last executing test programs: 6m30.253503813s ago: executing program 0 (id=1142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000101401"], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 6m24.227188811s ago: executing program 0 (id=1163): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x6d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x3f}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendto$inet6(r1, 0x0, 0x0, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 6m19.421763838s ago: executing program 0 (id=1170): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) 6m9.230019241s ago: executing program 0 (id=1199): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x17, @private=0xa010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000840)="c632", 0x2}], 0x1, &(0x7f0000000640)=ANY=[], 0x7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x8a, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, &(0x7f0000000840)=0x20) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r3 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) 6m7.635522094s ago: executing program 0 (id=1205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000000206012800000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a000000050004"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000b0601080000000000000000020000020500010007000000440007801800148014000240fc0200000000000000000000000000011800018014000240fe8000000000000000000000000000aa060004404e23000005000700880000000900020073797a31"], 0x6c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m6.611104707s ago: executing program 0 (id=1209): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) 5m57.33713617s ago: executing program 4 (id=1245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x2, 0x0, [{0x7, 0x3c, 0x4, 0x7fff, 0x4, 0xffff0cd0, 0x6}, {0x4, 0x8, 0x1, 0x9, 0x1, 0x3, 0x1ff}]}) 5m57.097997018s ago: executing program 4 (id=1247): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001800)=ANY=[@ANYBLOB="1201100363863510dd0c10108736010203010902"], &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="050f0504"]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) 5m56.259120345s ago: executing program 4 (id=1251): syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local, {[@lsrr={0x83, 0x3, 0x74}, @lsrr={0x83, 0x3, 0xdd}]}}, {0x2001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x7, 0x0, @void}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xc000, 0xdddd1000, 0x0, 0x0, 0xff, 0x6, 0xa, 0x5, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x4, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xc000, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x4, 0x1}, {0x70000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x50000, 0xf, 0x0, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0x60000, 0x0, 0x1, 0x2, 0x1, 0x0, 0x2b, 0x26, 0x0, 0xf8}, {0x100000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x8500, 0x0, [0x2000000000, 0x0, 0x1, 0x3]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m56.097856951s ago: executing program 4 (id=1253): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0xb, &(0x7f00000000c0)={[{@cruft}, {@utf8}, {@nojoliet}, {@showassoc}, {@utf8}, {@map_normal}]}, 0x1, 0x55a, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) 5m54.490819033s ago: executing program 4 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200080, 0x0, 0x0, 0x0, 0x0) 5m50.696806768s ago: executing program 32 (id=1209): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) 5m50.690985398s ago: executing program 4 (id=1263): syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local, {[@lsrr={0x83, 0x3, 0x74}, @lsrr={0x83, 0x3, 0xdd}]}}, {0x2001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x7, 0x0, @void}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xc000, 0xdddd1000, 0x0, 0x0, 0xff, 0x6, 0xa, 0x5, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x4, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xc000, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x4, 0x1}, {0x70000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x50000, 0xf, 0x0, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0x60000, 0x0, 0x1, 0x2, 0x1, 0x0, 0x2b, 0x26, 0x0, 0xf8}, {0x100000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x8500, 0x0, [0x2000000000, 0x0, 0x1, 0x3]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m35.592593512s ago: executing program 33 (id=1263): syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local, {[@lsrr={0x83, 0x3, 0x74}, @lsrr={0x83, 0x3, 0xdd}]}}, {0x2001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x7, 0x0, @void}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xc000, 0xdddd1000, 0x0, 0x0, 0xff, 0x6, 0xa, 0x5, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x4, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xc000, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x4, 0x1}, {0x70000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x50000, 0xf, 0x0, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0x60000, 0x0, 0x1, 0x2, 0x1, 0x0, 0x2b, 0x26, 0x0, 0xf8}, {0x100000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x8500, 0x0, [0x2000000000, 0x0, 0x1, 0x3]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m44.472560122s ago: executing program 1 (id=1474): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) 4m43.028746409s ago: executing program 1 (id=1477): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x80000000000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() pipe2$9p(&(0x7f00000001c0), 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @action={{{}, {}, @device_b}, @sa_query_req={0x8, 0x0, 0x6}}}]}, 0x3c}}, 0x0) 4m42.836229486s ago: executing program 1 (id=1481): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@allocspi={0x104, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xf}}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) 4m42.720733159s ago: executing program 1 (id=1482): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000480)={{}, {0x0, 0x989680}}, &(0x7f00000004c0)) 4m41.314490185s ago: executing program 1 (id=1486): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001010000000000000000100008500000002000000000300"/65], 0x0, 0x4a}, 0x28) 4m41.209827979s ago: executing program 1 (id=1488): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESDEC], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0xfffffffd, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r4, &(0x7f0000000c40), 0x0, 0x20000054) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@allocspi={0x104, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xf}}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x441c2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x8100, 0x0) 4m25.670312565s ago: executing program 34 (id=1488): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESDEC], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0xfffffffd, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r4, &(0x7f0000000c40), 0x0, 0x20000054) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@allocspi={0x104, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xf}}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x441c2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x8100, 0x0) 2m48.50999008s ago: executing program 6 (id=1801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xaf4, 0x0) 2m43.425658996s ago: executing program 6 (id=1809): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) 2m41.242897087s ago: executing program 6 (id=1820): set_mempolicy(0x8006, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x308b407, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 2m40.268575169s ago: executing program 6 (id=1824): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xf1, 0x64, 0x96, 0x40, 0x7c0, 0x158b, 0xd9d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x40, 0x4, 0xe0, 0x1, "", [{{0x9, 0x4, 0x2c, 0x7, 0x1, 0xa7, 0x3a, 0x30, 0x6, [], [{{0x9, 0x5, 0x83, 0x3, 0x200, 0x39, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x1b, &(0x7f0000001440)={{0x12, 0x1, 0x310, 0x3e, 0xbb, 0xaf, 0x10, 0x5ac, 0x12a8, 0xd4d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xc, 0x5, 0x80, 0x73}}]}}, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x963b01) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084503, &(0x7f0000ffcffc)) 2m35.902423741s ago: executing program 6 (id=1837): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) write$char_usb(r1, &(0x7f00000003c0)='U', 0x1) 2m33.144865561s ago: executing program 6 (id=1857): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESDEC], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0xfffffffd, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r4, &(0x7f0000000c40), 0x0, 0x20000054) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@allocspi={0x104, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xf}}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x441c2, 0x0) splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0x1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x8100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) 2m18.068709432s ago: executing program 35 (id=1857): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESDEC], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0xfffffffd, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r4, &(0x7f0000000c40), 0x0, 0x20000054) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@allocspi={0x104, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xf}}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x441c2, 0x0) splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0x1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x8100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) 19.655432389s ago: executing program 8 (id=2327): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000200)={[{@compress}]}, 0x1, 0x50ed, &(0x7f0000005180)="$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") open(0x0, 0x60142, 0x14) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) 16.799263453s ago: executing program 8 (id=2333): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711, @host}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000840)={0x14, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x14}]}, 0x14}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0xc8, 0x0, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x3e9, 0x400, 0x70bd27, 0x25dfdbfe, {0x11, 0x1, 0x0, r1, 0xb, 0x55, 0x7fffffff, 0x4, 0x0, 0xd8, 0x3}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x7, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) close(0x3) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_setup(0x4003615, 0x0) shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) getpid() 16.682128926s ago: executing program 5 (id=2335): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x1, 0x3, 0x10000, 0xec7, 0x7fffffffffffffff}) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f00000001c0)=[0x81, 0xe4]) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0x2}}}, 0x8) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) 14.609990644s ago: executing program 5 (id=2341): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) 14.594107135s ago: executing program 8 (id=2342): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.660767128s ago: executing program 7 (id=2347): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d800000018007b18e00212ba0d8105040a871100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000100000300014002000c59c266cd3e72d30901a8040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090080001fb791643a5ee4b11602b2a10c11ce1b14d6d130dfe1d9d322fe04fba8cae8c9010000734d7a50f4fa61ee8362969ad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6cdd40dd60105e9f16e9cb58000000000000000000000000000be", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file6\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f00000033c0)="$eJzs3U1rE0Ecx/HfbJImtqVuH0QQT9WCJ+nDRbwUJO/AiydRmwjFUEErqCf1LL4A730LvgCPnsSz4K0nX0BukZmdNZtkN5uGppuk3w8kbLrzn4fsbGf+KSUCcGk9qP852Tu1DyOVVJJ0Xwok1aSypGu6XntzdHx43Go2hlVUchH2YRRFmoEyB0fNtFAb5yK80L4qazn5M0xG7bc+FN0HFM/d/SkCqervTne+duE9m4zLPulNW2291UrR/QAAFMuv/4Ff55f9/j0IpC2/7Peu/zO+gLaL7sCEfc85n1j/XZbVMfb6XnWnuvmeS+HKqvigk73TtLoWc9paUDSzejaYJi+rdH0Jrjw/bDXvHrxsNQJ90r5X6RbbcM+NaOrG4pzWHn8crHrT56Yj5pfJ2s5myY2hYsewm+x/osj6ObboM+7ht6b5YX6axybUVzX+7//KHWMvk7tSYd+Vivq/nV2jG+WCXKmMUa66Rm74FkYZZUkZGYniGbXadwHDvH66qLW+qGh0OzlR66lRuzlRG/1R3dmcHTlp5ot5ZDb1V99UT+z/A/tub2mUO9OWcSX9zBg6nrIrGbrZGc/Pm6klg3FHhDF81jPd08rrd+9fPG21mq/m9sDeiYOn7AoyLT28+IN4EkxLf+b2wL7JhbQerzvj15P9q4OP5edH96KfMZBJMC/svstE+V8iX9l2mzX7FPbu06vJ2E5e5YkadzJygzX3vJidwfUwLr9ZSvnr4mCLQ3OuW3ek26O0GAl9P6fP/jhBpq5fesLn/wAAAAAAAAAAAAAAAAAAALPm/P7loKasU0WPEQAAAAAAAAAAAAAAAAAAAACAWZfy/b/VQr//96GiV3z/LzBx/wIAAP//nY5x9w==") r1 = socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x204080, 0x16b) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c40000001b000100feffffff00004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYBLOB], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) setrlimit(0x0, &(0x7f00000000c0)={0x0, 0x8000000000000001}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x2000000, &(0x7f0000006540)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x32, 0x2d, 0x32]}}}, 0x4e}]}) 10.410045091s ago: executing program 7 (id=2351): socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x0, 0x50dc85624ea6cf59, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xc, 0x4, 0x2b8, 0xffffffff, 0x220, 0x130, 0x0, 0x98, 0xffffffff, 0x220, 0x220, 0x220, 0x98, 0x4, 0x0, {[{{@ip={@local, @loopback, 0xff, 0xffffff00, 'dummy0\x00', 'veth1_macvtap\x00', {}, {}, 0x8, 0x2, 0x46}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x11}}, @common=@addrtype={{0x20}, {0x150, 0x22, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchmod(r3, 0x208) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], 0x0, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b0006020000009b7a000100e83ac55324dcd8bcb9ecf3e2a4b6f6c7d935", 0x28, 0xfffffffffffffffe) 9.287260478s ago: executing program 5 (id=2356): syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r3, 0xa1) shutdown(r3, 0x1) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000721000/0x4000)=nil) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0x8) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) timerfd_create(0x8, 0x800) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000007000000df7f", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff000000000000000000f92b0000"], 0x50) 8.270076691s ago: executing program 7 (id=2358): socket$kcm(0x11, 0x3, 0x0) socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) socket$packet(0x11, 0x3, 0x300) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000", 0x36}], 0x1) 7.658014531s ago: executing program 5 (id=2361): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d800000018007b18e00212ba0d8105040a871100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000100000300014002000c59c266cd3e72d30901a8040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090080001fb791643a5ee4b11602b2a10c11ce1b14d6d130dfe1d9d322fe04fba8cae8c9010000734d7a50f4fa61ee8362969ad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6cdd40dd60105e9f16e9cb58000000000000000000000000000be", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file6\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f00000033c0)="$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") r1 = socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x204080, 0x16b) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c40000001b000100feffffff00004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYBLOB], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) setrlimit(0x0, &(0x7f00000000c0)={0x0, 0x8000000000000001}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x2000000, &(0x7f0000006540)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x32, 0x2d, 0x32]}}}, 0x4e}]}) 7.587251953s ago: executing program 3 (id=2362): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r5, 0x0, 0x28090) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) gettid() r6 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) 7.564473394s ago: executing program 7 (id=2363): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711, @host}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000840)={0x14, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x14}]}, 0x14}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0xc8, 0x0, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x3e9, 0x400, 0x70bd27, 0x25dfdbfe, {0x11, 0x1, 0x0, r1, 0xb, 0x55, 0x7fffffff, 0x4, 0x0, 0xd8, 0x3}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x7, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) close(0x3) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_setup(0x4003615, 0x0) shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) getpid() 6.098939121s ago: executing program 7 (id=2365): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.098671671s ago: executing program 3 (id=2366): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) 5.167935672s ago: executing program 5 (id=2367): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x16c}}, 0x44000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000007c0)=ANY=[], 0x210) socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000001380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2048c5, &(0x7f0000001400)=ANY=[@ANYRES16=r4, @ANYRESHEX=0xee00, @ANYBLOB="2c73686f72746e616d653d77696e6e742c726f6469722c757365667265652c756e695f786c6174653d312c756e695f786c6174653d302c757365667265652c73686f72746e616d651cb452969e69f07760a6127eba3d6d697865642c64656275672c73686f72746e616d653d6d697865642c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c00"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b", 0xd) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x65010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x0, 0xffff, 0x8000, 0x2, 0x0, 0x0, 0x6}, {0x0, 0x1, 0x20000, 0x1000280000000, 0x95, 0xffffffffffff281a, 0x7, 0x5}, {0x0, 0x0, 0x0, 0x10000}, 0x8, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private1, 0xfffffffc, 0x33}, 0xa, @in=@multicast1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x9, 0x8}}, 0xe8) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x63}], 