last executing test programs:

8m11.506759603s ago: executing program 2 (id=477):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@index_off}]}) (fail_nth: 2)

8m11.253733995s ago: executing program 2 (id=479):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5}, 0x8)
r0 = userfaultfd(0x1)
close(0x3)
r1 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x2710, @host}, 0x10)
shutdown(r1, 0x1)
io_setup(0x8, &(0x7f0000004200)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}])
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8}, 0x50)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20000000, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7650000, 0x80}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x68}}, 0x8000)
syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

8m10.989010946s ago: executing program 2 (id=483):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000180)="74fa40b249c0d585699ce70fac7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f00000004c0), &(0x7f0000001c40)=r4}, 0x20)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
close(r7)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8m7.616656092s ago: executing program 2 (id=494):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x804008, &(0x7f0000000380)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167, @ANYRES8, @ANYRESHEX, @ANYRES8, @ANYRES64], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x3)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000140)=""/51, 0x33)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)=ANY=[])

8m6.931757532s ago: executing program 2 (id=497):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101201)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x300, 0xffff, 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1000000000000000, 0x7, 0xffffffffffffff8b, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='iocharset=maccyrillic,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=cp936,errors=continue,iocharset=cp863,errors=remount-ro,time_offset=0x0000000000000008,errors=remount-ro,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00da9e6281ed732202e92d385b355a8b25d5f39dadafad4bb7987fd8e29441bbc6e82871b48b3edc068c8629dccf3f5b446c25368d6872e0b16e23dbb4468ad8f7bf9f04ce7af7b48e32c74faaa501363aaf927834ab5356364b36f24655f86b3fff40d19d5bb954f3da29015cdb001605b6d29039f7b166c8b2f5"], 0x1, 0x1524, &(0x7f0000002280)="$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")
r8 = io_uring_setup(0x659b, &(0x7f0000000b80)={0x0, 0x52a2, 0x2000, 0x1, 0x37})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000001200)={0x7fb69adf, 0x0, &(0x7f0000001140)=[{&(0x7f0000000d80)=""/228, 0xe4}, {&(0x7f0000000e80)=""/37, 0x25}, {&(0x7f0000000ec0)=""/117, 0x75}, {&(0x7f0000000f40)=""/226, 0xe2}, {&(0x7f0000001040)=""/220, 0xdc}], &(0x7f00000011c0)=[0x0], 0x5}, 0x20)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000092095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r9}, 0x18)
listen(r4, 0x3)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200fc08820000000000850000008600000095254000f0ffffff03010000ffffffff18010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[r0, r5, r5, r5, r0], &(0x7f00000004c0)=[{0x4, 0x1, 0x6, 0x5}, {0x4, 0x5, 0xb}, {0x4, 0x3, 0x0, 0x9}, {0x1, 0x3, 0x0, 0xb}, {0x4, 0x2, 0x3, 0x1}], 0x10, 0x401}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r10, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0xd9, &(0x7f0000001540)=[{}, {}], 0x10, 0x10, &(0x7f0000000800), &(0x7f0000000940), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0)
ioctl$TUNSETNOCSUM(r11, 0x400454c8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001280), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000001340)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)={0x1c, r12, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000068000000008106907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0400ca90781000080a8000000000000fbc0105520000000700000767116c4636070d0000000bfffffffc080a008000010000008afe04f98913120c39e122bd2f7556512830d3139e4dcd8a37b2c6a3127a3fa7b7000000"], 0x0)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x1d, &(0x7f0000000600), &(0x7f0000000b40)=0x14)

8m6.810945527s ago: executing program 2 (id=500):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/171}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

8m6.727658611s ago: executing program 32 (id=500):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/171}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

12.558719155s ago: executing program 3 (id=1970):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002)
sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX])
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
r7 = dup2(r0, 0xffffffffffffffff)
getsockopt$inet_mreqn(r7, 0x0, 0x20, 0x0, 0x0)

11.373360346s ago: executing program 3 (id=1972):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = dup2(r0, r5)
getsockopt$inet_mreqn(r6, 0x0, 0x20, 0x0, 0x0)
shutdown(r5, 0x0)

10.845850069s ago: executing program 1 (id=1976):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = socket$inet6(0xa, 0x2, 0x0)
mkdir(0x0, 0x88)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0xc0386723, 0x0)
pipe2(0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
socket$packet(0x11, 0x2, 0x300)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc0}, 0x94)
connect$inet6(r5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r6}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x6a, 0x1, 0x0, 0x0, {0x0, 0x3, 0x2}}, 0x14}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r8 = syz_io_uring_setup(0x3fed, &(0x7f0000000380), &(0x7f0000000080), &(0x7f00000000c0))
io_uring_register$IORING_UNREGISTER_FILES(r8, 0x3, 0x0, 0x0)

