys1odfffbLlatvPvvxh++/Mvl940wSF2M4L+uMY6+Mxdjad9Ip+14v7HVlBRroOPYcLJX8+A1GxNMxEpW812dGYuphoY0D+mq1ErEKlFSi/0NJtccB7bl9P+bB+9njS60J0Ob4B1rXRuJIc250bCXpmBm15ruje1B/Vsff9059kW3Rp+sQW7n/ICKe6RZ/0mzbaPMqThZ/+q/404gYz9+z/ed2Wf/YhvxBiv9iR/yXd1l/0fEDUE7Ll1on8s3nv3Rt/BNdxj/DXc5du1H0+a/3+G89/kqP8d+1Hdbx80dXPu1V1jn+y7as/vZY8L/w+EHEqa7xJ2vxJ13iz8Y913dYxxs//HalV1nR8a8+ijjddf6zfkcr2fr+5NnJqUZ9vPXatY5vvn3vy171Fx1/dvyP9Yh/q+Of7ZvdYR1fX3s03ats+/jTX4eSt5upoXzPBxMLC3O1iKHk6ub920xE2p9p/44s/hdf2Lr/d4v/aDZ32GH8s+/cXtl9/P2VxX9zl8f/kx3W8de7d5/rVVZ0/AAAAAAAAHCYpM1nOZK0upZO02q1tYb3qTiWNmbmF16anLl752brmY/RGEzbd7pHWvkky9fy52Hb+XMb8i9HxImI+LxytJmv3php3Cw6eAAAAAAAAAAAAAAAAAAAANgnjm9Y//9npbX+HyiJgaIbABRG/4fy0v+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/4fy0v8BAAAA4FA68fzyT0lE3H/9aHPLDOVlg4W2DOi3tOgGAIWpFN0AoDBu/UN5meMDyTblR3oVLG/3kwAAAAAAAAAAAADAXjl90vp/KCvr/6G8rP+H8rL+H8rLHB+w/h8AAAAAAAAAAAAA9r/h5pak1Xwt8HCkabUa8f+IGI3BZHKqUR+PiCci4sfK4P+yfK3oRgMAAAAAAAAAAAAAAAAAAMAhM7+4dHui0ajPSUhISKwliv7LBAAAAAAAAAAAAAAAAAAA5bO+6LfolgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAcdb//3//EkXHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcTP8EAAD//wugIGI=") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='fusectl\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1026864, 0x0) 4.615894881s ago: executing program 8 (id=4051): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0xb213, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x210001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000001c0)) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000280)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905"], 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 4.325358257s ago: executing program 6 (id=4052): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x1004000, &(0x7f0000000600)={[{@lastblock={'lastblock', 0x3d, 0xffffffffffffff7f}}, {@fileset={'fileset', 0x3d, 0x3}}, {@noadinicb}, {@longad}, {@fileset={'fileset', 0x3d, 0xffffffffffff350c}}, {}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@fileset={'fileset', 0x3d, 0x2}}, {@longad}, {@dmode={'dmode', 0x3d, 0xffffffff80000001}}, {@nostrict}, {@session}, {@partition={'partition', 0x3d, 0x6}}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$eJzs3U9sXNd5N+D3XHHEofx9FRM7ipPGxaQtUlmxXP2LqViFO6pptgFkWQjF7AJwJFLqwBRJkFQjG2nBdNNFFwGKoousCLRGgRQNjKYIumRaF0g2XhRZdUW0sBEUXbBFgKwCFvfOGXFIkTYjkhJpP49N/WbunHPnnHvH98qC3jkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83iuXz5xNj3sUAMCjdHX0q2fOuf8DwMfKdf//DwAAAAAAAAAAAAAAB12KIp6MFLNXV9N49byjfqVdu3tvbHhk624Dqep5pGpf/tTPnjt/4UsvDF3s5pX29Af032ufjddGr19uvDxzZ3Zucn5+cqIxNt2+OTMxueM97Lb/ZqeqA9C48/rdiVu35hvnnj+/4eV7g+/3P3Fi8NLQs6ef6bYdGx4ZGV1vUt/y4UParsLjaBRxOlI8972fplZEFLH7Y1F/tOd+s4FqEqeqSYwNj1QTmWq3phfKF691D0QR0ejp1Oweo63PRfTVHukctteMWCyHXw74VDm90dnWXOvG1GTjWmtuob3Qnpm+ljqjLefTiCIupoiliFjpf3B3tSiiL1J85/hquhERR7rH4YtVYfD24yj2cY47UI6zUYtYKg7BOTvA+qOIVyPFz945GTfLY5Z/4gsRr5b5g4i3ynwpIpUfjAsR723xOeJw6osi/rw8/5dW00R1PeheV658rfGV6VszPW2715Vf8v7wwJXiMd0fBjblo3HAr031KKJVXfFX08P/ZgcAAAAAAAAAAAAAAACAvTYQRXwmUrzyb39U1RVHVZd+/NLQ7w/+/96a8ac/ZD9l2+cjYrHYWU3u0VwYeC1dS2mntcTqTvdcPYr441z/963HPRgAAAAAAAAAAAAAAAAAAICPtSJ+EilefPdkWoreNcXb07cb11s3pjqrwnbX/u2umb62trbWSJ1s5hzPuZhzKedyzpWcUeT+OZs5xwc6O17Mz5dyLudcyRlHcv+czZzjORdzLuVczrmSM/py/5zNnOM5F3Mu5VzOuZIzDsjavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyVFFPGLSPHtb6ymSBHRjBiPTi73P+7RAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl/lTE9yNF4w+a97f1RUSq/u04Wf5yIZpHy/xkNIfKfCmal3O2quxrfusxjJ/dqaUifhwp+utv3z/h+fzXOs/ufwzirW+uP/tsXyePdF8cfL//iRPHLw2N/NrT2z1OWw3g1JX29N17jbHhkZHRns19+d0/2bNtML9vsTdTJyLm33jz9dbU1OTcwz8oPwK76H6IHqS+gz/T2oEf4SF6EH0HYhiPZ+58DJT3//cixW+/++/dG37n/l+P/9d5dv8OHz//k/X7/4ubd7TD+3/f5n75/l/e07e6/z/Zs+3F/LuRWl9EfeHObO1ERH3+jTdPt++0bk/enpy+cObMl4eGvnz+TO1oRP1We2qy59GeHC4AAAAAAAAAAAAAAACARycV8buRovXj1dSIiHtVvdbgpaFnTz9zJI5U9VYb6rZfG71+ufHyzJ3Zucn5+cmJxth0++bMxORO365elXuNDY/sy2Q+1MA+j3+g/vLM7Btz7dt/uLDl68fql2/ML8y1bm79cgxEEdHs3XKqGvDY8Eg16Kl2a7rqem3LYvpfXi0V8R+R4uaFRvp83pbr/zdX+G+o/1/cvKN9qv//RM+28j1TKuLnkeK3/uLp+Hw1zmPxwDHL7f4mUpy6+LncLo6W7bpj6HyvQKcysGz7P5HiH36xsW23HvLJ9bZnd3xgD4ny/B+PFN//s+/Gr+dtG7//Yevzf2zzjvbp/D/Vs+3Yhu8r2PXUyef/dKR46cm34zfytg/6/o/ud2+czI3vfz/HPp3/T/VsG8zv+5t7M3UAAAAAAAAAAIBDrZaK+NtI8cORvvRC3raTv/83sXlH+/T3vz7ds21ib9Yr+tAHuz6oAAAAAHBA1FIRP4kUtxfevl9DvbH+u6f+83fW6z+H06ZXqz/n+5XqewP28s//eg3m9x3f/bQBAAAAAAAAAAAAAAAAAADgQEmpiBfyeurjVT3/xLbrqS9Hilf+67ncLp0o23XXgR+sfq1fnZk+fXlqauZma6F1Y2qyMTrbujlZ9n0qUqz+9edy36JaX7273nxnjff1tdjnIsXI33XbdtZi765N/tR627Nl209Eiv/8+41tu+tYf2q97bmy7V9Fiq//09ZtT6y3PV+2/W6k+NHXG922x8q23e9H/fR62+dvzhT7cFYAAAAAAAAAAAAAAAAAAAD4uKmlIv40Uvz3naX7tfx5/f9az9PKW9/sWe9/k3vVOv+D1fr/2z1+mPX/q+8VWNzuXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KMpRRFvRorZq6tpub983lG/0p6+e29seGTrbgOp6nmkal/+1M+eO3/hSy8MXezmB/ffa5+J10avX268PHNndm5yfn5yojE23b45MzG54z3stv9mp6oD0Ljz+t2JW7fmG+eeP7/h5XuD7/c/cWLw0tCzp5/pth0bHhkZ7WnTV3vod39A2mb70SjiLyPFc9/7afphf0QRuz8WH/LZ2W8D1SROVZMYGx6pJjLVbk0vlC9e6x6IIqLR06nZPUaP4FzsSjNisRx+OeBT5fRGZ1tzrRtTk41rrbmF9kJ7Zvpa6oy2nE8jiriYIpYiYqX/wd3VoojXI8V3jq+mf+6PONI9Dl+8OvrVM+e2H0exj3PcgXKcjVrEUnEIztkB1h9F/GOk+Nk7J+Nf+iP6ovMTX4h4tcwfRLwVnfOdyg/GhYj3tvgccTj1RRH/W57/S6vpnf7yetC9rlz5WuMr07dmetp2ryuH/v7wKB3wa1M9ivhRdcVfTf/qv2sAAAAAAAAAAAAAAACAA6SIX40UL757MlX1wfdritvTtxvXWzemOmV93dq/bs302traWiN1splzPOdizqWcyzlXckaR++dslllfWxvPzxdzLuVczrmSM47k/jmbOcdzLuZcyrmccyVn9OX+OZs5x3Mu5lzKuZxzJWcckNo9AAAAAAAAAAAAAAAAAADgo6Wo/knx7W+sprX+zvrS49HJZeuBfuT9XwAAAP//M3/28g==") 4.13993786s ago: executing program 4 (id=4053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x81, 0x3, 0xd1, 0x0, 0x1, 0x7e, 0x5, 0x10, 0x8, 0x32, 0xb, 0xc, 0x0, 0x10003, 0xa, 0xff, 0x4, 0x2, 0x12, '\x00', 0x8}) 4.085522341s ago: executing program 5 (id=4054): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private2, @in=@rand_addr=0x64010101, 0x4e22, 0x2000, 0x2, 0xd1e2, 0xa, 0xa0, 0x0, 0xa3}, {0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x7, 0x6, 0x3}, {0x3, 0xfffffffffffffffc, 0x0, 0xffffffffffff3826}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffd, 0x33}, 0x14, @in=@multicast1, 0xfffffffd, 0x4, 0x0, 0x0, 0x3, 0x7}}, 0xe8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.759592387s ago: executing program 6 (id=4055): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x794, &(0x7f0000000800)="$eJzs3M9rHOUbAPBnptmmP/L9bgQPeqlCCy2UbpLm0p6MF/FSKBS81pBsQsgkW7KbmsRCU2+CUJuLiiB69+hVKPUP8CYFBe+CaI0H9bKym822TbPbbbvptPXzgdl539l553me3c2bWZKZAP6zXm88JBFDEXE+Ioqt7WlE7G+2DkSsb+23eefKVGNJol6/8FvSGBab9WL7WElrfTiaQ+KViLhViDj5wYNxq6tr85NZVl5q9UdqC5dGqqtrp+YWJmfLs+XFsfGzo2fGx8+Mjvet1mPvnD144/u3NjZ++KZ2/cjAqSQmmnVHq7a+BbrH1mtSiIkd2xf3IliOkh72GXgKeQAA0F3jPH9f69ysEMXY1+0szQkcAAAAPJfqg/Ve/d3zngAAAMAzJom8MwAAAAD21vb/AWxf27tX18F28uubETG8W/yB5jXEEQeiEBGHNpP7Lj9ItobBE1m/FhE3J3b5/PVyRXN3o3ebB/tzRPrtZmP+mdht/klbNzY40HzcOf8MbN874Ql1nv/S9vy3r8P8d77HGN9+8WqhY/xr1ZUPj+wWP2nHTzrEf7fH+Nc3PrrR6bn6VxHHd/39k9wXq8v9IUZm5rLdfrTa6d7658TtzvVHHHogfpI0oybd67/UY/3vb/4xv94l/omj3d//rfiD941rfCY+buWRRsSN1rrR39gR4+jCj989GDlZ344/3eH13/39f7td/5c91v/z14MrPe4KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATWlEDEWSltrtNC2VIg5HxMtxKM0q1drJmcry4nTjuYjhKKQzc1l5NCKKW/2k0R9rtu/2T+/oj0fESz8d3Ao6l5VLU5VsOu/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaDscEUORpKWISCPiz2Kalkp5ZwUAAAD03XDeCQAAAAB7rvn9fyDvLAAAAIC99Lh//0/6nAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQjt/7lxjqW/euTLV6E9fXl2er1w+NV2uzpcWlqdKU5WlS6XZSmU2K5emKgsPO14aEWNnY3llpFau1kaqq2sXFyrLi7WLcwuTs+WL5cJTqQoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBHNdRckrQUEWmznaalUsT/ImI4CsnMXFYejYj/R8TtYmGw0R/LO2kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6rrq6Nj+ZZeWl57tR73c56xHxDNT1sEYkEc9AGh0an7XelW77JOsRuaeathJ9kuNEPMqoqw95WfJuvJbTfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQL6qq2vzk1lWXqrmnQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5Sn9JIqKxHC8eG9r57P7kr2JzHRHvfX7hk5XJWhJjje2/t7fXPm1ury2dvmfg1adZAwAAALzw3niUnbe/pzfXY3uXFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OKprq7NT2ZZeWkPG3Et7yoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDH8W8AAAD//006t0A=") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x12, &(0x7f0000000000)=ANY=[], 0x10, 0x11e6, &(0x7f0000003680)="$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") syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x417, &(0x7f0000000000)=ANY=[], 0x10, 0x11e6, &(0x7f0000003680)="$eJzs3MGLG1UcB/Bf17pbt+4maq22ID68eRmaPXjRS5AUpAGlbYRWEKbuREPGJGTCQkSsnrz6J3gWj94E8aaXvfg3eNuLxx7EEZJWm7Ieiu0GyudzyQ9evrz3eMPAG+bN0VvffDrsV1k/n8XGqVOxMYlId1Kk2Ih7vozX3/zl11eu3bh5pd3tdq6mdLl9vfVGSmn31Z8++Pz7136enX3/h90ft+Kw+eHRH3u/H54/vHD01/VPBlUaVGk0nqU83RqPZ/mtskj7g2qYpfReWeRVkQajqpiutPfL8WQyT/lof2d7Mi2qKuWjeRoW8zQbp9l0nvKP88EoZVmWdraD/6P33Z26riPq+unYjLqu62diO87Gs7ETu9GIZjwXz8cLcS5ejPPxUrwcFxb/Wve4AQAAAAAAAAAAAAAAAAAA4Mni/D8AAAAAAAAAAAAAAAAAAACs37UbN6+0u93O1ZTORJRfH/QOesvfZXu7H4Moo4hL0Yg/Y3H6f2lZX36n27mUFprxVXn7bv72Qe+p1Xxr8TmBY/OtZT6t5rdi+/78XjTi3Eq+3loOsbN3bP5MbN6fz6IRv30U4yi/bdyd+73+v2il9Pa73QfyF2N/TWsCAAAAj1qW/nHs/j3L/qt9mX+I5wMP7K9Px8XT6507EdX8s2FelsX0sRWb8di7UCgeZdGMcNGu+87ESfh30dc9EgAAAAAAAAAAAB7GSbxOuO45AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzNDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgqwAAAP//aDPNQA==") timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.497001363s ago: executing program 4 (id=4056): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$eJzs3U9oVNsZAPDvTv5YY2LSUrHVFgItVrGdmESjQilmVRAtbS100T8Sk5iISSaYCagUahCLFCpddGFx1Y1ddBO6K9IiFB681Vu4eG8hCm/1njyfPHkuXOVxJ3d0jGPyYmLuY/z94DL3nEnmfHc+7p1zhnPPBPDW6o6IIxHRFBHFiOjM6gvZFpcWt/TvTvXPj6dbEgsLJx4lkUTE0f758eprJdnjluwFvpU+XInY2/xyuzMXLp4dmpgYPZeVe8qT0z0zFy7+6Mzk0Njo2OjUwMGDhw8dGDhweP2OdfP26ze//fdjd669M/fdbVuGJ9N427Pnao9jvXRHd/aetERH7RNJxKn1bixnX8s7AFbtk8LOW3nHAABsvELW92+u9P87oykWO+v37/72cWf8sS3v+AAAAIC1W1hoyh4BAACAxpUY+wMAAECDq84DONo/P17dNmruwYOfblRLvMrDwYjoWsx/9f7uxWean93T2/KG7u/9w9OI7uh48tFPvvH/dIs3dB82X03zH+YdAXlq3Z93BORpxy/yjoA8vXc17wi4NBcRt4/U6f8na+7ztS8pJ0vKxwfT/t9fZmrr9P/eHr88kXcE5OlnA3lHQJ5uPMo7Am4PRsS+et//FSrr91Vtjoi26tp+6+RQe/r5/+/7tXUvf/4XHqxjkyzxcDDixzVrO56qyX+mqykrdVS+KmxJTp+ZGN0XEVsjYne0bErLvcu00Ttw46/16r/zJM3/P5Pq93/plrZf/S4wi+NB86YX/29kqDy01uNm0cO5iB3N9fL/vP+fZLl+Xf8tXftzvfqBPZV1RXctn3/epIV/ROyqe/4/H60ly67P2lO5HPRULwp1/OuDz67Uq//+79P8n90j//lJz/+25fNfuf4/W693ZvVtXP7fzSf16p/eSvP/t0uvc/1vTX5VCbA1qzs/VC6f641oTY69XN+3+pgbVfX9qL5faf53f6/+53+1/5dk60J3RcTXX6PNuXvTd+rVXy+k+b/xO+d/ftL8j6xw/icvnP+r35l//4c/qNf2zqtp/rt+vfL5v78SzO6sRv9vZV82QXnHCQAAAAAAAMD6KFTu00kKxWf7hUKxuDjP95vRVpgozZT3ni7NTo0s3s/TFS2F6lSvzpr5oL3Z/JBquW9JuT+bO3K1c3OlXBwuTYzkffAAAADQ4Noj7v3m8n+2b3nF+D91tzPvKAEAAIC1SMf/HffaKst5fW6cDwAAAA0pHf8//tOn74bxPwAAADSs2vE/AAAA0Nh+fvx4ui1Uf/dvqjR25uz49OG+fcXJ2eHicOncdHGsVBqrrNg3ufLrTZRK0719MXu+pzw6U+6ZuXDx5GRpdqp8svK7sSdHWzbgmICVFbd+vC3vGAAAgI2zlt/1t2PHTqPu5H1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLb4IAAD//wws/WY=") bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x80) r0 = open(0x0, 0x185102, 0x0) pwritev2(r0, 0x0, 0x0, 0x8, 0xa3, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) setxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)=@sha1={0x1, "4525f685a6ffff00000000000000000000000023"}, 0x15, 0x0) 3.400289785s ago: executing program 5 (id=4057): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_usb_connect(0x5, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x59, 0x2, 0xda, 0x40, 0x3154, 0x721e, 0x9c6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x2, [{{0x9, 0x4, 0x70, 0x0, 0x1, 0x8, 0x5, 0x50, 0x0, [], [{{0x9, 0x5, 0xf, 0x0, 0x3ef, 0xa, 0x5, 0x7c}}]}}]}}]}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00m\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) close(0x3) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x1, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x44, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) r5 = open(&(0x7f0000000000)='./file1\x00', 0x185102, 0x35) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r5, 0x0) preadv2(r5, &(0x7f0000000840)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1, 0x8, 0xff, 0x0) 2.028426981s ago: executing program 4 (id=4058): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) get_robust_list(0x0, &(0x7f0000000400)=&(0x7f00000003c0), &(0x7f0000000540)=0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) sendmsg$nl_route(r8, 0x0, 0x4010) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x400, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 465.214591ms ago: executing program 8 (id=4059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x4010) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf2502001400ff00e0"], 0x24}, 0x1, 0x0, 0x0, 0x240488d4}, 0x4040) quotactl$Q_SETQUOTA(0xffffffff80000802, 0x0, 0x0, &(0x7f0000000080)={0xf, 0x6, 0x0, 0x3, 0x10000000009, 0x5, 0x8000000000000000, 0x7, 0x2}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095000000000000002f81c461b3fea834ceb0e17d802cfb227e659838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab02174911d5e51b76d2c31b8bece7b0f841f393c401d8f51383f0f28d4c00fa2149870f1779f204103dbebff2a0e292b42f01b0bb114fa6e1889a6437285a0c9f0"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x50}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 376.195703ms ago: executing program 6 (id=4060): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000010000040000000000000000030000000000000000000000000000020000000000000000000000040000"], 0x0, 0x4a}, 0x28) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00", @ANYRES16=r5, @ANYBLOB="3b96006f36c290dca282c67409a562930479f7855116308fd05e6621ccae6aea71187f83bb", @ANYRES8=r8, @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x20000051}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r9 = shmat(r0, &(0x7f0000ff6000/0x4000)=nil, 0x7000) mremap(&(0x7f0000448000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000444000/0x1000)=nil) shmdt(r9) 323.696714ms ago: executing program 4 (id=4061): r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0x2, 0x2, @broadcast}, 0x10, 0x0}}], 0x1, 0x200000c0) 145.661507ms ago: executing program 5 (id=4062): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) 92.014319ms ago: executing program 4 (id=4063): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x271) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) 0s ago: executing program 8 (id=4064): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000005000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) kernel console output (not intermixed with test programs): h error -5 [ 1599.229965][T16547] usb 6-1: USB disconnect, device number 58 [ 1599.522471][ T5911] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1599.711907][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 1599.732469][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.743584][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1599.780856][ T5911] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1599.853272][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.897010][ T5911] usb 7-1: config 0 descriptor?? [ 1600.540793][ T5911] usbhid 7-1:0.0: can't add hid device: -32 [ 1600.552846][ T5911] usbhid: probe of 7-1:0.0 failed with error -32 [ 1602.924766][ T23] usb 7-1: USB disconnect, device number 51 [ 1603.452137][ T23] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1603.469863][T19068] netlink: 'syz.5.3275': attribute type 4 has an invalid length. [ 1603.508524][T19068] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3275'. [ 1603.661910][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 1603.673037][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1603.697181][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1603.729562][ T23] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1603.954824][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.969202][ T23] usb 7-1: config 0 descriptor?? [ 1604.610302][ T23] ft260 0003:0403:6030.0027: unknown main item tag 0x0 [ 1604.631415][ T23] ft260 0003:0403:6030.0027: unknown main item tag 0x0 [ 1604.809474][ T23] ft260 0003:0403:6030.0027: chip code: 6424 8183 [ 1605.623165][ T23] ft260 0003:0403:6030.0027: failed to retrieve system status [ 1605.631100][ T23] ft260: probe of 0003:0403:6030.0027 failed with error -5 [ 1605.671762][T19084] netlink: 532 bytes leftover after parsing attributes in process `syz.5.3285'. [ 1606.932009][T11928] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1607.042250][ T5866] usb 8-1: new full-speed USB device number 65 using dummy_hcd [ 1607.162000][T11928] usb 6-1: Using ep0 maxpacket: 32 [ 