0x2, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 5.059105325s ago: executing program 2 (id=2368): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}}, 0x20}}, 0x0) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000980)={0x5, 0x0, [{0x200000, 0x6a, &(0x7f0000000180)=""/106}, {0x25000, 0x79, &(0x7f0000000300)=""/121}, {0x50000, 0x0, 0x0}, {0x0, 0x52, &(0x7f00000006c0)=""/82}, {0x8080000, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 4.025954899s ago: executing program 2 (id=2369): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f0000000040)) 3.850217745s ago: executing program 5 (id=2370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$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") 3.843741595s ago: executing program 2 (id=2371): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) pread64(r4, &(0x7f00000014c0)=""/4096, 0x1000, 0x10000000a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="5c0000001000010400000000fcdbdf250010", @ANYRES32=0x0, @ANYBLOB="00300000421004002800128008000100767469001c000280080006000300000008000400ac1e010108000500"], 0x5c}, 0x1, 0x0, 0x0, 0x8c5}, 0x20000011) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYRES16=0x0], 0x5, 0x1530, &(0x7f0000002f80)="$eJzs3AuYjlX3MPC19t43Y5r0NMlh2Huvm4cG2yRJDklySJIkSc4JSZMkCYkhp6QhCTlOyGEIyWFi0jifDzknyStJkpCQZH/XdPj83/q/V/2/t/fz/t9Zv+u6r9lrnmetZ93Pmmvuw3PNfNVteK0mtas3IiL4p+DPX1IAIAYABgPANQAQAED5+PLx2Y/nkZjyz70I+2s9mH6lO2BXEs8/Z+P552w8/5yN55+z8fxzNp5/zsbzz9l4/ozlZNtmFbqWt5y7/XL/Pwb4/n8OxMf/nI3n/x/De9/nf5zE88/ZeP45G88/Z+P552w8/5yN55+z2N/EPH/GcrK/5D5y7l+K/cPniP/NnzP8+lb9k3WKBz+X+Vf1Gfw/5V2hHzvGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYznMeX+ZAoBf11e6L8YYY4wxxhhjjP11fO4r3QFjjDHGGGOMMcb+9RBASVAQQC7IDTGQB2LhKoiDqyEvXAMRuBbi4TrIB9dDfigABaEQJEBhKAIaDFggCKEoFIMoFIcScAMkQkkoBaXBQRlIghuhLNwE5eBmKA+3QAW4FSpCJagMVeA2qAq3QzW4A6rDnVADakItqA13QR28G+rCPVAP7oX6cB80gPuhITwAjeBBaAwPQRN4GJpCM2gOLaAltILWv82HP5P/PPSCF6A39IEU6Av94EXoDwNgIAyCwfASDIGXYSi8AqkwDIbDqzACXoOR8DqMgtEwBt6AsTAOxsMEmAiTIA3ehMkwBabCWzANpsMMmAnpMAtmw9swB+bCPHgH5sO7sAAWwiJYDBnwHiyBpZAJ78My+ACyYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCtvgQ9gOO2An7ILdsAf2wkewDz6G/fAJHIBP/4f5536T3x0BAQUKVKgwF+bCGIzBWIzFOIzDvJgXIxjBeIzHfJgP82N+LIgFMQEAi2ARNGiQkLAoFsUoRrEElsBETMRSWAodOkzCJCyLN2E5LIflsTxWwApYESthJayCVbAqVsVqWA2r37oQAGtgLayFd+FdeDfWxbpYD+thfayPDbABNsSG2AgbYWNsjE2wCTbFptgcm2NLbImtsTW2wTbYFttie2yPHbADdsSOmIzJ2Ak7YWfsjF2wC3bFrtgNu2F37IE98Hl8Hl/AF7AP1hB9sR/2w/7YHwfiIByEL+EQfBlfximYisNwOL6Kr+JrOBLP4igcjWNwDFYV43A8TkASkzAN03AyTsapOBWn4XScjjMxHWfhbJyNc3AuzsV3cD6+i+/iQlyIizEDM3AJLsVMzMRleA6zcDmuwJW4CgBX4Vpch2txA27EDbgZN+NW3Iof4oe4A3fgLtyFe3APfoQf4cf4MaZiMwA4iAfxEB7Cw3gYj+ARPIpH8Rgew+N4HE/gCTyJp/A0nsIzeAbP4jk8j+fxAl7Ai/hswheN95RcnwoimxJK5BK5RIyIEbEiVsSJOJFX5BURERHxIl7kE/lEfpFfFBQFRYJIEEVEEWGEESRCUVQUFVERFSVECZEoEkUpUUr0FU4kiSRRVpQV5UQ5UV7cIiqIW0VFUUm0c1VEFVFVtHfVxB2iuqguaoiaopaoLWqLOqKOqCvqinqinqgv6gsFAA1FXxyID4rsyTQRw7CpGI7NRQvRUrQSr+Ejoo0YiW1FO9FePCZG4yjsKNq4ZPGk6CTGY2fxtJiAz4iuYhJ2E8+J7qKH6CmeF71EW9db9BHTsK/oJ2ZifzFADBSDxBysKbInVku8IlLFMDFcvCoW42tipHhdjBKjxRjxhhgrxonxYoKYKCaJNPGmmCymiKniLTFNTBczxEyRLmaJ2eJtMUfMFfPEO2K+eFcsEAvFIrFYZIj3xBKxVGSK98Uy8YHIEsvFCrFSrBKrxRqxVqwT68UGsVFsEpvFFrFVbBMfiu1ih9gpdondYo/YKz4S+8THYr/4RBwQn4qD4m/ikPhMHBafiyPiC3FUfCmOia/EcfG1OCH6iJPilDgtvhVnxHfirDgnzovvxQXxg7gofhSXhBcgUQoppZKBzCVzyxiZR8bKq2ScvFrmldfIiLxWxsvrZD55vcwvC8iCspBMkIVlEamlkVaSDGVRWUxGZXFZQt4gE2VJWUqWlk6WkUnyRllW3iTLyZtleXmLrCBvlRVlJVlZVpG3yarydllN3iGryztlDVlT1pK15V2yjrxb1pX3yHryXllf3icbyPtlQ/mAbCQflI3lQ7KJfFg2lc1kc9lCtpStZGv5iGwjH5VtZTvZXj4mO8jHZUf5hEyWT8pO8inZWT4tu8hnZFf5rOwmn5PdZQ/ZU/4oL0kve8s+MkX2lf3ki7K/zD4WDpKD5UtyiHxZDpWvyFQ5TA6Xr8oR8jU5Ur4uR8nRcox8Q46V4+R4OUFOlJNkmnxTTpZT5FT5lpwmp8sZcqZMl7PkwF8qzfsT+VN+zff48yFZzpJDU1LlsJStcpv8UG6XO+ROuUvulnvkXrlX7pP75H65Xx6QB+RBeVAekofkYXlYHpFH5FF5VB6Tx+RxeVyekCfkSXlKfi+/lWfkd/KsPCfPye/lBXlBXvzlPQCFSiiplApULpVbxag8KlZdpeLU1SqvAAB1rYpX16l86nqVXxVQBVUhlaAKqyJKK6OsIhWqoqqYiqriqoS6QSWqkqqUKq2cKqOS1I0q8k/m/31/8tf+Vs74+Z1SrVVr1Ua1UW1VW9VetVcdVAfVUXVUySpZdVKdVGfVWXVRXVRX1VV1U91Ud9Vd9VQ9VS/VS/VGUCkqRfVTL6r+aoAaqAapweolNUQNUUPVUJWqUtVwNVyNUCPUSDVSjVKj1Bg1Ro1VY9V4NV5NVBNVmkpTk9VkNVVNVdPUNDVDzVDpKl3NVrPVHDVHzVPz1Hw1Xy1QC9QitUhlqAy1RC1RmSpTLVPLVJZarparlWqlWq1Wq7VqrVqv1quNaqParDarLLVNbVPb1Xa1U+1Uu9VutVftVfvUPrVf7VcH1AF1UB1Uh9QhdVgdVkfUEXVUHVXH1DF1XB1XJ9QJdVKdVKfVaXVGnVFn1Vl1Xp1XF9QFdVFdVJfUpezTvkAEIlCBCnIFuYKYICaIDWKDuCAuyBvkDSJBJIgP4oN8wfVB/qBAUDAoFCQEhYMigQ5MYAMKwqBoUCyIBsWDEsENQWJQMigVlA5cUCZICm4MygY3BeWCm4PywS1BheDWoGJQKagcVAluC6oGtwfVgjuC6sGdQY2gZlArqB3cFdQJ7g7qBvcE9YJ7g/rBfUGD4P6gYfBA0Ch4MGgcPBQ0CR4OmgbNguZBi6Bl0Cpo/VfVx+z63p8t8Kjrrfvo3NBX99Mv6v56gB6oB+nB+iU9RL+sh+pXdKoepofHvKpH6Nf0SP26HqVH6zH6DT1Wj9Pj9QQ9UU/SafpNPVlP0VP1W3qanq5n6Jk6Xc/Ss/Xbeo6eq+fpd/R8/a5eoBfqRXqxztDv6SV6qc7U7+tl+gOdpZfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qY/1Nv1Dr1T79K79R69V3+k9+mP9X79iT6gP9UH9d/0If2ZPqw/10f0F/qo/lIf01/p4/prfUJ/o0/qU/q0/laf0d/ps/qcPq+/1xf0D/qi/lFf0j775D778G6UUSaXyWViTIyJNbEmzsSZvCaviZiIiTfxJp/JZ/Kb/KagKWgSTIIpYoqYbGTIFDVFTdRETQlTwiSaRFPKlDLOOJNkkkxZU9aUM+VMeVPeVDAVTEVT0VQ2lc1t5jZzu7nd3GHuMHeaO01NU9PUNrVNHVPH1DV1TT1Tz9Q39U0D08A0NA1NI9PINDaNTRPTxDQ1TU1z09y0NC1Na9PatDFtTFvT1rQ37U0H08F0NB1Nskk2nUwn09l0Nl1MF9PVdDXdTDfT3XQ3PU1P08v0Mr1Nb5NiUkw/08/0N/3NQDPQDDaDzRAzxAw1Q02qSTXDzXAzwowwI81IM8qMNmPMG2asGWfGmwlmoplk0kyamWwmm6lmqplmppkZZoZJN+lmtplt5pg5Zp6ZZ+ab+WaBWWAWmUUmw2SYJWaJyTSZZplZZrJMlllhVphVZpVZY9aYdWad2WA2mE1mk9litphtZpvZbrabnWan2W12m71mr9ln9pn9Zr85YA6Yg+agOWQOmRg4bI6YI+aoOWqOmWPmuDluTpgT5qQ5aU6b0+aMOWPOmrPmvDlvLpgfzEXzo7lkvImxeWysvcrG2attXnuN/W1c0BayCbawLWK1zW8L/F1srLWJtqQtZUtbZ8vYJHvj7+KKtpKtbKvY22xVe7ut9ru4jr3b1rX32Hr2Xlvb3vV3cX17n21gH7YNbTPbyLawjW0r28Q+bJvaZra5bWFb2la2g33cdrRP2GT7pO1kn/pdvMQutevservBbrT77Mf2vP3eHrNf2Qv2B9vb9rGD7Ut2iH3ZDrWv2FQ77HfxGPuGHWvH2fF2gp1oJ/0unmFn2nQ7y862b9s5du7v4gz7np1vM+0Cu9Ausot/irN7yrTv22X2A5tll9sVdqVdZVfbNXbt/+11pd1st9itdq/9yG63O+xOu8vutnt+irP3Y7/9xB6wn9qj9kt7yH5mD9vj9oj94qc4e/+O26/tCfuNPWlP2dP2W3vGfmfP2nM/7X/2vn9rf7SXrLdASIIkKQooF+WmGMpDsXQVxdHVlJeuoQhdS/F0HeWj6yk/FaCCVIgSqDAVIU2GLBGFVJSKUZSKUwm6gRKpJJWi0uSoDCXRjVSWbqJydDOVp1uoAt1KFakSVaYqdBtVpdupGt1B1elOqkE1qRbVpruoDt1Ndekeqkf3Un26jxrQ/dSQHqBG9CA1poeoCT1MTakZNacW1JJaUWt6hNrQo9SW2lF7eow60OPUkZ6gZHqSOtFT1Jmepi70DHWlZ6kbPUfdqQf1pOepF71AvakPpVBf6kcvUn8aQANpEA2ml2oAAA2lVyiVhtFwepVG0Gs0kl6nUTSaxtAbNJbG0XiaQBNpEqXRmzSZptBUeoum0XSaQTMpnWbRbHqb5tBcmkfv0Hx6lxbQQlpEiymD3qMltJQy6X1aRh9QFi2nFbSSVtFqWkNrfW4A2kAbaRNtpi20lbbRh7SddhDSLtpNe2gvfUT76GPaT5/QAfqUDhLiIfqMDtPndIS+oKP0JR2jr+g4fU0n6Bs6SafoNH1LZ+g7Okvn6Dx9TxfoB7pIP9Il8gQhhiKUoQqDMFeYO4wJ84Sx4VVhXHh1mDe8JoyE14bx4XVhvvD6MH9YICwYFgoTwsJhkVCHJrQhhWFYNCwWRsPiYYnwhjAxLBmWCkuHLiwTJoU3hmXDm8Jy4c1h+fCWsEJ4a1gxrBQ+fG+V8Lawanh7WC28I6we3hnWCGuGtcLa4V1hnfDusG54T1gvvDcsF94XNgjvDxuGD4SNwgfDxuFDYZPw4bBp2CxsHrYIW4atwtbhI2Gb8NGwbdgubB8+FnYIHw87hk+EyeGTYafwqT98PCXsG/YLXwxfDL2/Ry6KLo5mRN+LLokujWZG348ui34QzYouj66Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo16Xzs3OHTCSadc4HK53C7G5XGx7ioX5652ed01LuKudfHuOpfPXe/yuwKuoCvkElxhV8RpZ5x15EJX1BVzUVfclXA3uERX0pVypZ1zZVySa+Vau9aujXvUtXXtXHv3mHvMPe4ed0+4J9yTrpN7ynV2T7su7hnX1T3rnnXPue6uh+vpnne93Auut+vjUlyK6+f6uf6uvxvoBrrBbrAb4oa4oW6oS3Wpbrgb7ka4EW6kG+lGuVFujBvjxrqxbrwb7yb6iS7NpbnJbrKb6qa6aW6am+FmuHSX7ma72W6Om+PmuXlufuJ8t8AtcIvcIpfhMtwSt8Rluky3zC1zWS7LrXAr3Cq3yq1xa9w6t85tcBvcJrfJbXFb3Da3zW13291Ot9PtdrvdXrfX7XP73H633x1wB9xBd/C8d4fcYfe5O+K+cEfdl+6Y+8odd1+7E+4bd9Kdcqfdt+6M+86ddefcefe9u+B+cBfdj+6S8y4t8mZkcmRKZGrkrci0yPTIjMjMSHpkVmR25O3InMjcyLwIwvzIu5EFkYWRRZHFkYzIe5ElkaWRzMj7kWWRDyJZkeWRFZGVkVWR1RHvC28PfVFfzEd9cV/C3+ATfUlfypf2zpfxSf5GX9bf5Mv5m315f4uv4G/1FX0lX9k38819C9/St/Kt/SO+jX/Ut/XtfHv/mO/gH/cd/RM+2T/pO/mnfGf/tO/in/Fd/bO+m3/Od/c9fE//vO/lX/C9fR+f4vv6fv5F398P8AP9ID/Yv+SH+Jf9UP+KT/XD/HD/qh/hX/Mj/et+lB/tx/g3/Fg/zo/3E/xEP8mn+Tf9ZD/FT/Vv+Wl+up/hZ/p0P8vP9m/7OX6un+ff8fP9u36BX+gX+cU+w7/nl/ilPtO/75f5D3yWX+5X+JUeYlb7NX6tX+fX+w1+o9/kN/stfqvf5j/02/0Ov9Pv8rv9Hr/Xf+T3+Y/9fv+JP+A/9Qf93/wh/5k/7D/3R/wX/qj/0h/zX/nj/mt/wn/jT/pT/rT/1p/x3/mz/pw/77/3F/wP/qL/0V/iv1ljjDHGGPtT5B883ve/+Z74ZcvWDwCu3lHoyG9rbsr/83qASOgQAYAn+3R78JdPN1Jq1EhJSfnluVkSgmILASByOT8XXI6XQ3t4HJKhHZT9b/sbIHpcoF/q/7r9tn70FoDY/5ITA5fjy/Vv+gf1x83/w/oLARKLXc7JA5fjy/XL/YP6Bdr8Qf08n6UBtP0vOXFwOb5cPwkehacg+Y8G+rODf+pZjDHGGGOMMcb+YwwQlbv80fVt9vV5grqckxsux390ff6TP3dNyhhjjDHGGGOMsX+RZ3r0fOKR5OR2Xa7UAuBKvjov/swi179HG/9hC/nv0cY/Wlzp30yMMcYYY4yxv9rlk/4r3QljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZZz/f/4d2JXeh8ZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxK+3/BAAA//9MkSIw") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x84000151) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 3.828491305s ago: executing program 3 (id=2372): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) syz_emit_vhci(&(0x7f0000000b00)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc9, 0xde, 0x64, "b92453b9a33fd15e"}}}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffef2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd2ba}, 0x94) 3.745989708s ago: executing program 8 (id=2373): socket$kcm(0x11, 0x3, 0x0) socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) socket$packet(0x11, 0x3, 0x300) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000", 0x36}], 0x1) 3.726202799s ago: executing program 3 (id=2374): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) mmap$xdp(&(0x7f0000096000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r4, 0x100000000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000003c0)=@urb_type_iso={0x0, {0x1}, 0x8, 0x0, &(0x7f0000000240)="f220b2630f774c6f59fd911c2be310a8bd4b367e6052830907ef7f5cfc9836add32c4e594fb7e1c67c6f16b440b50af5ca4db0", 0x33, 0x1, 0x7, 0x11, 0x7, 0x22, &(0x7f00000002c0), [{0xd, 0x9, 0x7fffffff}, {0x5, 0x7, 0xfffffff3}, {0x789, 0xdc6, 0x8}, {0x8, 0x6, 0x92}, {0x2, 0x3, 0x9}, {0x3, 0x9, 0x4}, {0x3, 0x2, 0x9}, {0xfffffffd, 0x9, 0x7}, {0x5, 0x6, 0x2}, {0xa, 0x1, 0x412}, {0x1, 0x6, 0xeb5b}, {0x2, 0x3, 0x3}, {0x635f, 0x2, 0x3}, {0x2, 0x42, 0x400}, {0xfffffff7, 0x5, 0x3}, {0x80000001, 0x7, 0x400}, {0x5, 0x80000000, 0x3}]}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) 3.477946467s ago: executing program 8 (id=2375): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xf1, 0x64, 0x96, 0x40, 0x7c0, 0x158b, 0xd9d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x40, 0x4, 0xe0, 0x1, "", [{{0x9, 0x4, 0x2c, 0x7, 0x1, 0xa7, 0x3a, 0x30, 0x6, [], [{{0x9, 0x5, 0x83, 0x3, 0x200, 0x39, 0x7, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xde, 0xc9, 0x70, 0x10, 0x35bc, 0x107, 0xb8da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0xd0, 0xb, 0x0, 0xff, 0xff, 0xff}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x29, &(0x7f0000000040)=@string={0x29, 0x3, "18da06bb98d87d24d0064b0c440ab24865b80cddab2589b86cfad40e5fdacb5b7fce349c1f9b11"}}]}) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x1b, &(0x7f0000001440)={{0x12, 0x1, 0x310, 0x3e, 0xbb, 0xaf, 0x10, 0x5ac, 0x12a8, 0xd4d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xc, 0x5, 0x80, 0x73}}]}}, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000180)=""/64, 0x40) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffc, 0x8000) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000004400)=[0xfa, 0x1e8]) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x7}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r4, 0x40084503, &(0x7f0000ffcffc)) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 2.773827179s ago: executing program 2 (id=2376): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711, @host}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0xc8, 0x0, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x3e9, 0x400, 0x70bd27, 0x25dfdbfe, {0x11, 0x1, 0x0, r1, 0xb, 0x55, 0x7fffffff, 0x4, 0x0, 0xd8, 0x3}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x7, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) close(0x3) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_setup(0x4003615, 0x0) shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) getpid() 2.677184703s ago: executing program 3 (id=2377): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x3, 0x0, 0x0, 0x1}, 0x3e, [0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1db, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x2b, 0x7, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffe, 0x5d1d8547]}, 0x45c) syz_open_dev$radio(&(0x7f0000000500), 0x0, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x2, 0x0, 0xfe, 0x6, 0x0, @empty, @broadcast}, {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) read$FUSE(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, 0x0, 0x80) r4 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r4, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85) write$UHID_INPUT(r5, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14}}, 0x68}}, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r7, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1001, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 2.108489411s ago: executing program 2 (id=2378): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044841}, 0x802) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) listen(r0, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000001080)=ANY=[@ANYRES32, @ANYRESHEX=0x0], 0xa) socket$nl_route(0x10, 0x3, 0x0) close(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 1.22699792s ago: executing program 3 (id=2379): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket(0x840000000002, 0x3, 0xff) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$tipc(r2, &(0x7f0000000040), 0x0, 0x0) 498.210774ms ago: executing program 8 (id=2380): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) 314.32873ms ago: executing program 2 (id=2381): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r3 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) mmap$xdp(&(0x7f0000096000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r4, 0x100000000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000003c0)=@urb_type_iso={0x0, {0x1}, 0x8, 0x0, &(0x7f0000000240)="f220b2630f774c6f59fd911c2be310a8bd4b367e6052830907ef7f5cfc9836add32c4e594fb7e1c67c6f16b440b50af5ca4db0", 0x33, 0x1, 0x7, 0x11, 0x7, 0x22, &(0x7f00000002c0), [{0xd, 0x9, 0x7fffffff}, {0x5, 0x7, 0xfffffff3}, {0x789, 0xdc6, 0x8}, {0x8, 0x6, 0x92}, {0x2, 0x3, 0x9}, {0x3, 0x9, 0x4}, {0x3, 0x2, 0x9}, {0xfffffffd, 0x9, 0x7}, {0x5, 0x6, 0x2}, {0xa, 0x1, 0x412}, {0x1, 0x6, 0xeb5b}, {0x2, 0x3, 0x3}, {0x635f, 0x2, 0x3}, {0x2, 0x42, 0x400}, {0xfffffff7, 0x5, 0x3}, {0x80000001, 0x7, 0x400}, {0x5, 0x80000000, 0x3}]}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) 0s ago: executing program 7 (id=2382): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x16c}}, 0x44000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000007c0)=ANY=[], 0x210) socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000001380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2048c5, &(0x7f0000001400)=ANY=[@ANYRES16=r4, @ANYRESHEX=0xee00, @ANYBLOB="2c73686f72746e616d653d77696e6e742c726f6469722c757365667265652c756e695f786c6174653d312c756e695f786c6174653d302c757365667265652c73686f72746e616d651cb452969e69f07760a6127eba3d6d697865642c64656275672c73686f72746e616d653d6d697865642c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c00"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b", 0xd) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x65010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x0, 0xffff, 0x8000, 0x2, 0x0, 0x0, 0x6}, {0x0, 0x1, 0x20000, 0x1000280000000, 0x95, 0xffffffffffff281a, 0x7, 0x5}, {0x0, 0x0, 0x0, 0x10000}, 0x8, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private1, 0xfffffffc, 0x33}, 0xa, @in=@multicast1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x9, 0x8}}, 0xe8) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x63}], 0x2, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): roblems! [ 448.740806][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.768953][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.791559][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.824532][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.834398][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.854536][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.898469][ T8575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.907691][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 448.965599][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 448.998694][ T8903] loop2: detected capacity change from 0 to 16 [ 449.020081][ T8575] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.038883][ T8575] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.057853][ T8575] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.077091][ T8575] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.107708][ T8901] netlink: 'syz.5.1364': attribute type 4 has an invalid length. [ 449.140869][ T8903] erofs: (device loop2): mounted with root inode @ nid 36. [ 449.393416][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.415680][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.597289][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 449.627557][ T7580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.652843][ T8918] bridge0: port 3(syz_tun) entered blocking state [ 449.669343][ T7580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.699038][ T8918] bridge0: port 3(syz_tun) entered disabled state [ 449.758589][ T8918] device syz_tun entered promiscuous mode [ 449.765289][ T8918] bridge0: port 3(syz_tun) entered blocking state [ 449.772250][ T8918] bridge0: port 3(syz_tun) entered forwarding state [ 449.800619][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 450.031306][ T8930] loop6: detected capacity change from 0 to 512 [ 450.161449][ T8930] EXT4-fs (loop6): Ignoring removed oldalloc option [ 450.238261][ T8930] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 450.336092][ T8930] EXT4-fs (loop6): 1 truncate cleaned up [ 450.376135][ T8930] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 450.413527][ T4305] device hsr_slave_0 left promiscuous mode [ 450.433723][ T4305] device hsr_slave_1 left promiscuous mode [ 450.500556][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.569808][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.658358][ T8951] loop5: detected capacity change from 0 to 256 [ 450.675182][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.711637][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.719898][ T4305] device vlan2 left promiscuous mode [ 450.769116][ T4305] device