10.071926533s ago: executing program 3 (id=1978):
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed07447900000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)={0x12c8, r5, 0xc4fc9e906872338b, 0x20, 0x200, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x164, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x13c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0x4}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x4}, {0x0, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x1}, {0x7, 0x8}, {0x3}, {0x3, 0x5}, {0x5, 0x6}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x7}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x8}, {0x7, 0x3}, {0x5, 0x3}, {0x4, 0x1}, {0x5, 0x2}, {0x5, 0x9}, {0x7, 0x9}, {0x1, 0xa}, {0x2, 0x9}, {0x7, 0x4}, {0x0, 0x6}, {0x1, 0x1}, {0x3, 0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x7, 0x7}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x9}, {0x3}, {0x1, 0x1}, {0x6, 0x3}, {}, {0x2}, {0x6, 0x7}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0xa}, {0x4, 0x6}, {0x3, 0x7}, {0x7, 0x7}, {0x1, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x5, 0x5, 0x1, 0xc, 0x2, 0x8, 0xf2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x0, 0x6, 0x6, 0x126a, 0x3ff, 0xff]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x5, 0x4, 0xc, 0x24, 0x60, 0x36, 0xb, 0xc, 0x5, 0x1b, 0x24, 0x48, 0x12, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x0, 0xea5c653e690ace4e, 0x6, 0x1, 0x30, 0x16, 0x2, 0x9, 0x36, 0x4, 0x1, 0x9, 0x6, 0x16, 0x60, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff, 0x5, 0x6, 0x51, 0x2, 0x8, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x538, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x324, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2e0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0xe, 0xd, 0x80, 0x8, 0x3]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x2}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x6, 0xa}, {0x7, 0x7}, {0x3, 0x9}, {0x5, 0x5}, {0x7, 0x7}, {0x3, 0x8}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x1, 0x4}, {0x3, 0x6}, {0x7, 0x8}, {0x1, 0x1}, {0x6, 0x9}, {0x6, 0x5}, {0x2, 0x9}, {0x7, 0x8}, {0x4, 0x8}, {0x1, 0xa}, {0x5, 0x2}, {0x7}, {0x0, 0x7}, {0x6, 0x9}, {0x5, 0x3}, {0x0, 0x5}, {0x0, 0x4}, {0x6, 0xa}, {0x6, 0xa}, {0x7, 0x4}, {0x4, 0x5}, {0x5, 0x9}, {0x7, 0x3}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x6}, {0x3, 0xa}, {0x1}, {0x0, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x6, 0x1, 0xf199, 0x5, 0x4, 0xc980]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x5, 0x3, 0x1, 0xa, 0x9, 0x8001]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x2}, {0x6, 0x2}, {0x3, 0x4}, {0x4, 0x5}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff2, 0x0, 0x7, 0xfffb, 0x0, 0x2, 0xffff, 0x5]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x4}, {0x4}, {0x1, 0x6}, {0x0, 0x2}, {0x6, 0x6}, {0x4, 0x7}, {0x7, 0x9}, {0x5, 0x7}, {0x3, 0x1}, {0x0, 0x5}, {0x6, 0x9}, {0x5, 0x4}, {0x1}, {0x5, 0x7}, {0x3, 0x4}, {0x3, 0x4}, {0x2, 0x5}, {0x5, 0x4}, {0x7, 0x7}, {0x7, 0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x7}, {0x5, 0x8}, {0x3}, {0x7, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x0, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x0, 0x3}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0x3}, {0x4, 0x6}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x2, 0x7, 0x8, 0x200, 0x5, 0x8, 0x3a]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x991, 0x100, 0x5, 0x400, 0x9, 0x7, 0x9d2d, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfffc, 0x2, 0x8001, 0x101, 0x0, 0xa4, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x18, 0x18, 0x5, 0x4, 0x9, 0x12, 0x21]}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x1, 0x48, 0x36, 0x6c, 0x36, 0x5, 0x1, 0x16, 0x3, 0x9, 0xc, 0x24, 0x12, 0x6c, 0x30, 0x3, 0x1b, 0x30, 0xb87945be4dfb5c71, 0x1b, 0x30, 0x18, 0x0, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x8}, {0x1, 0x9}, {0x1, 0x7}, {0x1, 0x3}, {0x2, 0x3}, {0x4, 0x3}, {0x7, 0x1}, {0x6, 0x9}, {0x0, 0x4}, {0x4, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x7}, {0x7, 0x5}, {0x7, 0x4}, {0x4, 0x1}, {0x5, 0x2}, {0x5, 0x6}, {0x6, 0x7}, {0x1}, {0x5}, {0x6, 0x2}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x4}, {0x1, 0x2}, {0x5, 0x3}, {0x0, 0x4}, {0x3}, {0x3, 0xa}, {0x4, 0x6}, {0x4, 0x5}, {}, {0x7, 0x6}, {}, {0x2, 0x1}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x8}, {0x5, 0x7}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x7}, {0x0, 0x9}, {0x3, 0xa}, {0x6, 0x9}, {0x4, 0x5}, {0x0, 0x4}, {0x6, 0x1}, {0x1, 0x2}, {0x2, 0x7}, {0x6, 0xa}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x2}, {0x1}, {0x1, 0x7}, {0x2, 0x4}, {0x6, 0x2}, {0x5, 0x4}, {0x1}, {0x7}, {}, {0x7, 0x7}, {0x6, 0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x5, 0xa}, {0x6, 0x9}, {0x6, 0xa}, {0x3, 0x3}, {0x6, 0x2}, {0x1}, {0x3, 0x6}, {0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6fa, 0x8, 0x4, 0x4, 0x10, 0x80, 0x2, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x200, 0x4f8f, 0x81, 0x7b, 0x3, 0x56]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x800, 0xf4c, 0x8, 0xff80, 0x28, 0x7]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x5, 0x3}, {0x1, 0x6}, {0x1, 0x9}, {0x0, 0x1}, {0x7, 0x7}, {0x1, 0x8}, {0x5}, {0x5, 0x3}, {0x1, 0x6}, {0x6, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x3, 0xa}, {0x6, 0x8}, {0x2, 0x3}, {0x2, 0x8}, {0x4, 0x7}, {0x7, 0xa}, {0x2, 0x5}, {0x1, 0x2}, {0x1, 0x9}, {0x6, 0x3}, {0x0, 0x1}, {0x2, 0x9}, {0x1, 0x2}, {0x3, 0xa}, {0x5, 0x4}, {0x2, 0xa}, {0x0, 0x7}, {0x5, 0xa}, {0x4, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x2}, {0x1, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x7, 0x9}, {0x6, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x4, 0x3}, {0x0, 0x6}, {0x5, 0x4}, {0x1}, {0x7, 0x4}, {0x3, 0x5}, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x4}, {0x5, 0x7}, {0x6, 0xa}, {0x3}, {0x4, 0x8}, {0x4, 0x3}, {0x7, 0x6}, {0x2, 0x9}, {}, {0x3, 0x6}, {0x5, 0x8}, {0x7, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x80, 0x7, 0x8, 0x6, 0x3, 0x7fff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x330, 0x9, 0x6f99, 0xfff, 0x4, 0x3, 0x9, 0x8]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x2, 0x4, 0xe0c, 0x5, 0x6, 0x6, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x46}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}, {0x1d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x93}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ac, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4b, 0x1, 0x2, 0x800, 0x1, 0x81, 0x6f09, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x257, 0x27, 0x5, 0x7, 0x7, 0x635b, 0x7f]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3ff, 0x3ff, 0x0, 0x7, 0x1, 0x3ff, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x89, 0x147, 0x4951, 0x7fff, 0x5, 0x1]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x5, 0x0, 0x18, 0x5, 0x27, 0x9, 0x5, 0x4, 0x5, 0x12, 0x1b, 0x3, 0xb, 0x24, 0x18, 0x16, 0x35, 0x1, 0x0, 0x16, 0x6c, 0xb, 0x30, 0x1b, 0x6, 0x18, 0x16, 0x1b, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x9c7b, 0x9, 0x3ff, 0x5, 0x8, 0x2]}}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x3, 0xfffe, 0x1, 0xfff8, 0x6, 0x612, 0x40]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x18, 0x2, 0x9, 0x1b, 0xb, 0x6c, 0x9, 0x3, 0x2, 0x12, 0x24, 0x1, 0x2, 0x36, 0x5, 0xc, 0x2, 0x0, 0x6c, 0x2, 0x6, 0xc, 0x12, 0x6, 0x4, 0xc, 0x60, 0xc, 0x36, 0x24, 0x60]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x6}, {0x0, 0x8}, {0x4, 0xa}, {0x0, 0x6}, {0x2, 0xa}, {0x2, 0x7}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0x7}, {0x5, 0x5}, {0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x8}, {0x2, 0xa}, {0x3}, {0x5, 0x6}, {0x2, 0x4}, {0x6, 0x4}, {0x5, 0x2}, {0x2, 0xa}, {0x1}, {0x5, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x5, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x6, 0x3ff, 0x5, 0x80, 0x89f, 0xf98b]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x6, 0x401, 0x3, 0x7dc, 0x4, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x48, 0x6c, 0x39, 0x4a, 0x6, 0x4, 0x36, 0xb, 0x9, 0x5, 0x3e, 0x30, 0xb, 0x12, 0x9, 0x60, 0x12, 0x3, 0x3, 0x1b, 0xc, 0x48, 0x5, 0x12, 0x4, 0x24, 0x18, 0x1, 0x60, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb, 0x0, 0x6a, 0x9, 0x4, 0x7fff, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xb28, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd2}]}, {0xfc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb792, 0x10, 0x928, 0x7, 0x7, 0xff, 0x8, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x7f, 0x8, 0x7, 0xfff, 0x2, 0xa6d, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x6, 0x7, 0x3ff, 0x7, 0x6, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x4, 0x5, 0x0, 0xe, 0xc, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0xfffd, 0x7, 0x0, 0x40, 0x7, 0x101]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xe0d, 0x4, 0x4, 0x6, 0x9, 0x41, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x520, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x91}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x3}, {0x5, 0x7}, {0x7, 0x8}, {0x6, 0x5}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x3}, {0x3, 0x5}, {0x3, 0xa}, {0x0, 0x4}, {0x5, 0x9}, {0x0, 0x9}, {0x4, 0x7}, {0x0, 0x1}, {0x0, 0x7}, {0x6, 0x3}, {0x4, 0x3}, {0x0, 0x6}, {0x2, 0x2}, {0x2, 0x9}, {0x5, 0x4}, {0x3, 0x7}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0xa}, {0x2, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x2}, {0x4, 0x4}, {0x1, 0x9}, {0x2, 0x2}, {0x5}, {0x5, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x7, 0xa}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x2, 0x5}, {0x4, 0x5}, {0x2, 0x5}, {0x1, 0x9}, {0x6}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x7}, {0x1, 0x5}]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x2, 0x8, 0x1, 0x9, 0xffff, 0xfff9]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x6c, 0xc, 0x31, 0x3, 0x6, 0x12, 0x1, 0x73, 0x64, 0xb, 0x5, 0x1, 0x60, 0x6c, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3ff, 0x8, 0x9, 0x1000, 0x4, 0x7fff, 0x92c]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x401, 0xb, 0x9785, 0x9, 0x8, 0x7, 0x800]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x3, 0x2, 0x7]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x12, 0x16, 0xb, 0x12, 0x6c, 0x5, 0x5, 0xb, 0x1, 0x16, 0x0, 0xb, 0x1b, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x4dd1, 0x0, 0x4, 0x7fff, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x1, 0x16, 0x3, 0x30, 0xb, 0x69, 0x6, 0xb, 0x19, 0x3, 0x1, 0x5, 0x24, 0x18, 0xa49370074259c6b6, 0x18, 0x16, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xf8, 0x430, 0x2, 0xe, 0xff48, 0x196, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3d4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x3}, {0x4, 0x3}, {0x7, 0x3}, {0x4, 0x5}, {0x7, 0x1}, {0x0, 0x7}, {0x5, 0x9}, {0x5, 0x2}, {0x4, 0x3}, {0x6, 0x7}, {0x2, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x61, 0x8, 0x3, 0xd, 0x9, 0x7ff, 0x3]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x6, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x1, 0x9}, {0x5, 0x1}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x1}, {0x3, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x3, 0xffb8, 0x634, 0x7, 0x7, 0x7, 0x1]}}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x3}, {0x2, 0x7}, {0x4, 0x7}, {0x4, 0xa}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x9}, {0x2, 0x2}, {0x5, 0x7}, {0x1, 0x1}, {0x4, 0xa}, {0x4, 0x2}, {0x0, 0xa}, {0x2, 0x1}, {0x1, 0xa}, {0x1, 0x5}, {0x5, 0x5}, {0x6, 0x7}, {0x5, 0x5}, {0x1, 0x2}, {0x1, 0xa}, {0x3, 0x5}, {0x6, 0x7}, {0x1, 0x8}, {0x7, 0x3}, {0x3, 0xa}, {0x7, 0x4}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0xa}, {0x7, 0x7}, {}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x6, 0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x5, 0x8}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x7}, {0x2, 0x5}, {0x2, 0x4}, {0x1, 0x3}, {0x4, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x5, 0xa}, {0x3, 0x1}, {0x0, 0x6}, {0x4, 0x8}, {0x1, 0xa}, {0x2, 0xa}, {0x7, 0xa}, {0x2, 0x1}, {0x1, 0x9}, {0x4, 0x8}, {0x6, 0x4}, {0x0, 0x7}, {0x2, 0x6}, {0x0, 0x10}, {0x6, 0x1}, {0x0, 0xa}, {0x3, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x5, 0x4}, {0x1, 0x7}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0x2}, {0x4, 0xa}, {0x5, 0xa}, {0x4}, {0x0, 0x9}, {0x7}, {0x3}, {0x5, 0x7}, {0x3, 0x8}, {0x0, 0x1}, {0x7, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x3}, {0x2, 0x7}, {0x1, 0x8}, {}, {0x5, 0xa}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x5}, {0x3, 0x8}, {0x4, 0x2}, {0x5, 0x2}, {0x1, 0x2}, {0x2, 0x6}, {0x2, 0x5}, {}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x3}, {0x5, 0x2}, {0x6, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x61, 0x1, 0x24, 0x4, 0xb, 0x1b, 0x9, 0xb, 0x60, 0x2, 0x30, 0x24, 0x0, 0x48, 0xb, 0xb, 0xc, 0x30, 0x12, 0x16, 0x16, 0x1d, 0xc]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x1b, 0x5, 0x6c, 0x36, 0x6, 0x3, 0x5, 0x6, 0xc, 0x9, 0x6, 0x24, 0x3]}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x10, 0xff00, 0x3, 0xfffe, 0x1, 0x9, 0x8a6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x6}, {0x6}, {0x5, 0x1}, {0x2, 0x6}, {0x3, 0xa}, {0x4, 0xa}, {0x6}, {0x6, 0xa}, {0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x8}, {0x0, 0x8}, {0x4, 0xa}, {0x5, 0x9}, {0x7, 0x3}, {0x1, 0x7}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0xa}, {0x6, 0xa}, {0x3, 0x4}, {0x5, 0x3}, {0x4, 0x5}, {0x5, 0x4}, {0x4, 0x3}, {0x0, 0xa}, {0x1, 0xa}, {0x2, 0x1}, {0x2, 0xa}, {0x4, 0x6}, {0x3, 0x8}, {0x6, 0x4}, {}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x6, 0xd, 0x6, 0x0, 0x1b, 0x5, 0x18, 0xc, 0x30, 0x60, 0x0, 0x17, 0xb, 0x2, 0x9, 0x2, 0x5, 0x9, 0x1334c2c89c64d58b, 0x5, 0x1b, 0x5, 0x60, 0x36, 0x4, 0x12, 0x4]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x6c, 0xb, 0xc, 0x12, 0x30, 0x2, 0x30, 0x6d, 0x21, 0x48, 0x16, 0x30, 0x6c, 0x36, 0x6c, 0x9, 0x3, 0xc, 0x19, 0x9, 0x30, 0xb, 0x58, 0xc, 0xc, 0x28, 0x4, 0x24, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0xa}, {0x3, 0x3}, {0x6, 0xa}, {0x4, 0x2}, {0x7, 0x6}, {0x5, 0x7}, {0x4, 0x6}, {0x0, 0x5}, {0x2, 0x1}, {0x3, 0x9}, {0x0, 0x2}, {0x0, 0x8}, {0x2, 0x6}, {0x4, 0x9}, {0x4, 0x9}, {0x7, 0x3}, {0x6, 0x2}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x1}, {0x7, 0x8}, {0x2, 0x4}, {0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x5, 0x2}, {0x0, 0x8}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x2, 0x2}, {0x3, 0x1d}, {0x3, 0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xb, 0x48, 0x18, 0x24, 0x28, 0x1, 0xb, 0x6, 0x6c, 0x2, 0x6c, 0x6, 0x3, 0x36, 0xc, 0x12, 0x16, 0x16, 0x16, 0x5, 0x12, 0x0, 0x16, 0x12]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x6}, {0x0, 0x3}, {0x2}, {0x7, 0x3}, {0x1, 0x2}, {0x1, 0x1}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x8}, {0x0, 0x3}, {0x5, 0x6}, {}, {0x4, 0x1}, {0x0, 0x6}, {0x5, 0x8}, {}, {0x7, 0x9}, {0x7, 0x4}, {0x1, 0x3}, {0x6, 0x3}, {0x1}, {0x6, 0x2}, {0x0, 0x8}, {0x4, 0x7}, {0x3, 0x6}, {0x4, 0xa}, {0x6}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x2, 0x3}, {0x4, 0x5}, {0x0, 0x8}, {0x7, 0x7}, {0x1, 0x9}, {0x3, 0x2}, {0x5}, {0x1, 0x2}, {0x3, 0x1}, {0x7}, {0x1, 0x5}, {0x1, 0x5}, {0x4, 0x8}, {0x1, 0x9}, {0x3, 0x4}, {0x1, 0x1}, {0x4, 0x2}, {0x3, 0x6}, {0x5, 0x8}, {0x7}, {0x1, 0x7}, {0x3}, {0x7, 0x4}, {0x2, 0xa}, {0x5, 0x2}, {0x4, 0x1}, {0x0, 0x8}, {0x4, 0xa}, {0x7, 0x6}, {0x1, 0x6}, {0x3, 0x2}, {0x3, 0x9}, {0x7, 0x7}, {0x3, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5b34, 0x6, 0x326, 0x34, 0x7fff, 0x2, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x0, 0x3, 0x100, 0x7fff, 0x8, 0x8]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x1}, {0x7, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x2, 0x5}, {0x1, 0x6}, {0x6, 0x4}, {0x5, 0x8}, {0x1, 0x4}, {0x3}, {0x3, 0x1}, {0x6, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x6}, {0x4, 0x5}, {0x5, 0x6}, {0x6, 0x2}, {0x2, 0x2}, {0x7, 0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x4}, {0x1, 0x9}, {0x4, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x8}, {0x7, 0xa}, {0x3, 0x5}, {0x1, 0x2}, {0x0, 0x9}, {0x2, 0x8}, {0x0, 0x8}, {0x5, 0x3}, {0x4, 0x5}, {0x6, 0x8}, {0x7}, {0x7, 0x3}, {0x3, 0xc}, {0x1, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x5, 0x6c, 0x6c, 0x30, 0x48, 0x6f, 0x4, 0x16]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x1}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x5}, {0x1, 0x4}, {0x7, 0x4}, {0x1, 0x3}, {0x4, 0x7}, {0x5, 0x9}, {0x2, 0x9}, {0x1, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x4}, {0x2, 0x2}, {0x4, 0x6}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x7}, {0x5, 0x8}, {0x6, 0x5}, {0x5}, {0x2, 0x3}, {0x5, 0x5}, {0x5, 0x8}, {0x2, 0x3}, {0x3, 0x7}, {0x0, 0x9}, {0x5, 0x2}, {0x1}, {0x3, 0x9}, {0x0, 0x2}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x6, 0x7ff, 0x0, 0x6, 0x8, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0x24, 0x1b, 0x6c, 0x18, 0x5, 0x6b, 0x5, 0x9, 0x12, 0xb, 0x1, 0x9, 0xb, 0x24, 0x24, 0x30, 0x1b, 0x24, 0x9, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x5}, {0x1, 0x5}, {0x7, 0x2}, {0x3, 0x5}, {0x7, 0x6}, {0x0, 0x3}, {0x5, 0x2}, {0x3, 0x3}, {0x6, 0x5}, {0x0, 0xa}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4f4, 0x8, 0x8, 0x5, 0x8001, 0x7, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x10, 0x9, 0x4, 0x8, 0x8001, 0x4, 0x96]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x200, 0xb0, 0x9, 0x6, 0x8, 0xfffa, 0xadd0]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x4}, {0x1}, {0x3, 0x8}, {0x2, 0x7}, {0x5}, {0x2, 0x3}, {0x6, 0x8}, {0x4, 0x7}, {0x6, 0x6}, {0x5, 0x9}, {0x6, 0x3}, {0x2, 0x4}, {0x7, 0x2}, {0x6, 0x8}, {0x6, 0x4}, {0x2, 0x2}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x2}, {0x1, 0x3}, {0x2, 0xa}, {0x7, 0x5}, {0x2, 0x5}, {0x4}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0x1}, {0x4}, {0x0, 0x2}, {0x1, 0x3}, {0x7, 0x3}, {0x7}, {0x1, 0x4}, {0x0, 0x5}, {0x2, 0xa}, {0x7, 0x2}, {0x3, 0x2}, {0x5, 0x6}, {0x1}, {0x6, 0x8}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x7}, {0x0, 0x5}, {0x7, 0x5}, {0x7, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x70}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x60, 0x2, 0x36, 0x36, 0x6c, 0x0, 0x1, 0x1, 0xb, 0x24, 0x1, 0xc, 0x16, 0x1, 0x48, 0x6, 0x36, 0x1, 0x3, 0x24, 0xb, 0x36, 0x30, 0x6c, 0x36, 0x1]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x5, 0x5, 0x1, 0x4, 0xc, 0x4, 0x3, 0x1, 0x0, 0xc]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x7}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x8}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x4}, {0x7, 0x1}, {0x2, 0x4}, {0x1, 0x5}, {0x2, 0x9}, {0x7, 0x6}, {0x6, 0x6}, {0x7}, {0x6, 0x8}, {0x3, 0x2}, {0x7, 0x4}, {0x2, 0x2}, {0x5, 0x9}, {0x5, 0x2}, {0x2, 0x6}, {0x5, 0x7}, {0x2}, {0x1, 0x5}, {0x0, 0x5}, {0x4, 0x6}, {0x0, 0x1}, {0x3, 0x8}, {0x5, 0x4}, {0x1, 0x6}, {0x5, 0x4}, {0x7, 0x2}, {0x3, 0xa}, {0x4, 0x7}, {0x3, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x2, 0x3, 0x7f, 0x2, 0x2, 0x8, 0x66ac]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}]}, {0x314, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x66}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x19}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x214, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x7}, {0x0, 0x3}, {0x7, 0xa}, {0x7, 0x2}, {0x2, 0x9}, {0x6, 0xa}, {0x4, 0x4}, {0x2, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0xa}, {0x3, 0x7}, {0x5, 0x4}, {0x5, 0x6}, {0x1, 0x2}, {0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x7, 0x4}, {0x1, 0x2}, {0x2, 0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x800, 0x3, 0x7980, 0x5, 0x1, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x81, 0x7, 0x1, 0x7, 0x40, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xb, 0x6, 0x4, 0x8001, 0x9, 0xb48, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x1b, 0xd, 0x1b, 0x16, 0x24, 0x6, 0xc, 0x60, 0xb, 0x30, 0x30, 0x3, 0x2, 0x24, 0x36, 0x0, 0x5, 0x36, 0x16, 0x12, 0x12, 0x24, 0x16, 0x18, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x2, 0x2154, 0x7, 0x0, 0x8001, 0x6, 0xd3c]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x4, 0x6}, {0x6, 0x3}, {0x0, 0x4}, {0x5, 0x9}, {0x3, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0x8}, {0x3, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x4, 0x3}, {0x3}, {0x0, 0x1}, {0x2, 0x2}, {0x3, 0x2}, {0x4, 0xa}, {0x1, 0x6}, {0x1, 0x5}, {0x6, 0x8}, {0x7, 0x9}, {0x7, 0x4}, {0x5, 0xa}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x3}, {0x3, 0x7}, {0x1, 0x7}, {0x7, 0x6}, {0x5, 0x2}, {0x2, 0x1}, {0x7, 0x2}, {0x7, 0x1}, {0x3, 0x9}, {0x7, 0x9}, {0x5, 0x5}, {0x5, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x3, 0x4}, {0x5, 0x8}, {0x4, 0x3}, {0x5, 0x5}, {0x3, 0x9}, {0x6, 0x5}, {0x6, 0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x7}, {0x0, 0x6}, {0x4, 0x4}, {0x6}, {0x6, 0x5}, {0x6, 0xa}, {0x6, 0xa}, {0x0, 0x4}, {0x2, 0xa}, {0x0, 0x2}, {0x6, 0x3}, {0x6, 0x9}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1c}, {0x6, 0xa}, {0x7}, {0x7, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff8, 0x400, 0x1444, 0x5, 0x6, 0x0, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x6}, {0x4, 0x2}, {0x1, 0x5}, {0x6, 0x5}, {0x3, 0x2}, {0x6, 0xa}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x6}, {0x7, 0x7}, {0x6, 0x2}, {0x2}, {0x7}, {0x1, 0x4}]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x3, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x2}, {0x4}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x2}, {0x5, 0x1}, {0x3, 0x9}, {0x0, 0xa}, {0x4, 0x6}, {0x3, 0x9}, {0x7, 0x3}, {}, {0x3, 0x8}, {0x6, 0x6}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x2}, {0x7, 0x5}, {0x6, 0x1}, {0x2, 0x8}, {0x5, 0x2}, {0x2, 0x2}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0x5}, {0x7, 0x1}, {0x4}, {0x3, 0x5}, {0x0, 0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4000, 0x81, 0x9bb7, 0x0, 0x76f, 0x9, 0x5, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x60, 0x1, 0x24, 0x9, 0x44, 0x24, 0x12, 0x5, 0x24, 0x6, 0x1, 0x5, 0x60, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xe, 0x7, 0x7f, 0xf0, 0x8000, 0x2, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x9}, {0x7, 0x8}, {0x7, 0x7}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0x5}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0x1}, {0x2, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {0x0, 0x7}, {0x2, 0x8}, {0x6, 0xa}, {}, {0x5, 0x4}, {0x7, 0xa}, {0x5, 0x1}, {0x7, 0xa}, {0x5, 0x4}, {0x1, 0x1c}, {0x4, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x1, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x2, 0xa}, {0x1, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x3, 0x2}, {0x7, 0x6}, {0x1, 0x2}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x5, 0x4}, {0x1, 0x8}, {0x7, 0x5}, {0x1, 0x4}, {0x3, 0xa}, {0x6, 0xa}, {0x3, 0x3}, {0x2, 0x8}, {0x3, 0x2}, {0x6, 0x5}, {0x3, 0x2}, {0x4, 0x1}, {0x6, 0x6}, {0x1, 0x4}, {0x4, 0xa}, {0x5, 0xa}, {0x7, 0x5}, {0x1, 0xa}, {0x5, 0x6}, {}, {0x3, 0x3}, {0x2, 0x9}, {0x4, 0x5}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x9}, {0x3}, {0x4, 0xa}, {0x3, 0x3}, {0x6}, {0x6, 0x5}, {0x2, 0x9}, {0x4}, {0x4, 0x6}, {0x7, 0x4}, {0x6, 0x9}, {0x1, 0x3}, {0x2, 0x5}, {0x0, 0x8}, {0x0, 0x4}, {0x1, 0x7}, {0x7, 0x7}, {0x6, 0x7}, {0x1, 0x1}, {0x6, 0x1}, {0x3, 0x4}, {0x1, 0x8}, {0x6, 0x4}, {0x2, 0xa}, {0x2}, {0x2}, {0x2, 0x5}, {0x7, 0x5}, {0x2, 0x6}, {0x0, 0xa}, {0x7, 0x1}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0x9}, {0x7}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x2}, {0x6, 0x1}, {0x1, 0xa}, {0x7, 0x4}, {0x1, 0x6}, {0x1, 0x8}, {0x2, 0x9}, {0x2, 0x1}, {0x5, 0x6}, {0x2, 0x1}, {0x3, 0x9}, {0x7, 0x7}, {0x4}, {0x5, 0x9}, {0x6, 0x8}, {0x0, 0x1}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x7, 0x7}, {0x1, 0x4}, {0x1, 0x4}, {0x2, 0xa}, {0x7, 0x5}, {0x2, 0xa}, {0x1, 0x9}, {0x1}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x19, 0x5, 0x48, 0x9, 0xb, 0x16, 0x1b, 0x18, 0xb, 0x3, 0xb, 0x5, 0x1, 0x60, 0x36, 0x30, 0x2, 0x6c, 0x60, 0x1b, 0x12, 0x18, 0x48, 0x36, 0x24, 0x49]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x108, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x8}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0x6}, {0x2, 0x5}, {0x0, 0x7}, {0x2, 0x5}, {}, {0x1}, {0x7}, {0x1, 0x1}, {0x7, 0x8}, {0x6, 0x8}, {0x3, 0x6}, {0x7, 0x2}, {0x2, 0x7}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x5}, {0x4, 0xa}, {0x1, 0x1}, {0x1}, {0x2, 0x9}, {0x5, 0x8}, {0x2, 0x5}, {0x5, 0x3}, {}, {0x4, 0x9}, {0x2, 0x3}, {0x0, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x4, 0xa}, {0x1, 0x1}, {0x0, 0xa}, {0x6, 0x8}, {0x5, 0x2}, {0x2, 0xa}, {0x1, 0x2}, {0x3}, {0x3, 0x4}, {0x3, 0x9}, {0x1, 0x17}, {0x1, 0x3}, {0x3, 0x7}, {0x2, 0x1}, {0x1, 0x3}, {0x3, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x12, 0x16, 0x6c, 0xc, 0x2, 0x2, 0x4, 0x3, 0x69, 0x36, 0x6c, 0x5, 0x3, 0x12, 0x3a, 0x1b, 0x18, 0x1b, 0x2, 0x9, 0x5, 0xd, 0x6, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x4be, 0x30ac, 0x7, 0x67, 0x69, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfec, 0x6, 0xfaa3, 0xa3a, 0x1000, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x6, 0x8, 0x6, 0x9, 0xffff, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x27, 0x18, 0x60, 0x48, 0x36, 0xd260d4391480f419, 0x5, 0x9, 0x4, 0x2, 0xa, 0x6c, 0x15, 0x18, 0x4, 0x1b, 0x6, 0x12, 0x4, 0x54]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x22}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xa8, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x30}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x57f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x67ff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xbf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}]}]}, 0x12c8}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a6, &(0x7f0000000980)="$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")
r6 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
io_setup(0x200, &(0x7f0000000140)=<r7=>0x0)
io_submit(r7, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r6, &(0x7f0000000000), 0x4000}])
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0)