1607.203738][T11928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.228928][T11928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.240016][T11928] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1607.258002][T11928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.773969][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.780309][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.793835][ T5866] usb 8-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.807009][ T5866] usb 8-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1607.819656][T11928] usb 6-1: config 0 descriptor?? [ 1607.826686][ T5866] usb 8-1: config 253 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1607.841976][ T5866] usb 8-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1607.860106][ T5866] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1607.873030][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1607.882635][ T5866] usb 8-1: SerialNumber: syz [ 1608.073361][ T5911] usb 7-1: USB disconnect, device number 52 [ 1608.186008][T19110] sctp: [Deprecated]: syz.4.3293 (pid 19110) Use of int in max_burst socket option. [ 1608.186008][T19110] Use struct sctp_assoc_value instead [ 1608.249127][T11928] usbhid 6-1:0.0: can't add hid device: -32 [ 1608.260114][T11928] usbhid: probe of 6-1:0.0 failed with error -32 [ 1609.772993][T19121] netlink: 532 bytes leftover after parsing attributes in process `syz.6.3297'. [ 1609.963290][T16547] usb 6-1: USB disconnect, device number 59 [ 1612.145712][ T5866] rndis_wlan: probe of 8-1:253.0 failed with error -22 [ 1612.167288][ T5866] rndis_host: probe of 8-1:253.0 failed with error -22 [ 1612.222094][ T968] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1612.255006][ T5866] usb 8-1: USB disconnect, device number 65 [ 1612.452157][ T968] usb 7-1: Using ep0 maxpacket: 32 [ 1612.483119][ T968] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1612.528596][ T968] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1612.540198][ T968] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1612.559907][ T968] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.577126][ T968] usb 7-1: config 0 descriptor?? [ 1613.859531][ T968] ft260 0003:0403:6030.0028: unknown main item tag 0x0 [ 1613.874680][ T968] ft260 0003:0403:6030.0028: unknown main item tag 0x0 [ 1614.002165][ T23] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1614.663985][ T968] ft260 0003:0403:6030.0028: chip code: 6424 8183 [ 1614.688648][ T968] ft260 0003:0403:6030.0028: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 1614.863931][ T23] usb 8-1: Using ep0 maxpacket: 32 [ 1614.893938][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1614.943989][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1614.985119][ T23] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1614.996645][ T968] ft260 0003:0403:6030.0028: failed to retrieve status: -32, no wakeup [ 1615.020011][ T968] ft260 0003:0403:6030.0028: failed to retrieve status: -32 [ 1615.024847][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.282153][T16547] usb 7-1: reset high-speed USB device number 53 using dummy_hcd [ 1616.168976][ T23] usb 8-1: config 0 descriptor?? [ 1616.891319][ T23] usbhid 8-1:0.0: can't add hid device: -71 [ 1616.898289][ T23] usbhid: probe of 8-1:0.0 failed with error -71 [ 1616.918117][ T23] usb 8-1: USB disconnect, device number 66 [ 1617.377467][ T968] usb 7-1: USB disconnect, device number 53 [ 1617.383762][ T5866] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1618.390435][ T5866] usb 6-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.409908][T19190] sctp: [Deprecated]: syz.6.3318 (pid 19190) Use of int in max_burst socket option. [ 1618.409908][T19190] Use struct sctp_assoc_value instead [ 1618.445083][ T5866] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1618.468022][ T5866] usb 6-1: config 253 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1618.480545][ T5866] usb 6-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1618.525759][ T5866] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1618.550946][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1618.570387][ T5866] usb 6-1: SerialNumber: syz [ 1620.872502][ T968] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1621.015372][ T5866] rndis_wlan: probe of 6-1:253.0 failed with error -22 [ 1621.043552][ T5866] rndis_host: probe of 6-1:253.0 failed with error -22 [ 1621.065273][ T968] usb 5-1: Using ep0 maxpacket: 32 [ 1621.101213][ T5866] usb 6-1: USB disconnect, device number 60 [ 1621.107532][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1621.141736][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1621.152362][ T968] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1621.161679][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.176423][ T968] usb 5-1: config 0 descriptor?? [ 1621.926784][ T968] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 1621.940262][ T968] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 1621.998890][T19219] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3326'. [ 1622.087345][T19219] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3326'. [ 1622.104373][T19219] netlink: 'syz.7.3326': attribute type 5 has an invalid length. [ 1622.122667][ T968] ft260 0003:0403:6030.0029: chip code: 6424 8183 [ 1622.210182][T19219] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3326'. [ 1622.323193][ T968] ft260 0003:0403:6030.0029: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1622.530936][ T968] ft260 0003:0403:6030.0029: failed to retrieve status: -32, no wakeup [ 1623.387718][ T968] ft260 0003:0403:6030.0029: failed to retrieve status: -32 [ 1624.470621][ T968] ft260 0003:0403:6030.0029: failed to reset I2C controller: -71 [ 1624.592849][ T968] usb 5-1: USB disconnect, device number 76 [ 1626.861847][ T5867] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 1627.707446][T19260] sctp: [Deprecated]: syz.4.3335 (pid 19260) Use of int in max_burst socket option. [ 1627.707446][T19260] Use struct sctp_assoc_value instead [ 1627.876791][ T5867] usb 7-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.954270][ T5867] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1627.995777][ T5867] usb 7-1: config 253 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1628.021342][ T5867] usb 7-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1629.352019][ T9] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1629.581911][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1629.606462][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.660845][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.692693][ T9] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1629.739533][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.797302][ T9] usb 8-1: config 0 descriptor?? [ 1630.229836][ T9] ft260 0003:0403:6030.002A: unknown main item tag 0x0 [ 1630.262132][ T9] ft260 0003:0403:6030.002A: unknown main item tag 0x0 [ 1630.285826][ T5867] usb 7-1: string descriptor 0 read error: -71 [ 1630.337101][ T5867] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1630.366808][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1631.044454][ T9] ft260 0003:0403:6030.002A: chip code: 6424 8183 [ 1631.052002][ T5867] usb 7-1: can't set config #253, error -71 [ 1631.062406][ T5867] usb 7-1: USB disconnect, device number 54 [ 1631.639980][ T9] ft260 0003:0403:6030.002A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 1631.840605][ T9] ft260 0003:0403:6030.002A: failed to retrieve status: -32, no wakeup [ 1631.854672][ T9] ft260 0003:0403:6030.002A: failed to retrieve status: -32 [ 1632.072753][ T5866] usb 8-1: reset high-speed USB device number 67 using dummy_hcd [ 1632.663319][T19286] i2c i2c-1: adapter quirk: 1st comb msg must be write (addr 0x0003, size 0, read) [ 1633.954148][ T9] usb 8-1: USB disconnect, device number 67 [ 1634.941892][ T9] usb 8-1: new full-speed USB device number 68 using dummy_hcd [ 1635.216025][ T9] usb 8-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.330704][ T9] usb 8-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1635.361973][ T9] usb 8-1: config 253 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1635.381848][ T9] usb 8-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1635.453259][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1635.462938][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1635.482213][ T9] usb 8-1: SerialNumber: syz [ 1635.963160][ T968] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1636.802161][ T968] usb 5-1: Using ep0 maxpacket: 32 [ 1636.809495][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1636.827555][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1636.847879][ T968] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1636.884072][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.911315][ T968] usb 5-1: config 0 descriptor?? [ 1637.364591][ T968] ft260 0003:0403:6030.002B: unknown main item tag 0x0 [ 1637.391184][ T968] ft260 0003:0403:6030.002B: unknown main item tag 0x0 [ 1638.352046][ T968] ft260 0003:0403:6030.002B: chip code: 6424 8183 [ 1638.417112][ T968] ft260 0003:0403:6030.002B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1638.449595][ T9] rndis_wlan: probe of 8-1:253.0 failed with error -22 [ 1638.515639][ T9] rndis_host: probe of 8-1:253.0 failed with error -22 [ 1638.550787][ T9] usb 8-1: USB disconnect, device number 68 [ 1638.625183][ T968] ft260 0003:0403:6030.002B: failed to retrieve status: -71, no wakeup [ 1638.679789][ T968] ft260 0003:0403:6030.002B: failed to retrieve status: -71 [ 1638.698203][ T968] ft260 0003:0403:6030.002B: failed to reset I2C controller: -71 [ 1640.333537][ T968] usb 5-1: USB disconnect, device number 77 [ 1640.891905][ T968] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1641.645314][ T968] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.663775][ T968] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1641.685660][ T968] usb 5-1: config 253 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1641.742020][ T968] usb 5-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1641.783876][ T968] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1641.818070][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1641.832804][ T968] usb 5-1: SerialNumber: syz [ 1642.072036][ T5866] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1642.971995][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 1642.984458][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.000984][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1643.012203][ T5866] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1643.023865][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.038355][ T5866] usb 6-1: config 0 descriptor?? [ 1643.570655][ T5866] ft260 0003:0403:6030.002C: unknown main item tag 0x0 [ 1643.594489][ T5866] ft260 0003:0403:6030.002C: unknown main item tag 0x0 [ 1643.710031][T19381] sctp: [Deprecated]: syz.7.3378 (pid 19381) Use of int in max_burst socket option. [ 1643.710031][T19381] Use struct sctp_assoc_value instead [ 1644.220183][ T5866] ft260 0003:0403:6030.002C: chip code: 6424 8183 [ 1644.420960][ T5866] ft260 0003:0403:6030.002C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1644.634276][ T5866] ft260 0003:0403:6030.002C: failed to retrieve status: -32, no wakeup [ 1645.042643][ T5866] ft260 0003:0403:6030.002C: failed to retrieve status: -32 [ 1645.242258][T11928] usb 6-1: reset high-speed USB device number 61 using dummy_hcd [ 1646.478406][ T5866] usb 6-1: USB disconnect, device number 61 [ 1647.552919][ T968] rndis_wlan: probe of 5-1:253.0 failed with error -22 [ 1647.560609][ T968] rndis_host: probe of 5-1:253.0 failed with error -22 [ 1647.640569][ T968] usb 5-1: USB disconnect, device number 78 [ 1648.656469][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3387'. [ 1648.707364][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3387'. [ 1648.743691][T19418] netlink: 'syz.7.3387': attribute type 5 has an invalid length. [ 1648.751591][T19418] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3387'. [ 1648.787270][T19422] sctp: [Deprecated]: syz.5.3389 (pid 19422) Use of int in max_burst socket option. [ 1648.787270][T19422] Use struct sctp_assoc_value instead [ 1650.361883][T11928] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1650.571912][T11928] usb 7-1: Using ep0 maxpacket: 32 [ 1650.582912][T11928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.595541][T11928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.606268][T11928] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1650.615993][T11928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.627861][T11928] usb 7-1: config 0 descriptor?? [ 1651.972976][T11928] ft260 0003:0403:6030.002D: unknown main item tag 0x0 [ 1652.009456][T11928] ft260 0003:0403:6030.002D: unknown main item tag 0x0 [ 1652.301926][ T5866] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 1654.430067][T11928] ft260 0003:0403:6030.002D: chip code: 6424 8183 [ 1654.638144][T11928] ft260 0003:0403:6030.002D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 1654.836789][T11928] ft260 0003:0403:6030.002D: failed to retrieve status: -32, no wakeup [ 1654.875235][T11928] ft260 0003:0403:6030.002D: failed to retrieve status: -32 [ 1655.082009][ T968] usb 7-1: reset high-speed USB device number 55 using dummy_hcd [ 1656.072101][T11928] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1656.822697][T19439] usb 7-1: USB disconnect, device number 55 [ 1657.062590][T11928] usb 8-1: Using ep0 maxpacket: 16 [ 1657.084856][T11928] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.095127][T11928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1657.117372][T11928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1657.140243][T11928] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1657.711913][T11928] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1657.769684][T11928] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1657.780954][T11928] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1657.790272][T11928] usb 8-1: Manufacturer: syz [ 1657.816742][T11928] usb 8-1: config 0 descriptor?? [ 1658.202513][T11928] rc_core: IR keymap rc-hauppauge not found [ 1658.208567][T11928] Registered IR keymap rc-empty [ 1658.222320][T11928] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1658.262053][T11928] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1658.302705][T11928] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1658.322458][T11928] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input21 [ 1658.442403][T11928] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1658.480554][T11928] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1658.531899][T11928] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1658.562251][T11928] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1658.592061][T11928] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1658.651915][T11928] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1658.682271][T11928] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1658.717963][T11928] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1658.851949][T11928] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1658.902568][T11928] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1658.947847][T11928] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1658.961984][T11928] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1658.987812][T11928] usb 8-1: USB disconnect, device number 69 [ 1660.296530][T19486] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3405'. [ 1660.400381][T19486] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3405'. [ 1660.409534][T19486] netlink: 'syz.7.3405': attribute type 5 has an invalid length. [ 1660.417603][T19486] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3405'. [ 1660.562641][T11928] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1660.812888][T11928] usb 6-1: Using ep0 maxpacket: 32 [ 1660.848951][T11928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.864524][T11928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.895827][T11928] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1661.460641][T11928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.564185][T11928] usb 6-1: config 0 descriptor?? [ 1662.011594][T11928] ft260 0003:0403:6030.002E: unknown main item tag 0x0 [ 1662.033298][T11928] ft260 0003:0403:6030.002E: unknown main item tag 0x0 [ 1662.211662][T11928] ft260 0003:0403:6030.002E: chip code: 6424 8183 [ 1662.420206][T11928] ft260 0003:0403:6030.002E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1662.696218][T11928] ft260 0003:0403:6030.002E: failed to retrieve status: -32, no wakeup [ 1662.728152][T11928] ft260 0003:0403:6030.002E: failed to retrieve status: -32 [ 1662.955114][T19439] usb 6-1: USB disconnect, device number 63 [ 1664.872177][T19520] Bluetooth: hci2: command 0x0406 tx timeout [ 1665.179156][T19540] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3423'. [ 1665.198288][T19540] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3423'. [ 1665.207447][T19540] netlink: 'syz.7.3423': attribute type 5 has an invalid length. [ 1665.216635][T19540] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3423'. [ 1665.692047][ T5867] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1665.882116][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 1665.889851][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1665.904989][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1665.918624][ T5867] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1665.935030][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.080091][ T5867] usb 6-1: config 0 descriptor?? [ 1666.510357][ T5867] ft260 0003:0403:6030.002F: unknown main item tag 0x0 [ 1666.532187][ T5867] ft260 0003:0403:6030.002F: unknown main item tag 0x0 [ 1666.718151][ T5867] ft260 0003:0403:6030.002F: chip code: 6424 8183 [ 1666.918687][ T5867] ft260 0003:0403:6030.002F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1667.120907][ T5867] ft260 0003:0403:6030.002F: failed to retrieve status: -32, no wakeup [ 1667.152823][ T5867] ft260 0003:0403:6030.002F: failed to retrieve status: -32 [ 1667.194554][T19553] overlayfs: missing 'lowerdir' [ 1667.416706][ T5867] usb 6-1: USB disconnect, device number 64 [ 1669.140246][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.157329][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.081978][ T968] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1670.271926][ T968] usb 8-1: Using ep0 maxpacket: 32 [ 1670.279879][ T968] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1670.292777][ T968] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1670.303315][ T968] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1670.314027][ T968] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.327169][ T968] usb 8-1: config 0 descriptor?? [ 1670.885206][T19588] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3441'. [ 1671.124932][ T968] ft260 0003:0403:6030.0030: unknown main item tag 0x0 [ 1671.250593][ T968] ft260 0003:0403:6030.0030: unknown main item tag 0x0 [ 1671.434218][ T968] ft260 0003:0403:6030.0030: chip code: 6424 8183 [ 1671.457881][ T968] ft260 0003:0403:6030.0030: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 1672.242343][ T968] ft260 0003:0403:6030.0030: failed to retrieve status: -32, no wakeup [ 1672.272016][ T968] ft260 0003:0403:6030.0030: failed to retrieve status: -32 [ 1672.672168][ T968] usb 8-1: reset high-speed USB device number 70 using dummy_hcd [ 1672.978363][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3444'. [ 1673.189835][T19609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3444'. [ 1673.233715][T19609] netlink: 'syz.4.3444': attribute type 5 has an invalid length. [ 1673.256327][T19609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3444'. [ 1673.863867][T19622] i2c i2c-1: adapter quirk: 1st comb msg must be write (addr 0x0003, size 0, read) [ 1673.933333][T11928] usb 8-1: USB disconnect, device number 70 [ 1675.401440][T19628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1675.409166][T19628] IPv6: NLM_F_CREATE should be set when creating new route [ 1675.416461][T19628] IPv6: NLM_F_CREATE should be set when creating new route [ 1675.423684][T19628] IPv6: NLM_F_CREATE should be set when creating new route [ 1676.052103][T11928] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1676.184908][ T5867] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1676.231930][T11928] usb 6-1: Using ep0 maxpacket: 32 [ 1676.253207][T11928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1676.268113][T11928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1676.284069][T11928] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1676.293563][T11928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.318876][T11928] usb 6-1: config 0 descriptor?? [ 1676.522048][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 1676.538437][ T5867] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1676.546651][ T5867] usb 5-1: config 0 has no interface number 0 [ 1676.552980][ T5867] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1676.764476][T11928] ft260 0003:0403:6030.0031: unknown main item tag 0x0 [ 1676.780303][T11928] ft260 0003:0403:6030.0031: unknown main item tag 0x0 [ 1676.945710][ T5867] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1676.946308][T11928] ft260 0003:0403:6030.0031: chip code: 6424 8183 [ 1676.963085][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.983072][ T5867] usb 5-1: config 0 descriptor?? [ 1677.000711][ T5867] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1677.209313][T11928] ft260 0003:0403:6030.0031: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1677.244178][T19439] usb 5-1: USB disconnect, device number 79 [ 1677.375524][T11928] ft260 0003:0403:6030.0031: failed to retrieve status: -32, no wakeup [ 1677.394006][T11928] ft260 0003:0403:6030.0031: failed to retrieve status: -32 [ 1677.991324][T19657] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1678.529512][T19667] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3465'. [ 1678.785614][T19439] usb 6-1: USB disconnect, device number 65 [ 1679.114213][T19672] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3465'. [ 1679.123826][T19672] netlink: 'syz.7.3465': attribute type 5 has an invalid length. [ 1679.132845][T19672] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3465'. [ 1681.826163][T19693] netlink: 'syz.6.3473': attribute type 2 has an invalid length. [ 1681.834026][T19693] netlink: 'syz.6.3473': attribute type 11 has an invalid length. [ 1681.842166][T19693] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3473'. [ 1684.132168][ T5867] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1684.372135][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 1684.398332][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1684.423197][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1684.438387][ T5867] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1684.447838][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.463942][ T5867] usb 6-1: config 0 descriptor?? [ 1685.269196][ T5867] ft260 0003:0403:6030.0032: unknown main item tag 0x0 [ 1685.279595][ T5867] ft260 0003:0403:6030.0032: unknown main item tag 0x0 [ 1685.282891][T19732] netlink: 120 bytes leftover after parsing attributes in process `syz.7.3482'. [ 1685.586631][ T5867] ft260 0003:0403:6030.0032: chip code: 6424 8183 [ 1685.799314][ T5867] ft260 0003:0403:6030.0032: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1685.845551][T19734] netlink: 'syz.6.3479': attribute type 4 has an invalid length. [ 1686.005385][ T5867] ft260 0003:0403:6030.0032: failed to retrieve status: -32, no wakeup [ 1686.026334][ T5867] ft260 0003:0403:6030.0032: failed to retrieve status: -32 [ 1686.048284][T19734] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3479'. [ 1686.644778][ T5867] usb 6-1: reset high-speed USB device number 66 using dummy_hcd [ 1687.458107][T19750] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1688.174691][ T5911] usb 6-1: USB disconnect, device number 66 [ 1688.886656][T19766] 8021q: adding VLAN 0 to HW filter on device  [ 1689.653974][T19766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1689.803692][T19768] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3490'. [ 1691.390192][T19784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1691.397571][T19784] IPv6: NLM_F_CREATE should be set when creating new route [ 1691.404943][T19784] IPv6: NLM_F_CREATE should be set when creating new route [ 1691.412235][T19784] IPv6: NLM_F_CREATE should be set when creating new route [ 1691.457365][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3490'. [ 1691.503453][T19782] netlink: 'syz.7.3490': attribute type 5 has an invalid length. [ 1691.598403][T19782] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3490'. [ 1692.451860][T11928] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1692.475720][T19798] netlink: 'syz.6.3497': attribute type 4 has an invalid length. [ 1692.490981][T19798] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3497'. [ 1692.661966][T11928] usb 5-1: Using ep0 maxpacket: 32 [ 1692.707872][T11928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1692.742125][T11928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1692.758021][T11928] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1692.769190][T11928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.786734][T11928] usb 5-1: config 0 descriptor?? [ 1693.532331][T11928] ft260 0003:0403:6030.0033: unknown main item tag 0x0 [ 1693.707621][T11928] ft260 0003:0403:6030.0033: unknown main item tag 0x0 [ 1694.004719][T11928] ft260 0003:0403:6030.0033: chip code: 6424 8183 [ 1694.036918][T11928] ft260 0003:0403:6030.0033: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1694.273929][T11928] ft260 0003:0403:6030.0033: failed to retrieve status: -32, no wakeup [ 1694.292963][T11928] ft260 0003:0403:6030.0033: failed to retrieve status: -32 [ 1694.910017][T11928] usb 5-1: USB disconnect, device number 80 [ 1699.772456][T19838] syzkaller0: entered promiscuous mode [ 1699.778723][T19838] syzkaller0: entered allmulticast mode [ 1699.798046][T19839] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 1705.224609][T13875] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1705.456689][T13875] usb 6-1: Using ep0 maxpacket: 8 [ 1705.477452][T13875] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1705.499376][T13875] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1705.535122][T13875] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1705.558109][T13875] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1705.710340][T13875] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1705.734232][T13875] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1705.743687][T13875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.701998][T13875] usb 6-1: usb_control_msg returned -32 [ 1706.712667][T13875] usbtmc 6-1:16.0: can't read capabilities [ 1707.813846][T19899] usbtmc 6-1:16.0: stb usb_control_msg returned -32 [ 1707.826297][ T968] usb 6-1: USB disconnect, device number 67 [ 1709.245097][T19901] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1709.312811][T19901] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1709.546554][T19901] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1709.626667][T19917] Malformed UNC in devname [ 1709.626667][T19917] [ 1709.633721][T19917] CIFS: VFS: Malformed UNC in devname [ 1709.668263][T19901] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1709.822110][T19901] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1709.872362][T19901] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1710.151879][T19520] Bluetooth: hci4: command 0x0406 tx timeout [ 1710.253421][ T23] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 1710.662230][ T23] usb 8-1: Using ep0 maxpacket: 16 [ 1710.730446][ T23] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.769785][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1710.784171][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1710.795242][ T23] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1710.805813][ T23] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1710.832003][ T23] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1710.842902][ T23] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1710.853007][ T23] usb 8-1: Manufacturer: syz [ 1710.890162][ T23] usb 8-1: config 0 descriptor?? [ 1711.602061][T19520] Bluetooth: hci1: command 0x0406 tx timeout [ 1711.781887][ T23] rc_core: IR keymap rc-hauppauge not found [ 1711.792398][ T23] Registered IR keymap rc-empty [ 1711.812138][ T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1711.841890][T19520] Bluetooth: hci2: command 0x0406 tx timeout [ 1711.895395][ T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1712.007742][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1712.035549][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input24 [ 1712.079169][ T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1712.218787][ T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1712.280233][T19520] Bluetooth: hci4: command 0x0406 tx timeout [ 1712.303088][ T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1712.363625][ T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1712.401880][ T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1712.442313][ T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1712.472645][ T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1712.511872][ T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1712.547515][ T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1712.592827][ T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1712.665235][ T23] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1712.695533][ T23] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1712.839937][ T23] usb 8-1: USB disconnect, device number 71 [ 1713.671840][T19520] Bluetooth: hci1: command 0x0406 tx timeout [ 1713.784898][T19953] netlink: 532 bytes leftover after parsing attributes in process `syz.7.3545'. [ 1713.916774][T19520] Bluetooth: hci2: command 0x0406 tx timeout [ 1714.120344][T19963] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3546'. [ 1714.436744][T11928] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 1714.452498][ T23] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1714.654871][T11928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1714.672581][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 1714.675888][T11928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1714.688739][T11928] usb 8-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1714.689590][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1714.713032][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3546'. [ 1714.735049][T11928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.752096][T19968] netlink: 'syz.6.3546': attribute type 5 has an invalid length. [ 1714.760001][ T23] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1714.762417][T11928] usb 8-1: config 0 descriptor?? [ 1714.797323][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.825842][ T23] usb 6-1: config 0 descriptor?? [ 1714.868116][T19968] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3546'. [ 1715.292535][T11928] hid-led 0003:04D8:F372.0034: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.7-1/input0 [ 1715.581212][T11928] hid-led 0003:04D8:F372.0034: Greynut Luxafor initialized [ 1715.674735][ T23] steelseries 0003:1038:1410.0035: report_id 2273257344 is invalid [ 1715.691871][ T23] steelseries 0003:1038:1410.0035: item 0 4 1 8 parsing failed [ 1715.700245][ T23] steelseries 0003:1038:1410.0035: parse failed [ 1715.753409][ T23] steelseries: probe of 0003:1038:1410.0035 failed with error -22 [ 1715.932625][T19979] fuse: Bad value for 'fd' [ 1717.122201][ T23] usb 6-1: USB disconnect, device number 68 [ 1717.300184][ T5867] usb 8-1: USB disconnect, device number 72 [ 1717.328039][T13875] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1717.397380][T13875] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1717.417436][T13875] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1717.651844][T13875] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1717.712077][T13875] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1717.843884][T13875] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1717.912611][T13875] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1717.932143][T13875] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1717.950076][T13875] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1717.987547][T13875] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1718.023457][ T23] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1718.046422][ T23] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1718.094233][ T23] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1718.119561][ T23] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1718.172391][T13875] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1718.185593][ T23] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1718.212130][ T23] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1718.248047][ T23] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1718.437558][T19994] netlink: 532 bytes leftover after parsing attributes in process `syz.7.3557'. [ 1720.322638][T20030] netlink: 532 bytes leftover after parsing attributes in process `syz.7.3570'. [ 1720.523791][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3568'. [ 1720.997298][T20033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3568'. [ 1721.248478][T20033] netlink: 'syz.5.3568': attribute type 5 has an invalid length. [ 1721.265180][T20033] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3568'. [ 1721.748751][T20054] netlink: 532 bytes leftover after parsing attributes in process `syz.6.3580'. [ 1723.085020][T20068] veth0_vlan: entered allmulticast mode [ 1723.302553][T20069] veth0_vlan: left promiscuous mode [ 1723.308413][T20069] veth0_vlan: entered promiscuous mode [ 1723.601681][T20078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1723.609009][T20078] IPv6: NLM_F_CREATE should be set when creating new route [ 1723.616537][T20078] IPv6: NLM_F_CREATE should be set when creating new route [ 1723.623973][T20078] IPv6: NLM_F_CREATE should be set when creating new route [ 1724.088701][T20080] netlink: 532 bytes leftover after parsing attributes in process `syz.4.3590'. [ 1724.334555][T20083] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1725.536922][T20103] netlink: 532 bytes leftover after parsing attributes in process `syz.6.3600'. [ 1725.822038][T20115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3602'. [ 1725.922724][T20116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1725.930040][T20116] IPv6: NLM_F_CREATE should be set when creating new route [ 1725.937566][T20116] IPv6: NLM_F_CREATE should be set when creating new route [ 1725.944993][T20116] IPv6: NLM_F_CREATE should be set when creating new route [ 1726.525859][T20120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3602'. [ 1726.601111][T20120] netlink: 'syz.7.3602': attribute type 5 has an invalid length. [ 1726.615781][T20120] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3602'. [ 1727.795893][T20138] netlink: 532 bytes leftover after parsing attributes in process `syz.4.3612'. [ 1728.695280][T20146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1729.625100][T20157] netlink: 532 bytes leftover after parsing attributes in process `syz.5.3621'. [ 1730.478349][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.484862][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.974506][T20195] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3631'. [ 1732.288055][T20199] loop7: detected capacity change from 0 to 2048 [ 1732.315582][T20199] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 1732.461973][T20201] UDF-fs: unknown compression code (0) [ 1733.471499][T20211] loop5: detected capacity change from 0 to 1024 [ 1733.767604][T20216] loop7: detected capacity change from 0 to 512 [ 1733.830205][T20216] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3639: casefold flag without casefold feature [ 1733.852354][T11928] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1733.870423][T20220] netlink: 532 bytes leftover after parsing attributes in process `syz.5.3640'. [ 1733.886205][T20216] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3639: couldn't read orphan inode 15 (err -117) [ 1733.899290][T20216] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1733.976671][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 1733.976691][ T27] audit: type=1800 audit(1758391005.792:59): pid=20216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3639" name="file1" dev="loop7" ino=18 res=0 errno=0 [ 1734.064452][T11928] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.087898][T11928] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1734.099214][T11928] usb 5-1: config 253 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1734.110660][T11928] usb 5-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1734.130820][T11928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1734.150321][T11928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1734.180669][T11928] usb 5-1: SerialNumber: syz [ 1734.266100][T16377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1734.462916][T11928] rndis_wlan: probe of 5-1:253.0 failed with error -22 [ 1734.470518][T11928] rndis_host: probe of 5-1:253.0 failed with error -22 [ 1734.487184][T11928] usb 5-1: USB disconnect, device number 81 [ 1734.585010][T20231] syz2: rxe_set_mtu: Set mtu to 1024 [ 1734.590707][T20231] infiniband syz2: set active [ 1734.599271][T20233] loop6: detected capacity change from 0 to 1024 [ 1734.611270][T20233] EXT4-fs: inline encryption not supported [ 1734.619774][T20233] EXT4-fs: Ignoring removed nobh option [ 1734.640683][T20233] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1734.684404][T20233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1734.760614][T20233] EXT4-fs error (device loop6): __ext4_get_inode_loc:4483: comm syz.6.3645: Invalid inode table block 1634560302 in block_group 0 [ 1734.786214][T20233] EXT4-fs (loop6): Remounting filesystem read-only [ 1734.852601][T20241] loop7: detected capacity change from 0 to 16 [ 1734.886356][T20241] erofs: (device loop7): mounted with root inode @ nid 36. [ 1734.928840][T17556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1735.258759][T20246] netlink: 532 bytes leftover after parsing attributes in process `syz.4.3650'. [ 1735.260794][T20244] loop6: detected capacity change from 0 to 512 [ 1735.294378][T20244] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1735.353774][T20244] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1735.952502][T20244] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1735.963252][T20244] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1735.971374][T20244] System zones: 0-2, 18-18, 34-35 [ 1735.988522][T20244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1736.007725][T20244] fscrypt (loop6, inode 12): Error -61 getting encryption context [ 1736.149481][T20255] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1736.892989][T17556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1736.930314][T20257] loop4: detected capacity change from 0 to 1024 [ 1737.042256][T20257] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1737.072858][T20257] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53445!=20869) [ 1737.125718][T20257] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1737.174673][T20257] EXT4-fs error (device loop4): ext4_get_journal_inode:5807: inode #32: comm syz.4.3653: iget: special inode unallocated [ 1737.206636][T20257] EXT4-fs (loop4): no journal found [ 1737.224158][T20257] EXT4-fs (loop4): can't get journal size [ 1737.236286][T20257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 1737.471623][T16339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1737.519464][T20266] loop6: detected capacity change from 0 to 512 [ 1737.599383][T20266] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3655: casefold flag without casefold feature [ 1737.667711][T20266] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3655: couldn't read orphan inode 15 (err -117) [ 1737.757890][T20266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1738.033373][T17556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1738.039146][T20277] syzkaller0: entered allmulticast mode [ 1738.178741][ T5867] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1738.312684][T20285] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1738.445453][ T5867] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.563974][ T5867] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1738.664649][ T5867] usb 5-1: config 253 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1738.783688][ T5867] usb 5-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1739.221394][ T5867] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1739.234905][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1739.245499][ T5867] usb 5-1: SerialNumber: syz [ 1739.336012][T20277] syzkaller0: entered promiscuous mode [ 1739.341540][T20277] syzkaller0: left allmulticast mode [ 1739.483506][T20290] loop6: detected capacity change from 0 to 512 [ 1739.514879][T20290] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1739.608379][T20290] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 1739.644491][ T5867] rndis_wlan: probe of 5-1:253.0 failed with error -22 [ 1739.658366][ T5867] rndis_host: probe of 5-1:253.0 failed with error -22 [ 1739.660140][T20290] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2244: inode #15: comm syz.6.3663: corrupted in-inode xattr: e_value size too large [ 1739.672602][ T5867] usb 5-1: USB disconnect, device number 82 [ 1739.684158][T20290] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3663: couldn't read orphan inode 15 (err -117) [ 1739.748829][T20290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1740.010438][T17556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1741.698933][T20314] loop5: detected capacity change from 0 to 512 [ 1741.752812][T20314] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1741.808869][T20314] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1741.832422][T20314] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 1741.890963][T20314] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 1741.927928][T20314] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1742.003344][T20314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1742.069542][T20314] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.3669: dx entry: limit 65535 != root limit 120 [ 1742.102829][T20314] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3669: Corrupt directory, running e2fsck is recommended [ 1742.192454][T16525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1744.541771][T20311] netlink: 'syz.4.3668': attribute type 4 has an invalid length. [ 1744.549536][T20311] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3668'. [ 1745.685699][T20334] loop4: detected capacity change from 0 to 4096 [ 1745.752665][T20334] EXT4-fs: Mount option(s) incompatible with ext2 [ 1746.051919][ T5911] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 1746.224799][T20347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1746.694684][ T5911] usb 7-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1746.708531][ T5911] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1746.739101][ T5911] usb 7-1: config 253 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1746.765406][T20346] loop7: detected capacity change from 0 to 512 [ 1746.780224][ T5911] usb 7-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1746.929571][ T5911] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1746.930719][T20346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1746.951543][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1746.960151][ T5911] usb 7-1: SerialNumber: syz [ 1747.072094][T20346] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1747.173720][T20352] loop4: detected capacity change from 0 to 1024 [ 1747.203077][T20352] EXT4-fs: inline encryption not supported [ 1747.229963][T20352] EXT4-fs: Ignoring removed bh option [ 1747.264239][T20352] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1747.345358][T20352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1747.383048][T20354] loop5: detected capacity change from 0 to 2048 [ 1747.516349][T16377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1747.568447][T20354] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1748.922066][ T5911] rndis_wlan: probe of 7-1:253.0 failed with error -22 [ 1748.930418][ T5911] rndis_host: probe of 7-1:253.0 failed with error -22 [ 1748.980709][T16339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1749.045313][ T5911] usb 7-1: USB disconnect, device number 56 [ 1749.349248][T20369] loop6: detected capacity change from 0 to 1764 [ 1750.400573][T20375] loop6: detected capacity change from 0 to 1024 [ 1750.546421][T20378] loop5: detected capacity change from 0 to 512 [ 1750.607307][T20378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1750.662086][T20378] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1750.776986][T20378] Quota error (device loop5): do_check_range: Getting block 4128768 out of range 0-7 [ 1750.954985][T16525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1751.008202][T20385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1752.670732][T20399] loop5: detected capacity change from 0 to 1024 [ 1752.697616][T20401] picdev_read: 77 callbacks suppressed [ 1752.697630][T20401] kvm: pic: non byte read [ 1752.710001][T20399] EXT4-fs: inline encryption not supported [ 1752.731647][T20401] kvm: pic: non byte read [ 1752.736552][T20399] EXT4-fs: Ignoring removed bh option [ 1752.757777][T20401] kvm: pic: non byte read [ 1752.893100][T20401] kvm: pic: non byte read [ 1752.897603][T20401] kvm: pic: non byte read [ 1752.915285][T20399] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1753.065286][T20405] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1753.836653][T20399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1755.077509][T16525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1756.774644][T20426] pim6reg1: entered allmulticast mode [ 1757.530828][T20435] loop7: detected capacity change from 0 to 128 [ 1757.544878][T20435] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1757.614838][T20435] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1757.656026][T20437] loop4: detected capacity change from 0 to 256 [ 1757.736046][T20437] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 1757.949553][T20439] loop7: detected capacity change from 0 to 1024 [ 1758.084133][ T27] audit: type=1800 audit(1758391029.902:60): pid=20439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3704" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 1758.122255][T20439] hfsplus: request for non-existent node 16777216 in B*Tree [ 1758.130058][T20439] hfsplus: request for non-existent node 16777216 in B*Tree [ 1758.267459][T20445] loop7: detected capacity change from 0 to 1024 [ 1758.280467][T20445] EXT4-fs: inline encryption not supported [ 1758.296740][T20445] EXT4-fs: Ignoring removed bh option [ 1758.308290][T20445] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1758.346961][T20445] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1758.597714][T16377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1760.458303][T20469] syzkaller0: entered promiscuous mode [ 1760.472703][T20469] syzkaller0: entered allmulticast mode [ 1760.497964][T20474] loop6: detected capacity change from 0 to 1024 [ 1760.562623][ T27] audit: type=1800 audit(1758391032.372:61): pid=20474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3716" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 1760.571936][T20474] hfsplus: request for non-existent node 16777216 in B*Tree [ 1760.605245][T20474] hfsplus: request for non-existent node 16777216 in B*Tree [ 1760.973252][T20477] loop7: detected capacity change from 0 to 512 [ 1761.007776][T20477] EXT4-fs: Ignoring removed oldalloc option [ 1761.050407][T20477] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1761.137373][T20477] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2867: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 1761.164872][T20477] EXT4-fs (loop7): 1 truncate cleaned up [ 1761.192600][T20477] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1761.448171][T16377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1761.667137][T20487] binder_alloc: 20486: binder_alloc_buf size 4294966400 failed, no address space [ 1761.693396][T20487] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1761.750413][T20489] loop4: detected capacity change from 0 to 1024 [ 1761.782623][T20489] EXT4-fs: Ignoring removed nobh option [ 1761.788445][T20489] EXT4-fs: Ignoring removed bh option [ 1761.824691][T20489] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1761.944968][T20489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1762.010005][T20489] EXT4-fs (loop4): shut down requested (2) [ 1762.063128][T16339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1762.536768][T20500] loop4: detected capacity change from 0 to 256 [ 1762.561958][T20500] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1762.842895][T20500] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1762.881352][T20500] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1763.221666][ T27] audit: type=1800 