geneve0 left promiscuous mode [ 450.805106][ T4305] bridge0: port 3(vlan2) entered disabled state [ 450.813791][ T8951] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 451.082140][ T4305] device bridge_slave_1 left promiscuous mode [ 451.096046][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.215260][ T4305] device bridge_slave_0 left promiscuous mode [ 451.224164][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.294769][ T4305] device veth1_macvtap left promiscuous mode [ 451.323163][ T4305] device veth0_macvtap left promiscuous mode [ 451.348385][ T4305] device veth1_vlan left promiscuous mode [ 451.364233][ T4305] device veth0_vlan left promiscuous mode [ 451.493956][ T8975] overlayfs: failed to clone upperpath [ 452.496811][ T4305] team0 (unregistering): Port device team_slave_1 removed [ 452.530448][ T4305] team0 (unregistering): Port device team_slave_0 removed [ 452.571622][ T4305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.649260][ T4305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.714586][ T4276] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 452.887795][ T4305] bond0 (unregistering): Released all slaves [ 453.065724][ T8966] netlink: 'syz.6.1375': attribute type 4 has an invalid length. [ 453.460324][ T9006] loop2: detected capacity change from 0 to 512 [ 453.677592][ T8990] udc-core: couldn't find an available UDC or it's busy [ 453.688225][ T9006] EXT4-fs (loop2): Ignoring removed oldalloc option [ 453.809203][ T9014] loop5: detected capacity change from 0 to 1024 [ 453.831222][ T9006] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 453.854412][ T8990] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 453.921926][ T9014] EXT4-fs (loop5): Ignoring removed orlov option [ 454.217626][ T9014] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 454.990435][ T9006] EXT4-fs (loop2): 1 truncate cleaned up [ 454.996228][ T9006] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 455.181519][ T8990] udc-core: couldn't find an available UDC or it's busy [ 455.203188][ T8990] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 455.614659][ T4276] usb 2-1: unable to get BOS descriptor or descriptor too short [ 455.684621][ T4276] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 455.717706][ T4276] usb 2-1: can't read configurations, error -71 [ 456.040577][ T9034] loop6: detected capacity change from 0 to 8 [ 456.241557][ T9034] SQUASHFS error: xz decompression failed, data probably corrupt [ 456.249557][ T9034] SQUASHFS error: Failed to read block 0x108: -5 [ 456.255999][ T9034] SQUASHFS error: Unable to read metadata cache entry [106] [ 456.263328][ T9034] SQUASHFS error: Unable to read inode 0x11f [ 457.034863][ T9045] loop6: detected capacity change from 0 to 512 [ 457.134209][ T9045] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 457.219407][ T9049] loop1: detected capacity change from 0 to 256 [ 457.228076][ T9045] EXT4-fs (loop6): 1 truncate cleaned up [ 457.233750][ T9045] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 457.352278][ T9045] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1392'. [ 457.401406][ T9049] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 460.124576][ T5235] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 460.477708][ T9088] udc-core: couldn't find an available UDC or it's busy [ 460.506271][ T9088] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 460.715786][ T9088] udc-core: couldn't find an available UDC or it's busy [ 460.722781][ T9088] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 460.868060][ T5235] usb 7-1: unable to get BOS descriptor or descriptor too short [ 460.890770][ T9117] loop2: detected capacity change from 0 to 512 [ 460.976116][ T9117] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 460.994736][ T5235] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 461.006040][ T5235] usb 7-1: can't read configurations, error -71 [ 461.040763][ T9117] EXT4-fs (loop2): 1 truncate cleaned up [ 461.050536][ T9117] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 461.185942][ T9117] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1405'. [ 463.593860][ T9148] loop1: detected capacity change from 0 to 512 [ 463.690597][ T9148] EXT4-fs (loop1): Ignoring removed oldalloc option [ 463.721981][ T9148] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 463.774048][ T9148] EXT4-fs (loop1): 1 truncate cleaned up [ 463.816224][ T9148] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 464.752162][ T9182] loop1: detected capacity change from 0 to 256 [ 464.980945][ T9182] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 467.943707][ T9222] loop2: detected capacity change from 0 to 256 [ 468.017759][ T9222] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 468.289421][ T9229] loop2: detected capacity change from 0 to 512 [ 468.429058][ T9229] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 468.506741][ T9229] EXT4-fs (loop2): 1 truncate cleaned up [ 468.512430][ T9229] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 468.554729][ T9229] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1429'. [ 468.814626][ T7] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 470.244765][ T7] usb 7-1: unable to get BOS descriptor or descriptor too short [ 470.923930][ T7] usb 7-1: config 64 has an invalid interface number: 44 but max is 0 [ 470.955695][ T9276] loop5: detected capacity change from 0 to 512 [ 471.201188][ T7] usb 7-1: config 64 has no interface number 0 [ 471.223045][ T9276] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 471.332322][ T7] usb 7-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 471.344889][ T7] usb 7-1: config 64 interface 44 has no altsetting 0 [ 471.569908][ T7] usb 7-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 471.634144][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.767548][ T7] usb 7-1: Product: syz [ 471.771766][ T7] usb 7-1: Manufacturer: syz [ 471.828634][ T7] usb 7-1: can't set config #64, error -71 [ 471.846816][ T7] usb 7-1: USB disconnect, device number 4 [ 472.319021][ T9299] loop6: detected capacity change from 0 to 256 [ 472.379053][ T9299] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 474.495268][ T9343] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1454'. [ 475.929032][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 476.092183][ T9369] loop2: detected capacity change from 0 to 8 [ 476.210084][ T9369] SQUASHFS error: xz decompression failed, data probably corrupt [ 476.218113][ T9369] SQUASHFS error: Failed to read block 0x108: -5 [ 476.224544][ T9369] SQUASHFS error: Unable to read metadata cache entry [106] [ 476.231880][ T9369] SQUASHFS error: Unable to read inode 0x11f [ 476.495033][ T7] usb 6-1: unable to get BOS descriptor or descriptor too short [ 476.620609][ T7] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 476.659035][ T7] usb 6-1: config 64 has no interface number 0 [ 476.682232][ T7] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 476.724558][ T7] usb 6-1: config 64 interface 44 has no altsetting 0 [ 476.944744][ T7] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 476.964123][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.063698][ T9380] loop2: detected capacity change from 0 to 128 [ 477.722689][ T7] usb 6-1: Product: syz [ 477.727887][ T7] usb 6-1: Manufacturer: syz [ 477.732516][ T7] usb 6-1: SerialNumber: syz [ 477.804821][ T7] usb 6-1: can't set config #64, error -71 [ 477.830658][ T7] usb 6-1: USB disconnect, device number 2 [ 478.011973][ T9390] loop2: detected capacity change from 0 to 256 [ 478.084621][ T9390] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 478.373996][ T9392] loop5: detected capacity change from 0 to 40427 [ 478.465426][ T9392] F2FS-fs (loop5): Unrecognized mount option "age_extent_cache" or missing value [ 479.214702][ T9401] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 480.517794][ T9408] loop6: detected capacity change from 0 to 40427 [ 480.846205][ T9417] loop2: detected capacity change from 0 to 512 [ 481.033275][ T9408] F2FS-fs (loop6): invalid crc value [ 481.045115][ T9417] EXT4-fs (loop2): Ignoring removed oldalloc option [ 481.046131][ T9410] loop5: detected capacity change from 0 to 16 [ 481.057080][ T9417] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 481.151228][ T9408] F2FS-fs (loop6): Found nat_bits in checkpoint [ 481.190563][ T9410] erofs: (device loop5): mounted with root inode @ nid 36. [ 481.249174][ T9408] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 481.270827][ T26] audit: type=1800 audit(1780423908.859:56): pid=9408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1469" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 481.734531][ T8575] attempt to access beyond end of device [ 481.734531][ T8575] loop6: rw=2049, want=45104, limit=40427 [ 481.885385][ T9417] EXT4-fs (loop2): 1 truncate cleaned up [ 482.058147][ T9417] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 482.604538][ T1107] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 483.124784][ T1107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 483.245091][ T1107] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 483.259696][ T1107] usb 6-1: config 64 has no interface number 0 [ 483.283064][ T1107] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 483.313345][ T1107] usb 6-1: config 64 interface 44 has no altsetting 0 [ 483.402128][ T9453] loop6: detected capacity change from 0 to 512 [ 483.474772][ T9453] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 483.580620][ T9453] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.1472: bad orphan inode 131083 [ 483.906219][ T9453] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 483.944723][ T1107] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 483.985797][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.023071][ T9453] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 484.058314][ T1107] usb 6-1: Product: syz [ 484.073929][ T1107] usb 6-1: Manufacturer: syz [ 484.099204][ T1107] usb 6-1: SerialNumber: syz [ 484.226257][ T9453] could not allocate digest TFM handle ‡já[5¸¼Ä:à —P/ÓìDM [ 484.417076][ T9435] udc-core: couldn't find an available UDC or it's busy [ 484.620638][ T9435] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 485.493687][ T9488] udc-core: couldn't find an available UDC or it's busy [ 485.539403][ T9488] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 485.653558][ T9490] netlink: 'syz.2.1485': attribute type 4 has an invalid length. [ 485.655608][ T1107] iowarrior 6-1:64.44: no interrupt-out endpoint found [ 485.847306][ T1107] usb 6-1: USB disconnect, device number 3 [ 486.384624][ T9513] loop5: detected capacity change from 0 to 512 [ 486.531997][ T9517] loop6: detected capacity change from 0 to 256 [ 486.951205][ T9513] EXT4-fs (loop5): Ignoring removed oldalloc option [ 487.074073][ T9517] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 487.139669][ T9513] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 487.165364][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1480'. [ 487.342041][ T9513] EXT4-fs (loop5): 1 truncate cleaned up [ 487.348927][ T9513] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 487.598827][ T9528] loop6: detected capacity change from 0 to 512 [ 487.660347][ T9528] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 491.319247][ T9565] loop5: detected capacity change from 0 to 256 [ 491.488890][ T9572] futex_wake_op: syz.6.1497 tries to shift op by 144; fix this program [ 491.518204][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1497'. [ 491.528919][ T9572] netlink: 'syz.6.1497': attribute type 2 has an invalid length. [ 491.684712][ T9565] FAT-fs (loop5): Directory bread(block 64) failed [ 491.774247][ T9565] FAT-fs (loop5): Directory bread(block 65) failed [ 491.923319][ T9565] FAT-fs (loop5): Directory bread(block 66) failed [ 492.035230][ T9565] FAT-fs (loop5): Directory bread(block 67) failed [ 492.150655][ T9565] FAT-fs (loop5): Directory bread(block 68) failed [ 492.213561][ T9565] FAT-fs (loop5): Directory bread(block 69) failed [ 492.284656][ T9565] FAT-fs (loop5): Directory bread(block 70) failed [ 492.291236][ T9565] FAT-fs (loop5): Directory bread(block 71) failed [ 492.310067][ T9565] FAT-fs (loop5): Directory bread(block 72) failed [ 492.340994][ T9565] FAT-fs (loop5): Directory bread(block 73) failed [ 492.591466][ T9577] loop6: detected capacity change from 0 to 40427 [ 492.801977][ T9577] F2FS-fs (loop6): invalid crc value [ 492.992130][ T9577] F2FS-fs (loop6): Found nat_bits in checkpoint [ 493.109176][ T9577] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 496.211231][ T9621] loop6: detected capacity change from 0 to 512 [ 496.373795][ T9621] EXT4-fs (loop6): Ignoring removed oldalloc option [ 496.508659][ T9621] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 496.752827][ T9621] EXT4-fs (loop6): 1 truncate cleaned up [ 497.214674][ T9621] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 497.449746][ T9639] futex_wake_op: syz.5.1508 tries to shift op by 144; fix this program [ 497.479456][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1508'. [ 497.488582][ T9639] netlink: 'syz.5.1508': attribute type 2 has an invalid length. [ 498.958303][ T9657] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1509'. [ 499.418295][ T9665] loop2: detected capacity change from 0 to 40427 [ 499.613573][ T9665] F2FS-fs (loop2): invalid crc value [ 499.808975][ T9665] F2FS-fs (loop2): Found nat_bits in checkpoint [ 499.921913][ T9665] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 501.424892][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.431514][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.550475][ T9712] loop2: detected capacity change from 0 to 256 [ 503.742430][ T9712] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 503.833053][ T9704] chnl_net:caif_netlink_parms(): no params data found [ 504.359879][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.431924][ T9704] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.475915][ T9704] device bridge_slave_0 entered promiscuous mode [ 504.543296][ T9704] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.564849][ T9704] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.609850][ T9704] device bridge_slave_1 entered promiscuous mode [ 504.699724][ T9704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.973493][ T9745] loop5: detected capacity change from 0 to 128 [ 505.495638][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 506.132277][ T4319] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.749244][ T9704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.193139][ T9704] team0: Port device team_slave_0 added [ 507.317072][ T9704] team0: Port device team_slave_1 added [ 507.510127][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.579040][ T4479] Bluetooth: hci3: command 0x041b tx timeout [ 507.586086][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.863099][ T9769] futex_wake_op: syz.5.1531 tries to shift op by 144; fix this program [ 507.889780][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1531'. [ 507.904409][ T9769] netlink: 'syz.5.1531': attribute type 2 has an invalid length. [ 507.972625][ T9704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.495735][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.648190][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.710372][ T9704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.871644][ T4319] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.652213][ T4319] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.675343][ T9781] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1536'. [ 509.705028][ T9704] device hsr_slave_0 entered promiscuous mode [ 509.795201][ T9704] device hsr_slave_1 entered promiscuous mode [ 509.818094][ T1107] Bluetooth: hci3: command 0x040f tx timeout [ 509.853558][ T9704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.881681][ T9704] Cannot create hsr debugfs directory [ 510.050266][ T4319] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.387633][ T9704] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 511.553235][ T9704] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 511.585583][ T9704] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 511.604360][ T9704] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 511.681963][ T9810] loop5: detected capacity change from 0 to 256 [ 511.838650][ T9810] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 511.888021][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 512.674726][ T9704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.764366][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 512.773513][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 512.845101][ T9704] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.872633][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 512.889668][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 513.304266][ T1227] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.311465][ T1227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.480238][ T9704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 513.539563][ T9704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.612405][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 513.627732][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 513.654100][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 513.679725][ T1227] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.686902][ T1227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.711441][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 513.735461][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 513.875455][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 513.907163][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 513.958057][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 514.004264][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 514.033221][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 514.053372][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 514.085291][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 514.103969][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 514.124245][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 514.138101][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 514.673362][ T9866] loop6: detected capacity change from 0 to 256 [ 514.724695][ T7074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 514.742649][ T7074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 514.816583][ T9704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.913934][ T4319] device hsr_slave_0 left promiscuous mode [ 514.927200][ T9866] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 515.004658][ T4319] device hsr_slave_1 left promiscuous mode [ 515.165111][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.172612][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.354123][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.413211][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.424960][ T4319] device bridge_slave_1 left promiscuous mode [ 515.444341][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.476316][ T4319] device bridge_slave_0 left promiscuous mode [ 515.482549][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.531709][ T4319] device veth0_macvtap left promiscuous mode [ 515.541401][ T4319] device veth1_vlan left promiscuous mode [ 515.603557][ T4319] device veth0_vlan left promiscuous mode [ 516.095805][ T4319] team0 (unregistering): Port device team_slave_1 removed [ 516.128526][ T4319] team0 (unregistering): Port device team_slave_0 removed [ 516.159174][ T4319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.191653][ T4319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.403880][ T4319] bond0 (unregistering): Released all slaves [ 516.703719][ T9905] loop6: detected capacity change from 0 to 40427 [ 516.758881][ T9905] F2FS-fs (loop6): invalid crc value [ 516.812578][ T9905] F2FS-fs (loop6): Found nat_bits in checkpoint [ 516.856480][ T9905] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 516.897571][ T26] audit: type=1800 audit(1780423944.489:57): pid=9905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1554" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 516.935272][ T8575] attempt to access beyond end of device [ 516.935272][ T8575] loop6: rw=2049, want=45104, limit=40427 [ 517.051335][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 517.075272][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 517.130524][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 517.151032][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 517.206834][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 517.340627][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 517.378188][ T9704] device veth0_vlan entered promiscuous mode [ 517.423421][ T9929] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1558'. [ 517.460630][ T9704] device veth1_vlan entered promiscuous mode [ 517.572136][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 517.721683][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 517.765082][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 517.863480][ T9942] loop5: detected capacity change from 0 to 256 [ 517.957161][ T9942] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 518.224401][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 518.515911][ T9704] device veth0_macvtap entered promiscuous mode [ 518.528634][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 518.555827][ T9704] device veth1_macvtap entered promiscuous mode [ 518.647435][ T9949] loop2: detected capacity change from 0 to 256 [ 518.667490][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.700582][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.754447][ T9949] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 518.771883][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.813175][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.917767][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.997221][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.071998][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.151314][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.162976][ T9704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.171175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 519.191952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 519.211314][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.222756][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.232977][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.259597][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.279686][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.325336][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.347100][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.418325][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.483836][ T9704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.524405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 519.691484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 519.813021][ T9704] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.848284][ T9704] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.012303][ T9704] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.074658][ T9704] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.003226][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.029884][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.087040][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 521.163077][ T9980] loop6: detected capacity change from 0 to 40427 [ 521.175744][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.183593][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.196247][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 521.265724][ T9980] F2FS-fs (loop6): invalid crc value [ 521.316249][ T9980] F2FS-fs (loop6): Found nat_bits in checkpoint [ 521.365412][ T9980] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 521.382339][ T26] audit: type=1800 audit(1780423948.969:58): pid=9980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1566" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 521.417522][ T8575] attempt to access beyond end of device [ 521.417522][ T8575] loop6: rw=2049, want=45104, limit=40427 [ 523.777373][T10021] futex_wake_op: syz.5.1571 tries to shift op by 144; fix this program [ 523.789837][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1571'. [ 523.799036][T10021] netlink: 'syz.5.1571': attribute type 2 has an invalid length. [ 524.147174][T10030] loop7: detected capacity change from 0 to 40427 [ 524.236682][T10032] loop6: detected capacity change from 0 to 16 [ 524.861693][T10032] erofs: (device loop6): mounted with root inode @ nid 36. [ 524.897857][T10030] F2FS-fs (loop7): invalid crc value [ 525.095651][T10046] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1579'. [ 525.100363][T10030] F2FS-fs (loop7): Found nat_bits in checkpoint [ 525.175007][T10049] loop5: detected capacity change from 0 to 8 [ 525.303049][T10049] SQUASHFS error: xz decompression failed, data probably corrupt [ 525.311149][T10049] SQUASHFS error: Failed to read block 0x108: -5 [ 525.317599][T10049] SQUASHFS error: Unable to read metadata cache entry [106] [ 525.324988][T10049] SQUASHFS error: Unable to read inode 0x11f [ 525.433195][T10030] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 525.697969][ T26] audit: type=1800 audit(1780423953.289:59): pid=10030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1576" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 525.856129][ T9704] attempt to access beyond end of device [ 525.856129][ T9704] loop7: rw=2049, want=45104, limit=40427 [ 526.435331][T10065] loop5: detected capacity change from 0 to 256 [ 527.089299][T10065] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 527.817423][T10078] netlink: 'syz.7.1587': attribute type 4 has an invalid length. [ 528.585477][T10094] futex_wake_op: syz.6.1589 tries to shift op by 144; fix this program [ 528.597816][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1589'. [ 528.607549][T10091] netlink: 'syz.6.1589': attribute type 2 has an invalid length. [ 528.904264][T10099] loop2: detected capacity change from 0 to 40427 [ 528.952422][T10099] F2FS-fs (loop2): invalid crc value [ 529.003982][T10099] F2FS-fs (loop2): Found nat_bits in checkpoint [ 529.150216][T10099] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 529.214762][ T26] audit: type=1800 audit(1780423956.799:60): pid=10099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1592" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 529.290103][ T4189] attempt to access beyond end of device [ 529.290103][ T4189] loop2: rw=2049, want=45104, limit=40427 [ 529.541826][T10138] netlink: 'syz.6.1601': attribute type 4 has an invalid length. [ 530.447488][T10172] loop6: detected capacity change from 0 to 512 [ 530.737536][T10172] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 531.053628][T10172] EXT4-fs (loop6): 1 truncate cleaned up [ 531.059508][T10172] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 531.221195][T10172] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1603'. [ 532.177727][T10214] loop2: detected capacity change from 0 to 256 [ 532.611641][T10214] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 532.884521][T10218] loop7: detected capacity change from 0 to 40427 [ 532.968727][T10218] F2FS-fs (loop7): invalid crc value [ 532.975505][T10223] futex_wake_op: syz.2.1609 tries to shift op by 144; fix this program [ 532.988162][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 532.997180][T10223] netlink: 'syz.2.1609': attribute type 2 has an invalid length. [ 533.035940][T10218] F2FS-fs (loop7): Found nat_bits in checkpoint [ 533.083114][T10218] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 533.117868][ T26] audit: type=1800 audit(1780423960.709:61): pid=10218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1608" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 533.193793][ T9704] attempt to access beyond end of device [ 533.193793][ T9704] loop7: rw=2049, want=45104, limit=40427 [ 533.713035][T10241] loop6: detected capacity change from 0 to 2048 [ 533.834548][T10241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 536.462451][T10296] futex_wake_op: syz.2.1623 tries to shift op by 144; fix this program [ 536.475109][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'. [ 536.484099][T10296] netlink: 'syz.2.1623': attribute type 2 has an invalid length. [ 536.923831][T10284] loop7: detected capacity change from 0 to 40427 [ 537.005323][T10284] F2FS-fs (loop7): invalid crc value [ 537.035622][T10284] F2FS-fs (loop7): Found nat_bits in checkpoint [ 537.228880][T10284] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 537.304829][ T26] audit: type=1800 audit(1780423964.899:62): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1621" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 537.331676][ T9704] attempt to access beyond end of device [ 537.331676][ T9704] loop7: rw=2049, want=45104, limit=40427 [ 537.619156][T10325] loop2: detected capacity change from 0 to 32768 [ 537.762980][T10325] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1626 (10325) [ 538.418628][T10325] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 538.427482][T10325] BTRFS info (device loop2): setting nodatacow, compression disabled [ 538.435675][T10325] BTRFS info (device loop2): force clearing of disk cache [ 538.442808][T10325] BTRFS info (device loop2): turning off barriers [ 538.449459][T10325] BTRFS info (device loop2): disabling free space tree [ 538.456387][T10325] BTRFS info (device loop2): enabling ssd optimizations [ 538.463335][T10325] BTRFS info (device loop2): using spread ssd allocation scheme [ 538.471031][T10325] BTRFS info (device loop2): not using ssd optimizations [ 538.478109][T10325] BTRFS info (device loop2): not using spread ssd allocation scheme [ 538.486171][T10325] BTRFS info (device loop2): has skinny extents [ 538.960824][T10325] BTRFS info (device loop2): clearing free space tree [ 538.967966][T10325] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 538.977737][T10325] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 538.996519][T10325] BTRFS info (device loop2): checking UUID tree [ 539.365807][T10369] netlink: 'syz.3.1631': attribute type 4 has an invalid length. [ 539.621383][T10379] futex_wake_op: syz.7.1634 tries to shift op by 144; fix this program [ 539.633787][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1634'. [ 539.643254][T10379] netlink: 'syz.7.1634': attribute type 2 has an invalid length. [ 540.503653][T10399] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 542.200087][T10433] loop5: detected capacity change from 0 to 128 [ 542.405640][T10440] netlink: 'syz.2.1646': attribute type 4 has an invalid length. [ 544.753127][T10458] loop5: detected capacity change from 0 to 40427 [ 544.946579][T10458] F2FS-fs (loop5): invalid crc value [ 544.987218][T10458] F2FS-fs (loop5): Found nat_bits in checkpoint [ 545.133860][T10458] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 545.184312][ T26] audit: type=1800 audit(1780423972.769:63): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1651" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 545.276561][ T8422] attempt to access beyond end of device [ 545.276561][ T8422] loop5: rw=2049, want=45104, limit=40427 [ 548.376904][T10536] loop6: detected capacity change from 0 to 16 [ 548.472444][T10536] erofs: (device loop6): mounted with root inode @ nid 36. [ 548.513802][T10536] attempt to access beyond end of device [ 548.513802][T10536] loop6: rw=524288, want=1072, limit=16 [ 548.596535][ T8171] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 548.668159][T10536] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 548.677350][T10536] attempt to access beyond end of device [ 548.677350][T10536] loop6: rw=524288, want=56, limit=16 [ 548.691727][T10536] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 548.712583][ T26] audit: type=1800 audit(1780423976.299:64): pid=10536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1664" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 550.433357][T10569] loop5: detected capacity change from 0 to 8 [ 550.732864][T10569] SQUASHFS error: xz decompression failed, data probably corrupt [ 550.740893][T10569] SQUASHFS error: Failed to read block 0x108: -5 [ 550.747347][T10569] SQUASHFS error: Unable to read metadata cache entry [106] [ 550.754705][T10569] SQUASHFS error: Unable to read inode 0x11f [ 552.126234][T10552] loop6: detected capacity change from 0 to 40427 [ 552.188508][T10552] F2FS-fs (loop6): invalid crc value [ 552.233026][T10552] F2FS-fs (loop6): Found nat_bits in checkpoint [ 552.384806][T10552] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 553.544083][T10615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1676'. [ 554.419506][T10627] loop2: detected capacity change from 0 to 512 [ 554.513258][T10627] EXT4-fs (loop2): Ignoring removed nobh option [ 554.534732][T10627] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 554.634890][T10627] EXT4-fs (loop2): 1 truncate cleaned up [ 554.643640][T10627] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 554.684576][ T1107] Bluetooth: hci5: command 0x0406 tx timeout [ 555.236795][ T26] audit: type=1800 audit(1780423982.749:65): pid=10636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1677" name="bus" dev="loop2" ino=19 res=0 errno=0 [ 556.721557][T10661] overlayfs: failed to clone upperpath [ 557.433769][T10664] loop6: detected capacity change from 0 to 256 [ 557.474321][T10655] loop2: detected capacity change from 0 to 4096 [ 557.607715][T10655] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 561.231839][T10683] netlink: 'syz.2.1688': attribute type 4 has an invalid length. [ 563.214893][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.221222][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.384583][ T1107] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 563.435636][T10709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1693'. [ 563.693169][ T1107] usb 8-1: Using ep0 maxpacket: 16 [ 563.875141][ T1107] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 564.095261][ T1107] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 564.143288][ T1107] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.247074][ T1107] usb 8-1: Product: syz [ 564.312517][ T1107] usb 8-1: Manufacturer: syz [ 564.329240][ T1107] usb 8-1: SerialNumber: syz [ 564.342754][ T1107] usb 8-1: config 0 descriptor?? [ 565.664454][T10743] loop5: detected capacity change from 0 to 512 [ 565.712987][T10743] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 565.780970][T10743] EXT4-fs (loop5): 1 truncate cleaned up [ 565.782042][ T7] usb 8-1: USB disconnect, device number 2 [ 565.786817][T10743] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 565.862760][T10750] loop2: detected capacity change from 0 to 256 [ 565.943648][T10750] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 565.966182][T10743] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1700'. [ 567.023426][T10766] netlink: 'syz.2.1703': attribute type 4 has an invalid length. [ 568.166433][T10775] futex_wake_op: syz.2.1706 tries to shift op by 144; fix this program [ 568.178883][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'. [ 568.187997][T10775] netlink: 'syz.2.1706': attribute type 2 has an invalid length. [ 568.379408][T10752] loop7: detected capacity change from 0 to 40427 [ 568.550286][T10752] F2FS-fs (loop7): invalid crc value [ 568.587026][T10780] loop5: detected capacity change from 0 to 1024 [ 568.655186][T10752] F2FS-fs (loop7): Found nat_bits in checkpoint [ 570.887844][T10816] loop7: detected capacity change from 0 to 8 [ 571.377941][T10816] SQUASHFS error: xz decompression failed, data probably corrupt [ 571.387026][T10816] SQUASHFS error: Failed to read block 0x108: -5 [ 571.393379][T10816] SQUASHFS error: Unable to read metadata cache entry [106] [ 571.400729][T10816] SQUASHFS error: Unable to read inode 0x11f [ 572.126270][ T4231] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 572.554838][ T4231] usb 6-1: unable to get BOS descriptor or descriptor too short [ 572.644765][ T4231] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 572.653020][ T4231] usb 6-1: config 64 has no interface number 0 [ 572.693772][ T4231] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 572.746733][ T4231] usb 6-1: config 64 interface 44 has no altsetting 0 [ 572.934749][ T4231] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 