9.632056662s ago: executing program 1 (id=1981):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fe, &(0x7f0000000ac0)="$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")
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, &(0x7f00000010c0)={0x40, 0x21, 0xfe, {0xfe, 0x10, "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"}}, &(0x7f00000009c0)={0x0, 0x3, 0x6, @string={0x6, 0x3, "187d3dcb"}}, &(0x7f0000000a00)={0x0, 0x22, 0x12, {[@main=@item_4={0x3, 0x0, 0xc, "d6d08bcd"}, @main=@item_012={0x2, 0x0, 0xa, "bbb9"}, @local=@item_012={0x2, 0x2, 0x8, "9285"}, @global=@item_4={0x3, 0x1, 0x2, "0b35429e"}, @main=@item_012={0x1, 0x0, 0x8, "9d"}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xe, 0x1, {0x22, 0x14e}}}}, &(0x7f0000001400)={0x2c, &(0x7f0000001200)={0x0, 0x0, 0xc7, "4b169b55d0f24bab82959f65340e2141a6fd77b66f431ce85f86f2824e5403a91e72223318b47fd7f03ed43a966ce548d7936a6a9a2f03a2b81a05cc2759685d36a5252b96f56e60608e065b372c0ddf2415043962d05f19041b0703a28463cccb6eee3ba211b55b56bed0745848dc5e1c53f70126ec252a6da76ce9c4296be4c21765061b1e03eaf78c0991cfe1bcc0f64dfc6c234e58437731223497e790343bc9d6f31f95ff0ea4c521273eafb9df9001a3b56ff410328477f4407cd34f05f255e73ba4aeab"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001380)={0x20, 0x1, 0x21, "22a485de2daa40890aaab5f95e7585edb05d365997a75cdf312577636b925f59fd"}, &(0x7f00000013c0)={0x20, 0x3, 0x1, 0x5}})

8.944607951s ago: executing program 3 (id=1985):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x3, 0x80002)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x2ff, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"})

8.157779305s ago: executing program 4 (id=1989):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = dup2(r0, r5)
getsockopt$inet_mreqn(r6, 0x0, 0x20, 0x0, 0x0)
shutdown(r5, 0x0)

7.649918278s ago: executing program 0 (id=1990):
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20)
getgid()
r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0x0, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x0, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r5, r6, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x840000000002, 0x3, 0xff)
chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0)

7.265686615s ago: executing program 5 (id=1991):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r6=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000400)={0xa})
syz_usb_connect(0x4, 0x24, 0x0, 0x0)
epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

7.180079898s ago: executing program 4 (id=1992):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000004c0), &(0x7f0000001c40)=r2}, 0x20)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
close(r5)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.008876405s ago: executing program 1 (id=1993):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xff, 0xffffff00, 0xffffffff, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'batadv_slave_1\x00', {}, {}, 0x2b, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0xbe75}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6_vti0\x00', {0x0, 0x0, 0x5, 0x0, 0x162a0916, 0x7, 0x3ff, 0x88}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={0x0}, 0x18)
connect$netlink(r6, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc)
sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f9010000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000104010400000000000000000000000005000100010000009541c65bad8e147880c03978a74a3fb17fc8cd5cd2e2abfe8b025e03f367ccc76c6419e9f8fee5ff9b46baa0252bbb4cdd32327ebbdc40d9d24abc8142d7964a4a6af38c9e59b25de3fe69c6279046"], 0x1c}}, 0x0)
pipe2(&(0x7f0000000200), 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff)
io_uring_setup(0x71c7, &(0x7f0000000080)={0x0, 0x9b95, 0x80, 0x9, 0x154})

6.512756647s ago: executing program 0 (id=1994):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18eeffffff000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0)=0x4, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)="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", 0x3d9}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)

6.308084116s ago: executing program 3 (id=1995):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r6=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000400)={0xa})
syz_usb_connect(0x4, 0x24, 0x0, 0x0)
epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

6.133705814s ago: executing program 1 (id=1996):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==")
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX])
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$unix(0x1, 0x2, 0x0)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r6 = socket$nl_route(0x10, 0x3, 0x0)
dup2(r0, r6)
shutdown(r6, 0x0)

5.628141306s ago: executing program 0 (id=1997):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x8004e60}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x4a5, &(0x7f0000000bc0)="$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")
unshare(0x2040400)
fstatfs(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
lstat(0x0, &(0x7f0000000400))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x52, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x48804)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='decodes'], 0xd)

4.993050773s ago: executing program 5 (id=1998):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5}, 0x8)
r0 = userfaultfd(0x1)
close(0x3)
r1 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x2710, @host}, 0x10)
shutdown(r1, 0x1)
io_setup(0x8, &(0x7f0000004200)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}])
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8}, 0x50)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20000000, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7650000, 0x80}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x68}}, 0x8000)

4.124518141s ago: executing program 4 (id=1999):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002)
sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX])
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$unix(0x1, 0x2, 0x0)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = dup2(r0, r8)
getsockopt$inet_mreqn(r9, 0x0, 0x20, 0x0, 0x0)
shutdown(r8, 0x0)

4.079439573s ago: executing program 0 (id=2000):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002)
sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX])
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$unix(0x1, 0x2, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r7 = dup2(r0, 0xffffffffffffffff)
getsockopt$inet_mreqn(r7, 0x0, 0x20, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)

3.993526766s ago: executing program 1 (id=2001):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xff, 0xffffff00, 0xffffffff, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'batadv_slave_1\x00', {}, {}, 0x2b, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0xbe75}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6_vti0\x00', {0x0, 0x0, 0x5, 0x0, 0x162a0916, 0x7, 0x3ff, 0x88}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={0x0}, 0x18)
connect$netlink(r6, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc)
sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000104010400000000000000000000000005000100010000009541c65bad8e147880c03978a74a3fb17fc8cd5cd2e2abfe8b025e03f367ccc76c6419e9f8fee5ff9b46baa0252bbb4cdd32327ebbdc40d9d24abc8142d7964a4a6af38c9e59b25de3fe69c6279046"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r7, 0x0, 0x0)
pipe2(&(0x7f0000000200), 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff)
io_uring_setup(0x71c7, &(0x7f0000000080)={0x0, 0x9b95, 0x80, 0x9, 0x154})

3.933252899s ago: executing program 5 (id=2002):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = dup2(r0, r5)
getsockopt$inet_mreqn(r6, 0x0, 0x20, 0x0, 0x0)
shutdown(r5, 0x0)

2.330856329s ago: executing program 0 (id=2003):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX])
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$unix(0x1, 0x2, 0x0)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r6 = socket$nl_route(0x10, 0x3, 0x0)
dup2(r0, r6)
shutdown(r6, 0x0)

2.330046868s ago: executing program 4 (id=2004):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000020000000000000002000000856ac5002e000000950000000000000067c45408f8654244f1f4667f6516f798cb49fb3c76d1a89ad1072ff6aee4d4aac829d01400089aeea197977fe132303d8347738dbda634c377a02731a770d013fa33f4e5b3a2bdf55b2f9d66617194f898b415d58b4c690328300ef1b9549a"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2}, 0x94)
mount(0x0, 0x0, 0x0, 0x800, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), 0x0, 0x5008020, 0x0, 0x1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}]}, 0x30}}, 0x0)

2.321071909s ago: executing program 3 (id=2005):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f00000004c0), &(0x7f0000001c40)=r3}, 0x20)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
close(r6)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.154785946s ago: executing program 1 (id=2006):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$unix(0x1, 0x5, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x4, '$\r'}, @global=@item_012={0x0, 0x1, 0x1}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)

1.401345029s ago: executing program 4 (id=2007):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xff, 0xffffff00, 0xffffffff, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'batadv_slave_1\x00', {}, {}, 0x2b, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0xbe75}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6_vti0\x00', {0x0, 0x0, 0x5, 0x0, 0x162a0916, 0x7, 0x3ff, 0x88}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={0x0}, 0x18)
connect$netlink(r6, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc)
sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f9010000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000104010400000000000000000000000005000100010000009541c65bad8e147880c03978a74a3fb17fc8cd5cd2e2abfe8b025e03f367ccc76c6419e9f8fee5ff9b46baa0252bbb4cdd32327ebbdc40d9d24abc8142d7964a4a6af38c9e59b25de3fe69c6279046"], 0x1c}}, 0x0)
pipe2(&(0x7f0000000200), 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff)
io_uring_setup(0x71c7, &(0x7f0000000080)={0x0, 0x9b95, 0x80, 0x9, 0x154})

1.1281157s ago: executing program 0 (id=2008):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r6=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000400)={0xa})
syz_usb_connect(0x4, 0x24, 0x0, 0x0)
epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

1.127729471s ago: executing program 5 (id=2009):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c)
mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
sched_setparam(0x0, &(0x7f0000000040)=0x2)
getdents(r2, 0x0, 0x48) (fail_nth: 1)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/timer\x00', 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
unshare(0x60400)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

733.279538ms ago: executing program 5 (id=2010):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYRESDEC, @ANYRESOCT=r0, @ANYBLOB="a498a47f7fdd41f0496f315109309e599e19c486d73912069d7862ef21edc7ca681c625ba71740f6f31c0c681fe35b6c4a969760e24b99c113dedd83944d7a4cecd82e1e8f36479d4d71aef81deca8db9b127352584fa77fbd924ea050efc03e1fab4130bae3da00bdb1658dadf21203d0880b8818ed232ee075e4d925b9ab41d79b5f3c08737edc9fe3", @ANYRESDEC, @ANYRESHEX, @ANYRES64], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c0100001000130729bd7000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0300000009b21541a036c2e7febf0000150dc9baae"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', <r5=>0x0, 0x4, 0xf7, 0x9, 0x0, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8, 0x7800, 0x5, 0x800}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@getchain={0x74, 0x66, 0x405456251ce2ea66, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8, 0x8}, {0xfff1}, {0xa, 0xa}}, [{0x8, 0xb, 0x200}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x110db952}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x7fff}]}, 0x74}, 0x1, 0x0, 0x0, 0x11}, 0x4004)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c)
mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)
r6 = gettid()
r7 = syz_clone(0x8102200, &(0x7f0000000300)="0a9c7995ca84016df483c9e58403d932ede44dbea7f4ae90a060826b0b9e3491bab2e5bc3019a79f5baa9b092c7b9da686c5fd04d423d2f2f4769a80a2163ae50c606259bc09edcfaf1c9f27825a0e19d242f551dd5cba36d8231a12ef990ee3642e4f9cd66eef1d5f009552fba2fb4aed550be5764997e6ab3587f0c53112b6e619fe49", 0x84, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000540)="7938c1e91e965e47f1aee7f429e131c1f00f6caee12f193759d8aff7bcf651161f276ade5010d6317890242587c0e0e62f321b445ddda495ed4b02da898b64072db6186592e4412698981e5f199426f7e7dceb0ea89da1c04e1190be5ba484b3d2ef16d3aed9022d2fac8f17a32613ae7541de3805df42bf73f5424c5fb77846a8106e8e9cd98a05824987ac643fa8e0d20113e93e5f67cc6f349bd35c0746e1bffef55194c7bb28b5c746e8d56ebba8e4383cad297f8c3bdc87e6afd4f2763095755a418cb9b63be2d2332dc8bd0a938643bba54ea6d350364f4af08467f0594a7a")
setpgid(r6, r7)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
sched_setparam(0x0, &(0x7f0000000040)=0x2)
getdents(r8, 0x0, 0x48)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/timer\x00', 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

172.900852ms ago: executing program 4 (id=2011):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x8004e60}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x4a5, &(0x7f0000000bc0)="$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")
unshare(0x2040400)
fstatfs(0xffffffffffffffff, 0x0)

0s ago: executing program 5 (id=2012):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5}, 0x8)
r0 = userfaultfd(0x1)
close(0x3)
r1 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x2710, @host}, 0x10)
shutdown(r1, 0x1)
io_setup(0x8, &(0x7f0000004200)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}])
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8}, 0x50)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20000000, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7650000, 0x80}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x68}}, 0x8000)

kernel console output (not intermixed with test programs):