audit(1758391034.972:62): pid=20503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3725" name="file1" dev="loop4" ino=1048704 res=0 errno=0 [ 1764.370377][T20513] loop7: detected capacity change from 0 to 2048 [ 1764.421479][T20513] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 1764.485382][T20513] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1765.550690][T20523] loop7: detected capacity change from 0 to 1024 [ 1765.570259][T20523] EXT4-fs: Ignoring removed nobh option [ 1765.630866][T20523] EXT4-fs: Ignoring removed bh option [ 1765.682294][T20523] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1765.789817][T20523] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1765.844617][T20523] EXT4-fs (loop7): shut down requested (2) [ 1765.886427][T16377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1766.506640][T20535] loop7: detected capacity change from 0 to 256 [ 1766.580208][T20537] loop6: detected capacity change from 0 to 512 [ 1766.607093][T20535] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 1766.733800][T20537] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1766.796402][T20537] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1766.815848][T20537] Quota error (device loop6): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 1766.902342][T20537] EXT4-fs warning (device loop6): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1766.963865][T20537] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1767.178625][T20537] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.3738: bg 0: block 40: padding at end of block bitmap is not set [ 1767.513324][T20537] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 1767.699708][T20537] EXT4-fs (loop6): 1 truncate cleaned up [ 1767.708541][T20537] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1767.921659][T20537] EXT4-fs error (device loop6): ext4_get_link:104: inode #16: comm syz.6.3738: bad symlink. [ 1767.976064][T20537] EXT4-fs error (device loop6): ext4_get_link:104: inode #16: comm syz.6.3738: bad symlink. [ 1768.045782][T17556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1770.085309][T20561] loop7: detected capacity change from 0 to 512 [ 1770.105398][T20561] EXT4-fs: Ignoring removed mblk_io_submit option [ 1770.130873][T20561] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1770.159441][T20561] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1770.191372][T20561] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1770.222185][T20561] EXT4-fs warning (device loop7): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1770.255326][T20561] EXT4-fs (loop7): mount failed [ 1770.374702][T20561] loop7: detected capacity change from 0 to 128 [ 1770.418491][T20561] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1770.461223][T20561] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1771.274484][T20574] loop7: detected capacity change from 0 to 256 [ 1772.179149][T20576] loop7: detected capacity change from 0 to 2048 [ 1772.220548][T20576] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 1772.241079][T20576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1772.879791][T20591] loop4: detected capacity change from 0 to 8 [ 1773.064801][T20595] loop5: detected capacity change from 0 to 512 [ 1773.078549][T20595] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 1773.268148][T20599] loop5: detected capacity change from 0 to 128 [ 1773.299557][T20597] loop7: detected capacity change from 0 to 512 [ 1773.323326][T20597] EXT4-fs: Ignoring removed nobh option [ 1773.328723][T20599] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1773.348704][T20599] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1773.394004][T20597] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3759: iget: bad i_size value: 38620345925642 [ 1773.427526][T20597] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3759: couldn't read orphan inode 15 (err -117) [ 1773.451465][T20597] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1773.503252][T16525] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1773.546573][T20597] EXT4-fs error (device loop7): ext4_lookup:1858: inode #15: comm syz.7.3759: iget: bad i_size value: 38620345925642 [ 1773.619809][T20597] netlink: 'syz.7.3759': attribute type 3 has an invalid length. [ 1773.884552][T20609] loop4: detected capacity change from 0 to 512 [ 1773.898114][T20609] ext3: Unknown parameter 'noacl' [ 1773.922800][T20609] Invalid ELF header len 16 [ 1774.709930][T16377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1775.272017][T11928] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1775.553471][T11928] usb 6-1: Using ep0 maxpacket: 8 [ 1775.718773][T11928] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1775.809972][T11928] usb 6-1: config 179 has no interface number 0 [ 1775.888669][T11928] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1776.031811][T11928] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1776.061894][T11928] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1776.082035][T11928] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1776.113797][T11928] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1776.132029][T11928] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1776.141941][T11928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.155560][T20617] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1776.514819][T19439] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input25 [ 1776.770297][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1776.778652][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1776.791949][T11928] usb 6-1: USB disconnect, device number 69 [ 1776.826859][T11928] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1777.570514][T20654] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3780'. [ 1777.672062][T19520] Bluetooth: hci2: command 0x0406 tx timeout [ 1778.284559][T20664] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3780'. [ 1778.293683][T20664] netlink: 'syz.7.3780': attribute type 5 has an invalid length. [ 1778.318021][T20664] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3780'. [ 1778.579169][T20670] loop5: detected capacity change from 0 to 256 [ 1778.608240][T20670] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 1778.830972][T20673] loop5: detected capacity change from 0 to 1024 [ 1778.874981][T20673] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1778.921067][T20673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1779.198321][T20677] loop4: detected capacity change from 0 to 256 [ 1779.233056][T20677] exfat: Bad value for 'time_offset' [ 1779.274203][T16525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1779.283943][T20681] loop6: detected capacity change from 0 to 16 [ 1779.302306][T17896] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1779.316569][T20681] erofs: (device loop6): mounted with root inode @ nid 36. [ 1779.911853][T19520] Bluetooth: hci2: command 0x0406 tx timeout [ 1780.320476][T20687] loop5: detected capacity change from 0 to 512 [ 1780.359980][T20687] EXT4-fs: Ignoring removed nobh option [ 1780.410569][T20687] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.3791: iget: bad i_size value: 38620345925642 [ 1780.436113][T20687] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3791: couldn't read orphan inode 15 (err -117) [ 1780.456760][T20687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1780.508672][T20687] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.3791: iget: bad i_size value: 38620345925642 [ 1781.311989][T20687] netlink: 'syz.5.3791': attribute type 3 has an invalid length. [ 1782.160723][T20710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3798'. [ 1782.211939][T19439] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1782.248595][T16525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1782.266490][T20710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3798'. [ 1782.276541][T20710] netlink: 'syz.7.3798': attribute type 5 has an invalid length. [ 1782.284463][T20710] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3798'. [ 1782.376213][T20713] loop5: detected capacity change from 0 to 16 [ 1782.386662][T20713] erofs: (device loop5): mounted with root inode @ nid 36. [ 1782.407081][T19439] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.427026][T19439] usb 7-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1782.446083][T19439] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.463680][T19439] usb 7-1: config 0 descriptor?? [ 1783.207383][T20722] loop4: detected capacity change from 0 to 128 [ 1783.266234][T20722] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1783.571967][T11725] Bluetooth: hci2: command 0x0406 tx timeout [ 1783.701939][T19439] wacom 0003:056A:0000.0036: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 1783.722628][T19439] wacom 0003:056A:0000.0036: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.6-1/input0 [ 1783.794641][T19439] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0000.0036/input/input26 [ 1784.335171][T20726] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3803'. [ 1784.410069][T20726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1784.443161][T19439] usb 7-1: USB disconnect, device number 57 [ 1784.600893][T20728] fido_id[20728]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1784.753479][T20726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1785.013246][T20739] loop6: detected capacity change from 0 to 512 [ 1785.056270][T20739] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1785.094886][T20739] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 1785.230929][T20739] System zones: 1-12 [ 1785.479080][T20739] EXT4-fs (loop6): 1 truncate cleaned up [ 1785.502819][T20739] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1785.628238][T20745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1786.108789][T20739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3807'. [ 1786.281048][T17556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1786.406875][T20755] loop6: detected capacity change from 0 to 512 [ 1786.555644][T20755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1786.665418][T20755] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1786.702930][T20760] loop7: detected capacity change from 0 to 512 [ 1786.753429][T20760] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3814: iget: bad i_size value: 38620345925642 [ 1786.846891][T20760] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3814: couldn't read orphan inode 15 (err -117) [ 1786.889476][T20760] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1786.955353][T20765] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 1786.985286][T20760] EXT4-fs error (device loop7): ext4_xattr_set_entry:1677: inode #18: comm syz.7.3814: corrupted xattr entries [ 1787.080278][T17556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1787.130303][T16377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1787.258604][T20769] loop6: detected capacity change from 0 to 1024 [ 1787.280833][T16377] infiniband syz2: set down [ 1787.397377][T20769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1787.435891][T19733] smc: removing ib device syz2 [ 1787.458037][T13875] infiniband syz2: ib_query_port failed (-19) [ 1787.768272][T20776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1788.208087][T17556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1788.510012][T20783] loop6: detected capacity change from 0 to 2048 [ 1788.594195][T20783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1789.533400][T20802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1790.827392][T12128] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.858966][T12128] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1791.079093][T12128] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.091147][T12128] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1791.209032][T20817] loop4: detected capacity change from 0 to 512 [ 1791.237653][T12128] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.252796][T20819] loop6: detected capacity change from 0 to 1024 [ 1791.262465][T12128] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1791.384269][T20817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1791.449165][T12027] hfsplus: b-tree write err: -5, ino 4 [ 1791.479951][T20817] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1791.632585][T12128] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.662555][T12128] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1791.685029][T20817] EXT4-fs error (device loop4): ext4_validate_block_bitmap:421: comm syz.4.3836: bg 0: bad block bitmap checksum [ 1791.717839][T20817] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6637: Filesystem failed CRC [ 1791.718351][T19520] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1791.740861][T19520] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1791.750025][T19520] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1791.759627][T19520] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1791.769322][T19520] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1791.777551][T19520] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1791.839189][T16339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1791.918662][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.933890][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.035671][ T27] audit: type=1800 audit(1758391063.852:63): pid=20820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3837" name="/" dev="fuse" ino=3 res=0 errno=0 [ 1793.842889][T11725] Bluetooth: hci3: command tx timeout [ 1794.221990][T20829] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1794.375822][T20868] input: syz0 as /devices/virtual/input/input29 [ 1794.422801][T20829] usb 7-1: Using ep0 maxpacket: 16 [ 1794.442313][T20829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1794.465106][T20829] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1794.519781][T20829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.544976][T20829] usb 7-1: config 0 descriptor?? [ 1794.698096][T20827] chnl_net:caif_netlink_parms(): no params data found [ 1794.886078][T20880] loop5: detected capacity change from 0 to 512 [ 1794.963342][T20829] hid (null): invalid report_count -791909308 [ 1795.017060][T20880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1795.098273][T20880] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1795.189011][T20829] usb 7-1: USB disconnect, device number 58 [ 1795.234980][T20827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.268446][T20827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.298438][T20827] bridge_slave_0: entered allmulticast mode [ 1795.308986][T20827] bridge_slave_0: entered promiscuous mode [ 1795.328836][ T27] audit: type=1800 audit(1758391067.142:64): pid=20880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3851" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1795.433794][T20827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.451932][T20827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.473250][T20827] bridge_slave_1: entered allmulticast mode [ 1795.489729][T20827] bridge_slave_1: entered promiscuous mode [ 1795.971023][T11725] Bluetooth: hci3: command tx timeout [ 1796.663704][T16525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1796.819591][T20827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1796.847204][T20827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1797.023527][T20827] team0: Port device team_slave_0 added [ 1797.180929][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3857'. [ 1797.228201][T20827] team0: Port device team_slave_1 added [ 1797.339995][T12128] hsr_slave_0: left promiscuous mode [ 1797.385169][T12128] hsr_slave_1: left promiscuous mode [ 1797.397145][T12128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1797.404751][T12128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1797.422778][T12128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1797.430245][T12128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1797.439400][T12128] bridge_slave_1: left allmulticast mode [ 1797.446692][T12128] bridge_slave_1: left promiscuous mode [ 1797.456554][T12128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.473289][T12128] bridge_slave_0: left allmulticast mode [ 1797.481899][T12128] bridge_slave_0: left promiscuous mode [ 1797.487698][T12128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.543460][T12128] veth1_macvtap: left promiscuous mode [ 1797.549038][T12128] veth0_macvtap: left promiscuous mode [ 1797.555143][T12128] veth1_vlan: left promiscuous mode [ 1797.560483][T12128] veth0_vlan: left promiscuous mode [ 1797.992170][T11725] Bluetooth: hci3: command tx timeout [ 1798.111924][T17279] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1799.112366][T17279] usb 7-1: Using ep0 maxpacket: 16 [ 1799.122391][T17279] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1799.173985][T17279] usb 7-1: config 13 has an invalid interface number: 50 but max is 0 [ 1799.188698][T17279] usb 7-1: config 13 has no interface number 0 [ 1799.224647][T17279] usb 7-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 1799.245065][T17279] usb 7-1: config 13 interface 50 has no altsetting 0 [ 1799.291001][T17279] usb 7-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1799.301590][T17279] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.312896][T17279] usb 7-1: Product: syz [ 1799.318818][T17279] usb 7-1: Manufacturer: syz [ 1799.325809][T17279] usb 7-1: SerialNumber: syz [ 1799.451077][T20924] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1799.705065][T17279] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 1799.746707][T17279] usb 7-1: MIDIStreaming interface descriptor not found [ 1800.017611][T17279] usb 7-1: USB disconnect, device number 59 [ 1800.064563][T12128] team0 (unregistering): Port device team_slave_1 removed [ 1800.072721][T11725] Bluetooth: hci3: command tx timeout [ 1800.179279][T12128] team0 (unregistering): Port device team_slave_0 removed [ 1800.186715][ T5776] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1800.266335][T12128]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1800.338914][T12128]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1800.403008][ T5776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1800.414962][ T5776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1800.430240][ T5776] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1800.446942][ T5776] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1800.456266][ T5776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.467993][ T5776] usb 6-1: config 0 descriptor?? [ 1800.701982][ T5911] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1800.913004][ T5776] plantronics 0003:047F:FFFF.0038: unbalanced collection at end of report description [ 1800.926426][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1800.926872][ T5776] plantronics 0003:047F:FFFF.0038: parse failed [ 1800.943945][ T5776] plantronics: probe of 0003:047F:FFFF.0038 failed with error -22 [ 1800.964997][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1800.983243][ T5911] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1801.013744][ T5911] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1801.036952][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.047913][ T5911] usb 7-1: config 0 descriptor?? [ 1801.139153][ T23] usb 6-1: USB disconnect, device number 70 [ 1801.515085][ T5911] plantronics 0003:047F:FFFF.0039: No inputs registered, leaving [ 1801.560936][ T5911] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1801.895271][T12128]  (unregistering): Released all slaves [ 1802.050245][T20827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1802.069944][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1802.106315][T20827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1802.122345][T20827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1802.129321][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1802.173899][T11928] usb 7-1: USB disconnect, device number 60 [ 1802.216910][T20957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3872'. [ 1802.239513][T20827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1802.513327][T20957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3872'. [ 1802.542643][T20957] netlink: 'syz.5.3872': attribute type 5 has an invalid length. [ 1802.550456][T20957] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3872'. [ 1802.595903][T20827] hsr_slave_0: entered promiscuous mode [ 1802.633367][T20827] hsr_slave_1: entered promiscuous mode [ 1802.646421][T20827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1802.658807][T20827] Cannot create hsr debugfs directory [ 1803.258052][T20969] loop6: detected capacity change from 0 to 512 [ 1803.425860][T20969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1803.533178][T20969] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1803.563907][T12128] IPVS: stop unused estimator thread 0... [ 1803.901295][T20827] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1803.929652][T20827] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1803.972628][T20827] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1803.993617][T17556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1804.044995][T20827] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1804.306562][T20827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1804.464194][T20827] 8021q: adding VLAN 0 to HW filter on device team0 [ 1804.490941][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.498239][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1804.535436][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.542740][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.155414][T20827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1805.439977][T20829] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1805.642091][T20829] usb 5-1: Using ep0 maxpacket: 32 [ 1805.663451][T20829] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 1805.689864][T20829] usb 5-1: config 4 has no interface number 0 [ 1805.700019][T20829] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1805.721743][T20829] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1805.750659][T20829] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1805.766789][T20827] veth0_vlan: entered promiscuous mode [ 1805.770784][T20829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.786596][T20829] hub 5-1:4.128: USB hub found [ 1805.814433][T20827] veth1_vlan: entered promiscuous mode [ 1805.898693][T20827] veth0_macvtap: entered promiscuous mode [ 1805.925032][T20827] veth1_macvtap: entered promiscuous mode [ 1805.987864][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1805.990875][T20829] hub 5-1:4.128: config failed, can't read hub descriptor (err -90) [ 1806.027201][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.047665][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.095775][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.126890][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.152417][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.171368][T20827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1806.222958][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1806.249439][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.269619][T20827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1806.281574][T20827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.354810][T20827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1806.366758][T20827] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.376885][T20827] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.385873][T20827] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.394779][T20827] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.444207][T11928] usb 5-1: USB disconnect, device number 83 [ 1807.324996][T21042] loop5: detected capacity change from 0 to 256 [ 1807.378951][T19733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1807.413586][T21042] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 1807.421792][T19733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1807.549129][T15496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1807.585147][T15496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1808.978892][T21061] loop8: detected capacity change from 0 to 512 [ 1810.072954][T21061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1810.128422][T21061] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1810.216972][T21072] loop5: detected capacity change from 0 to 256 [ 1810.282070][T21072] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1810.309125][T21072] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1810.333958][ T27] audit: type=1800 audit(1758391082.152:65): pid=21061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3888" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 1810.426469][T21072] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1810.781995][T20829] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1810.798874][T20827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1810.891843][ T23] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 1810.996192][T20829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1811.032765][T20829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1811.072541][T20829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1811.101927][T20829] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1811.123599][T20829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.131878][ T23] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 1811.142885][ T23] usb 7-1: config 0 has no interface number 0 [ 1811.154642][ T23] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1811.165504][T20829] usb 5-1: config 0 descriptor?? [ 1811.172015][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.183759][ T23] usb 7-1: Product: syz [ 1811.188835][ T23] usb 7-1: Manufacturer: syz [ 1811.207434][ T23] usb 7-1: SerialNumber: syz [ 1811.218683][ T23] usb 7-1: config 0 descriptor?? [ 1811.258347][T21097] support for the xor transformation has been removed. [ 1811.309451][T21097] loop8: detected capacity change from 0 to 256 [ 1811.350759][T21097] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1811.388694][T21097] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1811.430251][T21097] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1811.622587][T20829] plantronics 0003:047F:FFFF.003A: No inputs registered, leaving [ 1811.672743][T20829] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1811.762120][T21108] loop8: detected capacity change from 0 to 512 [ 1811.840798][ T23] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1811.860813][T21108] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1811.881504][T21108] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1811.891775][ T23] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1811.891989][ T23] asix: probe of 7-1:0.251 failed with error -71 [ 1811.905954][ T23] usb 7-1: USB disconnect, device number 61 [ 1812.049554][T21108] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz.8.3896: iget: bad i_size value: 2533274857506816 [ 1812.174005][T20827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1812.318322][T21123] loop8: detected capacity change from 0 to 128 [ 1812.339681][T17279] usb 5-1: USB disconnect, device number 84 [ 1812.391088][T21123] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1812.427122][T21123] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1813.516749][T20827] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1814.879532][T21154] loop4: detected capacity change from 0 to 1024 [ 1814.953119][T21154] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1815.086082][T21154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1815.112115][T21154] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1815.643733][T21170] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1815.661327][T21170] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 3 with error 28 [ 1815.674275][T21170] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1815.674275][T21170] [ 1815.684131][T21170] EXT4-fs (loop4): Total free blocks count 0 [ 1815.690196][T21170] EXT4-fs (loop4): Free/Dirty block details [ 1815.697127][T21170] EXT4-fs (loop4): free_blocks=4293918720 [ 1815.703163][T21170] EXT4-fs (loop4): dirty_blocks=48 [ 1815.708356][T21170] EXT4-fs (loop4): Block reservation details [ 1815.714467][T21170] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 1816.402749][T15496] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 1816.816090][T21181] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3908'. [ 1817.085489][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3908'. [ 1817.096406][T21181] netlink: 'syz.8.3908': attribute type 5 has an invalid length. [ 1817.107440][T21181] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3908'. [ 1817.172871][T21181] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1817.206049][T21181] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1817.231866][T21181] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1817.261612][T21181] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1817.304551][T21181] geneve2: entered promiscuous mode [ 1817.322417][T21181] geneve2: entered allmulticast mode [ 1818.427579][T21212] loop5: detected capacity change from 0 to 512 [ 1818.445249][T21212] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1818.460857][T21212] EXT4-fs error (device loop5): ext4_find_extent:936: inode #4: comm syz.5.3914: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 1818.491167][T21212] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 1818.497010][T21211] loop4: detected capacity change from 0 to 1024 [ 1818.533198][T21212] EXT4-fs warning (device loop5): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1818.616004][T21212] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1818.654756][T21212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1818.699834][T21212] EXT4-fs error (device loop5): ext4_lookup:1855: inode #2: comm syz.5.3914: 'file0' linked to parent dir [ 1818.819651][T21211] hfsplus: xattr searching failed [ 1818.854058][T16525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1819.924944][T21230] loop5: detected capacity change from 0 to 164 [ 1819.937101][T21230] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 1821.494392][T21253] loop8: detected capacity change from 0 to 128 [ 1821.573139][T21253] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1821.610777][T21253] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1821.632778][T21257] Bluetooth: MGMT ver 1.22 [ 1821.811261][T20827] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1823.200954][T21277] loop5: detected capacity change from 0 to 512 [ 1823.238190][T21277] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1823.321946][T21277] EXT4-fs (loop5): 1 truncate cleaned up [ 1823.329034][T21277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1823.412865][T21277] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.3928: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 1823.558470][T16525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1823.634550][T21283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3938'. [ 1823.729889][T21287] loop5: detected capacity change from 0 to 1024 [ 1823.751078][T21287] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1823.820352][T21287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1823.841052][T21287] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1824.135002][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3930'. [ 1824.226946][T21299] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1824.242253][T21299] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 3 with error 28 [ 1824.254498][T21299] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1824.254498][T21299] [ 1824.264204][T21299] EXT4-fs (loop5): Total free blocks count 0 [ 1824.270224][T21299] EXT4-fs (loop5): Free/Dirty block details [ 1824.276202][T21299] EXT4-fs (loop5): free_blocks=4293918720 [ 1824.282328][T21299] EXT4-fs (loop5): dirty_blocks=48 [ 1824.287541][T21299] EXT4-fs (loop5): Block reservation details [ 1824.293782][T21299] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 1825.148096][ T58] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 1825.162458][T21303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3930'. [ 1825.190694][T21303] netlink: 'syz.6.3930': attribute type 5 has an invalid length. [ 1825.237064][T21303] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3930'. [ 1825.452061][T20829] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1825.500113][T21311] loop8: detected capacity change from 0 to 128 [ 1825.544103][T21311] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1825.573806][T21311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1825.664692][T20829] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1825.684287][T20829] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1825.722713][T20829] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.755316][T20829] usb 