572.951866][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.991812][ T4231] usb 6-1: Product: syz [ 573.007529][ T4231] usb 6-1: Manufacturer: syz [ 573.028455][ T4231] usb 6-1: SerialNumber: syz [ 573.508436][T10819] udc-core: couldn't find an available UDC or it's busy [ 573.539799][T10819] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 573.645959][ T4231] iowarrior 6-1:64.44: no interrupt-out endpoint found [ 573.664899][ T4231] usb 6-1: USB disconnect, device number 4 [ 573.938657][T10879] loop2: detected capacity change from 0 to 256 [ 574.069454][T10879] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 574.183434][T10879] attempt to access beyond end of device [ 574.183434][T10879] loop2: rw=524288, want=34359738496, limit=256 [ 574.222650][T10886] loop5: detected capacity change from 0 to 512 [ 574.238837][T10879] attempt to access beyond end of device [ 574.238837][T10879] loop2: rw=0, want=34359738496, limit=256 [ 574.253602][ T26] audit: type=1800 audit(1780424001.839:66): pid=10879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1723" name="file1" dev="loop2" ino=1048633 res=0 errno=0 [ 574.299786][T10886] EXT4-fs (loop5): Ignoring removed oldalloc option [ 574.335475][T10886] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 574.385973][T10886] EXT4-fs (loop5): 1 truncate cleaned up [ 574.476440][T10886] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 574.582782][T10901] netlink: 'syz.3.1728': attribute type 4 has an invalid length. [ 575.144573][ T8692] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 575.347738][T10943] loop6: detected capacity change from 0 to 256 [ 575.424049][T10943] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 575.504759][ T8692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 575.534647][ T8692] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 575.572303][ T8692] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 575.602276][ T8692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.635578][ T8692] usb 3-1: config 0 descriptor?? [ 576.118458][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 576.154361][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 576.565672][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 576.765691][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 576.884097][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 576.891318][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 576.935175][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 576.990951][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.028810][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.105376][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.153756][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.229703][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.287919][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.338883][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.384664][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.449462][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.508703][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.565454][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.625203][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.632398][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.751662][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.808376][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.856707][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.907103][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 577.967453][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.016036][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.063925][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.122421][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.154845][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.182444][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.198993][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.219017][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.237352][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.264894][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.283475][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.299823][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.323872][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.348009][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.375601][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.404943][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.423255][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.443419][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.469716][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.489714][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.642054][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.650540][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.658028][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.665521][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.672772][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.680395][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.688477][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.696299][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.703451][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.726525][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.767831][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.777322][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.786647][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.794024][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.804397][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.813793][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 578.905490][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.011122][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.108737][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.211973][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.496845][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.504038][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.513530][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.524828][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.532002][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.540084][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.547599][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.555063][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.562215][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.569692][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.578247][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.595973][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.603284][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.617109][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.624377][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.637829][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.647597][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.658351][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.667952][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.676138][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.683292][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.690840][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.698252][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.705727][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.712875][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.720360][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.727844][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.735519][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.739528][ T7] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 579.742758][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.758301][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.774448][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.783260][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.790878][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.798422][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.805970][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.813509][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.821511][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.829105][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.836312][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.843457][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.850631][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.859776][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.867017][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.874164][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.882296][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.894817][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.902085][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.909299][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.916525][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.917582][T11014] loop2: detected capacity change from 0 to 512 [ 579.923679][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.923704][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.944684][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.951844][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.959061][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.966373][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.973528][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.979699][T11014] EXT4-fs (loop2): Ignoring removed oldalloc option [ 579.981617][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.996888][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 579.997799][T11014] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 580.004051][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.004079][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.004100][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.020794][T11014] EXT4-fs (loop2): 1 truncate cleaned up [ 580.021298][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.034162][T11014] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 580.035779][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.127353][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.140343][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.147935][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.160637][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.168165][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.180880][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.189533][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.202219][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.211183][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.214998][ T7] usb 8-1: unable to get BOS descriptor or descriptor too short [ 580.223573][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.233505][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.246259][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.253445][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.262550][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.269828][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.277089][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.284252][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.292176][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.299401][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.306626][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.313771][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.314837][ T7] usb 8-1: config 64 has an invalid interface number: 44 but max is 0 [ 580.331258][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.334515][ T7] usb 8-1: config 64 has no interface number 0 [ 580.338753][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.349703][ T7] usb 8-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 580.362042][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.364152][ T7] usb 8-1: config 64 interface 44 has no altsetting 0 [ 580.375151][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.390976][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.403433][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.414760][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.422521][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.430660][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.564737][ T7] usb 8-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 580.583937][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.591885][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.601949][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.606293][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.619601][ T7] usb 8-1: Product: syz [ 580.621256][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.628513][ T7] usb 8-1: Manufacturer: syz [ 580.632008][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.686909][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.734206][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.797821][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.867690][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.934264][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 580.995738][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.062200][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.130133][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.194190][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.332008][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.349691][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.368928][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.390430][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.409428][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.435665][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.453134][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.473361][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.503763][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.519396][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.539015][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.565658][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 581.583179][ T8692] kovaplus 0003:1E7D:2D50.0007: unknown global tag 0xd [ 581.601576][ T8692] kovaplus 0003:1E7D:2D50.0007: item 0 4 1 13 parsing failed [ 581.625946][ T8692] kovaplus 0003:1E7D:2D50.0007: parse failed [ 581.642269][ T8692] kovaplus: probe of 0003:1E7D:2D50.0007 failed with error -22 [ 581.693247][ T8692] usb 3-1: USB disconnect, device number 33 [ 582.637197][ T7] usb 8-1: SerialNumber: syz [ 582.664744][ T7] usb 8-1: can't set config #64, error -71 [ 582.685048][ T7] usb 8-1: USB disconnect, device number 3 [ 584.067953][T11045] loop7: detected capacity change from 0 to 512 [ 584.137288][T11045] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 584.181751][T11047] loop6: detected capacity change from 0 to 256 [ 584.331147][T11045] EXT4-fs (loop7): 1 truncate cleaned up [ 584.342570][T11045] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 584.472367][T11047] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 584.826827][T11045] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1760'. [ 585.505340][ T4276] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 585.845188][T11060] udc-core: couldn't find an available UDC or it's busy [ 585.854924][T11060] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 585.862607][ T5238] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 586.119070][T11060] udc-core: couldn't find an available UDC or it's busy [ 586.134579][T11060] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 586.204708][ T4276] usb 6-1: unable to get BOS descriptor or descriptor too short [ 586.354784][ T4276] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 586.371601][ T4276] usb 6-1: can't read configurations, error -71 [ 587.031063][T11073] loop5: detected capacity change from 0 to 512 [ 587.101831][T11073] EXT4-fs (loop5): Ignoring removed oldalloc option [ 587.139255][T11073] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 587.219506][T11073] EXT4-fs (loop5): 1 truncate cleaned up [ 587.235629][T11073] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 588.477802][ T5238] usb 3-1: unable to get BOS descriptor or descriptor too short [ 588.624732][ T5238] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 588.637547][ T5238] usb 3-1: can't read configurations, error -71 [ 589.538458][T11101] overlayfs: failed to clone upperpath [ 589.570798][T11094] loop6: detected capacity change from 0 to 512 [ 589.885233][T11094] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 590.794588][T11094] EXT4-fs (loop6): 1 truncate cleaned up [ 590.800289][T11094] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 591.036441][T11094] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1775'. [ 597.075127][ T8695] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 597.191704][T11165] loop2: detected capacity change from 0 to 512 [ 597.233538][T11165] EXT4-fs (loop2): Ignoring removed oldalloc option [ 597.243082][T11165] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 597.275730][T11165] EXT4-fs (loop2): 1 truncate cleaned up [ 597.286010][T11165] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 597.316226][T11171] loop7: detected capacity change from 0 to 128 [ 598.295707][ T8695] usb 7-1: unable to get BOS descriptor or descriptor too short [ 598.373587][ T8695] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 598.462595][ T8695] usb 7-1: can't read configurations, error -71 [ 603.544446][T11212] loop6: detected capacity change from 0 to 512 [ 604.273606][T11209] loop2: detected capacity change from 0 to 32768 [ 604.873394][T11212] EXT4-fs (loop6): Ignoring removed oldalloc option [ 604.880324][T11212] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 604.903760][T11232] loop7: detected capacity change from 0 to 256 [ 604.946464][T11212] EXT4-fs (loop6): 1 truncate cleaned up [ 604.952165][T11212] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 605.697152][T11245] loop7: detected capacity change from 0 to 4096 [ 606.354027][T11257] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 