T287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.523638][  T287] usb 2-1: config 0 descriptor??
[  523.530152][  T287] hub 2-1:0.0: USB hub found
[  523.538515][ T1028] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  523.597179][   T39] usbhid 5-1:0.0: can't add hid device: -71
[  523.603392][   T39] usbhid: probe of 5-1:0.0 failed with error -71
[  523.638267][   T39] usb 5-1: USB disconnect, device number 74
[  523.717908][ T1028] usb 4-1: Using ep0 maxpacket: 32
[  523.724108][ T1028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.735163][ T1028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  523.745134][ T1028] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  523.754254][ T1028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.763146][ T1028] usb 4-1: config 0 descriptor??
[  523.769060][ T1028] hub 4-1:0.0: USB hub found
[  523.970150][ T1028] hub 4-1:0.0: 1 port detected
[  523.989093][  T287] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  524.262448][  T287] usbhid 2-1:0.0: can't add hid device: -71
[  524.270834][  T287] usbhid: probe of 2-1:0.0 failed with error -71
[  524.329217][  T287] usb 2-1: USB disconnect, device number 69
[  524.428024][   T39] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  524.541983][ T1028] usb 4-1: USB disconnect, device number 78
[  524.617940][   T39] usb 5-1: Using ep0 maxpacket: 32
[  524.624750][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  524.636445][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  524.646415][   T39] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  524.655594][   T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.677058][   T39] usb 5-1: config 0 descriptor??
[  524.686638][   T39] hub 5-1:0.0: USB hub found
[  524.870533][ T6939] loop1: detected capacity change from 0 to 128
[  524.890055][   T39] hub 5-1:0.0: 1 port detected
[  525.034232][ T6939] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  525.043742][ T6939] ext4 filesystem being mounted at /304/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  525.387749][ T6945] loop5: detected capacity change from 0 to 1024
[  526.338738][   T39] hub 5-1:0.0: hub_hub_status failed (err = -32)
[  526.345411][   T39] hub 5-1:0.0: config failed, can't get hub status (err -32)
[  526.444225][   T39] usbhid 5-1:0.0: can't add hid device: -32
[  526.453464][   T39] usbhid: probe of 5-1:0.0 failed with error -32
[  526.985902][  T282] EXT4-fs (loop1): unmounting filesystem.
[  527.167923][   T39] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  527.183053][   T24] usb 5-1: USB disconnect, device number 75
[  527.317891][  T548] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  527.388273][   T39] usb 4-1: Using ep0 maxpacket: 32
[  527.407613][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  527.420132][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  527.431521][   T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  527.442629][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.486130][   T39] usb 4-1: config 0 descriptor??
[  527.492766][   T39] hub 4-1:0.0: USB hub found
[  527.529046][  T548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  527.540665][  T548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  527.553189][  T548] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  527.564233][  T548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.617031][  T548] usb 2-1: config 0 descriptor??
[  527.693045][   T39] hub 4-1:0.0: 1 port detected
[  528.128612][ T6975] syz.0.1642[6975] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  528.129412][ T6975] syz.0.1642[6975] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  528.526307][   T39] usb 4-1: USB disconnect, device number 79
[  528.800652][ T6957] loop1: detected capacity change from 0 to 1024
[  528.968983][ T6957] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  528.978958][ T6957] EXT4-fs (loop1): invalid journal inode
[  528.985283][ T6957] EXT4-fs (loop1): can't get journal size
[  528.992620][ T6957] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 17104912: comm syz.1.1639: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  529.030918][ T6979] loop5: detected capacity change from 0 to 128
[  529.044945][ T6957] EXT4-fs (loop1): failed to initialize system zone (-117)
[  529.058041][ T6957] EXT4-fs (loop1): mount failed
[  529.069147][ T6979] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  529.078000][ T6979] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  529.081396][ T6986] loop4: detected capacity change from 0 to 128
[  529.111363][ T6987] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  529.140159][  T548] keytouch 0003:0926:3333.0062: fixing up Keytouch IEC report descriptor
[  529.145200][ T6986] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  529.157590][ T6986] ext4 filesystem being mounted at /298/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  529.160731][  T548] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0062/input/input67
[  529.380277][  T548] keytouch 0003:0926:3333.0062: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  529.803392][  T548] usb 2-1: USB disconnect, device number 70
[  529.989392][  T285] EXT4-fs (loop4): unmounting filesystem.
[  531.893214][ T7013] loop3: detected capacity change from 0 to 128
[  531.903608][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  531.938645][ T7013] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  531.949553][ T7013] ext4 filesystem being mounted at /328/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  532.991820][  T283] EXT4-fs (loop3): unmounting filesystem.
[  533.255843][ T7038] loop1: detected capacity change from 0 to 1024
[  533.340538][ T7039] syz.5.1656[7039] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  533.340928][ T7039] syz.5.1656[7039] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  533.390830][ T7039] loop5: detected capacity change from 0 to 512
[  533.491625][ T7039] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1656: inode has both inline data and extents flags
[  533.505755][ T7039] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1656: couldn't read orphan inode 15 (err -117)
[  533.519664][ T7039] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  533.895082][ T1028] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  533.946198][ T7048] loop1: detected capacity change from 0 to 128
[  533.958814][ T7048] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  533.967468][ T7048] ext4 filesystem being mounted at /308/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  534.000422][ T7050] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  534.109444][ T1028] usb 4-1: Using ep0 maxpacket: 32
[  534.115797][ T1028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  534.127073][ T1028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  534.137126][ T1028] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  534.146366][ T1028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.158702][ T1028] usb 4-1: config 0 descriptor??
[  534.532451][ T1028] hub 4-1:0.0: USB hub found
[  534.736054][ T7056] syz.0.1662[7056] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  534.736318][ T7056] syz.0.1662[7056] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  534.960542][  T282] EXT4-fs (loop1): unmounting filesystem.
[  535.345487][ T7058] loop1: detected capacity change from 0 to 128
[  535.501864][ T7062] loop4: detected capacity change from 0 to 128
[  535.524926][ T7058] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  535.547379][ T7058] ext4 filesystem being mounted at /309/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  535.590809][ T7062] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  535.605270][ T7062] ext4 filesystem being mounted at /301/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  535.907867][ T1028] hub 4-1:0.0: 1 port detected
[  536.220702][  T282] EXT4-fs (loop1): unmounting filesystem.
[  536.308829][ T1028] usb 4-1: USB disconnect, device number 80
[  536.328894][ T7074] loop1: detected capacity change from 0 to 128
[  536.351177][ T7074] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  536.363896][ T7074] ext4 filesystem being mounted at /310/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  536.515502][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  536.886804][   T28] audit: type=1400 audit(1765481210.894:228): avc:  denied  { create } for  pid=7079 comm="syz.5.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  536.925223][ T7080] loop5: detected capacity change from 0 to 4096
[  536.942056][ T7080] ext4: Unknown parameter 'noacl'
[  537.067204][  T285] EXT4-fs (loop4): unmounting filesystem.
[  537.281291][  T282] EXT4-fs (loop1): unmounting filesystem.
[  538.325662][ T7096] loop1: detected capacity change from 0 to 1024
[  539.257912][  T548] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  539.285681][ T7105] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  539.449563][  T548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  539.498020][  T548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  539.514084][  T548] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  539.523768][  T548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.596216][  T548] usb 5-1: config 0 descriptor??
[  539.928911][ T7113] loop3: detected capacity change from 0 to 1024
[  540.427203][ T7117] loop5: detected capacity change from 0 to 128
[  540.440961][  T548] hid-led: probe of 0003:27B8:01ED.0063 failed with error -71
[  540.456934][ T7117] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  540.460755][  T548] usb 5-1: USB disconnect, device number 76
[  540.465983][ T7117] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  540.641227][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1679'.
[  540.799272][ T7126] loop3: detected capacity change from 0 to 512
[  540.992922][ T7126] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1680: inode has both inline data and extents flags
[  541.008654][ T7126] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1680: couldn't read orphan inode 15 (err -117)
[  541.022318][ T7126] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  541.265988][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  541.295479][ T7132] loop4: detected capacity change from 0 to 128
[  541.345732][ T7132] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  541.354945][ T7132] ext4 filesystem being mounted at /304/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  544.122601][  T283] EXT4-fs (loop3): unmounting filesystem.
[  544.160656][  T285] EXT4-fs (loop4): unmounting filesystem.
[  544.337542][ T7154] loop1: detected capacity change from 0 to 1024
[  544.876096][ T7163] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  545.053225][ T7168] loop3: detected capacity change from 0 to 128
[  545.061001][ T7166] loop1: detected capacity change from 0 to 128
[  545.071413][ T7168] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  545.080218][ T7168] ext4 filesystem being mounted at /334/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  545.094828][ T7166] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  545.121066][ T7166] ext4 filesystem being mounted at /315/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  545.683847][ T7178] loop4: detected capacity change from 0 to 128
[  545.698655][ T7178] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  545.707350][ T7178] ext4 filesystem being mounted at /307/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  547.037430][  T282] EXT4-fs (loop1): unmounting filesystem.
[  547.089614][  T283] EXT4-fs (loop3): unmounting filesystem.
[  547.143154][ T7187] loop3: detected capacity change from 0 to 128
[  547.177713][ T7187] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  547.202509][ T7187] ext4 filesystem being mounted at /335/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  547.475771][  T285] EXT4-fs (loop4): unmounting filesystem.
[  548.062896][  T287] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  548.070970][  T283] EXT4-fs (loop3): unmounting filesystem.
[  548.477533][ T7207] loop1: detected capacity change from 0 to 1024
[  549.579018][  T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  549.590310][  T287] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  549.599645][  T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.611911][  T287] usb 5-1: config 0 descriptor??
[  550.023774][ T7194] loop4: detected capacity change from 0 to 1024
[  550.043530][ T7194] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  550.061384][ T7194] EXT4-fs (loop4): invalid journal inode
[  550.067202][ T7194] EXT4-fs (loop4): can't get journal size
[  550.073731][ T7194] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 17104912: comm syz.4.1698: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  550.089482][ T7194] EXT4-fs (loop4): failed to initialize system zone (-117)
[  550.096765][ T7194] EXT4-fs (loop4): mount failed
[  550.571011][ T7213] loop5: detected capacity change from 0 to 128
[  550.649020][ T7213] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  550.664202][ T7213] ext4 filesystem being mounted at /214/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  551.901518][ T7215] loop3: detected capacity change from 0 to 1024
[  552.105468][  T654] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  552.108176][  T287] usbhid 5-1:0.0: can't add hid device: -71
[  552.135456][  T287] usbhid: probe of 5-1:0.0 failed with error -71
[  552.143923][  T287] usb 5-1: USB disconnect, device number 77
[  552.267987][ T7230] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  552.687785][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'.
[  552.777876][  T548] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  552.821919][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  552.844095][ T7235] loop5: detected capacity change from 0 to 128
[  552.856584][ T7235] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  552.865318][ T7235] ext4 filesystem being mounted at /215/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  552.990399][  T548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.001622][  T548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.012138][  T548] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  553.039182][  T548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.166097][  T548] usb 4-1: config 0 descriptor??
[  553.719103][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  553.736582][ T7248] loop5: detected capacity change from 0 to 128
[  553.747212][ T7248] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  553.756755][ T7248] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  553.841774][  T548] hid-led: probe of 0003:27B8:01ED.0064 failed with error -71
[  553.860923][  T548] usb 4-1: USB disconnect, device number 81
[  556.247536][ T7262] loop4: detected capacity change from 0 to 512
[  556.296101][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  556.304595][ T7262] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1713: inode has both inline data and extents flags
[  556.318222][ T7262] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1713: couldn't read orphan inode 15 (err -117)
[  556.330596][ T7262] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  556.477995][   T24] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  556.532585][ T7268] loop5: detected capacity change from 0 to 128
[  556.753687][  T285] EXT4-fs (loop4): unmounting filesystem.
[  556.767184][ T7268] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  556.798495][ T7268] ext4 filesystem being mounted at /217/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  556.858995][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  556.876191][   T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  556.897799][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.919800][   T24] usb 2-1: config 0 descriptor??
[  557.316587][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  557.342290][ T7259] loop1: detected capacity change from 0 to 1024
[  557.391213][ T7259] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  557.408578][ T7259] EXT4-fs (loop1): invalid journal inode
[  557.414291][ T7259] EXT4-fs (loop1): can't get journal size
[  557.433327][ T7259] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 17104912: comm syz.1.1714: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  557.458872][  T548] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  557.468121][ T7259] EXT4-fs (loop1): failed to initialize system zone (-117)
[  557.475398][ T7259] EXT4-fs (loop1): mount failed
[  557.585453][   T24] keytouch 0003:0926:3333.0065: fixing up Keytouch IEC report descriptor
[  557.596468][   T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0065/input/input68
[  557.695986][   T24] keytouch 0003:0926:3333.0065: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  557.738310][  T548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  557.768944][  T548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  557.780329][  T548] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  557.811261][  T548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.887031][  T548] usb 4-1: config 0 descriptor??
[  558.427920][  T287] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  558.526159][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.534733][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.544625][  T548] hid-led: probe of 0003:27B8:01ED.0066 failed with error -71
[  558.556541][  T548] usb 4-1: USB disconnect, device number 82
[  558.607905][  T287] usb 5-1: Using ep0 maxpacket: 32
[  558.614235][  T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  558.625223][  T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  558.635019][  T287] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  558.644191][  T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.652932][  T287] usb 5-1: config 0 descriptor??
[  558.658850][  T287] hub 5-1:0.0: USB hub found
[  558.859362][  T287] hub 5-1:0.0: 1 port detected
[  559.174964][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1725'.
[  559.211349][ T1028] usb 2-1: USB disconnect, device number 71
[  559.269979][ T7307] syz.3.1724[7307] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  559.270270][ T7307] syz.3.1724[7307] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  559.305561][ T7307] loop3: detected capacity change from 0 to 512
[  559.535851][ T7307] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1724: inode has both inline data and extents flags
[  559.551042][ T7307] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1724: couldn't read orphan inode 15 (err -117)
[  559.565133][ T7307] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  560.041270][ T7315] loop4: detected capacity change from 0 to 128
[  560.060139][ T7315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  560.069836][ T7315] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  560.213310][  T287] usb 5-1: USB disconnect, device number 78
[  560.619253][  T283] EXT4-fs (loop3): unmounting filesystem.
[  560.911154][  T285] EXT4-fs (loop4): unmounting filesystem.
[  560.977919][ T1028] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  561.169065][ T1028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  561.180174][ T1028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  561.190368][ T1028] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  561.199607][ T1028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.201665][  T548] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  561.238734][ T1028] usb 2-1: config 0 descriptor??
[  561.390293][  T548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  561.401773][  T548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  561.412872][  T548] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  561.422904][  T548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.457390][  T548] usb 5-1: config 0 descriptor??
[  561.929199][ T7326] loop4: detected capacity change from 0 to 1024
[  562.138855][ T1028] hid-led: probe of 0003:27B8:01ED.0067 failed with error -71
[  562.147918][ T1028] usb 2-1: USB disconnect, device number 72
[  562.161133][ T7326] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  562.198614][ T7326] EXT4-fs (loop4): invalid journal inode