5-1: config 220 has no interface number 2 [ 1825.770234][T20829] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1825.794606][T21317] loop5: detected capacity change from 0 to 1024 [ 1825.805909][T20829] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1825.820464][T20829] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1825.837079][T20829] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1825.857716][T20829] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1825.886909][T20829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.912228][T20829] usb 5-1: Product: syz [ 1825.921133][T20829] usb 5-1: Manufacturer: syz [ 1825.931836][T20829] usb 5-1: SerialNumber: syz [ 1826.161139][T20829] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1826.197193][T20829] usb 5-1: No valid video chain found. [ 1826.227139][T20829] usb 5-1: selecting invalid altsetting 0 [ 1826.285914][T20829] usb 5-1: selecting invalid altsetting 0 [ 1826.325573][T20829] usbtest: probe of 5-1:220.1 failed with error -22 [ 1826.363955][T20829] usb 5-1: USB disconnect, device number 85 [ 1826.864282][T21334] loop4: detected capacity change from 0 to 256 [ 1826.965640][T21334] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1827.502680][T21346] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1827.767977][T21354] loop6: detected capacity change from 0 to 256 [ 1827.811561][T21355] loop4: detected capacity change from 0 to 1024 [ 1827.871557][T21354] FAT-fs (loop6): Directory bread(block 64) failed [ 1827.933328][T21354] FAT-fs (loop6): Directory bread(block 65) failed [ 1827.940041][T21354] FAT-fs (loop6): Directory bread(block 66) failed [ 1827.990753][T21354] FAT-fs (loop6): Directory bread(block 67) failed [ 1828.068749][T21354] FAT-fs (loop6): Directory bread(block 68) failed [ 1828.143464][T21354] FAT-fs (loop6): Directory bread(block 69) failed [ 1828.178191][T21354] FAT-fs (loop6): Directory bread(block 70) failed [ 1828.189375][T21360] loop5: detected capacity change from 0 to 128 [ 1828.219316][T21354] FAT-fs (loop6): Directory bread(block 71) failed [ 1828.227830][T21360] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1828.271903][T21354] FAT-fs (loop6): Directory bread(block 72) failed [ 1828.300502][T21360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1828.331909][T21354] FAT-fs (loop6): Directory bread(block 73) failed [ 1828.484898][T21365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3951'. [ 1828.709482][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3951'. [ 1828.728794][T21371] netlink: 'syz.4.3951': attribute type 5 has an invalid length. [ 1828.742945][T21371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3951'. [ 1829.526568][T21385] loop8: detected capacity change from 0 to 512 [ 1829.575808][T21385] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3955: casefold flag without casefold feature [ 1829.626813][T21388] loop6: detected capacity change from 0 to 1024 [ 1829.633711][T21385] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3955: couldn't read orphan inode 15 (err -117) [ 1829.653753][T21385] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1829.672474][T21388] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1829.773981][T21388] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 2: comm syz.6.3956: lblock 2 mapped to illegal pblock 2 (length 1) [ 1829.800980][T21394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3957'. [ 1829.849323][T21388] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1829.872726][T20827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1829.885861][T21388] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 48: comm syz.6.3956: lblock 0 mapped to illegal pblock 48 (length 1) [ 1829.918201][T21388] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1829.950329][T21388] EXT4-fs error (device loop6): ext4_acquire_dquot:6940: comm syz.6.3956: Failed to acquire dquot type 0 [ 1829.975136][T21388] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 1830.014649][T21388] EXT4-fs error (device loop6): ext4_evict_inode:252: inode #11: comm syz.6.3956: mark_inode_dirty error [ 1830.072863][T21388] EXT4-fs warning (device loop6): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 1830.088286][T21399] loop5: detected capacity change from 0 to 128 [ 1830.090369][T21388] EXT4-fs (loop6): 1 orphan inode deleted [ 1830.103917][T21388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1830.126340][T12027] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 1830.160086][T12027] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1830.170839][T21399] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1830.185327][T21402] loop8: detected capacity change from 0 to 256 [ 1830.195354][T12027] EXT4-fs error (device loop6): ext4_release_dquot:6976: comm kworker/u4:8: Failed to release dquot type 0 [ 1830.221168][T21399] ext4 filesystem being mounted at /337/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1830.239290][T21388] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #2: block 16: comm syz.6.3956: lblock 0 mapped to illegal pblock 16 (length 1) [ 1830.293693][T21402] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1830.399311][T17556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1830.412871][T17556] EXT4-fs error (device loop6): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1830.449047][T17556] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 1830.480432][T17556] EXT4-fs error (device loop6): ext4_quota_off:7224: inode #3: comm syz-executor: mark_inode_dirty error [ 1830.871466][T21414] loop6: detected capacity change from 0 to 2048 [ 1830.889560][T21414] UDF-fs: bad mount option "noadؘfbEask=00000000000000000000000" or missing value [ 1831.878670][T16525] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1832.903409][T21444] loop6: detected capacity change from 0 to 256 [ 1833.737564][T21453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3973'. [ 1833.851765][ T5908] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1834.072380][ T5908] usb 6-1: Using ep0 maxpacket: 32 [ 1834.933364][ T5908] usb 6-1: config 0 has an invalid interface number: 93 but max is 0 [ 1834.941517][ T5908] usb 6-1: config 0 has no interface number 0 [ 1834.958563][ T5908] usb 6-1: config 0 interface 93 has no altsetting 0 [ 1834.968651][ T5908] usb 6-1: New USB device found, idVendor=0e21, idProduct=0520, bcdDevice= 1.00 [ 1834.981679][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.989718][ T5908] usb 6-1: Product: syz [ 1834.994372][ T5908] usb 6-1: Manufacturer: syz [ 1834.999007][ T5908] usb 6-1: SerialNumber: syz [ 1835.006721][ T5908] usb 6-1: config 0 descriptor?? [ 1836.133778][ T5908] usb-storage 6-1:0.93: USB Mass Storage device detected [ 1836.214800][ T5908] usb-storage 6-1:0.93: Quirks match for vid 0e21 pid 0520: 2 [ 1836.250888][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3975'. [ 1836.416938][T21473] netlink: 'syz.6.3975': attribute type 5 has an invalid length. [ 1836.424935][T21473] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3975'. [ 1836.437633][T21475] loop8: detected capacity change from 0 to 512 [ 1836.530663][T21475] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1836.586232][T21475] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1836.611229][ T5908] usb 6-1: USB disconnect, device number 71 [ 1836.846495][T20827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1837.011410][T21491] loop4: detected capacity change from 0 to 512 [ 1837.058954][T21491] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3982: casefold flag without casefold feature [ 1837.232894][T21491] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3982: couldn't read orphan inode 15 (err -117) [ 1837.248082][T21491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1837.365068][T21501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3983'. [ 1838.707144][T21509] loop5: detected capacity change from 0 to 2048 [ 1838.769021][T16339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1838.810692][T21509] loop5: p1 < > p4 [ 1838.859752][T21509] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1838.872471][T21514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1838.962020][ T5157] loop5: p1 < > p4 [ 1838.986591][ T5157] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1839.139224][T17896] udevd[17896]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1839.153301][T17916] udevd[17916]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1840.138331][T17896] udevd[17896]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1840.155395][T17916] udevd[17916]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1840.321779][T20829] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1840.456181][T21530] loop8: detected capacity change from 0 to 512 [ 1840.578208][T21530] EXT4-fs: Ignoring removed i_version option [ 1840.611584][T21530] ext4: Unknown parameter 'noacl' [ 1840.619160][T20829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1840.663796][T20829] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1840.732950][T20829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.792619][T20829] usb 6-1: config 0 descriptor?? [ 1841.254954][T20829] logitech-hidpp-device 0003:046D:C086.003B: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.5-1/input0 [ 1841.439683][T16547] usb 6-1: USB disconnect, device number 72 [ 1841.737127][T21555] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3994'. [ 1842.714911][T21551] fido_id[21551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1843.031824][T11725] Bluetooth: hci3: command 0x0405 tx timeout [ 1843.138538][T21562] loop5: detected capacity change from 0 to 256 [ 1843.234508][T21562] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1843.759468][T21576] loop8: detected capacity change from 0 to 512 [ 1843.874150][T21576] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3996: casefold flag without casefold feature [ 1844.778244][T21576] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3996: couldn't read orphan inode 15 (err -117) [ 1844.872025][T21576] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1845.139611][T21592] loop6: detected capacity change from 0 to 128 [ 1845.293413][T21592] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1845.373135][T20827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1845.396825][T21592] ext4 filesystem being mounted at /265/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1845.518486][T21598] loop5: detected capacity change from 0 to 1024 [ 1845.611768][T21598] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1845.637869][T17556] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1845.809997][T21598] hfsplus: filesystem is marked journaled, leaving read-only. [ 1845.828779][T21602] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1845.950780][T21607] loop6: detected capacity change from 0 to 256 [ 1845.979325][T21607] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1846.024722][T21607] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1846.048986][T21607] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 1846.563120][T20829] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1846.856423][T20829] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1846.882639][T20829] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1847.680690][T20829] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1847.689683][T20829] usb 5-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 1847.698934][T20829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.741303][T20829] usb 5-1: config 0 descriptor?? [ 1847.770476][T21621] kvm: kvm [21620]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1600000000 [ 1847.839184][T21621] kvm: kvm [21620]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x9200000000 [ 1847.895197][T21621] kvm: kvm [21620]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa600000000 [ 1847.951865][T11928] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1847.969170][T21621] kvm: kvm [21620]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xca00000000 [ 1848.178072][T11928] usb 6-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1848.211880][T11928] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1848.223042][T20829] wacom 0003:056A:00BA.003C: unbalanced collection at end of report description [ 1848.223804][T20829] wacom 0003:056A:00BA.003C: parse failed [ 1848.261303][T20829] wacom: probe of 0003:056A:00BA.003C failed with error -22 [ 1848.307034][T11928] usb 6-1: config 253 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1848.364521][T11928] usb 6-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1848.722001][T11928] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1848.753443][ T5908] usb 5-1: USB disconnect, device number 86 [ 1848.768068][T11928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1848.839327][T11928] usb 6-1: SerialNumber: syz [ 1850.096372][T11928] rndis_wlan: probe of 6-1:253.0 failed with error -22 [ 1850.142463][T11928] rndis_host: probe of 6-1:253.0 failed with error -22 [ 1850.163847][T11928] usb 6-1: USB disconnect, device number 73 [ 1851.027329][T21693] loop5: detected capacity change from 0 to 512 [ 1851.088578][T21693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1851.121074][T21693] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1851.155285][T21700] loop8: detected capacity change from 0 to 512 [ 1851.164772][T21700] EXT4-fs: Ignoring removed orlov option [ 1851.192758][T21700] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1851.214994][T21700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0082] [ 1851.253083][T21700] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2244: inode #15: comm syz.8.4025: corrupted in-inode xattr: e_value size too large [ 1851.275640][T21700] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.4025: couldn't read orphan inode 15 (err -117) [ 1851.319920][T21700] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1851.425197][T16525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1851.832864][T21697] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1852.019595][T20827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1852.361780][T11928] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1852.377078][T21726] loop8: detected capacity change from 0 to 512 [ 1852.386022][T21728] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004 [ 1852.473534][T21726] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1852.622624][T11928] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.637647][T11928] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1852.649408][T11928] usb 5-1: config 253 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1852.661330][T11928] usb 5-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1852.675076][T21726] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1852.687108][T11928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1852.696497][T11928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1852.706535][T11928] usb 5-1: SerialNumber: syz [ 1852.729643][T21733] loop6: detected capacity change from 0 to 512 [ 1852.737975][T21733] EXT4-fs: Ignoring removed nobh option [ 1852.866995][T20827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1853.104268][T21733] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1853.122851][T21733] EXT4-fs error (device loop6): __ext4_iget:5053: inode #11: block 1: comm syz.6.4036: invalid block [ 1853.136176][T21733] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.4036: couldn't read orphan inode 11 (err -117) [ 1853.160114][T21733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1853.185179][ T5867] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1853.320428][T17556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1853.367256][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.373812][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.414639][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1853.455457][ T5867] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1853.490960][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.533353][ T5867] usb 6-1: config 0 descriptor?? [ 1853.550678][T21736] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1853.907588][T21747] loop8: detected capacity change from 0 to 512 [ 1854.122342][T21747] EXT4-fs (loop8): 1 orphan inode deleted [ 1854.152192][ T41] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1854.179265][T21747] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1854.202067][ T41] EXT4-fs error (device loop8): ext4_release_dquot:6976: comm kworker/u4:2: Failed to release dquot type 1 [ 1854.214092][T11928] rndis_wlan: probe of 5-1:253.0 failed with error -22 [ 1854.237531][T11928] rndis_host: probe of 5-1:253.0 failed with error -22 [ 1854.254452][T21747] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1854.275667][T11928] usb 5-1: USB disconnect, device number 87 [ 1854.288088][ T5867] elan 0003:04F3:0755.003D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1854.329120][T21747] EXT4-fs error (device loop8): ext4_lookup:1858: inode #15: comm syz.8.4040: iget: bad i_size value: 360287970189639690 [ 1854.449627][T20827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1854.564808][ T5867] usb 6-1: USB disconnect, device number 74 [ 1854.632599][T21758] loop8: detected capacity change from 0 to 128 [ 1854.663065][T21758] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1854.671340][T21758] System zones: 1-3, 19-19, 35-36 [ 1854.678971][T21758] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1854.701881][T21758] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1854.739474][T21758] EXT4-fs warning (device loop8): verify_group_input:151: Cannot add at group 25 (only 1 groups) [ 1854.800089][T21762] loop4: detected capacity change from 0 to 512 [ 1854.905639][T20827] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1854.936354][T21762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1854.967686][T21762] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1855.133896][T16339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1855.274004][T21768] loop5: detected capacity change from 0 to 1024 [ 1855.372623][T21768] hfsplus: xattr searching failed [ 1856.330029][T21783] loop5: detected capacity change from 0 to 1024 [ 1856.419012][T21783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1856.766356][T21789] loop6: detected capacity change from 0 to 2048 [ 1856.804621][T21789] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1856.833114][T16525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1856.865148][T21789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1857.286003][T21798] loop6: detected capacity change from 0 to 2048 [ 1857.348735][T21798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1857.416953][T21798] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1857.495417][T21805] loop4: detected capacity change from 0 to 512 [ 1857.785955][T21805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1858.181766][ T5908] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1858.806117][ T5908] usb 6-1: config 0 has an invalid interface number: 112 but max is 0 [ 1858.819008][ T5908] usb 6-1: config 0 has no interface number 0 [ 1858.825679][T16339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1858.839801][ T5908] usb 6-1: config 0 interface 112 altsetting 0 endpoint 0xF has invalid maxpacket 1007, setting to 64 [ 1858.859114][ T5908] usb 6-1: New USB device found, idVendor=3154, idProduct=721e, bcdDevice= 9.c6 [ 1858.917317][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.961237][ T5908] usb 6-1: config 0 descriptor?? [ 1858.978041][ T5908] usb-storage 6-1:0.112: USB Mass Storage device detected [ 1859.469159][T21818] netlink: 'syz.4.4058': attribute type 4 has an invalid length. [ 1859.477087][T21818] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4058'. [ 1860.241966][T21731] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 1860.421364][T21820] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4059'. [ 1860.478215][T17556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1860.639856][ T5776] usb 6-1: USB disconnect, device number 75 [ 1860.817267][T21829] loop4: detected capacity change from 0 to 256 [ 1860.826615][T21827] ================================================================== [ 1860.834736][T21827] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6b2/0x8d0 [ 1860.842858][T21827] Read of size 2 at addr ffff88806c3cc122 by task syz.5.4062/21827 [ 1860.850786][T21827] [ 1860.853140][T21827] CPU: 0 PID: 21827 Comm: syz.5.4062 Not tainted syzkaller #0 [ 1860.860638][T21827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1860.870735][T21827] Call Trace: [ 1860.874045][T21827] [ 1860.877002][T21827] dump_stack_lvl+0x16c/0x230 [ 1860.881724][T21827] ? __lock_acquire+0x7c80/0x7c80 [ 1860.886780][T21827] ? show_regs_print_info+0x20/0x20 [ 1860.892026][T21827] ? load_image+0x3b0/0x3b0 [ 1860.896567][T21827] ? __virt_addr_valid+0x469/0x540 [ 1860.901717][T21827] print_report+0xac/0x220 [ 1860.906173][T21827] ? __xfrm_state_lookup+0x6b2/0x8d0 [ 1860.911495][T21827] kasan_report+0x117/0x150 [ 1860.916031][T21827] ? __xfrm_state_lookup+0x6b2/0x8d0 [ 1860.921355][T21827] __xfrm_state_lookup+0x6b2/0x8d0 [ 1860.926503][T21827] ? xfrm_state_lookup+0x1a0/0x1a0 [ 1860.931651][T21827] ? ipcomp4_init_state+0x245/0x9f0 [ 1860.936900][T21827] ? xfrm_state_add+0xf6/0xe20 [ 1860.941782][T21827] xfrm_state_add+0x25e/0xe20 [ 1860.946490][T21827] ? xfrm_init_replay+0xdc/0x2a0 [ 1860.951462][T21827] xfrm_add_sa+0x26f7/0x30a0 [ 1860.956088][T21827] ? xfrm_user_rcv_msg+0x870/0x870 [ 1860.961239][T21827] ? __nla_parse+0x40/0x50 [ 1860.965708][T21827] xfrm_user_rcv_msg+0x596/0x870 [ 1860.970699][T21827] ? lockdep_hardirqs_on+0x98/0x150 [ 1860.975951][T21827] ? xfrm_netlink_rcv+0x90/0x90 [ 1860.980841][T21827] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1860.986259][T21827] ? __dev_queue_xmit+0x245/0x35a0 [ 1860.991403][T21827] ? __mutex_trylock_common+0x153/0x250 [ 1860.996993][T21827] netlink_rcv_skb+0x216/0x480 [ 1861.001805][T21827] ? xfrm_netlink_rcv+0x90/0x90 [ 1861.006691][T21827] ? netlink_ack+0x1110/0x1110 [ 1861.011500][T21827] ? netlink_deliver_tap+0x2e/0x1b0 [ 1861.016740][T21827] ? __lock_acquire+0x7c80/0x7c80 [ 1861.021802][T21827] xfrm_netlink_rcv+0x79/0x90 [ 1861.026507][T21827] netlink_unicast+0x751/0x8d0 [ 1861.031311][T21827] netlink_sendmsg+0x8c1/0xbe0 [ 1861.036121][T21827] ? netlink_getsockopt+0x580/0x580 [ 1861.041366][T21827] ? aa_sock_msg_perm+0x94/0x150 [ 1861.046334][T21827] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1861.051655][T21827] ? security_socket_sendmsg+0x80/0xa0 [ 1861.057154][T21827] ? netlink_getsockopt+0x580/0x580 [ 1861.062384][T21827] ____sys_sendmsg+0x5bf/0x950 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1861.067189][T21827] ? __asan_memset+0x22/0x40 [ 1861.071895][T21827] ? __sys_sendmsg_sock+0x30/0x30 [ 1861.076955][T21827] ? __import_iovec+0x5f2/0x860 [ 1861.081851][T21827] ? import_iovec+0x73/0xa0 [ 1861.086389][T21827] ___sys_sendmsg+0x220/0x290 [ 1861.091108][T21827] ? __sys_sendmsg+0x270/0x270 [ 1861.095927][T21827] __se_sys_sendmsg+0x1a5/0x270 [ 1861.100813][T21827] ? __x64_sys_sendmsg+0x80/0x80 [ 1861.105789][T21827] ? lockdep_hardirqs_on+0x98/0x150 [ 1861.111023][T21827] do_syscall_64+0x55/0xb0 [ 1861.115470][T21827] ? clear_bhb_loop+0x40/0x90 [ 1861.120178][T21827] ? clear_bhb_loop+0x40/0x90 [ 1861.124899][T21827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1861.130832][T21827] RIP: 0033:0x7fb076d8ec29 [ 1861.135277][T21827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1861.154920][T21827] RSP: 002b:00007fb077cd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1861.163372][T21827] RAX: ffffffffffffffda RBX: 00007fb076fd5fa0 RCX: 00007fb076d8ec29 [ 1861.171380][T21827] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000004 [ 1861.179381][T21827] RBP: 00007fb076e11e41 R08: 0000000000000000 R09: 0000000000000000 [ 1861.187378][T21827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1861.195378][T21827] R13: 00007fb076fd6038 R14: 00007fb076fd5fa0 R15: 00007fff7aa909d8 [ 1861.203385][T21827] [ 1861.206429][T21827] [ 1861.208769][T21827] Allocated by task 18515: [ 1861.213203][T21827] kasan_set_track+0x4e/0x70 [ 1861.217830][T21827] __kasan_slab_alloc+0x6c/0x80 [ 1861.222712][T21827] slab_post_alloc_hook+0x6e/0x4d0 [ 1861.227859][T21827] kmem_cache_alloc+0x11e/0x2e0 [ 1861.232740][T21827] xfrm_state_alloc+0x22/0x2a0 [ 1861.237537][T21827] __find_acq_core+0x7d8/0x19d0 [ 1861.242419][T21827] xfrm_find_acq+0x6a/0x90 [ 1861.246860][T21827] xfrm_alloc_userspi+0x57a/0xa90 [ 1861.251907][T21827] xfrm_user_rcv_msg+0x596/0x870 [ 1861.256867][T21827] netlink_rcv_skb+0x216/0x480 [ 1861.261749][T21827] xfrm_netlink_rcv+0x79/0x90 [ 1861.266445][T21827] netlink_unicast+0x751/0x8d0 [ 1861.271232][T21827] netlink_sendmsg+0x8c1/0xbe0 [ 1861.276025][T21827] ____sys_sendmsg+0x5bf/0x950 [ 1861.280824][T21827] ___sys_sendmsg+0x220/0x290 [ 1861.285530][T21827] __se_sys_sendmsg+0x1a5/0x270 [ 1861.290412][T21827] do_syscall_64+0x55/0xb0 [ 1861.294874][T21827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1861.300809][T21827] [ 1861.303153][T21827] The buggy address belongs to the object at ffff88806c3cc000 [ 1861.303153][T21827] which belongs to the cache xfrm_state of size 848 [ 1861.317148][T21827] The buggy address is located 290 bytes inside of [ 1861.317148][T21827] freed 848-byte region [ffff88806c3cc000, ffff88806c3cc350) [ 1861.330975][T21827] [ 1861.333322][T21827] The buggy address belongs to the physical page: [ 1861.339755][T21827] page:ffffea0001b0f300 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88806c3cc000 pfn:0x6c3cc [ 1861.351277][T21827] head:ffffea0001b0f300 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1861.360240][T21827] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1861.361678][T21829] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1861.368315][T21827] page_type: 0xffffffff() [ 1861.368339][T21827] raw: 00fff00000000840 ffff888017ee7c80 dead000000000122 0000000000000000 [ 1861.368357][T21827] raw: ffff88806c3cc000 000000008010000f 00000001ffffffff 0000000000000000 [ 1861.368366][T21827] page dumped because: kasan: bad access detected [ 1861.368376][T21827] page_owner tracks the page as allocated [ 1861.368383][T21827] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 17958, tgid 17956 (syz.7.2957), ts 1459096844307, free_ts 1454853603350 [ 1861.368418][T21827] post_alloc_hook+0x1cd/0x210 [ 1861.368449][T21827] get_page_from_freelist+0x195c/0x19f0 [ 1861.368475][T21827] __alloc_pages+0x1e3/0x460 [ 1861.368500][T21827] alloc_slab_page+0x5d/0x170 [ 1861.368527][T21827] new_slab+0x87/0x2e0 [ 1861.368550][T21827] ___slab_alloc+0xc6d/0x1300 [ 1861.368576][T21827] kmem_cache_alloc+0x1b7/0x2e0 [ 1861.368600][T21827] xfrm_state_alloc+0x22/0x2a0 [ 1861.368621][T21827] xfrm_add_sa+0xfe5/0x30a0 [ 1861.368637][T21827] xfrm_user_rcv_msg+0x596/0x870 [ 1861.368655][T21827] netlink_rcv_skb+0x216/0x480 [ 1861.368684][T21827] xfrm_netlink_rcv+0x79/0x90 [ 1861.368700][T21827] netlink_unicast+0x751/0x8d0 [ 1861.368720][T21827] netlink_sendmsg+0x8c1/0xbe0 [ 1861.368743][T21827] ____sys_sendmsg+0x5bf/0x950 [ 1861.368767][T21827] ___sys_sendmsg+0x220/0x290 [ 1861.368792][T21827] page last free stack trace: [ 1861.368799][T21827] free_unref_page_prepare+0x7ce/0x8e0 [ 1861.368825][T21827] free_unref_page+0x32/0x2e0 [ 1861.368850][T21827] free_large_kmalloc+0x101/0x1a0 [ 1861.368874][T21827] uhid_char_release+0x5d4/0x600 [ 1861.368900][T21827] __fput+0x234/0x970 [ 1861.368924][T21827] task_work_run+0x1ce/0x250 [ 1861.368947][T21827] do_exit+0x90b/0x23c0 [ 1861.368972][T21827] do_group_exit+0x21b/0x2d0 [ 1861.368993][T21827] get_signal+0x12fc/0x1400 [ 1861.369018][T21827] arch_do_signal_or_restart+0x96/0x780 [ 1861.369043][T21827] exit_to_user_mode_loop+0x70/0x110 [ 1861.369066][T21827] exit_to_user_mode_prepare+0xf6/0x180 [ 1861.369089][T21827] syscall_exit_to_user_mode+0x1a/0x50 [ 1861.369116][T21827] do_syscall_64+0x61/0xb0 [ 1861.369136][T21827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1861.501924][T21829] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1861.505469][T21827] [ 1861.505478][T21827] Memory state around the buggy address: [ 1861.533611][T21829] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1861.534914][T21827] ffff88806c3cc000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1861.534930][T21827] ffff88806c3cc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1861.633809][T21827] >ffff88806c3cc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1861.641876][T21827] ^ [ 1861.646996][T21827] ffff88806c3cc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1861.655056][T21827] ffff88806c3cc200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1861.663117][T21827] ================================================================== [ 1861.671366][T21827] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1861.678583][T21827] CPU: 0 PID: 21827 Comm: syz.5.4062 Not tainted syzkaller #0 [ 1861.686069][T21827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1861.696147][T21827] Call Trace: [ 1861.699443][T21827] [ 1861.702394][T21827] dump_stack_lvl+0x16c/0x230 [ 1861.707101][T21827] ? show_regs_print_info+0x20/0x20 [ 1861.712333][T21827] ? load_image+0x3b0/0x3b0 [ 1861.716864][T21827] panic+0x2c0/0x710 [ 1861.720800][T21827] ? bpf_jit_dump+0xd0/0xd0 [ 1861.725341][T21827] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 1861.731266][T21827] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1861.737199][T21827] ? _raw_spin_unlock+0x40/0x40 [ 1861.742243][T21827] ? print_memory_metadata+0x314/0x400 [ 1861.747714][T21827] ? __xfrm_state_lookup+0x6b2/0x8d0 [ 1861.753092][T21827] check_panic_on_warn+0x84/0xa0 [ 1861.758037][T21827] ? __xfrm_state_lookup+0x6b2/0x8d0 [ 1861.763332][T21827] end_report+0x6f/0x140 [ 1861.767670][T21827] kasan_report+0x128/0x150 [ 1861.772183][T21827] ? __xfrm_state_lookup+0x6b2/0x8d0 [ 1861.777501][T21827] __xfrm_state_lookup+0x6b2/0x8d0 [ 1861.782626][T21827] ? xfrm_state_lookup+0x1a0/0x1a0 [ 1861.787748][T21827] ? ipcomp4_init_state+0x245/0x9f0 [ 1861.792958][T21827] ? xfrm_state_add+0xf6/0xe20 [ 1861.797730][T21827] xfrm_state_add+0x25e/0xe20 [ 1861.802419][T21827] ? xfrm_init_replay+0xdc/0x2a0 [ 1861.807372][T21827] xfrm_add_sa+0x26f7/0x30a0 [ 1861.811982][T21827] ? xfrm_user_rcv_msg+0x870/0x870 [ 1861.817118][T21827] ? __nla_parse+0x40/0x50 [ 1861.821898][T21827] xfrm_user_rcv_msg+0x596/0x870 [ 1861.826852][T21827] ? lockdep_hardirqs_on+0x98/0x150 [ 1861.832083][T21827] ? xfrm_netlink_rcv+0x90/0x90 [ 1861.836941][T21827] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1861.842337][T21827] ? __dev_queue_xmit+0x245/0x35a0 [ 1861.847470][T21827] ? __mutex_trylock_common+0x153/0x250 [ 1861.853037][T21827] netlink_rcv_skb+0x216/0x480 [ 1861.857810][T21827] ? xfrm_netlink_rcv+0x90/0x90 [ 1861.862684][T21827] ? netlink_ack+0x1110/0x1110 [ 1861.867553][T21827] ? netlink_deliver_tap+0x2e/0x1b0 [ 1861.872760][T21827] ? __lock_acquire+0x7c80/0x7c80 [ 1861.877797][T21827] xfrm_netlink_rcv+0x79/0x90 [ 1861.882478][T21827] netlink_unicast+0x751/0x8d0 [ 1861.887250][T21827] netlink_sendmsg+0x8c1/0xbe0 [ 1861.892022][T21827] ? netlink_getsockopt+0x580/0x580 [ 1861.897225][T21827] ? aa_sock_msg_perm+0x94/0x150 [ 1861.902426][T21827] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1861.907717][T21827] ? security_socket_sendmsg+0x80/0xa0 [ 1861.913179][T21827] ? netlink_getsockopt+0x580/0x580 [ 1861.918381][T21827] ____sys_sendmsg+0x5bf/0x950 [ 1861.923158][T21827] ? __asan_memset+0x22/0x40 [ 1861.927761][T21827] ? __sys_sendmsg_sock+0x30/0x30 [ 1861.932793][T21827] ? __import_iovec+0x5f2/0x860 [ 1861.937683][T21827] ? import_iovec+0x73/0xa0 [ 1861.942280][T21827] ___sys_sendmsg+0x220/0x290 [ 1861.946966][T21827] ? __sys_sendmsg+0x270/0x270 [ 1861.951753][T21827] __se_sys_sendmsg+0x1a5/0x270 [ 1861.956615][T21827] ? __x64_sys_sendmsg+0x80/0x80 [ 1861.961562][T21827] ? lockdep_hardirqs_on+0x98/0x150 [ 1861.966774][T21827] do_syscall_64+0x55/0xb0 [ 1861.971196][T21827] ? clear_bhb_loop+0x40/0x90 [ 1861.975880][T21827] ? clear_bhb_loop+0x40/0x90 [ 1861.980562][T21827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1861.986469][T21827] RIP: 0033:0x7fb076d8ec29 [ 1861.991082][T21827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1862.010694][T21827] RSP: 002b:00007fb077cd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1862.019114][T21827] RAX: ffffffffffffffda RBX: 00007fb076fd5fa0 RCX: 00007fb076d8ec29 [ 1862.027093][T21827] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000004 [ 1862.035155][T21827] RBP: 00007fb076e11e41 R08: 0000000000000000 R09: 0000000000000000 [ 1862.043650][T21827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1862.051626][T21827] R13: 00007fb076fd6038 R14: 00007fb076fd5fa0 R15: 00007fff7aa909d8 [ 1862.059613][T21827] [ 1862.062930][T21827] Kernel Offset: disabled [ 1862.067247][T21827] Rebooting in 86400 seconds..