606.845163][ T4190] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 606.907712][T11266] loop7: detected capacity change from 0 to 128 [ 607.261404][T11162] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 607.402666][T11269] loop5: detected capacity change from 0 to 2048 [ 607.545509][ T4190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 607.567681][ T4190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 607.588875][T11269] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 607.602967][ T4190] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 607.613911][ T4190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.628545][ T4190] usb 3-1: config 0 descriptor?? [ 607.642780][T11269] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.714771][T11162] usb 7-1: unable to get BOS descriptor or descriptor too short [ 607.726951][T11269] fs-verity: sha512 using implementation "sha512-avx2" [ 607.804828][T11162] usb 7-1: config 64 has an invalid interface number: 44 but max is 0 [ 607.813038][T11162] usb 7-1: config 64 has no interface number 0 [ 607.840669][T11162] usb 7-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 607.872296][T11162] usb 7-1: config 64 interface 44 has no altsetting 0 [ 607.945085][ T4190] ath6kl: Failed to submit usb control message: -71 [ 607.952157][ T4190] ath6kl: unable to send the bmi data to the device: -71 [ 607.963061][ T4190] ath6kl: Unable to send get target info: -71 [ 607.986597][ T4190] ath6kl: Failed to init ath6kl core: -71 [ 608.005292][ T4190] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 608.015818][ T4190] usb 3-1: USB disconnect, device number 36 [ 608.062480][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1826'. [ 608.084831][T11162] usb 7-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 608.093911][T11162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.114084][T11162] usb 7-1: Product: syz [ 608.135700][T11162] usb 7-1: Manufacturer: syz [ 608.140820][T11162] usb 7-1: SerialNumber: syz [ 608.142624][T11281] loop5: detected capacity change from 0 to 256 [ 608.210373][T11281] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 609.528454][T11287] loop2: detected capacity change from 0 to 2048 [ 609.560321][T11287] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 609.602093][T11261] udc-core: couldn't find an available UDC or it's busy [ 609.624621][T11261] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 609.755787][T11162] iowarrior 7-1:64.44: no interrupt-out endpoint found [ 609.783995][T11162] usb 7-1: USB disconnect, device number 7 [ 609.800926][T11291] loop5: detected capacity change from 0 to 512 [ 609.862250][T11291] EXT4-fs (loop5): Ignoring removed oldalloc option [ 609.871576][T11291] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 609.922468][T11291] EXT4-fs (loop5): 1 truncate cleaned up [ 609.941309][T11291] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 609.961613][T11294] loop2: detected capacity change from 0 to 1024 [ 611.087427][T11302] netlink: 'syz.7.1835': attribute type 1 has an invalid length. [ 611.255679][T11302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 611.474700][ T4231] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 611.509108][T11319] loop7: detected capacity change from 0 to 256 [ 611.603389][T11319] FAT-fs (loop7): Directory bread(block 64) failed [ 611.623065][T11319] FAT-fs (loop7): Directory bread(block 65) failed [ 611.654199][T11319] FAT-fs (loop7): Directory bread(block 66) failed [ 611.667681][ T8692] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 611.681727][T11319] FAT-fs (loop7): Directory bread(block 67) failed [ 611.692794][T11319] FAT-fs (loop7): Directory bread(block 68) failed [ 611.702236][T11319] FAT-fs (loop7): Directory bread(block 69) failed [ 611.713474][T11319] FAT-fs (loop7): Directory bread(block 70) failed [ 611.722103][T11319] FAT-fs (loop7): Directory bread(block 71) failed [ 611.729873][T11319] FAT-fs (loop7): Directory bread(block 72) failed [ 611.736608][ T4231] usb 7-1: Using ep0 maxpacket: 8 [ 611.739249][T11319] FAT-fs (loop7): Directory bread(block 73) failed [ 611.748475][ T4204] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 611.919162][ T8692] usb 6-1: Using ep0 maxpacket: 32 [ 611.978723][T11333] loop2: detected capacity change from 0 to 512 [ 611.994640][ T4231] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 612.006105][ T4231] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 612.044768][ T8692] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 612.097014][ T8692] usb 6-1: config 0 has no interface number 0 [ 612.158464][T11333] EXT4-fs (loop2): Ignoring removed oldalloc option [ 612.196751][ T8692] usb 6-1: config 0 interface 12 has no altsetting 0 [ 612.359753][T11333] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 612.447093][ T8692] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 612.480482][ T8692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.519453][ T8692] usb 6-1: Product: syz [ 612.537748][ T8692] usb 6-1: Manufacturer: syz [ 612.556501][ T4231] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 612.564216][ T8692] usb 6-1: SerialNumber: syz [ 612.566922][ T4231] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 612.584097][T11333] EXT4-fs (loop2): 1 truncate cleaned up [ 612.584547][ T4231] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 612.590122][T11333] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 612.599212][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.652317][ T8692] usb 6-1: config 0 descriptor?? [ 612.897961][ T4231] usb 7-1: GET_CAPABILITIES returned 0 [ 612.923707][ T4231] usbtmc 7-1:16.0: can't read capabilities [ 613.194665][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 613.212429][T11304] usbtmc 7-1:16.0: Unable to send data, error -71 [ 613.227664][ T4231] usb 7-1: USB disconnect, device number 8 [ 613.584680][ T8692] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 613.593024][ T8692] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 613.633238][ T8692] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 613.665767][T11355] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 613.672528][ T8692] f81534: probe of 6-1:0.12 failed with error -71 [ 613.726074][ T8692] usb 6-1: USB disconnect, device number 7 [ 614.315484][T11345] loop7: detected capacity change from 0 to 4096 [ 614.727366][T11345] EXT4-fs (loop7): Test dummy encryption mode enabled [ 614.825589][T11345] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 614.987645][T11345] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 615.024671][T11345] EXT4-fs (loop7): group descriptors corrupted! [ 616.279431][T11392] netlink: 'syz.5.1867': attribute type 4 has an invalid length. [ 616.525641][T11394] loop2: detected capacity change from 0 to 512 [ 616.819245][T11394] EXT4-fs (loop2): Test dummy encryption mode enabled [ 616.858854][T11394] EXT4-fs (loop2): Ignoring removed oldalloc option [ 616.883543][T11396] loop7: detected capacity change from 0 to 512 [ 616.968157][T11396] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 617.191885][T11394] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 619.605465][T11394] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 621.742745][T11446] netlink: 'syz.5.1881': attribute type 4 has an invalid length. [ 624.288193][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.295348][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.581000][T11479] netlink: 'syz.2.1892': attribute type 4 has an invalid length. [ 624.589657][T11476] netlink: 'syz.5.1890': attribute type 13 has an invalid length. [ 624.635443][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1890'. [ 624.689977][T11476] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 626.364580][ T8692] Bluetooth: hci3: command 0x0406 tx timeout [ 626.639609][T11503] loop2: detected capacity change from 0 to 256 [ 626.721090][T11505] loop7: detected capacity change from 0 to 512 [ 626.747276][T11503] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 626.824425][T11505] EXT4-fs (loop7): Ignoring removed oldalloc option [ 626.850375][T11505] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 626.873406][T11509] loop5: detected capacity change from 0 to 4096 [ 626.903788][T11509] EXT4-fs (loop5): inline encryption not supported [ 626.920348][T11509] EXT4-fs (loop5): inline encryption not supported [ 626.933777][T11509] EXT4-fs (loop5): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 626.945575][T11505] EXT4-fs (loop7): 1 truncate cleaned up [ 626.951243][T11505] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 628.905670][T11523] netlink: 'syz.3.1905': attribute type 4 has an invalid length. [ 629.489502][T11533] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 630.013987][T11538] loop5: detected capacity change from 0 to 128 [ 630.319448][T11538] FAT-fs (loop5): Unrecognized mount option "ÿÿ0x000000000000ee00" or missing value [ 630.756958][T11549] loop5: detected capacity change from 0 to 128 [ 630.835636][T11549] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 630.942420][T11549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 631.434544][ T5238] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 631.564996][T11559] loop2: detected capacity change from 0 to 512 [ 631.592180][ T7074] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.629576][T11547] chnl_net:caif_netlink_parms(): no params data found [ 631.655112][T11559] EXT4-fs (loop2): Ignoring removed oldalloc option [ 631.661829][T11559] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 631.743546][ T7074] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.754310][T11559] EXT4-fs (loop2): 1 truncate cleaned up [ 631.767950][T11559] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 631.791552][T11563] netlink: 'syz.3.1918': attribute type 4 has an invalid length. [ 631.957778][T11572] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 631.967575][ T5238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 632.716933][ T7074] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.793267][T11547] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.806803][T11547] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.819692][T11547] device bridge_slave_0 entered promiscuous mode [ 632.831526][T11547] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.842939][T11547] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.850479][ T4303] Bluetooth: hci4: command 0x0409 tx timeout [ 632.864167][T11547] device bridge_slave_1 entered promiscuous mode [ 632.906810][T11547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.926893][T11547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.973292][ T5238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 632.984485][ T5238] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 632.993532][ T5238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.003234][ T5238] usb 6-1: config 0 descriptor?? [ 633.018868][ T7074] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.051456][T11547] team0: Port device team_slave_0 added [ 633.124123][T11547] team0: Port device team_slave_1 added [ 633.264603][ T5238] ath6kl: Failed to submit usb control message: -71 [ 633.274722][ T5238] ath6kl: unable to send the bmi data to the device: -71 [ 633.281792][ T5238] ath6kl: Unable to send get target info: -71 [ 633.286289][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1923'. [ 633.321108][T11547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.348457][T11547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.443573][T11547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.474014][T11547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.502659][T11547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.567736][T11547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.672813][T11547] device hsr_slave_0 entered promiscuous mode [ 633.692769][T11547] device hsr_slave_1 entered promiscuous mode [ 633.712348][T11547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.714457][T11583] loop2: detected capacity change from 0 to 32768 [ 633.742539][T11547] Cannot create hsr debugfs directory [ 634.164759][T11592] loop5: detected capacity change from 0 to 256 [ 634.248257][T11592] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 634.274759][T11594] loop7: detected capacity change from 0 to 256 [ 634.309347][T11547] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 634.361767][T11547] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 634.428903][T11547] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 634.517217][T11594] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 634.547153][T11547] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 634.702719][T11605] netlink: 'syz.3.1929': attribute type 4 has an invalid length. [ 634.918461][T11547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.925546][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 634.945604][T11614] syz.3.1930 uses obsolete (PF_INET,SOCK_PACKET) [ 634.984314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 635.002650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 635.033038][T11547] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.062237][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 635.078580][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 635.093908][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.101063][ T4319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.188513][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 635.197156][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 635.218169][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 635.245565][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.252687][ T4319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.285480][ T5238] ath6kl: Failed to init ath6kl core: -71 [ 635.304019][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 635.320485][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 635.337757][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 635.369606][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 635.393863][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 635.410563][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 635.429406][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 635.450197][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 635.511937][T11547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 635.543358][T11547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 635.557050][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 635.581797][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 635.606262][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 635.737453][ T7074] device hsr_slave_0 left promiscuous mode [ 635.754080][ T7074] device hsr_slave_1 left promiscuous mode [ 635.781808][ T7074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.821734][ T7074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.854037][ T7074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.876826][ T7074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.909963][ T7074] device bridge_slave_1 left promiscuous mode [ 635.934692][ T7074] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.974891][ T7074] device bridge_slave_0 left promiscuous mode [ 635.981165][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.031914][T11631] autofs4:pid:11631:autofs_fill_super: called with bogus options [ 636.047154][ T7074] device veth1_macvtap left promiscuous mode [ 636.071283][ T7074] device veth0_macvtap left promiscuous mode [ 636.077529][ T7074] device veth1_vlan left promiscuous mode [ 636.083327][ T7074] device veth0_vlan left promiscuous mode [ 636.520661][T11640] loop2: detected capacity change from 0 to 256 [ 636.555189][ T5238] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 636.571758][ T7074] team0 (unregistering): Port device team_slave_1 removed [ 636.601258][ T5238] usb 6-1: USB disconnect, device number 8 [ 636.622195][T11640] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 636.706538][ T7074] team0 (unregistering): Port device team_slave_0 removed [ 636.780622][ T7074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.825725][ T7074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.004733][ T4303] Bluetooth: hci4: command 0x040f tx timeout [ 637.302331][ T7074] bond0 (unregistering): Released all slaves [ 637.304601][ T4303] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 637.363011][T11650] netlink: 'syz.3.1939': attribute type 4 has an invalid length. [ 637.564603][ T4303] usb 6-1: Using ep0 maxpacket: 8 [ 637.673691][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 637.685265][ T4303] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 637.696602][ T4303] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 637.709089][T10179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 637.719819][T11664] overlayfs: unrecognized mount option "/" or missing value [ 637.732248][ T4303] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 637.748995][T11547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.775362][ T4303] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 637.811442][ T4303] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 637.832554][ T4303] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.853544][ T4303] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 637.863127][ T4303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.144656][ T4303] usb 6-1: usb_control_msg returned -32 [ 638.150287][ T4303] usbtmc 6-1:16.0: can't read capabilities [ 638.415340][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 638.424155][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 638.514528][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 638.523916][T11689] usbtmc 6-1:16.0: Unable to send data, error -71 [ 638.527486][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 638.555573][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 638.569807][T11689] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 638.602406][ T4233] usb 6-1: USB disconnect, device number 9 [ 638.602553][T11547] device veth0_vlan entered promiscuous mode [ 638.648995][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 638.685680][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 638.729307][T11547] device veth1_vlan