[  562.204833][ T7326] EXT4-fs (loop4): can't get journal size
[  562.211382][ T7326] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 17104912: comm syz.4.1730: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  562.228303][ T7326] EXT4-fs (loop4): failed to initialize system zone (-117)
[  562.235626][ T7326] EXT4-fs (loop4): mount failed
[  562.324924][  T548] keytouch 0003:0926:3333.0068: fixing up Keytouch IEC report descriptor
[  562.341595][  T548] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0068/input/input69
[  562.441112][  T548] keytouch 0003:0926:3333.0068: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  562.715353][  T287] usb 5-1: USB disconnect, device number 79
[  563.058008][ T1028] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  563.067696][  T548] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  563.300175][  T548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.352151][  T548] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  563.570460][  T548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.583373][  T548] usb 4-1: config 0 descriptor??
[  563.599071][ T1028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.610068][ T1028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  563.619897][ T1028] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  563.629007][ T1028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.691344][ T7354] syz.4.1738[7354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  563.691765][ T7354] syz.4.1738[7354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  563.741078][ T7354] loop4: detected capacity change from 0 to 512
[  563.862646][ T1028] usb 2-1: config 0 descriptor??
[  564.138827][ T7354] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1738: inode has both inline data and extents flags
[  564.153173][ T7354] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1738: couldn't read orphan inode 15 (err -117)
[  564.166307][ T7354] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  564.216599][ T7346] loop3: detected capacity change from 0 to 1024
[  564.490254][ T7346] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  564.601270][ T7346] EXT4-fs (loop3): invalid journal inode
[  564.611257][ T7346] EXT4-fs (loop3): can't get journal size
[  564.627670][ T7346] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 17104912: comm syz.3.1736: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  564.698399][ T7365] syz.5.1739[7365] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  564.698802][ T7365] syz.5.1739[7365] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  564.748997][ T7365] loop5: detected capacity change from 0 to 512
[  564.837624][ T7367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  564.908049][ T7367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  564.916162][ T7346] EXT4-fs (loop3): failed to initialize system zone (-117)
[  564.927426][ T7346] EXT4-fs (loop3): mount failed
[  565.022643][ T7365] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1739: inode has both inline data and extents flags
[  565.036936][ T7365] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1739: couldn't read orphan inode 15 (err -117)
[  565.050185][ T7365] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  565.104805][  T285] EXT4-fs (loop4): unmounting filesystem.
[  565.384741][  T548] keytouch 0003:0926:3333.0069: fixing up Keytouch IEC report descriptor
[  565.413734][  T548] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0069/input/input70
[  565.430293][ T7372] loop4: detected capacity change from 0 to 128
[  565.463710][ T7372] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  565.481187][ T7372] ext4 filesystem being mounted at /317/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  565.611867][  T548] keytouch 0003:0926:3333.0069: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  565.640596][  T548] usb 4-1: USB disconnect, device number 83
[  565.900836][ T1028] usbhid 2-1:0.0: can't add hid device: -71
[  565.909290][ T1028] usbhid: probe of 2-1:0.0 failed with error -71
[  565.925303][ T7380] fido_id[7380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  566.244240][ T1028] usb 2-1: USB disconnect, device number 73
[  566.295045][  T285] EXT4-fs (loop4): unmounting filesystem.
[  566.389021][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  566.403951][ T7383] loop4: detected capacity change from 0 to 128
[  566.426785][ T7386] loop3: detected capacity change from 0 to 128
[  566.455339][ T7383] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  566.469177][ T7383] ext4 filesystem being mounted at /318/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  566.474829][ T7386] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  566.514055][ T7386] ext4 filesystem being mounted at /346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  567.417682][  T548] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  567.446889][  T285] EXT4-fs (loop4): unmounting filesystem.
[  567.760640][  T283] EXT4-fs (loop3): unmounting filesystem.
[  567.824779][  T548] usb 2-1: Using ep0 maxpacket: 32
[  567.853221][  T548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  567.864179][  T548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  567.873970][  T548] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  567.883399][  T548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.894805][  T548] usb 2-1: config 0 descriptor??
[  568.279768][ T7408] syz.4.1749[7408] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  568.280190][ T7408] syz.4.1749[7408] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  568.294719][ T7409] syz.3.1750[7409] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  568.306659][ T7409] syz.3.1750[7409] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  569.007008][ T7406] loop4: detected capacity change from 0 to 512
[  569.028751][ T7409] loop3: detected capacity change from 0 to 512
[  569.044116][  T548] hub 2-1:0.0: USB hub found
[  569.144500][  T548] hub 2-1:0.0: 1 port detected
[  569.155779][ T7409] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1750: inode has both inline data and extents flags
[  569.170049][ T7409] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1750: couldn't read orphan inode 15 (err -117)
[  569.183762][ T7409] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  569.276025][ T7406] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1749: inode has both inline data and extents flags
[  569.290297][ T7406] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1749: couldn't read orphan inode 15 (err -117)
[  569.303953][ T7406] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  570.916187][  T283] EXT4-fs (loop3): unmounting filesystem.
[  570.929004][  T548] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  571.031899][ T7423] syz.5.1752[7423] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  571.032035][ T7423] syz.5.1752[7423] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  571.055644][ T7423] loop5: detected capacity change from 0 to 512
[  571.085813][  T285] EXT4-fs (loop4): unmounting filesystem.
[  571.108698][  T548] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  571.292675][ T7423] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1752: inode has both inline data and extents flags
[  571.306762][ T7423] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1752: couldn't read orphan inode 15 (err -117)
[  571.319822][ T7423] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  571.489255][  T548] usbhid 2-1:0.0: can't add hid device: -71
[  571.509150][ T7427] loop1: detected capacity change from 0 to 128
[  571.535205][  T548] usbhid: probe of 2-1:0.0 failed with error -71
[  572.028632][  T548] usb 2-1: USB disconnect, device number 74
[  572.035763][ T7427] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  572.054838][ T7427] ext4 filesystem being mounted at /323/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  572.178561][   T24] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  572.253988][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  572.365413][ T7442] syz.4.1755[7442] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  572.365773][ T7442] syz.4.1755[7442] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  572.393573][ T7442] loop4: detected capacity change from 0 to 512
[  572.451286][ T7442] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1755: inode has both inline data and extents flags
[  572.466166][ T7442] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1755: couldn't read orphan inode 15 (err -117)
[  572.480797][ T7442] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  572.527032][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  572.659718][   T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  572.769228][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.882888][   T24] usb 4-1: config 0 descriptor??
[  573.310998][  T282] EXT4-fs (loop1): unmounting filesystem.
[  573.336033][ T7425] loop3: detected capacity change from 0 to 1024
[  573.377719][ T7425] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  573.403068][  T285] EXT4-fs (loop4): unmounting filesystem.
[  573.415993][ T7425] EXT4-fs (loop3): invalid journal inode
[  573.434336][ T7425] EXT4-fs (loop3): can't get journal size
[  573.440690][ T7425] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 17104912: comm syz.3.1753: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  573.460141][ T7425] EXT4-fs (loop3): failed to initialize system zone (-117)
[  573.467659][ T7425] EXT4-fs (loop3): mount failed
[  573.572877][   T24] keytouch 0003:0926:3333.006A: fixing up Keytouch IEC report descriptor
[  573.610635][   T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.006A/input/input71
[  573.895987][   T24] keytouch 0003:0926:3333.006A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  573.919871][   T24] usb 4-1: USB disconnect, device number 84
[  573.970161][ T7461] fido_id[7461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  574.937889][ T1028] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  575.027861][  T287] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  575.139161][ T1028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  575.157929][ T1028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  575.197055][ T1028] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  575.206256][ T1028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.214961][ T1028] usb 4-1: config 0 descriptor??
[  575.227870][  T287] usb 5-1: Using ep0 maxpacket: 32
[  575.234076][  T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  575.245006][  T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  575.254820][  T287] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  575.561735][  T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.570557][  T287] usb 5-1: config 0 descriptor??
[  575.579490][  T287] hub 5-1:0.0: USB hub found
[  575.657454][ T7467] loop3: detected capacity change from 0 to 1024
[  575.673977][ T7467] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  575.684990][ T7467] EXT4-fs (loop3): invalid journal inode
[  575.690768][ T7467] EXT4-fs (loop3): can't get journal size
[  575.697209][ T7467] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 17104912: comm syz.3.1762: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  575.713329][ T7467] EXT4-fs (loop3): failed to initialize system zone (-117)
[  575.721131][ T7467] EXT4-fs (loop3): mount failed
[  575.765509][ T1028] keytouch 0003:0926:3333.006B: fixing up Keytouch IEC report descriptor
[  575.775419][ T1028] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.006B/input/input72
[  575.788105][  T287] hub 5-1:0.0: 1 port detected
[  575.808931][ T7485] loop1: detected capacity change from 0 to 512
[  575.820343][ T7485] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1768: inode has both inline data and extents flags
[  575.833755][ T7485] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1768: couldn't read orphan inode 15 (err -117)
[  575.845875][ T7485] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  575.864299][ T1028] keytouch 0003:0926:3333.006B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  575.974508][   T24] usb 4-1: USB disconnect, device number 85
[  576.092653][  T287] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  576.099079][  T287] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  576.107740][  T287] usbhid 5-1:0.0: can't add hid device: -71
[  576.113854][  T287] usbhid: probe of 5-1:0.0 failed with error -71
[  576.148270][  T287] usb 5-1: USB disconnect, device number 80
[  576.592548][  T282] EXT4-fs (loop1): unmounting filesystem.
[  576.615812][ T7498] loop1: detected capacity change from 0 to 128
[  576.624201][ T7498] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  576.633009][ T7498] ext4 filesystem being mounted at /328/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  576.778054][   T24] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  577.240310][  T287] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  577.302080][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  577.313246][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  577.324104][   T24] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  577.334012][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.354942][   T24] usb 4-1: config 0 descriptor??
[  577.529389][  T282] EXT4-fs (loop1): unmounting filesystem.
[  577.599585][ T7507] loop1: detected capacity change from 0 to 128
[  577.608008][  T287] usb 5-1: Using ep0 maxpacket: 32
[  577.615282][  T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  577.616034][ T7507] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  577.626458][  T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  577.644540][  T287] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  577.647271][ T7507] ext4 filesystem being mounted at /329/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  577.654362][  T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.694867][  T287] usb 5-1: config 0 descriptor??
[  577.708439][  T287] hub 5-1:0.0: USB hub found
[  577.981241][   T24] hid-led: probe of 0003:27B8:01ED.006C failed with error -71
[  578.210848][  T287] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  578.242596][   T24] usb 4-1: USB disconnect, device number 86
[  578.487668][  T282] EXT4-fs (loop1): unmounting filesystem.
[  578.540292][  T287] usbhid 5-1:0.0: can't add hid device: -71
[  578.546954][  T287] usbhid: probe of 5-1:0.0 failed with error -71
[  578.897933][ T7528] loop3: detected capacity change from 0 to 128
[  578.947194][  T287] usb 5-1: USB disconnect, device number 81
[  579.007282][ T7528] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  579.028014][ T7528] ext4 filesystem being mounted at /351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  579.234526][   T28] audit: type=1400 audit(1765481253.244:229): avc:  denied  { read } for  pid=7532 comm="syz.0.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  579.262440][   T28] audit: type=1400 audit(1765481253.274:230): avc:  denied  { create } for  pid=7534 comm="syz.4.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  579.307102][ T7535] loop4: detected capacity change from 0 to 512
[  579.318493][ T7535] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  580.246184][ T7542] loop1: detected capacity change from 0 to 512
[  580.265653][  T283] EXT4-fs (loop3): unmounting filesystem.
[  580.274581][   T28] audit: type=1400 audit(1765481253.274:231): avc:  denied  { bind } for  pid=7534 comm="syz.4.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  580.318155][ T7542] EXT4-fs: dax option not supported
[  580.335874][ T7535] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1781: invalid indirect mapped block 4294967295 (level 1)
[  580.351566][ T7535] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1781: invalid indirect mapped block 4294967295 (level 1)
[  580.365990][ T7535] EXT4-fs (loop4): 2 truncates cleaned up
[  580.372085][ T7535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  580.398670][ T7535] EXT4-fs (loop4): unmounting filesystem.
[  580.414543][   T28] audit: type=1400 audit(1765481253.274:232): avc:  denied  { name_bind } for  pid=7534 comm="syz.4.1781" src=65533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  580.436086][  T654] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  580.497718][ T7532] syz.0.1780 (7532) used greatest stack depth: 21728 bytes left
[  580.506159][   T28] audit: type=1400 audit(1765481253.274:233): avc:  denied  { node_bind } for  pid=7534 comm="syz.4.1781" saddr=fe80::aa src=65533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  580.533693][ T7548] loop4: detected capacity change from 0 to 4096
[  580.548598][ T7550] syz.3.1783[7550] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  580.549020][ T7550] syz.3.1783[7550] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  580.594752][ T7550] loop3: detected capacity change from 0 to 512
[  580.756630][ T7548] EXT4-fs (loop4): Test dummy encryption mode enabled
[  580.788502][ T7550] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1783: inode has both inline data and extents flags
[  580.802390][ T7550] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1783: couldn't read orphan inode 15 (err -117)
[  580.815930][ T7550] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  581.034033][ T7548] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  581.289299][ T7555] loop1: detected capacity change from 0 to 512
[  581.307454][ T7548] System zones: 0-5
[  581.324177][ T7548] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  581.647338][  T283] EXT4-fs (loop3): unmounting filesystem.
[  582.070942][ T7548] syz.4.1784 uses obsolete (PF_INET,SOCK_PACKET)
[  582.201295][  T287] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  582.217883][ T1028] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  582.326984][  T285] EXT4-fs (loop4): unmounting filesystem.
[  582.389086][  T287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  582.400222][  T287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  582.410528][  T287] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  582.425136][  T287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.433826][ T1028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  582.445133][ T1028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  582.455245][  T287] usb 2-1: config 0 descriptor??
[  582.461448][ T1028] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  582.470813][ T1028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.826341][ T1028] usb 4-1: config 0 descriptor??
[  583.278863][  T287] hid-led: probe of 0003:27B8:01ED.006D failed with error -71
[  583.302077][  T287] usb 2-1: USB disconnect, device number 75
[  583.314358][ T7591] capability: warning: `syz.0.1794' uses 32-bit capabilities (legacy support in use)
[  583.503125][ T1028] hid-led: probe of 0003:27B8:01ED.006E failed with error -71
[  583.512481][ T1028] usb 4-1: USB disconnect, device number 87
[  583.566771][ T7598] loop5: detected capacity change from 0 to 128
[  583.577945][  T335] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  583.590774][ T7598] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  583.599621][ T7598] ext4 filesystem being mounted at /228/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  584.006762][ T7603] loop1: detected capacity change from 0 to 128
[  584.101602][ T7603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  584.112200][ T7603] ext4 filesystem being mounted at /333/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  584.118724][  T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  584.155500][  T335] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  584.164742][  T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.173607][  T335] usb 5-1: config 0 descriptor??
[  584.194998][ T7606] loop3: detected capacity change from 0 to 1024
[  584.206844][ T7606] EXT4-fs: Ignoring removed orlov option
[  584.229347][ T7606] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  584.294057][   T28] audit: type=1400 audit(1765481258.304:234): avc:  denied  { ioctl } for  pid=7605 comm="syz.3.1799" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=43662 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  584.476437][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  584.687382][ T7589] loop4: detected capacity change from 0 to 1024
[  584.713086][  T283] EXT4-fs (loop3): unmounting filesystem.
[  584.746958][ T7623] loop5: detected capacity change from 0 to 128
[  584.783663][ T7589] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  584.843246][ T7589] EXT4-fs (loop4): invalid journal inode
[  584.845485][ T7623] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  584.849310][ T7589] EXT4-fs (loop4): can't get journal size
[  584.878054][ T7623] ext4 filesystem being mounted at /229/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  584.942383][ T7589] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 17104912: comm syz.4.1795: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  584.963010][ T7629] loop3: detected capacity change from 0 to 128
[  584.983604][ T7589] EXT4-fs (loop4): failed to initialize system zone (-117)
[  584.998865][ T7629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  585.008013][ T7589] EXT4-fs (loop4): mount failed
[  585.013324][ T7629] ext4 filesystem being mounted at /357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  585.749834][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  586.089435][  T335] keytouch 0003:0926:3333.006F: fixing up Keytouch IEC report descriptor
[  586.099878][  T335] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.006F/input/input73
[  586.181098][  T335] keytouch 0003:0926:3333.006F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  586.246337][  T283] EXT4-fs (loop3): unmounting filesystem.
[  586.883998][  T282] EXT4-fs (loop1): unmounting filesystem.
[  587.553233][  T548] usb 5-1: USB disconnect, device number 82
[  587.886753][ T7645] fido_id[7645]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  588.188001][   T24] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  588.377868][   T24] usb 2-1: Using ep0 maxpacket: 32
[  588.384219][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  588.413516][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  588.441650][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  588.515507][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.529908][ T7665] futex_wake_op: syz.3.1814 tries to shift op by -1; fix this program
[  588.558001][   T24] usb 2-1: config 0 descriptor??
[  588.565004][ T7665] sch_fq: defrate 0 ignored.
[  588.573958][   T24] hub 2-1:0.0: USB hub found
[  588.769710][   T24] hub 2-1:0.0: 1 port detected
[  589.049564][ T7674] loop4: detected capacity change from 0 to 128
[  589.059090][ T7674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  589.067794][ T7674] ext4 filesystem being mounted at /330/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  589.157986][   T24] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  589.164564][   T24] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  589.173841][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  589.179845][   T24] usbhid: probe of 2-1:0.0 failed with error -71
[  589.208228][   T24] usb 2-1: USB disconnect, device number 76
[  589.558552][ T7680] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1817'.
[  589.805523][ T7687] loop1: detected capacity change from 0 to 512
[  589.814830][ T7687] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1819: inode has both inline data and extents flags
[  589.828299][ T7687] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1819: couldn't read orphan inode 15 (err -117)
[  589.840295][ T7687] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  589.926897][  T285] EXT4-fs (loop4): unmounting filesystem.
[  590.497218][ T7696] overlayfs: failed to resolve './file1/file0': -2
[  590.506487][   T28] audit: type=1400 audit(1765481264.514:235): avc:  denied  { write } for  pid=7695 comm="syz.5.1822" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  590.514021][ T7696] random: crng reseeded on system resumption
[  590.530113][   T28] audit: type=1400 audit(1765481264.524:236): avc:  denied  { open } for  pid=7695 comm="syz.5.1822" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  590.560104][   T28] audit: type=1400 audit(1765481264.574:237): avc:  denied  { ioctl } for  pid=7695 comm="syz.5.1822" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  590.640340][ T7698] syz.0.1821[7698] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  590.640709][ T7698] syz.0.1821[7698] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  590.898724][  T282] EXT4-fs (loop1): unmounting filesystem.
[  593.637989][   T24] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  593.679209][  T335] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  593.783335][ T7723] loop3: detected capacity change from 0 to 128
[  593.812060][ T7723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  593.820971][ T7723] ext4 filesystem being mounted at /361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  593.869439][   T24] usb 5-1: Using ep0 maxpacket: 32
[  593.899059][  T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  593.910125][  T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  593.920295][  T335] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  593.929505][  T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.935147][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  593.948678][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  593.951031][  T335] usb 2-1: config 0 descriptor??
[  593.958746][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  593.972625][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.981373][   T24] usb 5-1: config 0 descriptor??
[  593.987226][   T24] hub 5-1:0.0: USB hub found
[  594.193480][   T24] hub 5-1:0.0: 1 port detected
[  594.374152][ T7713] loop1: detected capacity change from 0 to 1024
[  594.385122][ T7713] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  594.395807][ T7713] EXT4-fs (loop1): invalid journal inode
[  594.401842][ T7713] EXT4-fs (loop1): can't get journal size
[  594.408369][ T7713] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 17104912: comm syz.1.1825: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  594.423891][ T7713] EXT4-fs (loop1): failed to initialize system zone (-117)
[  594.431392][ T7713] EXT4-fs (loop1): mount failed
[  594.493232][  T335] keytouch 0003:0926:3333.0070: fixing up Keytouch IEC report descriptor
[  594.503329][  T335] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0070/input/input74
[  594.580998][  T335] keytouch 0003:0926:3333.0070: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  594.669524][  T283] EXT4-fs (loop3): unmounting filesystem.
[  594.695888][  T335] usb 2-1: USB disconnect, device number 77
[  594.747719][   T24] usb 5-1: USB disconnect, device number 83
[  594.755260][ T7738] syz.3.1833 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  594.766029][   T28] audit: type=1400 audit(1765481268.774:238): avc:  denied  { connect } for  pid=7737 comm="syz.3.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  594.786136][   T28] audit: type=1400 audit(1765481268.804:239): avc:  denied  { create } for  pid=7737 comm="syz.3.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  594.838233][   T28] audit: type=1400 audit(1765481268.854:240): avc:  denied  { name_bind } for  pid=7740 comm="syz.3.1834" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  595.646693][ T7758] syz.4.1837[7758] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  595.647724][ T7758] syz.4.1837[7758] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  595.728970][ T7758] loop4: detected capacity change from 0 to 512
[  598.150622][  T291] kworker/dying (291) used greatest stack depth: 21424 bytes left
[  598.315315][ T7766] futex_wake_op: syz.1.1839 tries to shift op by -1; fix this program
[  598.329104][ T7766] sch_fq: defrate 0 ignored.
[  598.339252][   T28] audit: type=1400 audit(1765481272.354:241): avc:  denied  { read append } for  pid=7763 comm="syz.3.1840" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  598.385307][ T7758] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1837: inode has both inline data and extents flags
[  598.398743][   T28] audit: type=1400 audit(1765481272.374:242): avc:  denied  { open } for  pid=7763 comm="syz.3.1840" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  598.421976][ T7758] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1837: couldn't read orphan inode 15 (err -117)
[  598.424392][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1841'.
[  598.444578][ T7758] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  598.446417][   T28] audit: type=1400 audit(1765481272.374:243): avc:  denied  { ioctl } for  pid=7763 comm="syz.3.1840" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  598.483023][ T7773] loop5: detected capacity change from 0 to 128
[  598.489530][   T28] audit: type=1400 audit(1765481272.384:244): avc:  denied  { mount } for  pid=7769 comm="syz.5.1842" name="/" dev="configfs" ino=13899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  598.489714][   T28] audit: type=1400 audit(1765481272.384:245): avc:  denied  { search } for  pid=7769 comm="syz.5.1842" name="/" dev="configfs" ino=13899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  598.535165][   T28] audit: type=1400 audit(1765481272.384:246): avc:  denied  { read } for  pid=7769 comm="syz.5.1842" name="/" dev="configfs" ino=13899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  598.537457][ T7773] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  598.560641][   T28] audit: type=1400 audit(1765481272.384:247): avc:  denied  { open } for  pid=7769 comm="syz.5.1842" path="/" dev="configfs" ino=13899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  598.570533][ T7773] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  598.697879][   T24] usb 4-1: new full-speed USB device number 88 using dummy_hcd
[  598.866255][  T285] EXT4-fs (loop4): unmounting filesystem.
[  598.968965][   T24] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  598.977232][   T24] usb 4-1: config 0 has no interface number 0
[  598.983371][   T24] usb 4-1: config 0 interface 251 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10
[  598.998500][ T7782] loop4: detected capacity change from 0 to 512
[  599.006135][   T24] usb 4-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=85.fd
[  599.015597][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.024669][ T7782] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1844: inode has both inline data and extents flags
[  599.038145][ T7782] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1844: couldn't read orphan inode 15 (err -117)
[  599.050099][   T24] usb 4-1: Product: syz
[  599.054290][ T7782] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  599.068875][   T24] usb 4-1: Manufacturer: syz
[  599.073942][   T24] usb 4-1: SerialNumber: syz
[  599.079852][   T24] usb 4-1: config 0 descriptor??
[  599.086257][   T24] usb 4-1: Found UVC 0.00 device syz (05e3:0505)
[  599.092764][   T24] usb 4-1: No valid video chain found.
[  599.251611][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  599.292443][  T335] usb 4-1: USB disconnect, device number 88
[  599.395488][ T7787] netlink: 'syz.5.1845': attribute type 13 has an invalid length.
[  599.409081][ T7787] gretap0: refused to change device tx_queue_len
[  599.416149][ T7787] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  599.846874][  T285] EXT4-fs (loop4): unmounting filesystem.
[  600.357940][  T335] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  600.416646][ T7800] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  600.695691][ T1028] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  600.727887][  T335] usb 4-1: Using ep0 maxpacket: 32
[  600.734219][  T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  600.745268][  T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  600.755158][  T335] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  600.764313][  T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.772982][  T335] usb 4-1: config 0 descriptor??
[  600.779014][  T335] hub 4-1:0.0: USB hub found
[  600.879130][ T1028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  600.890177][ T1028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  600.899995][ T1028] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  600.909086][ T1028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.917847][ T1028] usb 5-1: config 0 descriptor??
[  600.979465][  T335] hub 4-1:0.0: 1 port detected
[  601.527057][ T7818] syz.1.1854[7818] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  601.527311][ T7818] syz.1.1854[7818] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  601.565299][ T7818] loop1: detected capacity change from 0 to 512
[  601.729462][ T7818] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1854: inode has both inline data and extents flags
[  601.745390][ T7818] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1854: couldn't read orphan inode 15 (err -117)
[  601.759539][ T7818] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  602.347012][ T7824] loop4: detected capacity change from 0 to 128
[  602.356056][ T7825] loop3: detected capacity change from 0 to 128
[  602.421286][ T7824] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  602.432246][ T7825] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  602.461245][ T7824] ext4 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  602.493990][ T7825] ext4 filesystem being mounted at /367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  602.528619][ T1028] hid-led: probe of 0003:27B8:01ED.0071 failed with error -71
[  602.537542][ T1028] usb 5-1: USB disconnect, device number 84
[  602.544297][  T335] usb 4-1: USB disconnect, device number 89
[  602.667796][  T282] EXT4-fs (loop1): unmounting filesystem.
[  602.970244][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'.
[  603.088442][ T7839] loop5: detected capacity change from 0 to 512
[  603.104808][ T7839] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1859: inode has both inline data and extents flags
[  603.118352][ T7839] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1859: couldn't read orphan inode 15 (err -117)
[  603.130674][ T7839] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  603.203702][  T285] EXT4-fs (loop4): unmounting filesystem.
[  603.236222][  T283] EXT4-fs (loop3): unmounting filesystem.
[  603.243349][ T7842] loop4: detected capacity change from 0 to 128
[  603.260186][ T7842] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  603.273143][ T7842] ext4 filesystem being mounted at /338/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  603.323722][ T7847] loop3: detected capacity change from 0 to 128
[  603.339593][  T285] EXT4-fs (loop4): unmounting filesystem.
[  603.346997][ T7847] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  603.356578][ T7847] ext4 filesystem being mounted at /368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  603.396650][ T7851] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  603.423358][  T283] EXT4-fs (loop3): unmounting filesystem.
[  603.430656][ T7853] futex_wake_op: syz.4.1864 tries to shift op by -1; fix this program
[  603.440422][ T7853] sch_fq: defrate 0 ignored.
[  603.915829][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  603.936009][ T7862] loop5: detected capacity change from 0 to 256
[  603.942947][ T7862] exfat: Deprecated parameter 'utf8'
[  603.949182][ T7862] exfat: Deprecated parameter 'utf8'
[  603.959309][ T7862] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  604.217494][ T7865] 9pnet_fd: Insufficient options for proto=fd
[  604.224778][   T28] audit: type=1400 audit(1765481278.224:248): avc:  denied  { mounton } for  pid=7861 comm="syz.5.1866" path="/241/bus/file0" dev="loop5" ino=1048619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  605.423842][ T7877] syz.1.1869[7877] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  605.424211][ T7877] syz.1.1869[7877] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  605.470262][ T7877] loop1: detected capacity change from 0 to 512
[  605.492044][  T548] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  605.708124][ T7877] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1869: inode has both inline data and extents flags
[  605.845495][ T7882] 9pnet_fd: Insufficient options for proto=fd
[  606.115335][ T7877] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1869: couldn't read orphan inode 15 (err -117)
[  606.128484][ T7877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  606.209984][  T548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  606.394040][ T7885] loop5: detected capacity change from 0 to 128
[  606.404267][  T548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  606.441202][ T7885] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  606.475638][  T548] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  606.495901][ T7885] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  606.626058][  T548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.649465][  T548] usb 4-1: config 0 descriptor??
[  606.727774][ T7890] syz.4.1872[7890] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  606.728336][ T7890] syz.4.1872[7890] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  606.806999][ T7890] loop4: detected capacity change from 0 to 512
[  607.290272][  T282] EXT4-fs (loop1): unmounting filesystem.
[  607.352457][ T7890] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1872: inode has both inline data and extents flags
[  607.366740][ T7890] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1872: couldn't read orphan inode 15 (err -117)
[  607.380510][ T7890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  607.971092][  T548] hid-led: probe of 0003:27B8:01ED.0072 failed with error -71
[  608.002704][  T548] usb 4-1: USB disconnect, device number 90
[  608.088272][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  608.095261][  T285] EXT4-fs (loop4): unmounting filesystem.
[  608.144296][ T7903] loop4: detected capacity change from 0 to 128
[  608.169941][ T7903] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  608.180175][ T7903] ext4 filesystem being mounted at /341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  608.277784][ T7910] loop5: detected capacity change from 0 to 128
[  608.279054][  T285] EXT4-fs (loop4): unmounting filesystem.
[  608.292052][ T7910] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  608.300869][ T7910] ext4 filesystem being mounted at /245/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  608.696711][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1879'.
[  609.360112][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  609.526046][ T7936] futex_wake_op: syz.5.1882 tries to shift op by -1; fix this program
[  609.577207][ T7936] sch_fq: defrate 0 ignored.
[  609.667004][ T7937] device wireguard0 entered promiscuous mode
[  609.754378][ T7943] device wg1 entered promiscuous mode
[  609.915308][ T7947] loop1: detected capacity change from 0 to 128
[  609.930437][ T7947] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  609.939276][ T7947] ext4 filesystem being mounted at /344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  610.082925][  T282] EXT4-fs (loop1): unmounting filesystem.
[  610.129422][ T7953] loop1: detected capacity change from 0 to 128
[  610.137918][ T7953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  610.146632][ T7953] ext4 filesystem being mounted at /345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  610.297908][  T548] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  610.479684][  T548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  610.494268][  T548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  610.504300][  T548] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  610.513640][  T548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.525646][  T548] usb 5-1: config 0 descriptor??
[  610.995361][  T282] EXT4-fs (loop1): unmounting filesystem.
[  611.019530][ T7963] loop1: detected capacity change from 0 to 128
[  611.032317][ T7963] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  611.041111][ T7963] ext4 filesystem being mounted at /346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  611.088102][  T282] EXT4-fs (loop1): unmounting filesystem.
[  611.149243][  T548] hid-led: probe of 0003:27B8:01ED.0073 failed with error -71
[  611.164876][  T548] usb 5-1: USB disconnect, device number 85
[  611.890362][ T7976] loop4: detected capacity change from 0 to 128
[  611.901255][ T7976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  611.910024][ T7976] ext4 filesystem being mounted at /345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  613.269734][  T285] EXT4-fs (loop4): unmounting filesystem.
[  613.363767][ T7988] loop4: detected capacity change from 0 to 128
[  613.424136][ T7991] device wireguard0 entered promiscuous mode
[  613.433969][ T7988] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  613.444501][ T7988] ext4 filesystem being mounted at /346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  613.477270][ T7995] device wg1 entered promiscuous mode
[  613.496754][ T7994] loop1: detected capacity change from 0 to 8192
[  613.503261][ T1028] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  613.514727][ T7994] FAT-fs (loop1): bogus logical sector size 0
[  613.520982][ T7994] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  613.530740][ T7994] FAT-fs (loop1): Can't find a valid FAT filesystem
[  613.591642][  T285] EXT4-fs (loop4): unmounting filesystem.
[  613.597591][  T742] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  613.666657][ T7994] loop1: detected capacity change from 0 to 8192
[  613.707543][ T8001] loop4: detected capacity change from 0 to 128
[  613.727928][ T1028] usb 4-1: Using ep0 maxpacket: 32
[  613.734405][ T1028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  613.748006][   T28] audit: type=1400 audit(1765481287.734:249): avc:  denied  { bind } for  pid=7993 comm="syz.1.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  614.887076][ T1028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  614.905237][ T7994] tipc: Failed to remove unknown binding: 66,1,1/0:1942814012/1942814014
[  614.914012][ T7994] tipc: Failed to remove unknown binding: 66,1,1/0:1942814012/1942814014
[  614.976303][ T8008] syz.5.1901[8008] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  614.976680][ T8008] syz.5.1901[8008] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  615.039433][ T8008] loop5: detected capacity change from 0 to 512
[  615.171945][ T8001] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  615.185864][ T8008] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1901: inode has both inline data and extents flags
[  615.200323][ T8008] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1901: couldn't read orphan inode 15 (err -117)
[  615.214156][ T8008] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  615.381098][ T8001] ext4 filesystem being mounted at /347/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  615.888189][ T1028] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  615.897286][ T1028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.917134][ T1028] usb 4-1: config 0 descriptor??
[  615.923535][ T1028] hub 4-1:0.0: USB hub found
[  616.333327][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  616.533624][ T1028] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  616.550543][ T1028] usbhid 4-1:0.0: can't add hid device: -71
[  616.556741][ T1028] usbhid: probe of 4-1:0.0 failed with error -71
[  616.591144][ T1028] usb 4-1: USB disconnect, device number 91
[  617.667420][ T8029] loop1: detected capacity change from 0 to 512
[  617.761293][ T8029] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1903: inode has both inline data and extents flags
[  617.776858][ T8029] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1903: couldn't read orphan inode 15 (err -117)
[  617.788991][ T8029] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  618.414478][  T282] EXT4-fs (loop1): unmounting filesystem.
[  618.659522][ T8045] loop1: detected capacity change from 0 to 128
[  618.667023][ T8046] futex_wake_op: syz.0.1911 tries to shift op by -1; fix this program
[  618.689518][ T8046] sch_fq: defrate 0 ignored.
[  618.747558][ T8045] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  618.756284][ T8045] ext4 filesystem being mounted at /351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  618.922014][  T285] EXT4-fs (loop4): unmounting filesystem.
[  619.544602][  T282] EXT4-fs (loop1): unmounting filesystem.
[  619.587888][ T1028] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  619.608581][ T8057] loop1: detected capacity change from 0 to 128
[  619.622631][ T8057] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  619.631437][ T8057] ext4 filesystem being mounted at /352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  619.768951][ T1028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  619.787879][ T1028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  619.807944][ T1028] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  619.817027][ T1028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.852257][ T1028] usb 4-1: config 0 descriptor??
[  620.367843][  T335] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  620.503708][ T1028] hid-led: probe of 0003:27B8:01ED.0074 failed with error -71
[  620.529309][ T1028] usb 4-1: USB disconnect, device number 92
[  620.582699][  T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  620.597099][  T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  621.155901][  T335] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  621.167936][  T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.179991][  T335] usb 5-1: config 0 descriptor??
[  621.232720][  T282] EXT4-fs (loop1): unmounting filesystem.
[  621.365352][ T8085] loop1: detected capacity change from 0 to 512
[  621.373793][ T8085] EXT4-fs (loop1): Test dummy encryption mode enabled
[  621.381701][ T8085] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  621.427928][ T8086] loop3: detected capacity change from 0 to 512
[  621.579873][ T8086] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1921: inode has both inline data and extents flags
[  621.593569][ T8086] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1921: couldn't read orphan inode 15 (err -117)
[  621.606675][ T8086] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  621.634360][ T8085] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0102]
[  621.644940][ T8085] EXT4-fs (loop1): orphan cleanup on readonly fs
[  621.653552][ T8085] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1919: bg 0: block 361: padding at end of block bitmap is not set
[  621.669964][ T8085] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  621.680730][ T8085] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.1919: attempt to clear invalid blocks 33619980 len 1
[  621.695797][ T8085] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1919: invalid indirect mapped block 1811939328 (level 0)
[  621.710875][ T8085] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1919: invalid indirect mapped block 2185560079 (level 1)
[  621.726278][ T8085] EXT4-fs (loop1): 1 truncate cleaned up
[  621.732109][ T8085] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  621.803450][ T8085] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1919: dx entry: limit 0 != root limit 125
[  621.815392][ T8085] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1919: Corrupt directory, running e2fsck is recommended
[  621.870841][  T335] hid-led: probe of 0003:27B8:01ED.0075 failed with error -71
[  622.130777][  T335] usb 5-1: USB disconnect, device number 86
[  622.160653][ T8094] loop5: detected capacity change from 0 to 128
[  622.196524][ T8094] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  622.211559][ T8094] ext4 filesystem being mounted at /251/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  622.335099][  T283] EXT4-fs (loop3): unmounting filesystem.
[  622.495024][ T8103] futex_wake_op: syz.4.1925 tries to shift op by -1; fix this program
[  622.533094][ T8103] sch_fq: defrate 0 ignored.
[  622.653440][  T282] EXT4-fs (loop1): unmounting filesystem.
[  623.114571][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  623.538536][ T8115] loop3: detected capacity change from 0 to 256
[  623.548306][ T8115] exfat: Deprecated parameter 'utf8'
[  623.553699][ T8115] exfat: Deprecated parameter 'utf8'
[  623.563486][ T8115] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  623.993219][ T8120] loop1: detected capacity change from 0 to 128
[  624.034392][ T8120] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  624.043123][ T8120] ext4 filesystem being mounted at /355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  624.173062][ T8124] 9pnet_fd: Insufficient options for proto=fd
[  626.379744][  T282] EXT4-fs (loop1): unmounting filesystem.
[  626.431852][ T8129] loop4: detected capacity change from 0 to 128
[  626.516048][ T8129] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  626.527689][ T8134] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  626.536484][ T8129] ext4 filesystem being mounted at /351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  628.086313][ T8145] loop1: detected capacity change from 0 to 512
[  628.146984][ T8151] loop5: detected capacity change from 0 to 128
[  628.161932][ T8145] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1929: inode has both inline data and extents flags
[  628.175849][ T8145] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1929: couldn't read orphan inode 15 (err -117)
[  628.189224][ T8145] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  628.273253][ T8151] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  628.289748][ T8151] ext4 filesystem being mounted at /254/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  628.344772][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  628.457844][  T335] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  628.466394][  T282] EXT4-fs (loop1): unmounting filesystem.
[  628.492119][  T285] EXT4-fs (loop4): unmounting filesystem.
[  628.510722][ T8165] loop4: detected capacity change from 0 to 128
[  628.520984][ T8165] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  628.530269][ T8165] ext4 filesystem being mounted at /352/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  628.648971][  T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  628.660058][  T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  628.670147][  T335] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  628.679399][  T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.778498][   T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  628.977897][   T24] usb 2-1: Using ep0 maxpacket: 32
[  628.985685][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  629.035839][  T335] usb 4-1: config 0 descriptor??
[  629.043024][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  629.053112][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  629.062787][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.076164][   T24] usb 2-1: config 0 descriptor??
[  629.084892][   T24] hub 2-1:0.0: USB hub found
[  629.284330][   T24] hub 2-1:0.0: 1 port detected
[  629.831787][  T285] EXT4-fs (loop4): unmounting filesystem.
[  629.851471][ T8182] futex_wake_op: syz.4.1942 tries to shift op by -1; fix this program
[  629.861047][ T8182] sch_fq: defrate 0 ignored.
[  629.947042][  T335] hid-led: probe of 0003:27B8:01ED.0076 failed with error -71
[  629.960145][  T335] usb 4-1: USB disconnect, device number 93
[  629.968040][   T24] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  629.974549][   T24] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  629.988068][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  629.994507][   T24] usbhid: probe of 2-1:0.0 failed with error -71
[  630.158756][   T24] usb 2-1: USB disconnect, device number 78
[  631.259698][ T8201] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  631.319504][ T8191] tmpfs: Bad value for 'huge'
[  631.428949][ T8206] loop3: detected capacity change from 0 to 128
[  631.439910][ T8206] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  631.489413][ T8206] ext4 filesystem being mounted at /386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  631.762817][  T283] EXT4-fs (loop3): unmounting filesystem.
[  631.770910][ T8211] loop1: detected capacity change from 0 to 128
[  631.785164][ T8211] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  631.794117][ T8211] ext4 filesystem being mounted at /359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  631.903375][   T28] audit: type=1400 audit(1765481305.854:250): avc:  denied  { create } for  pid=8213 comm="syz.3.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  631.974282][ T8218] loop5: detected capacity change from 0 to 128
[  631.998146][ T8218] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  632.014991][ T8218] ext4 filesystem being mounted at /258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  632.846475][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  632.973462][ T8234] loop5: detected capacity change from 0 to 128
[  633.017180][ T8234] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  633.323972][ T8234] ext4 filesystem being mounted at /259/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  634.538157][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  634.704267][  T282] EXT4-fs (loop1): unmounting filesystem.
[  635.618531][ T8261] syz.1.1960[8261] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  635.619776][ T8261] syz.1.1960[8261] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  635.879118][ T8261] loop1: detected capacity change from 0 to 512
[  638.306135][ T8266] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  638.324695][ T8261] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1960: inode has both inline data and extents flags
[  638.353904][ T8261] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1960: couldn't read orphan inode 15 (err -117)
[  638.409306][ T8261] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  639.094802][  T282] EXT4-fs (loop1): unmounting filesystem.
[  639.888219][ T8289] loop4: detected capacity change from 0 to 128
[  639.909920][ T8289] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  639.918720][ T8289] ext4 filesystem being mounted at /358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  641.022580][  T285] EXT4-fs (loop4): unmounting filesystem.
[  641.033085][  T335] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  641.053964][ T8300] loop3: detected capacity change from 0 to 128
[  641.064085][ T8301] loop4: detected capacity change from 0 to 128
[  641.074590][ T8300] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  641.075386][ T8301] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  641.089875][ T8300] ext4 filesystem being mounted at /391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  641.123606][ T8301] ext4 filesystem being mounted at /359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  641.241937][  T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  641.253057][  T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.263204][  T335] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  641.294746][  T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.304099][  T335] usb 2-1: config 0 descriptor??
[  642.221100][  T283] EXT4-fs (loop3): unmounting filesystem.
[  642.237539][  T285] EXT4-fs (loop4): unmounting filesystem.
[  642.243920][  T335] usbhid 2-1:0.0: can't add hid device: -71
[  642.250058][  T335] usbhid: probe of 2-1:0.0 failed with error -71
[  642.258892][  T335] usb 2-1: USB disconnect, device number 79
[  642.271088][ T8312] loop3: detected capacity change from 0 to 128
[  642.280987][ T8312] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  642.295066][ T8312] ext4 filesystem being mounted at /392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  642.567834][ T1028] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  642.758949][ T1028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  642.783741][ T1028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  642.814756][ T1028] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  642.843507][ T1028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.224575][ T1028] usb 5-1: config 0 descriptor??
[  643.512544][  T283] EXT4-fs (loop3): unmounting filesystem.
[  643.536451][ T8332] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  644.023524][ T8338] loop3: detected capacity change from 0 to 512
[  644.104414][ T8315] loop4: detected capacity change from 0 to 1024
[  644.119140][ T8338] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1978: inode has both inline data and extents flags
[  644.133414][ T8338] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1978: couldn't read orphan inode 15 (err -117)
[  644.147641][ T8338] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  644.166780][ T8315] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  644.177512][ T8315] EXT4-fs (loop4): invalid journal inode
[  644.183504][ T8315] EXT4-fs (loop4): can't get journal size
[  644.189938][ T8315] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 17104912: comm syz.4.1974: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  644.205442][ T8315] EXT4-fs (loop4): failed to initialize system zone (-117)
[  644.212877][ T8315] EXT4-fs (loop4): mount failed
[  644.282333][ T1028] keytouch 0003:0926:3333.0077: fixing up Keytouch IEC report descriptor
[  644.292085][ T1028] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0077/input/input75
[  644.317227][ T8344] loop5: detected capacity change from 0 to 128
[  644.327597][ T8344] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  644.336688][ T8344] ext4 filesystem being mounted at /264/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  644.379898][ T1028] keytouch 0003:0926:3333.0077: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  644.427859][    T6] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  644.493726][   T24] usb 5-1: USB disconnect, device number 87
[  644.744574][  T283] EXT4-fs (loop3): unmounting filesystem.
[  644.939000][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  644.949998][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  644.959833][    T6] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  644.968991][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.977886][    T6] usb 2-1: config 0 descriptor??
[  645.170284][ T8359] FAULT_INJECTION: forcing a failure.
[  645.170284][ T8359] name failslab, interval 1, probability 0, space 0, times 0
[  645.183025][ T8359] CPU: 1 PID: 8359 Comm: syz.4.1986 Not tainted syzkaller #0
[  645.190425][ T8359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  645.200515][ T8359] Call Trace:
[  645.203812][ T8359]  <TASK>
[  645.206763][ T8359]  __dump_stack+0x21/0x24
[  645.211128][ T8359]  dump_stack_lvl+0xee/0x150
[  645.215921][ T8359]  ? __cfi_dump_stack_lvl+0x8/0x8
[  645.220974][ T8359]  dump_stack+0x15/0x24
[  645.225159][ T8359]  should_fail_ex+0x3d4/0x520
[  645.229865][ T8359]  ? security_inode_alloc+0x33/0x120
[  645.235213][ T8359]  __should_failslab+0xac/0xf0
[  645.239996][ T8359]  should_failslab+0x9/0x20
[  645.244517][ T8359]  kmem_cache_alloc+0x3b/0x330
[  645.249300][ T8359]  ? slab_post_alloc_hook+0x4f/0x2d0
[  645.254621][ T8359]  security_inode_alloc+0x33/0x120
[  645.259751][ T8359]  inode_init_always+0x6fc/0x960
[  645.264704][ T8359]  iget_locked+0x20a/0x8b0
[  645.269142][ T8359]  kernfs_get_inode+0x4b/0x6f0
[  645.273928][ T8359]  ? kernfs_find_ns+0x463/0x4b0
[  645.278814][ T8359]  kernfs_iop_lookup+0x20f/0x310
[  645.283781][ T8359]  lookup_one_qstr_excl+0x125/0x270
[  645.289002][ T8359]  do_rmdir+0x1ca/0x6a0
[  645.293175][ T8359]  ? __cfi_do_rmdir+0x10/0x10
[  645.297881][ T8359]  __x64_sys_unlinkat+0xc7/0xf0
[  645.302764][ T8359]  x64_sys_call+0x79f/0x9a0
[  645.307294][ T8359]  do_syscall_64+0x4c/0xa0
[  645.311740][ T8359]  ? clear_bhb_loop+0x30/0x80
[  645.316452][ T8359]  ? clear_bhb_loop+0x30/0x80
[  645.321158][ T8359]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  645.327077][ T8359] RIP: 0033:0x7ff185f8f749
[  645.331508][ T8359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  645.351132][ T8359] RSP: 002b:00007ff186dec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  645.359565][ T8359] RAX: ffffffffffffffda RBX: 00007ff1861e5fa0 RCX: 00007ff185f8f749
[  645.367557][ T8359] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  645.375549][ T8359] RBP: 00007ff186dec090 R08: 0000000000000000 R09: 0000000000000000
[  645.383553][ T8359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  645.391550][ T8359] R13: 00007ff1861e6038 R14: 00007ff1861e5fa0 R15: 00007ffd94c706e8
[  645.399565][ T8359]  </TASK>
[  645.406403][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  645.448765][ T8368] loop4: detected capacity change from 0 to 128
[  645.457611][ T8368] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  645.466598][ T8368] ext4 filesystem being mounted at /362/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  645.507957][   T24] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  645.589792][ T8341] loop1: detected capacity change from 0 to 1024
[  645.614751][ T8341] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  645.633096][ T8341] EXT4-fs (loop1): invalid journal inode
[  645.639056][ T8341] EXT4-fs (loop1): can't get journal size
[  645.645336][ T8341] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 17104912: comm syz.1.1981: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  645.689597][ T8341] EXT4-fs (loop1): failed to initialize system zone (-117)
[  645.720618][ T8341] EXT4-fs (loop1): mount failed
[  645.777977][   T24] usb 4-1: Using ep0 maxpacket: 16
[  645.785141][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  645.814136][    T6] keytouch 0003:0926:3333.0078: fixing up Keytouch IEC report descriptor
[  645.817331][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  645.830978][    T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0078/input/input76
[  645.843955][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  645.857162][   T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  645.866467][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.878622][   T24] usb 4-1: config 0 descriptor??
[  645.944922][    T6] keytouch 0003:0926:3333.0078: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  646.033117][    T6] usb 2-1: USB disconnect, device number 80
[  646.098283][ T8377] fido_id[8377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  646.316530][   T24] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0079/input/input77
[  646.374005][  T285] EXT4-fs (loop4): unmounting filesystem.
[  646.402466][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1991'.
[  646.421122][   T24] appleir 0003:05AC:8241.0079: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  646.519812][   T28] audit: type=1400 audit(1765481320.534:251): avc:  denied  { read write } for  pid=8354 comm="syz.3.1985" name="event3" dev="devtmpfs" ino=3380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  646.545466][    T6] usb 4-1: USB disconnect, device number 94
[  646.545702][   T28] audit: type=1400 audit(1765481320.534:252): avc:  denied  { open } for  pid=8354 comm="syz.3.1985" path="/dev/input/event3" dev="devtmpfs" ino=3380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  646.590918][   T28] audit: type=1400 audit(1765481320.534:253): avc:  denied  { ioctl } for  pid=8354 comm="syz.3.1985" path="/dev/input/event3" dev="devtmpfs" ino=3380 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  646.677887][  T548] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  646.887878][  T548] usb 5-1: Using ep0 maxpacket: 32
[  646.895634][  T548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  646.949536][  T548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  647.000923][  T548] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  647.049810][  T548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.060293][  T548] usb 5-1: config 0 descriptor??
[  647.066499][  T548] hub 5-1:0.0: USB hub found
[  647.139454][ T8392] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  647.267364][  T548] hub 5-1:0.0: 1 port detected
[  647.310975][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'.
[  647.469814][ T8397] loop1: detected capacity change from 0 to 128
[  647.498805][ T8397] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  647.507576][ T8397] ext4 filesystem being mounted at /365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  647.852935][  T548] usb 5-1: USB disconnect, device number 88
[  648.182492][ T8409] syz.0.1997[8409] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  648.182918][ T8409] syz.0.1997[8409] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  649.480167][ T8413] loop4: detected capacity change from 0 to 128
[  649.549851][ T8413] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  649.575742][ T8413] ext4 filesystem being mounted at /364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  649.610580][  T282] EXT4-fs (loop1): unmounting filesystem.
[  649.654064][ T8418] loop5: detected capacity change from 0 to 128
[  651.265072][  T285] EXT4-fs (loop4): unmounting filesystem.
[  651.287274][ T8418] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  651.313975][ T8418] ext4 filesystem being mounted at /268/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  651.907835][ T1028] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  651.997833][    T6] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  652.097869][ T1028] usb 4-1: Using ep0 maxpacket: 32
[  652.104249][ T1028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  652.135726][ T1028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  652.203464][ T1028] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  652.213028][ T1028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.214690][ T2482] EXT4-fs (loop5): unmounting filesystem.
[  652.225903][ T1028] usb 4-1: config 0 descriptor??
[  652.233676][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  652.245330][ T1028] hub 4-1:0.0: USB hub found
[  652.250013][    T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  652.260198][    T6] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  652.269521][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.281790][    T6] usb 2-1: config 0 descriptor??
[  652.564758][ T8449] incfs: iterate_incfs_dir / -22
[  652.570018][ T8449] FAULT_INJECTION: forcing a failure.
[  652.570018][ T8449] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  652.583330][ T8449] CPU: 1 PID: 8449 Comm: syz.5.2009 Not tainted syzkaller #0
[  652.590730][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  652.600797][ T8449] Call Trace:
[  652.604086][ T8449]  <TASK>
[  652.607027][ T8449]  __dump_stack+0x21/0x24
[  652.611381][ T8449]  dump_stack_lvl+0xee/0x150
[  652.615991][ T8449]  ? __cfi_dump_stack_lvl+0x8/0x8
[  652.621040][ T8449]  ? raw_irqentry_exit_cond_resched+0x29/0x30
[  652.627125][ T8449]  dump_stack+0x15/0x24
[  652.628814][ T1028] hub 4-1:0.0: 1 port detected
[  652.631296][ T8449]  should_fail_ex+0x3d4/0x520
[  652.640744][ T8449]  should_fail+0xb/0x10
[  652.644925][ T8449]  should_fail_usercopy+0x1a/0x20
[  652.649970][ T8449]  _copy_to_user+0x1e/0x90
[  652.654393][ T8449]  simple_read_from_buffer+0xe9/0x160
[  652.659791][ T8449]  proc_fail_nth_read+0x19a/0x210
[  652.664847][ T8449]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  652.670413][ T8449]  ? proc_fail_nth_read+0xd/0x210
[  652.675460][ T8449]  ? security_file_permission+0x94/0xb0
[  652.681017][ T8449]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  652.686579][ T8449]  vfs_read+0x26e/0x8c0
[  652.690774][ T8449]  ? __cfi_vfs_read+0x10/0x10
[  652.695484][ T8449]  ? __kasan_check_write+0x14/0x20
[  652.700613][ T8449]  ? mutex_lock+0x8d/0x1a0
[  652.705060][ T8449]  ? __cfi_mutex_lock+0x10/0x10
[  652.709941][ T8449]  ? __fdget_pos+0x1e4/0x380
[  652.714547][ T8449]  ? __fdget_pos+0x2cd/0x380
[  652.719151][ T8449]  ? ksys_read+0x71/0x240
[  652.723497][ T8449]  ksys_read+0x140/0x240
[  652.727763][ T8449]  ? __cfi_ksys_read+0x10/0x10
[  652.732560][ T8449]  ? __kasan_check_write+0x14/0x20
[  652.737685][ T8449]  ? fpregs_restore_userregs+0x128/0x260
[  652.743334][ T8449]  __x64_sys_read+0x7b/0x90
[  652.747865][ T8449]  x64_sys_call+0x2f/0x9a0
[  652.752304][ T8449]  do_syscall_64+0x4c/0xa0
[  652.756720][ T8449]  ? clear_bhb_loop+0x30/0x80
[  652.761409][ T8449]  ? clear_bhb_loop+0x30/0x80
[  652.766104][ T8449]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  652.772011][ T8449] RIP: 0033:0x7f4a8398e15c
[  652.776452][ T8449] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  652.796068][ T8449] RSP: 002b:00007f4a823f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  652.804492][ T8449] RAX: ffffffffffffffda RBX: 00007f4a83be5fa0 RCX: 00007f4a8398e15c
[  652.812464][ T8449] RDX: 000000000000000f RSI: 00007f4a823f70a0 RDI: 0000000000000007
[  652.820447][ T8449] RBP: 00007f4a823f7090 R08: 0000000000000000 R09: 0000000000000000
[  652.828440][ T8449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  652.836422][ T8449] R13: 00007f4a83be6038 R14: 00007f4a83be5fa0 R15: 00007ffcab18b428
[  652.844414][ T8449]  </TASK>
[  652.864537][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'.
[  652.876336][ T8454] loop5: detected capacity change from 0 to 512
[  652.886002][ T8454] ------------[ cut here ]------------
[  652.891555][ T8454] EA inode 11 i_nlink=2
[  652.891693][ T8454] WARNING: CPU: 1 PID: 8454 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4ad/0x510
[  652.906113][ T8454] Modules linked in:
[  652.910054][ T8454] CPU: 1 PID: 8454 Comm: syz.5.2010 Not tainted syzkaller #0
[  652.917433][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  652.927539][ T8454] RIP: 0010:ext4_xattr_inode_update_ref+0x4ad/0x510
[  652.934231][ T8454] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 a4 17 bb ff 49 8b 37 48 c7 c7 40 e8 94 85 89 da e8 93 d2 47 ff <0f> 0b 4c 8b 6c 24 10 4c 8b 7c 24 08 4c 8d 64 24 60 e9 b4 fe ff ff
[  652.953896][ T8454] RSP: 0018:ffffc90011d07080 EFLAGS: 00010246
[  652.960005][ T8454] RAX: da4fed4b912fa600 RBX: 0000000000000002 RCX: 0000000000080000
[  652.968033][ T8454] RDX: ffffc90000e59000 RSI: 0000000000006b08 RDI: 0000000000006b09
[  652.976033][ T8454] RBP: ffffc90011d07170 R08: dffffc0000000000 R09: ffffed103ee24eb4
[  652.984102][ T8454] R10: ffffed103ee24eb4 R11: 1ffff1103ee24eb3 R12: ffffc90011d070e0
[  652.992117][ T8454] R13: ffff8881004adce8 R14: dffffc0000000000 R15: ffff8881004add28
[  653.000138][ T8454] FS:  00007f4a823f76c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  653.009116][ T8454] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  653.015716][ T8454] CR2: 00007f4a83972a60 CR3: 0000000132d6b000 CR4: 00000000003526a0
[  653.023734][ T8454] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  653.031763][ T8454] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  653.039779][ T8454] Call Trace:
[  653.043073][ T8454]  <TASK>
[  653.046067][ T8454]  ? ext4_xattr_block_csum+0x500/0x500
[  653.051597][ T8454]  ? __kasan_check_write+0x14/0x20
[  653.056730][ T8454]  ? ext4_xattr_inode_iget+0x266/0x350
[  653.058584][    T6] hid-led: probe of 0003:27B8:01ED.007A failed with error -71
[  653.062267][ T8454]  ext4_xattr_set_entry+0xc6d/0x21d0
[  653.075043][ T8454]  ext4_xattr_ibody_set+0x24e/0x6c0
[  653.080328][ T8454]  ext4_expand_extra_isize_ea+0xf7b/0x1990
[  653.086183][ T8454]  __ext4_expand_extra_isize+0x2fe/0x3e0
[  653.091905][ T8454]  __ext4_mark_inode_dirty+0x3cf/0x600
[  653.097408][ T8454]  ext4_evict_inode+0xc0b/0x1460
[  653.097890][    T6] usb 2-1: USB disconnect, device number 81
[  653.102420][ T8454]  ? _raw_spin_unlock+0x4c/0x70
[  653.113193][ T8454]  ? __cfi_ext4_evict_inode+0x10/0x10
[  653.118641][ T8454]  ? unlock_new_inode+0x97/0xc0
[  653.123523][ T8454]  ? __cfi_ext4_evict_inode+0x10/0x10
[  653.128957][ T8454]  evict+0x493/0x890
[  653.132898][ T8454]  ? proc_nr_inodes+0x2f0/0x2f0
[  653.137817][ T8454]  ? __kasan_check_write+0x14/0x20
[  653.142989][ T8454]  iput+0x620/0x670
[  653.146829][ T8454]  ext4_process_orphan+0x2b1/0x320
[  653.152068][ T8454]  ext4_orphan_cleanup+0xb02/0x1210
[  653.157297][ T8454]  ? proc_register+0x546/0x720
[  653.162133][ T8454]  ? __cfi_ext4_orphan_cleanup+0x10/0x10
[  653.167918][ T8454]  ? ext4_register_sysfs+0x285/0x2c0
[  653.173249][ T8454]  ? errseq_check_and_advance+0x66/0x130
[  653.178939][ T8454]  ext4_fill_super+0x7439/0x7970
[  653.183915][ T8454]  ? __cfi_ext4_fill_super+0x10/0x10
[  653.189264][ T8454]  ? snprintf+0xd7/0x120
[  653.193533][ T8454]  ? set_blocksize+0x1df/0x360
[  653.198342][ T8454]  ? sb_set_blocksize+0xaa/0xf0
[  653.203214][ T8454]  get_tree_bdev+0x444/0x680
[  653.207879][ T8454]  ? __cfi_ext4_fill_super+0x10/0x10
[  653.213208][ T8454]  ext4_get_tree+0x1c/0x20
[  653.217641][ T8454]  vfs_get_tree+0x9a/0x270
[  653.222098][ T8454]  do_new_mount+0x25a/0xa20
[  653.226653][ T8454]  path_mount+0x675/0x1010
[  653.231113][ T8454]  ? user_path_at_empty+0x161/0x1c0
[  653.236341][ T8454]  __se_sys_mount+0x318/0x380
[  653.241091][ T8454]  ? do_mkdirat+0x459/0x4c0
[  653.245621][ T8454]  ? __x64_sys_mount+0xd0/0xd0
[  653.250450][ T8454]  ? do_user_addr_fault+0x9ac/0x1050
[  653.255765][ T8454]  __x64_sys_mount+0xbf/0xd0
[  653.260435][ T8454]  x64_sys_call+0x65d/0x9a0
[  653.264960][ T8454]  do_syscall_64+0x4c/0xa0
[  653.269439][ T8454]  ? clear_bhb_loop+0x30/0x80
[  653.274150][ T8454]  ? clear_bhb_loop+0x30/0x80
[  653.278908][ T8454]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  653.284835][ T8454] RIP: 0033:0x7f4a83990eea
[  653.289296][ T8454] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  653.308978][ T8454] RSP: 002b:00007f4a823f6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  653.317432][ T8454] RAX: ffffffffffffffda RBX: 00007f4a823f6ef0 RCX: 00007f4a83990eea
[  653.325464][ T8454] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f4a823f6eb0
[  653.333492][ T8454] RBP: 0000200000000180 R08: 00007f4a823f6ef0 R09: 0000000000800700
[  653.341547][ T8454] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[  653.349574][ T8454] R13: 00007f4a823f6eb0 R14: 000000000000046f R15: 000000000000002c
[  653.357572][ T8454]  </TASK>
[  653.360667][ T8454] ---[ end trace 0000000000000000 ]---
[  653.366617][ T8454] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: inode #18: comm syz.5.2010: iget: bad extra_isize 90 (inode size 256)
[  653.380402][ T8454] EXT4-fs (loop5): Remounting filesystem read-only
[  653.386954][ T8454] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.2010: error while reading EA inode 18 err=-117
[  653.399544][ T8454] EXT4-fs (loop5): Remounting filesystem read-only
[  653.406191][ T8454] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: inode #18: comm syz.5.2010: iget: bad extra_isize 90 (inode size 256)
[  653.427984][ T8454] EXT4-fs (loop5): Remounting filesystem read-only
[  653.434561][ T8454] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.2010: error while reading EA inode 18 err=-117
[  653.450012][ T8454] EXT4-fs (loop5): Remounting filesystem read-only
[  653.456676][ T8454] EXT4-fs (loop5): 1 orphan inode deleted
[  653.462528][ T8454] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  653.501401][   T28] audit: type=1400 audit(1765481327.514:254): avc:  denied  { mounton } for  pid=8453 comm="syz.5.2010" path="/270/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  653.535876][ T8454] incfs: iterate_incfs_dir / -22
[  653.549078][ T2482] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  653.571714][ T2482] EXT4-fs (loop5): Remounting filesystem read-only
[  653.631102][ T8463] syz.4.2011[8463] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  653.631393][ T8463] syz.4.2011[8463] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  653.669344][ T8463] loop4: detected capacity change from 0 to 512
[  653.812703][   T28] audit: type=1400 audit(1765481327.824:255): avc:  denied  { rmdir } for  pid=2482 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  653.855996][ T2482] ------------[ cut here ]------------
[  653.861582][ T2482] kernel BUG at fs/namei.c:2962!
[  653.884928][ T8463] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.2011: inode has both inline data and extents flags
[  653.899640][ T8463] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2011: couldn't read orphan inode 15 (err -117)
[  653.913296][ T8463] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  654.057985][ T2482] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  654.064113][ T2482] CPU: 1 PID: 2482 Comm: syz-executor Tainted: G        W          syzkaller #0
[  654.073153][ T2482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  654.083235][ T2482] RIP: 0010:may_delete+0x701/0x710
[  654.088378][ T2482] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 c0 12 f4 ff e9 77 fe ff ff e8 56 99 af ff 0f 0b e8 4f 99 af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53
[  654.108086][ T2482] RSP: 0000:ffffc90013067c20 EFLAGS: 00010293
[  654.114169][ T2482] RAX: ffffffff81c09071 RBX: ffff88811817bdd0 RCX: ffff888119296540
[  654.122164][ T2482] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000
[  654.130161][ T2482] RBP: ffffc90013067c88 R08: 0000000000000004 R09: 0000000000000003
[  654.138154][ T2482] R10: fffff5200260cf64 R11: 1ffff9200260cf64 R12: dffffc0000000000
[  654.146146][ T2482] R13: 0000000000000001 R14: ffff8881344d2cf0 R15: 1ffff1102302f7ba
[  654.154312][ T2482] FS:  000055556d8eb500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  654.163257][ T2482] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  654.169859][ T2482] CR2: 00000000ffffffff CR3: 000000010edf7000 CR4: 00000000003506a0
[  654.177848][ T2482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  654.185840][ T2482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  654.193825][ T2482] Call Trace:
[  654.197127][ T2482]  <TASK>
[  654.200082][ T2482]  vfs_rmdir+0x32/0x500
[  654.204258][ T2482]  incfs_kill_sb+0x105/0x220
[  654.208868][ T2482]  deactivate_locked_super+0xb5/0x120
[  654.214261][ T2482]  deactivate_super+0xaf/0xe0
[  654.218964][ T2482]  cleanup_mnt+0x45f/0x4e0
[  654.223396][ T2482]  __cleanup_mnt+0x19/0x20
[  654.227827][ T2482]  task_work_run+0x1db/0x240
[  654.232441][ T2482]  ? __cfi_task_work_run+0x10/0x10
[  654.237579][ T2482]  ? __x64_sys_umount+0x125/0x160
[  654.242622][ T2482]  ? __cfi___x64_sys_umount+0x10/0x10
[  654.248014][ T2482]  exit_to_user_mode_loop+0x9b/0xb0
[  654.253228][ T2482]  exit_to_user_mode_prepare+0x87/0xd0
[  654.258705][ T2482]  syscall_exit_to_user_mode+0x1a/0x30
[  654.264195][ T2482]  do_syscall_64+0x58/0xa0
[  654.268631][ T2482]  ? clear_bhb_loop+0x30/0x80
[  654.273333][ T2482]  ? clear_bhb_loop+0x30/0x80
[  654.278038][ T2482]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  654.283951][ T2482] RIP: 0033:0x7f4a83990a77
[  654.288380][ T2482] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  654.308020][ T2482] RSP: 002b:00007ffcab1895c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  654.316455][ T2482] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4a83990a77
[  654.324438][ T2482] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcab189680
[  654.332421][ T2482] RBP: 00007ffcab189680 R08: 0000000000000000 R09: 0000000000000000
[  654.340405][ T2482] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcab18a770
[  654.348383][ T2482] R13: 00007f4a83a13d7d R14: 000000000009f8d7 R15: 00007ffcab18b840
[  654.356373][ T2482]  </TASK>
[  654.359400][ T2482] Modules linked in:
[  654.401310][ T1028] usb 4-1: USB disconnect, device number 95
[  654.449695][  T285] EXT4-fs (loop4): unmounting filesystem.
[  654.455587][ T2482] ---[ end trace 0000000000000000 ]---
[  654.461173][ T2482] RIP: 0010:may_delete+0x701/0x710
[  654.466394][ T2482] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 c0 12 f4 ff e9 77 fe ff ff e8 56 99 af ff 0f 0b e8 4f 99 af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53
[  654.486232][ T2482] RSP: 0000:ffffc90013067c20 EFLAGS: 00010293
[  654.492743][ T2482] RAX: ffffffff81c09071 RBX: ffff88811817bdd0 RCX: ffff888119296540
[  654.500898][ T2482] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000
[  654.508972][ T2482] RBP: ffffc90013067c88 R08: 0000000000000004 R09: 0000000000000003
[  654.517326][ T2482] R10: fffff5200260cf64 R11: 1ffff9200260cf64 R12: dffffc0000000000
[  654.525451][ T2482] R13: 0000000000000001 R14: ffff8881344d2cf0 R15: 1ffff1102302f7ba
[  654.533522][ T2482] FS:  000055556d8eb500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  654.542596][ T2482] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  654.549449][ T2482] CR2: 00000000ffffffff CR3: 000000010edf7000 CR4: 00000000003506b0
[  654.557502][ T2482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  654.565612][ T2482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  654.573634][ T2482] Kernel panic - not syncing: Fatal exception
[  654.580083][ T2482] Kernel Offset: disabled
[  654.584411][ T2482] Rebooting in 86400 seconds..