entered promiscuous mode [ 638.799069][T11547] device veth0_macvtap entered promiscuous mode [ 638.866623][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 638.875864][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 638.885216][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 638.894143][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 638.914013][T11547] device veth1_macvtap entered promiscuous mode [ 638.930833][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 638.943359][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 638.987430][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.016474][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.068075][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.084691][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 639.109315][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.144548][T11162] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 639.157716][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.184597][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.342418][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.361456][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.373767][T11547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.386793][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.397400][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.419171][T11162] usb 8-1: Using ep0 maxpacket: 32 [ 639.444745][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.460718][T11710] loop5: detected capacity change from 0 to 256 [ 639.504577][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.531017][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.556904][T11162] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.574536][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.624183][T11547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.663928][T11547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.764216][T11710] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 639.776988][T11162] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 639.789513][T11547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.801262][T11162] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.816014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 639.835002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 639.843202][T11162] usb 8-1: Product: syz [ 639.863431][T11162] usb 8-1: Manufacturer: syz [ 639.923251][T11719] overlayfs: failed to clone upperpath [ 639.946534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 640.064159][T11162] usb 8-1: SerialNumber: syz [ 640.071280][T11162] usb 8-1: config 0 descriptor?? [ 640.081958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 640.126143][T11162] usb 8-1: bad CDC descriptors [ 640.133101][T11162] usb 8-1: unsupported MDLM descriptors [ 640.277654][T11547] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.282038][T11724] loop2: detected capacity change from 0 to 256 [ 640.302081][T11547] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.452460][T11547] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.487025][ T4190] usb 8-1: USB disconnect, device number 4 [ 640.529065][T11547] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.848571][T11731] netlink: 'syz.2.1951': attribute type 4 has an invalid length. [ 641.136715][T11744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1952'. [ 641.875473][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.933057][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.043654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 642.097267][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.116069][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.135164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 642.837759][T11771] futex_wake_op: syz.5.1959 tries to shift op by 144; fix this program [ 642.915210][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1959'. [ 642.993781][T11771] netlink: 'syz.5.1959': attribute type 2 has an invalid length. [ 643.657969][T11790] netlink: 'syz.7.1964': attribute type 4 has an invalid length. [ 643.667135][T11786] loop2: detected capacity change from 0 to 4096 [ 643.699430][T11786] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 644.289338][T11803] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1966'. [ 644.835421][T11800] loop2: detected capacity change from 0 to 4096 [ 645.014610][T11800] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 645.224164][T11814] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1971'. [ 645.384622][T11819] loop2: detected capacity change from 0 to 256 [ 645.472646][T11823] loop7: detected capacity change from 0 to 256 [ 645.586428][T11823] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 645.614675][T11819] FAT-fs (loop2): Directory bread(block 64) failed [ 645.673032][T11819] FAT-fs (loop2): Directory bread(block 65) failed [ 645.736805][T11819] FAT-fs (loop2): Directory bread(block 66) failed [ 645.784579][T11819] FAT-fs (loop2): Directory bread(block 67) failed [ 645.791223][T11819] FAT-fs (loop2): Directory bread(block 68) failed [ 645.843082][T11819] FAT-fs (loop2): Directory bread(block 69) failed [ 645.877986][T11819] FAT-fs (loop2): Directory bread(block 70) failed [ 645.907408][T11819] FAT-fs (loop2): Directory bread(block 71) failed [ 645.914040][T11819] FAT-fs (loop2): Directory bread(block 72) failed [ 645.974710][T11819] FAT-fs (loop2): Directory bread(block 73) failed [ 646.008325][T11819] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 647.590712][T11855] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1976'. [ 648.284635][ T8695] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 648.634687][ T8695] usb 8-1: Using ep0 maxpacket: 16 [ 648.998471][ T8695] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.011171][ T8695] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 649.073496][T11872] loop8: detected capacity change from 0 to 8 [ 649.194818][ T8695] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 649.232501][T11872] SQUASHFS error: xz decompression failed, data probably corrupt [ 649.240753][T11872] SQUASHFS error: Failed to read block 0x108: -5 [ 649.247444][T11872] SQUASHFS error: Unable to read metadata cache entry [106] [ 649.255211][T11872] SQUASHFS error: Unable to read inode 0x11f [ 649.305416][ T8695] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.313458][ T8695] usb 8-1: Product: syz [ 649.339644][ T8695] usb 8-1: Manufacturer: syz [ 649.496568][ T8695] usb 8-1: SerialNumber: syz [ 649.713002][ T8695] usb 8-1: config 0 descriptor?? [ 650.489684][ T4231] usb 8-1: USB disconnect, device number 5 [ 651.800446][T11936] loop7: detected capacity change from 0 to 512 [ 651.843066][T11936] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 651.854606][ T5238] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 651.878028][T11936] EXT4-fs (loop7): 1 truncate cleaned up [ 651.886297][T11936] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 652.062988][T11936] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1996'. [ 652.324818][ T5238] usb 9-1: config index 0 descriptor too short (expected 65247, got 45) [ 652.343789][ T5238] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 652.707031][ T5238] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 652.717351][ T5238] usb 9-1: config 1 interface 0 has no altsetting 0 [ 652.809224][T11972] loop5: detected capacity change from 0 to 4096 [ 652.897945][T11974] loop2: detected capacity change from 0 to 16 [ 653.149509][T11974] erofs: (device loop2): mounted with root inode @ nid 36. [ 653.261102][T11972] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 653.644726][T11972] NILFS (loop5): mounting unchecked fs [ 653.650303][T11972] NILFS (loop5): recovery required for readonly filesystem [ 653.669789][T11972] NILFS (loop5): write access will be enabled during recovery [ 653.677807][ T5238] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 653.714885][ T5238] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.717051][T11972] NILFS (loop5): invalid segment: Checksum error in segment payload [ 653.734966][ T5238] usb 9-1: Product: syz [ 653.739184][ T5238] usb 9-1: Manufacturer: syz [ 653.743800][ T5238] usb 9-1: SerialNumber: syz [ 653.774555][T11972] NILFS (loop5): unable to fall back to spare super block [ 653.783159][T11972] NILFS (loop5): error -22 while searching super root [ 653.955938][T11920] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 653.963069][T11920] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 654.003000][T11627] udevd[11627]: incorrect nilfs2 checksum on /dev/loop5 [ 654.076857][T11989] loop2: detected capacity change from 0 to 8 [ 654.151903][T11989] SQUASHFS error: xz decompression failed, data probably corrupt [ 654.159807][T11989] SQUASHFS error: Failed to read block 0x108: -5 [ 654.167008][T11989] SQUASHFS error: Unable to read metadata cache entry [106] [ 654.174305][T11989] SQUASHFS error: Unable to read inode 0x11f [ 655.431644][T12006] loop5: detected capacity change from 0 to 512 [ 655.478061][T12006] EXT4-fs (loop5): Ignoring removed oldalloc option [ 655.525005][T12006] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 655.559393][T12006] EXT4-fs (loop5): 1 truncate cleaned up [ 655.570839][T12006] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 655.687391][T12020] loop2: detected capacity change from 0 to 128 [ 656.577743][T12020] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 656.634696][T12020] ext4 filesystem being mounted at /436/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 656.766913][T12017] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2010'. [ 658.070079][T12054] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2018'. [ 658.844725][ T4190] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 659.712857][T12069] loop5: detected capacity change from 0 to 8 [ 661.096390][T12073] loop7: detected capacity change from 0 to 512 [ 661.360469][T12081] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 662.384704][T12073] EXT4-fs (loop7): Ignoring removed oldalloc option [ 662.391595][T12073] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 662.422971][T12069] SQUASHFS error: xz decompression failed, data probably corrupt [ 662.430817][T12069] SQUASHFS error: Failed to read block 0x108: -5 [ 662.437246][T12069] SQUASHFS error: Unable to read metadata cache entry [106] [ 662.444628][T12069] SQUASHFS error: Unable to read inode 0x11f [ 662.688649][T12073] EXT4-fs (loop7): 1 truncate cleaned up [ 662.694437][T12073] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 663.556557][T12106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2029'. [ 663.582103][T12104] loop5: detected capacity change from 0 to 128 [ 663.773970][T12104] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 663.785067][T12104] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 663.801616][T12104] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2027'. [ 663.989405][T12118] loop8: detected capacity change from 0 to 16 [ 664.249429][T12118] erofs: (device loop8): mounted with root inode @ nid 36. [ 665.625000][ T5238] rtl8150 9-1:1.0: couldn't reset the device [ 665.679300][T12145] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 665.730965][ T5238] rtl8150: probe of 9-1:1.0 failed with error -5 [ 666.215407][ T5238] usb 9-1: USB disconnect, device number 2 [ 666.453908][T12156] loop2: detected capacity change from 0 to 64 [ 667.182207][T12163] loop7: detected capacity change from 0 to 512 [ 667.813866][T12163] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 667.903458][T12171] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2042'. [ 671.223174][T12219] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2054'. [ 672.092410][T12228] loop7: detected capacity change from 0 to 128 [ 672.517302][T12228] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 672.668960][T12228] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 672.942142][T12228] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2045'. [ 673.152329][T12237] loop8: detected capacity change from 0 to 128 [ 675.300083][T12270] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 675.383391][T12273] loop8: detected capacity change from 0 to 64 [ 675.667061][T12279] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2067'. [ 676.318638][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2068'. [ 678.234992][T12304] loop8: detected capacity change from 0 to 8 [ 678.351979][T12304] SQUASHFS error: xz decompression failed, data probably corrupt [ 678.360013][T12304] SQUASHFS error: Failed to read block 0x108: -5 [ 678.366560][T12304] SQUASHFS error: Unable to read metadata cache entry [106] [ 678.373893][T12304] SQUASHFS error: Unable to read inode 0x11f [ 680.013830][T12324] loop2: detected capacity change from 0 to 16 [ 680.407821][T12324] erofs: (device loop2): mounted with root inode @ nid 36. [ 680.871680][T12332] loop8: detected capacity change from 0 to 128 [ 680.941902][T12332] FAT-fs (loop8): Unrecognized mount option "ÿÿ0x000000000000ee00" or missing value [ 681.821260][T12348] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2080'. [ 682.599175][T12353] loop7: detected capacity change from 0 to 256 [ 682.622341][T12353] FAT-fs (loop7): Directory bread(block 64) failed [ 682.629056][T12353] FAT-fs (loop7): Directory bread(block 65) failed [ 682.635721][T12353] FAT-fs (loop7): Directory bread(block 66) failed [ 682.642260][T12353] FAT-fs (loop7): Directory bread(block 67) failed [ 682.648914][T12353] FAT-fs (loop7): Directory bread(block 68) failed [ 682.655501][T12353] FAT-fs (loop7): Directory bread(block 69) failed [ 682.662099][T12353] FAT-fs (loop7): Directory bread(block 70) failed [ 682.668708][T12353] FAT-fs (loop7): Directory bread(block 71) failed [ 682.675479][T12353] FAT-fs (loop7): Directory bread(block 72) failed [ 682.682022][T12353] FAT-fs (loop7): Directory bread(block 73) failed [ 685.369751][T12375] loop5: detected capacity change from 0 to 32768 [ 686.117167][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.268216][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.329948][T12403] overlayfs: missing 'lowerdir' [ 686.867924][T12414] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2092'. [ 688.279756][T12435] loop5: detected capacity change from 0 to 256 [ 688.383960][T12435] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 689.060872][T12442] loop7: detected capacity change from 0 to 256 [ 689.338365][T12442] FAT-fs (loop7): Directory bread(block 64) failed [ 689.369547][T12442] FAT-fs (loop7): Directory bread(block 65) failed [ 689.405911][T12442] FAT-fs (loop7): Directory bread(block 66) failed [ 689.486430][T12442] FAT-fs (loop7): Directory bread(block 67) failed [ 689.499551][T12442] FAT-fs (loop7): Directory bread(block 68) failed [ 689.532756][T12442] FAT-fs (loop7): Directory bread(block 69) failed [ 689.563920][T12442] FAT-fs (loop7): Directory bread(block 70) failed [ 689.594313][T12442] FAT-fs (loop7): Directory bread(block 71) failed [ 689.624634][T12442] FAT-fs (loop7): Directory bread(block 72) failed [ 689.635380][T12442] FAT-fs (loop7): Directory bread(block 73) failed [ 690.309029][T12442] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 691.339475][T12475] unsupported nla_type 35 [ 691.763807][ T4317] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 692.125646][ T4317] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 692.684573][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.199368][ T4317] usb 3-1: config 0 descriptor?? [ 694.248747][ T4317] cp210x 3-1:0.0: cp210x converter detected [ 694.400028][ T4317] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 694.409109][ T4317] cp210x 3-1:0.0: querying part number failed [ 694.426811][ T4317] usb 3-1: cp210x converter now attached to ttyUSB0 [ 694.435490][ T4317] usb 3-1: USB disconnect, device number 38 [ 694.470064][ T4317] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 694.481647][ T4317] cp210x 3-1:0.0: device disconnected [ 695.097143][T12528] loop2: detected capacity change from 0 to 512 [ 695.261411][T12528] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 696.112208][T12537] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2120'. [ 696.157342][T12537] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2120'. [ 696.190719][T12538] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2120'. [ 696.551426][T12549] device batadv0 entered promiscuous mode [ 696.681436][T12546] sctp: [Deprecated]: syz.2.2119 (pid 12546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 696.681436][T12546] Use struct sctp_sack_info instead [ 697.100536][T12559] netlink: 'syz.2.2128': attribute type 29 has an invalid length. [ 697.116222][T12559] netlink: 'syz.2.2128': attribute type 29 has an invalid length. [ 697.151549][T12559] netlink: 'syz.2.2128': attribute type 29 has an invalid length. [ 698.374611][T12111] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 698.753323][T12581] udc-core: couldn't find an available UDC or it's busy [ 698.773054][T12581] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 698.991355][T12581] udc-core: couldn't find an available UDC or it's busy [ 699.008838][T12581] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 699.098479][T12111] usb 8-1: unable to get BOS descriptor or descriptor too short [ 699.184590][T12111] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 699.202423][T12111] usb 8-1: can't read configurations, error -71 [ 701.834979][T12628] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2153'. [ 702.497226][T12640] netlink: 'syz.2.2155': attribute type 29 has an invalid length. [ 702.643447][T12640] netlink: 'syz.2.2155': attribute type 29 has an invalid length. [ 702.733424][T12643] netlink: 'syz.2.2155': attribute type 29 has an invalid length. [ 703.074567][ T4303] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 703.569841][T12648] udc-core: couldn't find an available UDC or it's busy [ 703.735203][T12648] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 704.149934][T12648] udc-core: couldn't find an available UDC or it's busy [ 704.185132][T12648] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 704.294592][ T4303] usb 9-1: unable to get BOS descriptor or descriptor too short [ 704.404662][ T4303] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 704.415512][ T4303] usb 9-1: can't read configurations, error -71 [ 704.769493][T12670] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2164'. [ 704.794863][T12670] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 706.149023][T12690] loop7: detected capacity change from 0 to 512 [ 706.150403][T12691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2172'. [ 706.215570][T12690] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 706.271976][T12690] EXT4-fs (loop7): 1 truncate cleaned up [ 706.304608][T12690] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 706.361524][T12690] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2173'. [ 706.945013][ T4317] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 707.408795][T12699] udc-core: couldn't find an available UDC or it's busy [ 707.472519][T12699] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.833408][T12699] udc-core: couldn't find an available UDC or it's busy [ 707.925147][T12699] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 709.004807][ T4317] usb 3-1: unable to get BOS descriptor or descriptor too short [ 709.112302][ T4317] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 709.131892][ T4317] usb 3-1: can't read configurations, error -71 [ 710.313773][T12742] loop7: detected capacity change from 0 to 256 [ 710.416733][T12742] FAT-fs (loop7): Directory bread(block 64) failed [ 710.450159][T12742] FAT-fs (loop7): Directory bread(block 65) failed [ 710.456976][T12742] FAT-fs (loop7): Directory bread(block 66) failed [ 710.463522][T12742] FAT-fs (loop7): Directory bread(block 67) failed [ 710.471291][T12742] FAT-fs (loop7): Directory bread(block 68) failed [ 710.478007][T12742] FAT-fs (loop7): Directory bread(block 69) failed [ 710.485009][T12742] FAT-fs (loop7): Directory bread(block 70) failed [ 710.491795][T12742] FAT-fs (loop7): Directory bread(block 71) failed [ 710.498797][T12742] FAT-fs (loop7): Directory bread(block 72) failed [ 710.506440][T12742] FAT-fs (loop7): Directory bread(block 73) failed [ 710.523467][T12742] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 713.959421][T12771] loop5: detected capacity change from 0 to 512 [ 714.037317][ T8695] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 714.104705][T12771] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 714.188452][T12771] EXT4-fs (loop5): 1 truncate cleaned up [ 714.194145][T12771] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 714.409547][T12768] udc-core: couldn't find an available UDC or it's busy [ 714.426449][T12768] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 714.548298][T12771] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2197'. [ 714.641660][T12768] udc-core: couldn't find an available UDC or it's busy [ 714.664214][T12768] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 714.934665][ T8695] usb 9-1: unable to get BOS descriptor or descriptor too short [ 714.995425][ T8695] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 715.003340][ T8695] usb 9-1: can't read configurations, error -71 [ 715.009043][T12787] loop2: detected capacity change from 0 to 256 [ 715.102757][T12787] FAT-fs (loop2): Directory bread(block 64) failed [ 715.120008][T12787] FAT-fs (loop2): Directory bread(block 65) failed [ 715.133875][T12787] FAT-fs (loop2): Directory bread(block 66) failed [ 715.145829][T12787] FAT-fs (loop2): Directory bread(block 67) failed [ 715.153759][T12787] FAT-fs (loop2): Directory bread(block 68) failed [ 715.168612][T12787] FAT-fs (loop2): Directory bread(block 69) failed [ 715.180845][T12787] FAT-fs (loop2): Directory bread(block 70) failed [ 715.189919][T12787] FAT-fs (loop2): Directory bread(block 71) failed [ 715.200285][T12787] FAT-fs (loop2): Directory bread(block 72) failed [ 715.209447][T12787] FAT-fs (loop2): Directory bread(block 73) failed [ 715.232065][T12787] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 718.152204][T12111] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 719.005563][T12838] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2219'. [ 719.182657][T12829] udc-core: couldn't find an available UDC or it's busy [ 719.220937][T12829] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 719.577372][T12829] udc-core: couldn't find an available UDC or it's busy [ 719.624089][T12829] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 720.074595][T12111] usb 3-1: unable to get BOS descriptor or descriptor too short [ 720.174695][T12111] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 720.220812][T12111] usb 3-1: can't read configurations, error -71 [ 722.571777][T12892] netlink: 'syz.8.2240': attribute type 39 has an invalid length. [ 722.949487][T12900] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2242'. [ 722.994240][T12900] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2242'. [ 728.983176][T12979] loop8: detected capacity change from 0 to 32768 [ 729.157483][T12979] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.2272 (12979) [ 729.685774][T12979] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 729.695027][T12979] BTRFS info (device loop8): setting nodatasum [ 729.701243][T12979] BTRFS info (device loop8): force zlib compression, level 3 [ 729.708750][T12979] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 729.718101][T12979] BTRFS info (device loop8): use lzo compression, level 0 [ 729.725390][T12979] BTRFS info (device loop8): turning on flush-on-commit [ 729.732407][T12979] BTRFS info (device loop8): enabling auto defrag [ 729.738985][T12979] BTRFS info (device loop8): max_inline at 4096 [ 729.745314][T12979] BTRFS info (device loop8): force zlib compression, level 3 [ 729.752731][T12979] BTRFS info (device loop8): using free space tree [ 729.759333][T12979] BTRFS info (device loop8): has skinny extents [ 730.448731][T12979] BTRFS info (device loop8): enabling ssd optimizations [ 730.922558][ T26] audit: type=1800 audit(1780424158.509:67): pid=12979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2272" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 731.580979][T13029] loop2: detected capacity change from 0 to 64 [ 733.232825][T13068] futex_wake_op: syz.5.2290 tries to shift op by 144; fix this program [ 733.291758][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2290'. [ 733.332293][T13068] netlink: 'syz.5.2290': attribute type 2 has an invalid length. [ 736.387638][T13088] loop7: detected capacity change from 0 to 16 [ 736.890592][T13088] erofs: (device loop7): mounted with root inode @ nid 36. [ 739.194567][T13114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.202060][T13114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.245529][T13114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.253107][T13114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.441237][T13117] loop2: detected capacity change from 0 to 4096 [ 739.658658][T13126] autofs4:pid:13126:autofs_fill_super: called with bogus options [ 741.112715][T13135] loop7: detected capacity change from 0 to 64 [ 741.160587][T13117] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 743.191863][ T151] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 743.219347][ T4189] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 743.418004][ T4189] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 744.031302][ T4189] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 744.058419][T10179] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 744.105144][ T4189] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 746.633579][T13178] loop8: detected capacity change from 0 to 256 [ 747.016674][T13178] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 747.169459][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.178333][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.227715][T13180] loop2: detected capacity change from 0 to 64 [ 747.407667][T13190] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 747.638119][T13192] loop8: detected capacity change from 0 to 32768 [ 747.722795][T13192] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.2327 (13192) [ 748.181035][T13192] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 748.189813][T13192] BTRFS info (device loop8): use zlib compression, level 3 [ 748.197050][T13192] BTRFS info (device loop8): using free space tree [ 748.203538][T13192] BTRFS info (device loop8): has skinny extents [ 749.864649][T13192] BTRFS info (device loop8): enabling ssd optimizations [ 753.072571][T13257] loop2: detected capacity change from 0 to 16 [ 753.081813][T13259] loop5: detected capacity change from 0 to 512 [ 753.151090][T13259] EXT4-fs (loop5): Ignoring removed oldalloc option [ 753.211743][T13257] erofs: (device loop2): mounted with root inode @ nid 36. [ 753.265357][T13259] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 753.344307][T13259] EXT4-fs (loop5): 1 truncate cleaned up [ 753.364660][T13259] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 754.364608][ T8690] Bluetooth: hci4: command 0x0406 tx timeout [ 754.408059][T13276] loop7: detected capacity change from 0 to 64 [ 757.855195][T13312] loop2: detected capacity change from 0 to 16 [ 758.700158][T13312] erofs: (device loop2): mounted with root inode @ nid 36. [ 759.396479][T13339] loop5: detected capacity change from 0 to 64 [ 761.129099][T13355] mmap: syz.2.2364 (13355) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 762.080938][T13359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2368'. [ 762.438428][T13364] loop5: detected capacity change from 0 to 128 [ 763.328477][T13374] loop2: detected capacity change from 0 to 256 [ 763.454986][T13374] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 764.384699][ T8690] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 764.734086][T13383] udc-core: couldn't find an available UDC or it's busy [ 764.779085][T13383] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 764.992431][T13383] udc-core: couldn't find an available UDC or it's busy [ 765.294646][T13383] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 765.474673][ T8690] usb 9-1: unable to get BOS descriptor or descriptor too short [ 765.554690][ T8690] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 765.563602][ T8690] usb 9-1: can't read configurations, error -71 [ 767.295837][T13409] [ 767.298216][T13409] ====================================================== [ 767.305236][T13409] WARNING: possible circular locking dependency detected [ 767.312271][T13409] syzkaller #0 Not tainted [ 767.316681][T13409] ------------------------------------------------------ [ 767.323697][T13409] syz.3.2379/13409 is trying to acquire lock: [ 767.329765][T13409] ffff88807be11458 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 767.341319][T13409] [ 767.341319][T13409] but task is already holding lock: [ 767.348687][T13409] ffff88807be10120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 767.357823][T13409] [ 767.357823][T13409] which lock already depends on the new lock. [ 767.357823][T13409] [ 767.368226][T13409] [ 767.368226][T13409] the existing dependency chain (in reverse order) is: [ 767.377233][T13409] [ 767.377233][T13409] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 767.384990][T13409] lock_sock_nested+0x44/0x100 [ 767.390343][T13409] smc_listen_out+0x109/0x3d0 [ 767.395573][T13409] smc_listen_work+0x526/0xd00 [ 767.400865][T13409] process_one_work+0x85f/0x1010 [ 767.406312][T13409] worker_thread+0xaa6/0x1290 [ 767.411550][T13409] kthread+0x436/0x520 [ 767.416185][T13409] ret_from_fork+0x1f/0x30 [ 767.421131][T13409] [ 767.421131][T13409] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 767.431270][T13409] __lock_acquire+0x2c42/0x7d10 [ 767.436701][T13409] lock_acquire+0x19e/0x400 [ 767.441710][T13409] __flush_work+0x116/0x210 [ 767.446963][T13409] __cancel_work_timer+0x3f4/0x560 [ 767.452595][T13409] smc_clcsock_release+0x5c/0xe0 [ 767.458056][T13409] __smc_release+0x661/0x7d0 [ 767.463186][T13409] smc_close_non_accepted+0xd1/0x1f0 [ 767.469000][T13409] smc_close_active+0xb00/0xea0 [ 767.474451][T13409] __smc_release+0x8d/0x7d0 [ 767.479476][T13409] smc_release+0x2ca/0x530 [ 767.484397][T13409] sock_close+0xd5/0x240 [ 767.489165][T13409] __fput+0x234/0x930 [ 767.493749][T13409] task_work_run+0x125/0x1a0 [ 767.498870][T13409] get_signal+0x122e/0x12d0 [ 767.503943][T13409] arch_do_signal_or_restart+0xe7/0x12c0 [ 767.510102][T13409] exit_to_user_mode_loop+0x9e/0x130 [ 767.515966][T13409] exit_to_user_mode_prepare+0xee/0x180 [ 767.522014][T13409] syscall_exit_to_user_mode+0x16/0x40 [ 767.528061][T13409] do_syscall_64+0x58/0xa0 [ 767.532983][T13409] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 767.539464][T13409] [ 767.539464][T13409] other info that might help us debug this: [ 767.539464][T13409] [ 767.549676][T13409] Possible unsafe locking scenario: [ 767.549676][T13409] [ 767.557119][T13409] CPU0 CPU1 [ 767.562464][T13409] ---- ---- [ 767.567811][T13409] lock(sk_lock-AF_SMC/1); [ 767.572299][T13409] lock((work_completion)(&new_smc->smc_listen_work)); [ 767.581731][T13409] lock(sk_lock-AF_SMC/1); [ 767.588766][T13409] lock((work_completion)(&new_smc->smc_listen_work)); [ 767.595812][T13409] [ 767.595812][T13409] *** DEADLOCK *** [ 767.595812][T13409] [ 767.603936][T13409] 2 locks held by syz.3.2379/13409: [ 767.609122][T13409] #0: ffff888074b81410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 767.619358][T13409] #1: ffff88807be10120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 767.628741][T13409] [ 767.628741][T13409] stack backtrace: [ 767.634626][T13409] CPU: 1 PID: 13409 Comm: syz.3.2379 Not tainted syzkaller #0 [ 767.642071][T13409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 767.652125][T13409] Call Trace: [ 767.655475][T13409] [ 767.658499][T13409] dump_stack_lvl+0x188/0x250 [ 767.663255][T13409] ? load_image+0x400/0x400 [ 767.667788][T13409] ? show_regs_print_info+0x20/0x20 [ 767.672979][T13409] ? print_circular_bug+0x12b/0x1a0 [ 767.678164][T13409] check_noncircular+0x296/0x330 [ 767.683270][T13409] ? look_up_lock_class+0x71/0x110 [ 767.688370][T13409] ? add_chain_block+0x940/0x940 [ 767.693289][T13409] ? lockdep_lock+0xf1/0x1f0 [ 767.697950][T13409] ? rcu_is_watching+0x11/0xa0 [ 767.702761][T13409] ? mark_lock+0x94/0x320 [ 767.707074][T13409] __lock_acquire+0x2c42/0x7d10 [ 767.711913][T13409] ? deref_stack_reg+0xd0/0x120 [ 767.716831][T13409] ? __bfs+0x2a3/0x5c0 [ 767.720881][T13409] ? verify_lock_unused+0x140/0x140 [ 767.726083][T13409] ? mark_lock+0x94/0x320 [ 767.730403][T13409] ? __lock_acquire+0x13bc/0x7d10 [ 767.735411][T13409] ? lockdep_lock+0xf1/0x1f0 [ 767.740002][T13409] lock_acquire+0x19e/0x400 [ 767.744505][T13409] ? __flush_work+0xfa/0x210 [ 767.749080][T13409] ? verify_lock_unused+0x140/0x140 [ 767.754262][T13409] ? read_lock_is_recursive+0x10/0x10 [ 767.759639][T13409] __flush_work+0x116/0x210 [ 767.764130][T13409] ? __flush_work+0xfa/0x210 [ 767.768702][T13409] ? flush_work+0x20/0x20 [ 767.773013][T13409] ? try_to_grab_pending+0xfa/0x7f0 [ 767.778194][T13409] ? mark_lock+0x94/0x320 [ 767.782504][T13409] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 767.788467][T13409] ? lock_chain_count+0x20/0x20 [ 767.793335][T13409] ? __cancel_work_timer+0x36a/0x560 [ 767.798604][T13409] __cancel_work_timer+0x3f4/0x560 [ 767.803698][T13409] ? cancel_work_sync+0x20/0x20 [ 767.808531][T13409] ? __local_bh_enable_ip+0x136/0x1c0 [ 767.813960][T13409] ? lockdep_hardirqs_on+0x94/0x140 [ 767.819152][T13409] ? __local_bh_enable_ip+0x136/0x1c0 [ 767.824520][T13409] ? _local_bh_enable+0xa0/0xa0 [ 767.829377][T13409] smc_clcsock_release+0x5c/0xe0 [ 767.834304][T13409] __smc_release+0x661/0x7d0 [ 767.838874][T13409] ? do_raw_spin_unlock+0x11d/0x230 [ 767.844062][T13409] smc_close_non_accepted+0xd1/0x1f0 [ 767.849334][T13409] smc_close_active+0xb00/0xea0 [ 767.854169][T13409] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 767.859784][T13409] __smc_release+0x8d/0x7d0 [ 767.864273][T13409] ? do_raw_spin_unlock+0x11d/0x230 [ 767.869629][T13409] smc_release+0x2ca/0x530 [ 767.874052][T13409] sock_close+0xd5/0x240 [ 767.878278][T13409] ? sock_mmap+0x90/0x90 [ 767.882503][T13409] __fput+0x234/0x930 [ 767.886473][T13409] task_work_run+0x125/0x1a0 [ 767.891068][T13409] get_signal+0x122e/0x12d0 [ 767.895556][T13409] ? kasan_save_stack+0x4b/0x60 [ 767.900501][T13409] ? kasan_save_stack+0x35/0x60 [ 767.905347][T13409] ? task_work_add+0x2f/0x1d0 [ 767.910004][T13409] ? fput_many+0xde/0x1a0 [ 767.914333][T13409] ? __sys_accept4+0x155/0x170 [ 767.919143][T13409] ? do_syscall_64+0x4c/0xa0 [ 767.923743][T13409] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 767.929827][T13409] arch_do_signal_or_restart+0xe7/0x12c0 [ 767.935578][T13409] ? get_sigframe_size+0x10/0x10 [ 767.940504][T13409] ? exit_to_user_mode_loop+0x3b/0x130 [ 767.945943][T13409] exit_to_user_mode_loop+0x9e/0x130 [ 767.951208][T13409] exit_to_user_mode_prepare+0xee/0x180 [ 767.956738][T13409] syscall_exit_to_user_mode+0x16/0x40 [ 767.962196][T13409] do_syscall_64+0x58/0xa0 [ 767.966593][T13409] ? clear_bhb_loop+0x30/0x80 [ 767.971260][T13409] ? clear_bhb_loop+0x30/0x80 [ 767.975929][T13409] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 767.981805][T13409] RIP: 0033:0x7f0d84895e59 [ 767.986269][T13409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.005918][T13409] RSP: 002b:00007f0d82ace028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 768.014318][T13409] RAX: fffffffffffffe00 RBX: 00007f0d84b0f090 RCX: 00007f0d84895e59 [ 768.022298][T13409] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 768.030257][T13409] RBP: 00007f0d8492bd6f R08: 0000000000000000 R09: 0000000000000000 [ 768.038213][T13409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.046169][T13409] R13: 00007f0d84b0f128 R14: 00007f0d84b0f090 R15: 00007ffe467d0418 [ 768.054128][T13409] [ 768.057167][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.121848][T13419] loop7: detected capacity change from 0 to 128 [ 768.277915][T13415] loop8: detected capacity change from 0 to 512 [ 768.918261][T13415] EXT4-fs (loop8): Ignoring removed oldalloc option [ 768.964099][T13415] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 769.015681][T13415] EXT4-fs (loop8): 1 truncate cleaned up [ 769.052597][T13415] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 769.493195][ T3854] device veth0_macvtap left promiscuous mode [ 769.523691][ T7074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready