last executing test programs: 2m3.731159215s ago: executing program 4 (id=748): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e0000002"], 0xb8}}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000000000000b2a7ddbdb45325aee75805b3bab9ef5ed69068d1ecc77ef29abc29933d69009f09a64c4aa9829e4b5a4e8f923a58be5e1461923130c494db22b241e519f62f428f5d8e75a338ba40a27d8356b96ebc05550cedaaea23b42b64bb5deba607ed49e75f952b956e1cd04cc0ad4315577e37419f139c387fe13750ffa1ad495ba4ee76d4ae812abae8dc"], 0xb8}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)={0x80, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m3.044333414s ago: executing program 4 (id=751): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m1.849271653s ago: executing program 4 (id=756): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000003c0)="f52b04", 0x3}], 0x1}, 0x20000000) 1m59.82060357s ago: executing program 4 (id=757): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000b00)=ANY=[@ANYBLOB="4006010000007c1c"], 0x0, 0x0, 0x0, 0x0}) 1m55.573153549s ago: executing program 4 (id=769): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000003c0)="f52b04", 0x3}], 0x1}, 0x20000000) 1m54.303269224s ago: executing program 4 (id=773): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="000000000001000000000000000000000000000051b7bc8e1405bbf3e8fc26aa1130bc9b0aa54b76c7636f150046a1e3357e8922bb4918005547bff8ff", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r1) r2 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) mount$9p_rdma(0x0, 0x0, 0x0, 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 1m37.113000564s ago: executing program 32 (id=773): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="000000000001000000000000000000000000000051b7bc8e1405bbf3e8fc26aa1130bc9b0aa54b76c7636f150046a1e3357e8922bb4918005547bff8ff", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r1) r2 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) mount$9p_rdma(0x0, 0x0, 0x0, 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 1m14.637283669s ago: executing program 3 (id=854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r9], 0x1, r7, r8, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 1m13.175428299s ago: executing program 3 (id=857): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) 1m12.483368286s ago: executing program 3 (id=860): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m12.481578262s ago: executing program 3 (id=862): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=maccyrillic,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=cp936,errors=continue,iocharset=ascii,errors=remount-ro,time_offset=0x0000000000000008,errors=remount-ro,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB='8\x00'], 0x1, 0x1524, &(0x7f0000002280)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x10b091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) 1m12.051284798s ago: executing program 3 (id=865): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a2c000000020a01040000000000000000050000050c00044000000000000000010900010073797a3000000000140000001100000000000000000500000acdb26d63a9ae50e85a76a942e7d47fd77e608cb41171f8f9c7c56971cab45b7da9642c5b2d1df4e729bf6cf1048e601920a6c2de046b306df0b63a6f1ef16f4b5f88cb89db4f5ac74ccff7ffffffc185df2069438dcaeef8dedc01cf3dd6142373f2727dd4470336249646689d7113dacea1ef29b0d1dd50189a09418bd1c09cf227c8f7fb56bcdaea8d8c67c77dc72d8d8996b790d1f13454cf6a1cc471780d09734c4f5a0a2efb757f283198ba30f35b3f3a7d30f7c3ea5dd6f676176d5c3b943df4b595d4f1eea94831f1cb7a0803c183d19db07b33b9387678f62da739895b2db6eda3124225fe6dee8a75d4ca85393b8c46c05925fcc7f15bce4e2ba47d1525621de152526a12e6c205135ca1d230a03db9c59bb548e9e257e6e5d3"], 0x54}, 0x1, 0x0, 0x0, 0x40c0}, 0x20020800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x94, 0x4, "65df"}, @timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x3, [{@local, 0x7}]}]}}}], 0x20}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="1200000012", 0x5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xa6}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0xe, &(0x7f0000000880)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xd, 0x0, 0xa, 0x20, 0x2}], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='wi', 0x2}], 0x1, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010100000000000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m11.736555369s ago: executing program 3 (id=868): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/58, 0x3a) 1m11.108725102s ago: executing program 33 (id=868): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/58, 0x3a) 28.982986889s ago: executing program 0 (id=972): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e0000002"], 0xb8}}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000000000000b2a7ddbdb45325aee75805b3bab9ef5ed69068d1ecc77ef29abc29933d69009f09a64c4aa9829e4b5a4e8f923a58be5e1461923130c494db22b241e519f62f428f5d8e75a338ba40a27d8356b96ebc05550cedaaea23b42b64bb5deba607ed49e75f952b956e1cd04cc0ad4315577e37419f139c387fe13750ffa1ad495ba4ee76d4ae812abae8dc"], 0xb8}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 28.817279166s ago: executing program 7 (id=973): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)='\\', 0x1}], 0x1) 26.462954292s ago: executing program 0 (id=978): socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c"], 0x118}}, 0x0) 23.726070039s ago: executing program 7 (id=981): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000b00)=ANY=[@ANYBLOB="400601000000"], 0x0, 0x0, 0x0, 0x0}) 22.170121519s ago: executing program 1 (id=983): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000ff07000000000000000000000000000000af430d295e3381e2994617f89659807419415a38f346225203614796b8691b89e86d9690d4d4a484c78e541907d25dfb9625115761cb14c43b5311376b114e5ba8ee133ad358313849ad003174dfeb16285360d3a21d01632c9e9873e0538a87e98f2ce76d765c4e3e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800a2dd6f58c7597e4949000000000600001600", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0xc0, 0x0, 0x1c}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$9p_rdma(0x0, 0x0, 0x0, 0x800, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, &(0x7f0000000780)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x500}, 0x57) 21.029957989s ago: executing program 1 (id=986): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960c2", 0x7e}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235", 0xcf}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1b", 0x3f}, {&(0x7f00000003c0)="9059c5aee5eca0529f3f9109a29885942349a08c6be8241fb9050c7491a49f89ee4aa8a1f1daa6663945ed017834c6afaab141dfb71370", 0x37}, {&(0x7f0000000480)="3b98c053d6287182fb77fa2573c0175eac0342191cae67c6aab799113bf6df72d6bae38ad4d70cf4923614c77b93f41a8de623711dbfe9124532ef0a290a9801ffac63d114b63603306210bd0ee6922a71edb08dc4d93aab9c40b4839e5cbaf0c4d28a016f64b1f07bdfba8f695191bd5d838b4395e9bbc0cab1184676af212a79208290e0a4e5de06f7ae089f225831692ec6b873fd77d10d2dad93fe6c91c512642975ee56e49f55095952b3f13d13c8fccc2410378f6469a8e1e04d3a9642f5ee714672c9de817233992c0ad8234921cc929670b81833cc694046c8121c16872b4b6474893f3ec6e9457f81f43c48214fbe7ebe31", 0xf6}], 0x6}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa", 0x7d}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc", 0xd4}, {&(0x7f0000001000)="bd2f6aa36cea0e4bccda24dc5bd69ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acc2ef0a9b0f9964d5705db134bdd9f261b7349aeede1c42e31b1082eec37b959d16afb967f54c471f2c7922c3c069f6a6", 0x92}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)="3f1c4a04940ee0b20aec8b4090986a3bff84255d40657e7ee0d40a25584e869ef417cfb843df9bab6a733f72f13c385945fbe4f6592503b0013edc972aa7f382cfe6f924e9b3058c5dc3a39af5f686", 0x4f}, {&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d541055b3e89cab518a94118fb170c1d73", 0x54}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556aca64e9c40548f5b0381db15e028b2a4f9983a447bb0aacb1b0267c1f54c88d99ea07b387d4be282d5d56e7acb15ebce07ad8846bcbbb754e3cee15d0455ceb58e34bd0c398ab501a6044e76a0569297449768bcba1cfc8842", 0x9c}, {&(0x7f0000000b80)="5e93f51c80552080613760264b6008795ee1e8b68965025b8a5b43529d3a64b1947ab79563d895ac06f8e1df8ce3befc5707528570ed617ff1c87305dad0d429bb7245f67ac66435bd28dd2989c1a8a9dffb197f60548f295c14a8a9bdaa0691fe451b9b026a6ca951ad2dd50d8a2fab7a2c88ca6cbda171642082e6a1f24ae56a85b1ca9402e1f325ef41aab6a21391e7c10f", 0x93}, {&(0x7f0000000ac0)}, {0x0}], 0x6}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 20.573326494s ago: executing program 1 (id=988): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f00000009c0)="ba14b14c84b7262d43d803ce0ebd7fae", 0x10}, {&(0x7f0000000ac0)="cfaaae553f", 0x5}], 0x2}, 0x20000811) 20.351599252s ago: executing program 1 (id=990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsm_list_modules(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xa, 0x7}, {}, {0xb, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3, 0xb17, 0x1, @empty, @empty, 0x8000, 0x8, 0x2, 0xfffffff8}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 19.969012139s ago: executing program 7 (id=991): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600a40001", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 19.053361761s ago: executing program 7 (id=995): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=maccyrillic,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=cp936,errors=continue,iocharset=ascii,errors=remount-ro,time_offset=0x0000000000000008,errors=remount-ro,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB='8\x00'], 0x1, 0x1524, &(0x7f0000002280)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x10b091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) 17.577351645s ago: executing program 7 (id=997): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000b00)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@mode={'mode', 0x3d, 0x8}}, {@dmode={'dmode', 0x3d, 0x4}}, {@adinicb}, {@gid}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid_forget}, {@uid}, {@partition={'partition', 0x3d, 0x6}}, {@session={'session', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x32}}]}, 0x1, 0xc67, &(0x7f0000001dc0)="$eJzs3U9sHNd9B/DfG5LiSm5rJk4VJ42DTVuksmK5+hdTtgp3VdNsA8iyEIq5BeBKpNSFKZIgqUY23JbppYceAhRFDzkRaIUCKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAAVoEW8zsW3FFkZYskiIlfz429d2deW/mvZnxjCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOJ3Xj13/ETaZEXfHjQGAHgoLox99fjJzZ7/AMBj69JW//8PAAAAAAAAAAAAAADsFymKeCpSzF1YSxPV947a+dbAjZvjI6ObVzuYqpp9Vfnyp3bi5KnTX35h+Ew3z7dmPqT+TvtsvD526Vz9ldnrc/NTCwtTk/XxmdaV2cmp+97CdutvdLQ6APXrb9yYvHp1oX7y+VN3rL459MHgE4eHzg4/e+yZbtnxkdHRsfUitd7y/Q/ckI6tRngciCKORYrnvvuT1IyIIrZ/LGoP99xvdLDqxNGqE+Mjo1VHplvNmcVy5cXugSgi6j2VGt1jtPm5iP6Bh9qHrTUilsrmlw0+WnZvbK4537w8PVW/2JxfbC22Zmcupk5ry/7Uo4gzKWI5IlYH797cQBTRHym+/eRaupzf+lEdhy9VA4O3bkexi328D2U76wMRy8UjcM72scEo4rVI8dN3j8SVfJ+p7jVfjHitzO9H3Crz5YhUXhinI97f5Dri0dQfRfxZef7PrqXJ6n7Qva+c/1r9KzNXZ3vKdu8rH/H5cNedYo+eDwc35MOxz+9NtSiiWd3x19KD/2YHAAAAAAAAAAAAAAAAgJ12MIr4TKR49V//oBpXHNW49CfPDv/u0C/2jhl/+h7bKcs+HxFLxf2NyT2QBwZeTBdT2uOxxB9ntSjiD/P4v2/udWMAAAAAAAAAAAAAAAAAAAA+1or4caR46b0jaTl65xRvzVyrX2penu7MCtud+7c7Z3q73W7XUycbOSdyLuVczrmSczVnFLl+zkbOiZxLOZdzruRczRl9uX7ORs6JnEs5l3Ou5FzNGf25fs5GzomcSzmXc67kXM0Z+2TuXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0kRRfw8UnzrG2spUkQ0IiaikyuDe906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0mIr4XqSo/17j9rL+iEjVvx1Hyl9OR+NAmZ+MxnCZL0fjXM5mlf2Nb+5B+9megVTEjyLFYO2d2yc8n/+Bzrfbl0Hcenv922f7O9nXXTn0weATh588Ozz6+ae3+pw2a8DR862ZGzfr4yOjo2M9i/vz3j/Zs2wo77fYma4TEQtvvvVGc3p6av7BP5SXwANW757Jbez9YX5I/Y9MU33YiQ/Rvy+asTd9v0NtL25O7Lry+f9+pPjN9/6t+8DvPP9r8Qudb7ef8PGzP1p//r+0cUP3+fzv31gvP//LJ8Fmz/+nepa9lH83MtAfUVu8PjdwOKK28OZbx1rXm9emrk3NnD5+/MXh4RdPHR84EFG72pqe6vm0I4cLAAAAAAAAAAAAAAAA4OFJRfx2pGj+aC3VI+JmNV5r6Ozws8ee6Yu+arzVHeO2Xx+7dK7+yuz1ufmphYWpyfr4TOvK7OTU/e6uVg33Gh8Z3ZXO3NPBXW7/wdors3Nvzreu/f7ipusP1c5dXlicb17ZfHUcjCKi0bvkaNXg8ZHRqtHTreZMVfXipoPpP7qBVMS/R4orp+vpC3lZHv+/cYR/3Hr7xdvXwtLGDe3g+P/PH1of//eJnqLlPlMq4meR4jf+/On4QtXOQ3HXMcvl/jpSHD3zuVwuDpTlum3ovFegMzKwLPvfkeLvf35n2e54yKfWy574SAf3EVCe/ycjxff+9Dvxq3nZne9/6D3/68fv0MYN7dL7Hz7Vs+zQHe8r2HbXyef/WKR4+al34teqJf/7oe//6L6x4Uin8Pr7OXbp/P9yz7KhvN9f36nOAwAAAAAAAAAAPMIGUhF/Eyl+MNqfXsjL7ufv/01u3NAu/f2vT/csm9yZ+Yru+WHbBxUAAAAA9omBVMSPI8W1xXduj6G+c/x3z/jP31of/zmSNqyt/pzvl6r3Buzkn//1Gsr7ndh+twEAAAAAAAAAAAAAAAAAAGBfSamIF/J86hPVeP7JLedTX4kUr/7nc7lcOlyW684DP1T9WrswO3Ps3PT0bC0Wm5enp+pjc80rU2XdT0WKtb/6XK5bVPOrd+eb78zxvj4X+3ykGP3bbtnOXOzduck784HX2u2IE2XZT0SK//i7O8vmqanz3NHVdk+WZf8yUnz9Hzcve3i97Kmy7HcixQ+/Xu+WPVSW7b4f9dPrZZ+/MlvswlkBAAAAAAAAAAAAAAAAAADg42YgFfEnkeK/ri/fHsuf5/8f6PlaufV2z3z/G9ys5vkfqub/3+rzg8z/X71XYGmrvQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOMpRRFvRYq5C2tpZbD83lE735q5cXN8ZHTzagdTVbOvKl/+1E6cPHX6yy8Mn+nmh9ffaZ+J18cunau/Mnt9bn5qYWFqsj4+07oyOzl131vYbv2NjlYHoH79jRuTV68u1E8+f+qO1TeHPhh84vDQ2eFnjz3TLTs+Mjo61lOmf+CB936XtMXyA1HEX0SK5777k/SDwYgitn8s7nHt7LaDVSeOVp0YHxmtOjLdas4slisvdg9EEVHvqdToHqN7nov/a7fbD6srm2hELJXNLxt8tOze2Fxzvnl5eqp+sTm/2Fpszc5cTJ3Wlv2pRxFnUsRyRKwO3r25gSjijUjx7SfX0j8NRvR1j8OXLox99fjJrdtR7GIf70PZzvpAxHJxP+eMrQxGEf8QKX767pH458GI/uj8xBcjXivz+xG3onO+U3lhnI54f5PriEdTfxTxP+X5P7uW3h0s7wfd+8r5r9W/MnN1tqds976yzedDu93+4zL37vnwMO3ze1MtivhhdcdfS//iv2sAAAAAAAAAAAAAAACAfaSIX4kUL713JFXjg2+PKW7NXKtfal6e7gzr6479646Zbrfb7XrqZCPnRM6lnMs5V3Ku5owi18/ZKLPWbk/k70s5l3Ou5FzNGX25fl81XLHdyN8nci7lXM65knM1Z/Tn+jkbOSdyLuVczrmSczVn7JOxewAAAAAAAAAAAAAAAAAAwOOlqP5J8a1vrKX2YGd+6Yno5Ir5QB97/x8AAP//Jhb4VQ==") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 15.863120919s ago: executing program 1 (id=998): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0xfeffffff, 0xffffffffffffffff, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 15.626674671s ago: executing program 7 (id=1000): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 14.324836704s ago: executing program 34 (id=1000): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 14.153276954s ago: executing program 0 (id=1003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000a0a01020000000000000000020000000500010073797a30000000001e69ffe8868a99340ba472432f32492c5b25f802b4fd1d4d7a139b"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@setlink={0x28, 0x13, 0x1, 0x70bd26, 0x8, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008041}, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0x4, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0xfffffffc, 0x0, 0xed, 0x6]}, &(0x7f0000000080)=0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0x5, 0x0, 0x0, 0x106], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x78) syz_open_dev$evdev(&(0x7f00000004c0), 0x1, 0x1e9880) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff9000/0x4000)=nil) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x40000100, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") 11.183760831s ago: executing program 2 (id=1006): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mkdir(0x0, 0x181) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000580)=@multiplanar_fd={0xcfd, 0xa, 0x4, 0x2000, 0x8000, {}, {0x0, 0xc, 0xd0, 0x6, 0x5, 0x1, "5dce6236"}, 0x7, 0x4, {0x0}}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x7a, 0x0, @fd=r0, 0x0, 0x0, 0xe7, 0x1, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) getpid() sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x20000000) 11.102014893s ago: executing program 0 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsm_list_modules(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0xa, 0x7}, {}, {0xb, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r6, 0x4, 0x3, 0x3, 0xb17, 0x1, @empty, @empty, 0x8000, 0x8, 0x2, 0xfffffff8}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 10.90861034s ago: executing program 5 (id=1008): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/148, 0x0}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) close(r0) 8.118872294s ago: executing program 0 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="08001e", 0x3}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000b80)=ANY=[], 0x1, 0x5521, &(0x7f0000006280)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x5412, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r7, 0x8, 0x0, 0x8000) 8.094307304s ago: executing program 2 (id=1011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c"], 0x118}}, 0x0) 7.96357603s ago: executing program 5 (id=1012): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x40c0}, 0x20020800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x94, 0x4, "65df"}, @timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x3, [{@local, 0x7}]}]}}}], 0x20}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="1200000012", 0x5, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xa6}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0xe, &(0x7f0000000880)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xd, 0x0, 0xa, 0x20, 0x2}], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='wi', 0x2}], 0x1, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010100000000000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.801382964s ago: executing program 6 (id=1013): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600a40001", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 6.502125252s ago: executing program 2 (id=1014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0x118}}, 0x0) 6.474352531s ago: executing program 0 (id=1015): r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x7f000}]) 6.247202321s ago: executing program 1 (id=1016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) poll(0x0, 0x0, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r7 = socket$key(0xf, 0x3, 0x2) sendfile(r7, r6, 0x0, 0x1000) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xf9, 0xdb, 0xe2, 0x10, 0xb95, 0x2790, 0x639c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcb, 0x0, 0x0, 0xff, 0x64, 0x63}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000700)={0x40, 0x11, 0x9d, "85e36dd00826425123051ac446c71bbcdee5b36a902c92e436eacd83c762f7d6dfaabcd3c1ab195919124ca6ff12d58d0008f72065fc14d1a4ee6d70fa41664e571775289eb64c94619f90623e649a0170dab2170ae6640435b106d5b4de5c961f9b1d07584771f0f9daef6b60ef9fcdd117741255db4cbb0ab09e16a6fcc3b655b23b2735afecb8b46fff630de46388cb25be02849d08426fd4e631fe"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x1}, 0x0, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x20}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000980)={0x40, 0xb, 0x2, "abbb"}, &(0x7f00000009c0)={0x40, 0xf, 0x2}, 0x0, &(0x7f0000000a40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "df6e"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xff}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x4}, 0x0, &(0x7f0000000b80)={0x40, 0x21, 0x1}}) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0xffffffffffffff01) 6.246617773s ago: executing program 5 (id=1017): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000340), 0x0, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x0) 6.143282701s ago: executing program 6 (id=1018): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000004000000"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080)=r3, 0x12) 5.889657226s ago: executing program 2 (id=1019): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.478819594s ago: executing program 5 (id=1020): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.222648693s ago: executing program 6 (id=1021): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.806867678s ago: executing program 6 (id=1022): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mkdir(0x0, 0x181) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000580)=@multiplanar_fd={0xcfd, 0xa, 0x4, 0x2000, 0x8000, {}, {0x0, 0xc, 0xd0, 0x6, 0x5, 0x1, "5dce6236"}, 0x7, 0x4, {0x0}}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x7a, 0x0, @fd=r0, 0x0, 0x0, 0xe7, 0x1, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) getpid() sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x20000000) 2.320921321s ago: executing program 5 (id=1023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsm_list_modules(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xa, 0x7}, {}, {0xb, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r7, 0x4, 0x3, 0x3, 0xb17, 0x1, @empty, @empty, 0x8000, 0x8, 0x2, 0xfffffff8}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.313427784s ago: executing program 2 (id=1024): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000ff07000000000000000000000000000000af430d295e3381e2994617f89659807419415a38f346225203614796b8691b89e86d9690d4d4a484c78e541907d25dfb9625115761cb14c43b5311376b114e5ba8ee133ad358313849ad003174dfeb16285360d3a21d01632c9e9873e0538a87e98f2ce76d765c4e3e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800a2dd6f58c7597e4949000000000600001600", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0xc0, 0x0, 0x1c}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$9p_rdma(0x0, 0x0, 0x0, 0x800, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, &(0x7f0000000780)={0x18, {"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", 0x1000}}, 0x1006) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x500}, 0x57) 2.246673493s ago: executing program 6 (id=1025): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000b00)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@mode={'mode', 0x3d, 0x8}}, {@dmode={'dmode', 0x3d, 0x4}}, {@adinicb}, {@gid}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid_forget}, {@uid}, {@partition={'partition', 0x3d, 0x6}}, {@session={'session', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x32}}]}, 0x1, 0xc67, &(0x7f0000001dc0)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 627.587379ms ago: executing program 6 (id=1026): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) io_submit(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000016c0)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xfff4, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3ff, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r4, 0x0, &(0x7f0000000100)=0xffffffffffffffd1, 0x800) bind$ax25(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 463.934562ms ago: executing program 5 (id=1027): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0xfeffffff, 0xffffffffffffffff, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 0s ago: executing program 2 (id=1028): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/148, 0x0}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) close(r0) kernel console output (not intermixed with test programs): T5826] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 229.740966][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.750543][ T1202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.755201][ T7079] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.758525][ T1202] usb 5-1: Product: syz [ 229.793615][ T5826] usb 1-1: config 0 descriptor?? [ 229.838147][ T5826] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 229.880182][ T1202] usb 5-1: Manufacturer: syz [ 229.903626][ T1202] usb 5-1: SerialNumber: syz [ 229.917490][ T1202] usb 5-1: config 0 descriptor?? [ 229.956022][ T1202] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 230.086291][ T5898] usb 1-1: USB disconnect, device number 6 [ 230.166970][ T1202] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 230.199460][ T1202] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 230.352556][ T7084] netlink: 'syz.3.363': attribute type 13 has an invalid length. [ 230.362342][ T7086] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.370'. [ 230.479381][ T5898] usb 5-1: USB disconnect, device number 14 [ 230.504184][ T7084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.947852][ T7097] SET target dimension over the limit! [ 230.958133][ T1202] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 231.161658][ T1202] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 231.316922][ T1202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.551453][ T1202] usb 4-1: config 0 descriptor?? [ 231.583091][ T1202] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 232.087113][ T7102] loop0: detected capacity change from 0 to 40427 [ 232.096440][ T7102] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 232.103222][ T7102] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 232.120555][ T7101] netlink: 'syz.2.374': attribute type 4 has an invalid length. [ 232.128653][ T7101] netlink: 17 bytes leftover after parsing attributes in process `syz.2.374'. [ 232.185153][ T1202] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 233.053253][ T1202] gspca_cpia1: usb_control_msg 01, error -71 [ 233.059293][ T1202] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 233.163272][ T1202] usb 4-1: USB disconnect, device number 6 [ 233.191622][ T7102] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 233.198693][ T7102] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 233.214647][ T7102] syz.0.375: attempt to access beyond end of device [ 233.214647][ T7102] loop0: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 233.230380][ T7112] loop4: detected capacity change from 0 to 2048 [ 233.230919][ T7102] syz.0.375: attempt to access beyond end of device [ 233.230919][ T7102] loop0: rw=0, sector=45120, nr_sectors = 8 limit=40427 [ 233.306375][ T7112] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 233.384968][ T5838] syz-executor: attempt to access beyond end of device [ 233.384968][ T5838] loop0: rw=2049, sector=45192, nr_sectors = 8 limit=40427 [ 233.442887][ T7115] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.463863][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 233.463899][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.463915][ T5838] Call Trace: [ 233.463925][ T5838] [ 233.463935][ T5838] dump_stack_lvl+0x241/0x360 [ 233.463982][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.464019][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.464050][ T5838] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 233.464090][ T5838] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 233.464130][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.464158][ T5838] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 233.464201][ T5838] f2fs_handle_critical_error+0x392/0x5a0 [ 233.464256][ T5838] f2fs_write_end_io+0x563/0x790 [ 233.464304][ T5838] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 233.464347][ T5838] ? bio_endio+0x7e4/0x890 [ 233.464376][ T5838] ? bio_endio+0x82a/0x890 [ 233.464406][ T5838] __submit_merged_bio+0x2a9/0x710 [ 233.464435][ T5838] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 233.464474][ T5838] f2fs_submit_merged_write_cond+0x29f/0x380 [ 233.464519][ T5838] f2fs_write_data_pages+0x2f99/0x38d0 [ 233.464600][ T5838] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 233.464690][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.464719][ T5838] ? __mod_memcg_lruvec_state+0x301/0x4f0 [ 233.464765][ T5838] ? __pfx___mod_memcg_lruvec_state+0x10/0x10 [ 233.464807][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.464854][ T5838] ? __mod_zone_page_state+0xda/0x150 [ 233.464883][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.464911][ T5838] ? folios_put_refs+0x711/0x800 [ 233.464957][ T5838] ? lockdep_hardirqs_on+0x9d/0x150 [ 233.464983][ T5838] ? __pfx_folios_put_refs+0x10/0x10 [ 233.465021][ T5838] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 233.465059][ T5838] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 233.465099][ T5838] do_writepages+0x366/0x890 [ 233.465135][ T5838] ? __pfx_do_writepages+0x10/0x10 [ 233.465158][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.465186][ T5838] ? __lock_acquire+0xad5/0xd80 [ 233.465218][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.465254][ T5838] ? do_raw_spin_lock+0x151/0x370 [ 233.465303][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.465332][ T5838] ? do_raw_spin_unlock+0x13c/0x8b0 [ 233.465378][ T5838] filemap_fdatawrite+0x1f2/0x2a0 [ 233.465410][ T5838] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 233.465436][ T5838] ? mlock_drain_local+0x79/0x490 [ 233.465515][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.465543][ T5838] ? do_raw_spin_unlock+0x13c/0x8b0 [ 233.465591][ T5838] f2fs_sync_dirty_inodes+0x34f/0x860 [ 233.465649][ T5838] f2fs_write_checkpoint+0x857/0x1da0 [ 233.465713][ T5838] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 233.465804][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.465834][ T5838] ? kill_f2fs_super+0x290/0x6d0 [ 233.465881][ T5838] kill_f2fs_super+0x2b8/0x6d0 [ 233.465929][ T5838] ? __pfx_kill_f2fs_super+0x10/0x10 [ 233.465977][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.466006][ T5838] ? shrinker_free+0x2ca/0x3d0 [ 233.466042][ T5838] deactivate_locked_super+0xc6/0x130 [ 233.466078][ T5838] cleanup_mnt+0x422/0x4c0 [ 233.466107][ T5838] ? lockdep_hardirqs_on+0x9d/0x150 [ 233.466137][ T5838] task_work_run+0x253/0x310 [ 233.466185][ T5838] ? __pfx_task_work_run+0x10/0x10 [ 233.466240][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.466275][ T5838] syscall_exit_to_user_mode+0x13f/0x340 [ 233.466305][ T5838] do_syscall_64+0x100/0x230 [ 233.466338][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.466363][ T5838] RIP: 0033:0x7fe20d78e497 [ 233.466385][ T5838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 233.466407][ T5838] RSP: 002b:00007ffc9a263208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 233.466433][ T5838] RAX: 0000000000000000 RBX: 00007fe20d80e08c RCX: 00007fe20d78e497 [ 233.466451][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9a2632c0 [ 233.466467][ T5838] RBP: 00007ffc9a2632c0 R08: 0000000000000000 R09: 0000000000000000 [ 233.466483][ T5838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9a264350 [ 233.466500][ T5838] R13: 00007fe20d80e08c R14: 0000000000038f79 R15: 00007ffc9a264390 [ 233.466540][ T5838] [ 233.472688][ T5838] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 234.407249][ T7130] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.384'. [ 234.416773][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.5.383'. [ 235.755626][ T7112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.043196][ T5906] IPVS: starting estimator thread 0... [ 238.101868][ T7112] syz.4.377 (7112) used greatest stack depth: 19496 bytes left [ 238.150880][ T7156] IPVS: using max 23 ests per chain, 55200 per kthread [ 238.496206][ T7167] netlink: 'syz.3.393': attribute type 13 has an invalid length. [ 238.621235][ T7167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.094633][ T7163] loop5: detected capacity change from 0 to 8192 [ 239.531464][ T7163] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.871326][ T7183] syz.5.394: attempt to access beyond end of device [ 239.871326][ T7183] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 240.110066][ T6008] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 240.816125][ T5906] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 240.822780][ T6008] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 240.871414][ T6008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.914975][ T6008] usb 4-1: config 0 descriptor?? [ 240.943320][ T6008] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 241.050450][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 241.094884][ T5906] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 241.118205][ T5906] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 241.346368][ T6008] gspca_cpia1: usb_control_msg 03, error -71 [ 241.371844][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 241.405581][ T5906] usb 2-1: Product: syz [ 241.409776][ T5906] usb 2-1: Manufacturer: syz [ 241.414538][ T5906] usb 2-1: SerialNumber: syz [ 241.433331][ T5906] usb 2-1: config 0 descriptor?? [ 241.440743][ T7185] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 242.187872][ T6008] gspca_cpia1: usb_control_msg 01, error -71 [ 242.194352][ T6008] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 242.268478][ T6008] usb 4-1: USB disconnect, device number 7 [ 242.413153][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 242.427160][ T5826] usb 2-1: USB disconnect, device number 10 [ 242.659913][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880352e0800: rx timeout, send abort [ 243.161367][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880352e0400: rx timeout, send abort [ 243.169633][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880352e0800: abort rx timeout. Force session deactivation [ 243.669625][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880352e0400: abort rx timeout. Force session deactivation [ 244.169492][ T7222] syz.0.410: attempt to access beyond end of device [ 244.169492][ T7222] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 244.370490][ T52] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 244.830096][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 244.856592][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.880051][ T52] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 245.790111][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.805428][ T52] usb 2-1: config 0 descriptor?? [ 246.080512][ T52] usbhid 2-1:0.0: can't add hid device: -71 [ 246.086575][ T52] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 246.179419][ T52] usb 2-1: USB disconnect, device number 11 [ 246.210206][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.419'. [ 246.696106][ T7248] loop5: detected capacity change from 0 to 8 [ 248.069574][ T7255] SET target dimension over the limit! [ 249.020547][ T7260] netlink: 52 bytes leftover after parsing attributes in process `syz.3.425'. [ 249.318935][ T7269] loop1: detected capacity change from 0 to 2048 [ 249.351966][ T7259] loop0: detected capacity change from 0 to 8192 [ 249.378673][ T7269] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 249.421019][ T7259] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.037087][ T7275] syz.3.430: attempt to access beyond end of device [ 251.037087][ T7275] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 251.072517][ T7280] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.523832][ T5826] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 253.868090][ T7309] SET target dimension over the limit! [ 254.170176][ T1202] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 254.190102][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 254.204667][ T5826] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 254.227348][ T5826] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 254.241246][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 254.280083][ T5826] usb 2-1: Product: syz [ 254.310172][ T5826] usb 2-1: Manufacturer: syz [ 254.330489][ T1202] usb 1-1: Using ep0 maxpacket: 16 [ 254.335753][ T5826] usb 2-1: SerialNumber: syz [ 254.366643][ T1202] usb 1-1: config 1 has an invalid interface number: 203 but max is 0 [ 254.386910][ T5826] usb 2-1: config 0 descriptor?? [ 254.410227][ T1202] usb 1-1: config 1 has no interface number 0 [ 254.417229][ T7310] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 254.444098][ T1202] usb 1-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=63.9c [ 254.466854][ T1202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.520225][ T1202] usb 1-1: Product: syz [ 254.524424][ T1202] usb 1-1: Manufacturer: syz [ 254.565503][ T1202] usb 1-1: SerialNumber: syz [ 254.620906][ T5906] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 254.762802][ T5898] usb 2-1: USB disconnect, device number 12 [ 254.800387][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 254.800693][ T1202] aqc111 1-1:1.203: probe with driver aqc111 failed with error -22 [ 254.834199][ T5906] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.856935][ T5906] usb 5-1: config 0 has no interface number 0 [ 254.876429][ T5906] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.914511][ T5906] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.928183][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.948614][ T5906] usb 5-1: config 0 descriptor?? [ 254.964092][ T5906] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 255.023674][ T7330] loop2: detected capacity change from 0 to 8192 [ 255.064083][ T7330] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.507354][ T6008] usb 5-1: USB disconnect, device number 15 [ 256.241841][ T52] usb 1-1: USB disconnect, device number 7 [ 257.564616][ T7349] syz.0.449: attempt to access beyond end of device [ 257.564616][ T7349] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 257.674099][ T7347] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 257.680799][ T7347] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 257.746092][ T7347] vhci_hcd vhci_hcd.0: Device attached [ 257.851113][ T7353] vhci_hcd: connection closed [ 257.883569][ T53] vhci_hcd: stop threads [ 257.945516][ T53] vhci_hcd: release socket [ 257.968790][ T53] vhci_hcd: disconnect device [ 257.973771][ T6008] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 257.993226][ T6008] usb 41-1: enqueue for inactive port 0 [ 259.000104][ T6008] vhci_hcd: vhci_device speed not set [ 259.267098][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 259.960523][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 259.996566][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 260.047692][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 260.085483][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 260.171539][ T9] usb 4-1: Product: syz [ 260.176121][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.176597][ T9] usb 4-1: Manufacturer: syz [ 260.182623][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.198933][ T9] usb 4-1: SerialNumber: syz [ 260.311155][ T9] usb 4-1: config 0 descriptor?? [ 260.318836][ T7364] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 261.504369][ T9] usb 4-1: USB disconnect, device number 8 [ 262.824828][ T7379] loop1: detected capacity change from 0 to 8192 [ 263.539566][ T7379] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.568798][ T7401] loop3: detected capacity change from 0 to 128 [ 263.633168][ T7401] FAT-fs (loop3): bogus number of reserved sectors [ 263.692616][ T7401] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 263.740492][ T7401] FAT-fs (loop3): Can't find a valid FAT filesystem [ 265.696146][ T7401] loop3: detected capacity change from 0 to 736 [ 265.703153][ T7401] iso9660: Bad value for 'mode' [ 268.173521][ T7423] loop1: detected capacity change from 0 to 8192 [ 268.491104][ T7423] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 270.220492][ T7448] syz.1.470: attempt to access beyond end of device [ 270.220492][ T7448] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 270.964022][ T5975] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 271.820985][ T5975] usb 3-1: Using ep0 maxpacket: 32 [ 271.843943][ T5975] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 271.890060][ T5975] usb 3-1: config 0 has no interface number 0 [ 272.020050][ T5975] usb 3-1: config 0 interface 12 has no altsetting 0 [ 272.074576][ T5975] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 272.120245][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.210032][ T5975] usb 3-1: Product: syz [ 272.236406][ T5975] usb 3-1: Manufacturer: syz [ 272.278862][ T7467] syz.4.483: attempt to access beyond end of device [ 272.278862][ T7467] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 272.606902][ T5975] usb 3-1: SerialNumber: syz [ 272.796327][ T5975] usb 3-1: config 0 descriptor?? [ 272.884279][ T7466] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 273.572724][ T7474] loop4: detected capacity change from 0 to 128 [ 273.760464][ T7474] FAT-fs (loop4): bogus number of reserved sectors [ 273.777411][ T7474] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 273.882160][ T7474] FAT-fs (loop4): Can't find a valid FAT filesystem [ 274.241734][ T5975] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 274.375602][ T5975] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 275.434348][ T5975] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 275.448724][ T7474] loop4: detected capacity change from 0 to 736 [ 275.455721][ T7474] iso9660: Bad value for 'mode' [ 275.508918][ T5975] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 275.852425][ T5975] usb 3-1: USB disconnect, device number 9 [ 277.773262][ T5898] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 277.982436][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 277.991872][ T5898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 278.051931][ T5898] usb 3-1: can't read configurations, error -61 [ 278.676089][ T5898] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 278.871074][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 278.900748][ T5898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 278.954653][ T5898] usb 3-1: can't read configurations, error -61 [ 278.983546][ T5898] usb usb3-port1: attempt power cycle [ 279.241693][ T7510] loop3: detected capacity change from 0 to 2048 [ 279.270472][ T7510] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 279.510272][ T5898] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 280.230587][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 280.248088][ T5898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 280.270019][ T5898] usb 3-1: can't read configurations, error -61 [ 280.366100][ T7520] netlink: 'syz.4.498': attribute type 4 has an invalid length. [ 280.374152][ T7520] netlink: 17 bytes leftover after parsing attributes in process `syz.4.498'. [ 280.787004][ T7521] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.830424][ T5898] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 281.079607][ T5898] usb 3-1: device descriptor read/8, error -71 [ 281.310454][ T5898] usb usb3-port1: unable to enumerate USB device [ 281.402933][ T7528] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.502'. [ 283.276752][ T7551] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.509'. [ 285.413145][ T5906] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 285.603417][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 285.650412][ T5906] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 285.697438][ T7584] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.519'. [ 285.708269][ T5906] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 285.722781][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 285.731607][ T5906] usb 5-1: Product: syz [ 285.737644][ T5906] usb 5-1: Manufacturer: syz [ 285.755909][ T5906] usb 5-1: SerialNumber: syz [ 285.792451][ T5906] usb 5-1: config 0 descriptor?? [ 285.811041][ T7572] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 286.294872][ T1202] usb 5-1: USB disconnect, device number 16 [ 286.760887][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.525'. [ 289.079464][ T7626] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.536'. [ 290.064856][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 292.036799][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.552'. [ 293.812516][ T7680] loop4: detected capacity change from 0 to 64 [ 293.814556][ T7678] loop3: detected capacity change from 0 to 2048 [ 294.840093][ T7678] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 295.068704][ T13] kworker/u8:1: attempt to access beyond end of device [ 295.068704][ T13] loop4: rw=1, sector=65, nr_sectors = 1 limit=64 [ 295.097041][ T7687] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.152461][ T13] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 295.195957][ T13] kworker/u8:1: attempt to access beyond end of device [ 295.195957][ T13] loop4: rw=1, sector=66, nr_sectors = 1 limit=64 [ 295.425402][ T13] Buffer I/O error on dev loop4, logical block 66, lost async page write [ 295.434153][ T13] kworker/u8:1: attempt to access beyond end of device [ 295.434153][ T13] loop4: rw=1, sector=67, nr_sectors = 1 limit=64 [ 295.447387][ T13] Buffer I/O error on dev loop4, logical block 67, lost async page write [ 295.457976][ T13] kworker/u8:1: attempt to access beyond end of device [ 295.457976][ T13] loop4: rw=1, sector=68, nr_sectors = 1 limit=64 [ 295.498353][ T13] Buffer I/O error on dev loop4, logical block 68, lost async page write [ 296.350296][ T13] kworker/u8:1: attempt to access beyond end of device [ 296.350296][ T13] loop4: rw=1, sector=72, nr_sectors = 1 limit=64 [ 296.411380][ T13] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 296.487463][ T13] kworker/u8:1: attempt to access beyond end of device [ 296.487463][ T13] loop4: rw=1, sector=73, nr_sectors = 1 limit=64 [ 296.540285][ T13] Buffer I/O error on dev loop4, logical block 73, lost async page write [ 296.559312][ T13] kworker/u8:1: attempt to access beyond end of device [ 296.559312][ T13] loop4: rw=1, sector=76, nr_sectors = 1 limit=64 [ 296.593399][ T13] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 296.635871][ T13] kworker/u8:1: attempt to access beyond end of device [ 296.635871][ T13] loop4: rw=1, sector=77, nr_sectors = 1 limit=64 [ 296.655784][ T7700] netlink: 'syz.1.562': attribute type 13 has an invalid length. [ 296.698123][ T13] Buffer I/O error on dev loop4, logical block 77, lost async page write [ 296.742460][ T13] kworker/u8:1: attempt to access beyond end of device [ 296.742460][ T13] loop4: rw=1, sector=78, nr_sectors = 976 limit=64 [ 296.818741][ T7695] loop0: detected capacity change from 0 to 8192 [ 296.901789][ T7695] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 296.989797][ T7704] netlink: 'syz.5.565': attribute type 4 has an invalid length. [ 297.055357][ T7706] syz.0.561: attempt to access beyond end of device [ 297.055357][ T7706] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 297.530134][ T7704] netlink: 17 bytes leftover after parsing attributes in process `syz.5.565'. [ 297.574310][ T7700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.849244][ T7734] netlink: 40 bytes leftover after parsing attributes in process `syz.5.572'. [ 301.917726][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 302.112646][ T7738] loop1: detected capacity change from 0 to 64 [ 302.306656][ T7743] netlink: 'syz.3.576': attribute type 13 has an invalid length. [ 302.400473][ T7743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.293269][ T5906] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 303.610210][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 303.617538][ T5906] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 303.630517][ T5906] usb 6-1: config 0 interface 0 has no altsetting 0 [ 303.650454][ T5906] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 303.670702][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.682990][ T5906] usb 6-1: Product: syz [ 303.687176][ T5906] usb 6-1: Manufacturer: syz [ 303.761708][ T5906] usb 6-1: SerialNumber: syz [ 303.794062][ T5906] usb 6-1: config 0 descriptor?? [ 304.054885][ T5906] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 304.936638][ T5906] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 304.947572][ T5906] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 305.016788][ T7761] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 305.081486][ T7761] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.580'. [ 305.262826][ T5906] usb 6-1: USB disconnect, device number 10 [ 305.514423][ T7767] netlink: 'syz.1.583': attribute type 4 has an invalid length. [ 305.525116][ T7767] netlink: 17 bytes leftover after parsing attributes in process `syz.1.583'. [ 305.613384][ T7770] netlink: 56 bytes leftover after parsing attributes in process `syz.3.584'. [ 306.590055][ T5826] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 306.770076][ T5826] usb 3-1: Using ep0 maxpacket: 32 [ 306.789771][ T5826] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 306.880621][ T5826] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 306.903433][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 306.945528][ T7785] loop3: detected capacity change from 0 to 64 [ 306.947124][ T5826] usb 3-1: Product: syz [ 306.977153][ T7791] fuse: Unknown parameter 'fd0x0000000000000003' [ 306.984128][ T5826] usb 3-1: Manufacturer: syz [ 306.995536][ T5826] usb 3-1: SerialNumber: syz [ 307.023468][ T5826] usb 3-1: config 0 descriptor?? [ 307.054657][ T7777] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 307.853639][ T5826] usb 3-1: USB disconnect, device number 14 [ 307.903597][ T7792] loop0: detected capacity change from 0 to 8192 [ 307.915107][ T7793] loop1: detected capacity change from 0 to 8192 [ 307.929833][ T7792] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 307.945895][ T7793] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 308.214028][ T7805] syz.0.594: attempt to access beyond end of device [ 308.214028][ T7805] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 308.664436][ T7807] syz.1.593: attempt to access beyond end of device [ 308.664436][ T7807] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 309.241981][ T7810] netlink: 'syz.5.597': attribute type 4 has an invalid length. [ 309.249858][ T7810] netlink: 17 bytes leftover after parsing attributes in process `syz.5.597'. [ 310.040174][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.102791][ T7819] loop0: detected capacity change from 0 to 128 [ 310.191194][ T7819] FAT-fs (loop0): bogus number of reserved sectors [ 310.214848][ T7819] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 310.240949][ T7821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.258308][ T7819] FAT-fs (loop0): Can't find a valid FAT filesystem [ 310.282672][ T7821] bond0: (slave rose0): Enslaving as an active interface with an up link [ 314.630146][ T7851] loop4: detected capacity change from 0 to 64 [ 315.120486][ T1202] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 315.790416][ T1202] usb 2-1: Using ep0 maxpacket: 32 [ 315.831392][ T1202] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 315.895002][ T1202] usb 2-1: config 0 has no interface number 0 [ 315.965055][ T1202] usb 2-1: config 0 interface 12 has no altsetting 0 [ 316.153432][ T7869] netlink: 'syz.2.614': attribute type 4 has an invalid length. [ 316.162441][ T7869] netlink: 17 bytes leftover after parsing attributes in process `syz.2.614'. [ 316.506062][ T1202] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 316.530066][ T1202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.562405][ T1202] usb 2-1: Product: syz [ 316.590042][ T1202] usb 2-1: Manufacturer: syz [ 316.608332][ T1202] usb 2-1: SerialNumber: syz [ 316.673063][ T1202] usb 2-1: config 0 descriptor?? [ 317.643578][ T7890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.620'. [ 317.652764][ T7890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.620'. [ 317.662458][ T7890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.620'. [ 318.475352][ T1202] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 318.533569][ T1202] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 318.588963][ T1202] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 318.645094][ T1202] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 318.740426][ T1202] usb 2-1: USB disconnect, device number 13 [ 319.120652][ T52] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 320.120459][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 320.170287][ T52] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.215918][ T52] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 320.279355][ T52] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 320.447851][ T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.650630][ T52] usb 6-1: Product: syz [ 320.656647][ T52] usb 6-1: Manufacturer: syz [ 320.661583][ T52] usb 6-1: SerialNumber: syz [ 321.649682][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.649798][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.924525][ T52] usb 6-1: config 0 descriptor?? [ 323.068894][ T5945] usb 6-1: USB disconnect, device number 11 [ 323.108192][ T7938] warning: `syz.3.632' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 325.197838][ T7950] loop0: detected capacity change from 0 to 2048 [ 325.206611][ T7956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.639'. [ 325.252601][ T7950] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 325.396132][ T7963] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.410559][ T5945] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 325.452856][ T5826] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 325.632241][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 325.642625][ T5826] usb 3-1: Using ep0 maxpacket: 32 [ 325.684662][ T5826] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 325.693213][ T5945] usb 4-1: config 0 interface 0 has no altsetting 0 [ 325.765209][ T5945] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 325.846185][ T7972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.306680][ T7972] syz.0.635 (7972) used greatest stack depth: 17640 bytes left [ 326.543923][ T5826] usb 3-1: config 0 has no interface number 0 [ 326.550193][ T5826] usb 3-1: config 0 interface 12 has no altsetting 0 [ 326.557036][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.584708][ T5826] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 326.599429][ T5945] usb 4-1: Product: syz [ 326.604951][ T5945] usb 4-1: Manufacturer: syz [ 326.609844][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.618262][ T5945] usb 4-1: SerialNumber: syz [ 326.634425][ T5826] usb 3-1: Product: syz [ 326.644445][ T5826] usb 3-1: Manufacturer: syz [ 326.660456][ T5945] usb 4-1: config 0 descriptor?? [ 326.695951][ T5826] usb 3-1: SerialNumber: syz [ 326.781907][ T5945] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 326.804247][ T5826] usb 3-1: config 0 descriptor?? [ 327.543032][ T5826] f81534 3-1:0.12: required endpoints missing [ 327.589894][ T5945] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 327.650339][ T5945] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 327.713103][ T5945] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 327.828579][ T5945] usb 4-1: USB disconnect, device number 9 [ 328.919000][ T9] usb 3-1: USB disconnect, device number 15 [ 329.058184][ T8008] loop5: detected capacity change from 0 to 2048 [ 329.085013][ T8008] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 329.165352][ T8013] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.505537][ T8020] netlink: 'syz.5.658': attribute type 1 has an invalid length. [ 329.519354][ T8020] netlink: 15998 bytes leftover after parsing attributes in process `syz.5.658'. [ 329.653876][ T8018] loop1: detected capacity change from 0 to 8192 [ 329.694210][ T8018] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 330.070120][ T8029] syz.1.657: attempt to access beyond end of device [ 330.070120][ T8029] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 332.350186][ T5975] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 332.558691][ T5975] usb 3-1: Using ep0 maxpacket: 32 [ 332.581123][ T5975] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 332.600016][ T5975] usb 3-1: config 0 has no interface number 0 [ 332.610506][ T5975] usb 3-1: config 0 interface 12 has no altsetting 0 [ 332.641724][ T5975] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 332.670110][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.719500][ T5975] usb 3-1: Product: syz [ 332.743172][ T5975] usb 3-1: Manufacturer: syz [ 332.758350][ T5975] usb 3-1: SerialNumber: syz [ 332.801606][ T5975] usb 3-1: config 0 descriptor?? [ 332.822733][ T5975] f81534 3-1:0.12: required endpoints missing [ 332.934064][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 333.028453][ T8055] loop5: detected capacity change from 0 to 8192 [ 333.110306][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 333.176322][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 333.902355][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 333.911580][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.919597][ T9] usb 2-1: Product: syz [ 333.936832][ T9] usb 2-1: Manufacturer: syz [ 333.954487][ T8055] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 333.960034][ T9] usb 2-1: SerialNumber: syz [ 334.048689][ T9] usb 2-1: config 0 descriptor?? [ 334.273850][ T8065] syz.5.670: attempt to access beyond end of device [ 334.273850][ T8065] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 334.570686][ T9] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 334.676799][ T9] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 334.710227][ T9] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 334.720716][ T1202] usb 3-1: USB disconnect, device number 16 [ 335.600977][ T9] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 335.721362][ T9] usb 2-1: USB disconnect, device number 14 [ 335.799685][ T8074] netlink: 'syz.2.674': attribute type 1 has an invalid length. [ 335.886173][ T8074] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.674'. [ 336.115648][ T8079] netlink: 'syz.1.676': attribute type 13 has an invalid length. [ 336.249255][ T8079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.281713][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 337.280870][ T8092] loop0: detected capacity change from 0 to 40427 [ 337.306117][ T8092] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 337.312830][ T8092] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 337.520517][ T8092] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 337.527609][ T8092] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 337.543880][ T8092] syz.0.680: attempt to access beyond end of device [ 337.543880][ T8092] loop0: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 337.561133][ T8092] syz.0.680: attempt to access beyond end of device [ 337.561133][ T8092] loop0: rw=0, sector=45120, nr_sectors = 8 limit=40427 [ 337.919643][ T5838] syz-executor: attempt to access beyond end of device [ 337.919643][ T5838] loop0: rw=2049, sector=45192, nr_sectors = 8 limit=40427 [ 337.982410][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 337.982449][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 337.982464][ T5838] Call Trace: [ 337.982474][ T5838] [ 337.982484][ T5838] dump_stack_lvl+0x241/0x360 [ 337.982531][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.982567][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.982596][ T5838] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 337.982635][ T5838] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 337.982674][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.982702][ T5838] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 337.982741][ T5838] f2fs_handle_critical_error+0x392/0x5a0 [ 337.982785][ T5838] f2fs_write_end_io+0x563/0x790 [ 337.982831][ T5838] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 337.982873][ T5838] ? bio_endio+0x7e4/0x890 [ 337.982900][ T5838] ? bio_endio+0x82a/0x890 [ 337.982926][ T5838] __submit_merged_bio+0x2a9/0x710 [ 337.982952][ T5838] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 337.982989][ T5838] f2fs_submit_merged_write_cond+0x29f/0x380 [ 337.983033][ T5838] f2fs_write_data_pages+0x2f99/0x38d0 [ 337.983113][ T5838] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 337.983201][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.983228][ T5838] ? __mod_memcg_lruvec_state+0x301/0x4f0 [ 337.983278][ T5838] ? __pfx___mod_memcg_lruvec_state+0x10/0x10 [ 337.983322][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.983368][ T5838] ? __mod_zone_page_state+0xda/0x150 [ 337.983396][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.983424][ T5838] ? folios_put_refs+0x711/0x800 [ 337.983469][ T5838] ? lockdep_hardirqs_on+0x9d/0x150 [ 337.983494][ T5838] ? __pfx_folios_put_refs+0x10/0x10 [ 337.983527][ T5838] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 337.983563][ T5838] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 337.983601][ T5838] do_writepages+0x366/0x890 [ 337.983637][ T5838] ? __pfx_do_writepages+0x10/0x10 [ 337.983659][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.983687][ T5838] ? __lock_acquire+0xad5/0xd80 [ 337.983718][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.983745][ T5838] ? do_raw_spin_lock+0x151/0x370 [ 337.983794][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.983821][ T5838] ? do_raw_spin_unlock+0x13c/0x8b0 [ 337.983868][ T5838] filemap_fdatawrite+0x1f2/0x2a0 [ 337.983899][ T5838] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 337.983924][ T5838] ? mlock_drain_local+0x79/0x490 [ 337.984001][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.984029][ T5838] ? do_raw_spin_unlock+0x13c/0x8b0 [ 337.984075][ T5838] f2fs_sync_dirty_inodes+0x34f/0x860 [ 337.984131][ T5838] f2fs_write_checkpoint+0x857/0x1da0 [ 337.984193][ T5838] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 337.984290][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.984318][ T5838] ? kill_f2fs_super+0x290/0x6d0 [ 337.984363][ T5838] kill_f2fs_super+0x2b8/0x6d0 [ 337.984408][ T5838] ? __pfx_kill_f2fs_super+0x10/0x10 [ 337.984455][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.984483][ T5838] ? shrinker_free+0x2ca/0x3d0 [ 337.984518][ T5838] deactivate_locked_super+0xc6/0x130 [ 337.984549][ T5838] cleanup_mnt+0x422/0x4c0 [ 337.984576][ T5838] ? lockdep_hardirqs_on+0x9d/0x150 [ 337.984603][ T5838] task_work_run+0x253/0x310 [ 337.984649][ T5838] ? __pfx_task_work_run+0x10/0x10 [ 337.984693][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.984726][ T5838] syscall_exit_to_user_mode+0x13f/0x340 [ 337.984756][ T5838] do_syscall_64+0x100/0x230 [ 337.984788][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.984812][ T5838] RIP: 0033:0x7fe20d78e497 [ 337.984833][ T5838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 337.984855][ T5838] RSP: 002b:00007ffc9a263208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 337.984880][ T5838] RAX: 0000000000000000 RBX: 00007fe20d80e08c RCX: 00007fe20d78e497 [ 337.984897][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9a2632c0 [ 337.984913][ T5838] RBP: 00007ffc9a2632c0 R08: 0000000000000000 R09: 0000000000000000 [ 337.984929][ T5838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9a264350 [ 337.984946][ T5838] R13: 00007fe20d80e08c R14: 00000000000526fe R15: 00007ffc9a264390 [ 337.984984][ T5838] [ 337.998035][ T5838] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 338.630078][ T1202] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 338.930492][ T1202] usb 5-1: Using ep0 maxpacket: 8 [ 338.946654][ T1202] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 338.946751][ T1202] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.525842][ T1202] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 339.525881][ T1202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.525907][ T1202] usb 5-1: Product: syz [ 339.525926][ T1202] usb 5-1: Manufacturer: syz [ 339.525945][ T1202] usb 5-1: SerialNumber: syz [ 339.535950][ T1202] usb 5-1: config 0 descriptor?? [ 339.544470][ T1202] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 339.567050][ T8109] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 339.796857][ T1202] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 339.799288][ T1202] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 339.954391][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 340.014650][ T1202] usb 5-1: USB disconnect, device number 17 [ 340.106130][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 340.110609][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 340.110640][ T9] usb 4-1: config 0 has no interface number 0 [ 340.110688][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 340.137222][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 340.137258][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.137284][ T9] usb 4-1: Product: syz [ 340.137303][ T9] usb 4-1: Manufacturer: syz [ 340.137322][ T9] usb 4-1: SerialNumber: syz [ 340.140452][ T9] usb 4-1: config 0 descriptor?? [ 340.144257][ T9] f81534 4-1:0.12: required endpoints missing [ 340.970067][ T5826] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 341.179111][ T8106] tty tty1: ldisc open failed (-12), clearing slot 0 [ 341.400231][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 341.431067][ T5826] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.470194][ T5826] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 341.479277][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.686084][ T5826] usb 3-1: Product: syz [ 341.709043][ T5826] usb 3-1: Manufacturer: syz [ 342.486050][ T5826] usb 3-1: SerialNumber: syz [ 342.623377][ T5826] usb 3-1: config 0 descriptor?? [ 342.694971][ T5826] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 342.859705][ T5826] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 342.874486][ T1202] usb 4-1: USB disconnect, device number 10 [ 342.920286][ T5826] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 343.018671][ T5826] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 343.079360][ T5826] usb 3-1: USB disconnect, device number 17 [ 343.158519][ T8146] loop3: detected capacity change from 0 to 2048 [ 343.206411][ T8146] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 343.338180][ T8154] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 343.780449][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 343.933900][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.995849][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 344.028046][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 344.058369][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.133317][ T9] usb 6-1: config 0 descriptor?? [ 344.163003][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 345.378252][ T8175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.701'. [ 345.387453][ T8175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.701'. [ 345.397004][ T8175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.701'. [ 346.260295][ T52] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 346.440277][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 346.453396][ T52] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 346.475407][ T52] usb 5-1: config 0 has no interface number 0 [ 346.494174][ T52] usb 5-1: config 0 interface 12 has no altsetting 0 [ 346.513699][ T52] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 346.532374][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.550184][ T5826] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 346.569782][ T52] usb 5-1: Product: syz [ 346.578424][ T52] usb 5-1: Manufacturer: syz [ 346.588360][ T52] usb 5-1: SerialNumber: syz [ 346.598431][ T52] usb 5-1: config 0 descriptor?? [ 346.735820][ T8186] netlink: 'syz.2.705': attribute type 8 has an invalid length. [ 346.752613][ T5826] usb 3-1: unable to get BOS descriptor or descriptor too short [ 346.774515][ T5826] usb 3-1: no configurations [ 346.779238][ T5826] usb 3-1: can't read configurations, error -22 [ 346.893548][ T8194] syz.1.708: attempt to access beyond end of device [ 346.893548][ T8194] loop1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 346.910101][ T8194] syz.1.708: attempt to access beyond end of device [ 346.910101][ T8194] loop1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 346.923811][ T8194] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 346.937221][ T8194] syz.1.708: attempt to access beyond end of device [ 346.937221][ T8194] loop1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 346.951134][ T8194] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 346.960869][ T8194] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 346.970107][ T8194] UDF-fs: Scanning with blocksize 512 failed [ 346.992112][ T8194] syz.1.708: attempt to access beyond end of device [ 346.992112][ T8194] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 347.008286][ T8194] syz.1.708: attempt to access beyond end of device [ 347.008286][ T8194] loop1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 347.022261][ T8194] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 347.034361][ T8194] syz.1.708: attempt to access beyond end of device [ 347.034361][ T8194] loop1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 347.047849][ T8194] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 347.057620][ T8194] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 347.065407][ T8194] UDF-fs: Scanning with blocksize 1024 failed [ 347.080178][ T8194] syz.1.708: attempt to access beyond end of device [ 347.080178][ T8194] loop1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 347.095284][ T8194] syz.1.708: attempt to access beyond end of device [ 347.095284][ T8194] loop1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 347.108640][ T8194] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 347.120052][ T8194] syz.1.708: attempt to access beyond end of device [ 347.120052][ T8194] loop1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 347.134227][ T8194] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 347.143937][ T8194] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 347.151769][ T8194] UDF-fs: Scanning with blocksize 2048 failed [ 347.163861][ T8194] syz.1.708: attempt to access beyond end of device [ 347.163861][ T8194] loop1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 347.181148][ T8194] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 347.193140][ T8194] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 347.202901][ T8194] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 347.213073][ T8194] UDF-fs: Scanning with blocksize 4096 failed [ 347.219895][ T8194] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 347.849494][ T968] usb 6-1: USB disconnect, device number 12 [ 347.964432][ T8196] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 349.155541][ T52] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 349.173410][ T52] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 349.916944][ T52] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 349.924912][ T52] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 349.950049][ T52] usb 5-1: USB disconnect, device number 18 [ 351.243144][ T8222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.718'. [ 351.252296][ T8222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.718'. [ 351.261662][ T8222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.718'. [ 352.570119][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 353.597347][ T5826] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 353.664008][ T8236] netlink: 32 bytes leftover after parsing attributes in process `syz.4.724'. [ 353.688077][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 353.713286][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 353.750793][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 353.751130][ T968] IPVS: starting estimator thread 0... [ 353.769045][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 353.789487][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 353.818692][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.870273][ T5826] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 353.880231][ T9] usb 3-1: Product: syz [ 353.890673][ T9] usb 3-1: Manufacturer: syz [ 353.895292][ T9] usb 3-1: SerialNumber: syz [ 353.905706][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.913935][ T8244] IPVS: using max 32 ests per chain, 76800 per kthread [ 353.956374][ T9] usb 3-1: config 0 descriptor?? [ 353.967557][ T5826] usb 2-1: config 0 descriptor?? [ 353.993959][ T5826] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 354.011759][ T9] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 354.031996][ T8248] loop0: detected capacity change from 0 to 2048 [ 354.084954][ T8248] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 354.128070][ T8250] loop4: detected capacity change from 0 to 2048 [ 354.156226][ T8250] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 354.185916][ T8251] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 354.234471][ T9] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 354.249292][ T8246] loop5: detected capacity change from 0 to 8192 [ 354.258330][ T9] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 354.292909][ T8252] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 354.329005][ T8246] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 354.710273][ T8257] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.929179][ T1202] usb 2-1: USB disconnect, device number 15 [ 357.238325][ T5906] usb 3-1: USB disconnect, device number 20 [ 359.291869][ T8284] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 359.298430][ T8284] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 359.531617][ T8289] netlink: 'syz.5.736': attribute type 4 has an invalid length. [ 359.543049][ T8284] vhci_hcd vhci_hcd.0: Device attached [ 359.630040][ T8289] netlink: 17 bytes leftover after parsing attributes in process `syz.5.736'. [ 359.661815][ T8285] vhci_hcd: connection closed [ 359.663110][ T1311] vhci_hcd: stop threads [ 359.686175][ T1311] vhci_hcd: release socket [ 359.707399][ T1311] vhci_hcd: disconnect device [ 361.485466][ T8312] loop1: detected capacity change from 0 to 1024 [ 361.530536][ T5906] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 361.637890][ T8314] netlink: 'syz.4.741': attribute type 13 has an invalid length. [ 361.898771][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 361.946068][ T8314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.966080][ T5906] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 362.004243][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.091671][ T5906] usb 6-1: config 0 descriptor?? [ 362.139532][ T5906] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 362.198804][ T13] hfsplus: b-tree write err: -5, ino 4 [ 362.292257][ T8318] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 362.298824][ T8318] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 362.312995][ T8318] vhci_hcd vhci_hcd.0: Device attached [ 362.576659][ T52] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 362.818495][ T8320] vhci_hcd: connection reset by peer [ 362.928122][ T1156] vhci_hcd: stop threads [ 362.956731][ T1156] vhci_hcd: release socket [ 362.966824][ T1156] vhci_hcd: disconnect device [ 363.777972][ T8335] loop0: detected capacity change from 0 to 8 [ 364.685919][ T8337] netlink: 'syz.2.750': attribute type 4 has an invalid length. [ 364.693768][ T8337] netlink: 17 bytes leftover after parsing attributes in process `syz.2.750'. [ 364.740748][ T5826] usb 6-1: USB disconnect, device number 13 [ 364.885051][ T8343] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 364.891615][ T8343] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 365.003201][ T8352] bio_check_eod: 3 callbacks suppressed [ 365.003285][ T8352] syz.0.752: attempt to access beyond end of device [ 365.003285][ T8352] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 365.023257][ T8343] vhci_hcd vhci_hcd.0: Device attached [ 366.234664][ T8345] vhci_hcd: connection closed [ 366.236276][ T5965] vhci_hcd: stop threads [ 366.247570][ T1202] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 366.278594][ T8356] netlink: 'syz.5.755': attribute type 4 has an invalid length. [ 366.286895][ T8356] netlink: 17 bytes leftover after parsing attributes in process `syz.5.755'. [ 366.810302][ T5965] vhci_hcd: release socket [ 366.837087][ T5965] vhci_hcd: disconnect device [ 367.360168][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 367.518161][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 367.645823][ T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 367.667895][ T9] usb 5-1: config 0 has no interface number 0 [ 368.052107][ T52] vhci_hcd: vhci_device speed not set [ 368.061715][ T9] usb 5-1: config 0 interface 12 has no altsetting 0 [ 368.440625][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 368.452688][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.473884][ T9] usb 5-1: Product: syz [ 368.478513][ T9] usb 5-1: Manufacturer: syz [ 368.483797][ T9] usb 5-1: SerialNumber: syz [ 368.510688][ T9] usb 5-1: config 0 descriptor?? [ 368.589402][ T8373] loop2: detected capacity change from 0 to 2048 [ 368.626874][ T8373] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 368.801978][ T8374] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 368.850932][ T8376] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 368.857478][ T8376] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 368.886274][ T8376] vhci_hcd vhci_hcd.0: Device attached [ 369.140973][ T8377] vhci_hcd: connection reset by peer [ 369.158099][ T36] vhci_hcd: stop threads [ 369.168194][ T36] vhci_hcd: release socket [ 369.240740][ T8382] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.917826][ T36] vhci_hcd: disconnect device [ 369.922696][ T9] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 370.092532][ T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 370.099889][ T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 370.113356][ T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 370.415538][ T8389] netlink: 36 bytes leftover after parsing attributes in process `syz.5.763'. [ 370.425926][ T8389] netlink: 36 bytes leftover after parsing attributes in process `syz.5.763'. [ 370.436396][ T8389] netlink: 36 bytes leftover after parsing attributes in process `syz.5.763'. [ 371.068445][ T9] usb 5-1: USB disconnect, device number 19 [ 371.283965][ T8399] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 371.290524][ T8399] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 371.321545][ T8399] vhci_hcd vhci_hcd.0: Device attached [ 371.462185][ T8394] netlink: 'syz.0.766': attribute type 4 has an invalid length. [ 371.469835][ T8394] netlink: 17 bytes leftover after parsing attributes in process `syz.0.766'. [ 371.586987][ T8408] loop2: detected capacity change from 0 to 8 [ 372.313998][ T8400] vhci_hcd: connection reset by peer [ 372.326455][ T12] vhci_hcd: stop threads [ 372.352878][ T12] vhci_hcd: release socket [ 372.382906][ T12] vhci_hcd: disconnect device [ 372.450097][ T1202] vhci_hcd: vhci_device speed not set [ 373.670150][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 373.679134][ T8422] syz.4.773: attempt to access beyond end of device [ 373.679134][ T8422] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 373.831741][ T8430] syz.2.776: attempt to access beyond end of device [ 373.831741][ T8430] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 373.847244][ T8430] syz.2.776: attempt to access beyond end of device [ 373.847244][ T8430] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 373.860719][ T8430] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 373.872957][ T8430] syz.2.776: attempt to access beyond end of device [ 373.872957][ T8430] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 373.886028][ T8430] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 373.895708][ T8430] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 373.904328][ T8430] UDF-fs: Scanning with blocksize 512 failed [ 373.919164][ T8430] syz.2.776: attempt to access beyond end of device [ 373.919164][ T8430] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 373.934587][ T8430] syz.2.776: attempt to access beyond end of device [ 373.934587][ T8430] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 373.948127][ T8430] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 373.959663][ T8430] syz.2.776: attempt to access beyond end of device [ 373.959663][ T8430] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 373.973312][ T8430] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 373.982961][ T8430] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 373.990715][ T8430] UDF-fs: Scanning with blocksize 1024 failed [ 374.003331][ T8430] syz.2.776: attempt to access beyond end of device [ 374.003331][ T8430] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 374.018762][ T8430] syz.2.776: attempt to access beyond end of device [ 374.018762][ T8430] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 374.032404][ T8430] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 374.042730][ T8430] syz.2.776: attempt to access beyond end of device [ 374.042730][ T8430] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 374.056350][ T8430] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 374.066002][ T8430] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 374.073928][ T8430] UDF-fs: Scanning with blocksize 2048 failed [ 374.085978][ T8430] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 374.097085][ T8430] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 374.107631][ T8430] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 374.116072][ T8430] UDF-fs: Scanning with blocksize 4096 failed [ 374.122261][ T8430] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 374.782672][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.794305][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 374.825322][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.589251][ T9] usb 6-1: config 0 descriptor?? [ 376.103164][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 376.169127][ T9] pwc: send_video_command error -71 [ 376.195555][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 376.215965][ T9] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 376.249703][ T8436] loop2: detected capacity change from 0 to 2048 [ 376.289541][ T9] usb 6-1: USB disconnect, device number 14 [ 376.301864][ T8436] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 376.455840][ T8446] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.694194][ T8439] loop3: detected capacity change from 0 to 8192 [ 377.650155][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 377.683285][ T8439] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 377.793029][ T8451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 377.850440][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 378.380106][ T9] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 378.421665][ T9] usb 6-1: config 0 has no interface number 0 [ 378.427814][ T9] usb 6-1: config 0 interface 12 has no altsetting 0 [ 378.515313][ T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 378.608075][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.628183][ T8458] loop0: detected capacity change from 0 to 2048 [ 378.659096][ T9] usb 6-1: Product: syz [ 378.703174][ T9] usb 6-1: Manufacturer: syz [ 378.707809][ T9] usb 6-1: SerialNumber: syz [ 378.853795][ T8458] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 378.888380][ T9] usb 6-1: config 0 descriptor?? [ 378.929879][ T8462] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 380.997410][ T9] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 381.031455][ T9] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 381.038795][ T9] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 381.187644][ T9] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 381.259788][ T9] usb 6-1: USB disconnect, device number 15 [ 382.599569][ T8481] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 383.058684][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.058750][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.323564][ T8491] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 383.330096][ T8491] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 383.586835][ T8491] vhci_hcd vhci_hcd.0: Device attached [ 383.596182][ T8496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.795'. [ 383.605100][ T8496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.795'. [ 383.614068][ T8496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.795'. [ 383.647493][ T8492] vhci_hcd: connection closed [ 383.647865][ T8225] vhci_hcd: stop threads [ 383.665018][ T8225] vhci_hcd: release socket [ 383.675571][ T8225] vhci_hcd: disconnect device [ 383.718471][ T8496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.795'. [ 383.727566][ T8496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.795'. [ 383.738358][ T8496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.795'. [ 385.378732][ T8514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.799'. [ 385.387843][ T8514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.799'. [ 385.397808][ T8514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.799'. [ 386.515557][ T8513] loop2: detected capacity change from 0 to 2048 [ 386.529921][ T1202] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 386.583086][ T8513] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 386.637461][ T8522] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 386.885064][ T1202] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 387.000208][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 387.380592][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 387.645592][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 387.658147][ T9] usb 4-1: config 0 has no interface number 0 [ 387.665242][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 387.677075][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 388.294925][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.303018][ T9] usb 4-1: Product: syz [ 388.307265][ T9] usb 4-1: Manufacturer: syz [ 388.322036][ T9] usb 4-1: SerialNumber: syz [ 388.351797][ T9] usb 4-1: config 0 descriptor?? [ 388.699316][ T8533] loop5: detected capacity change from 0 to 47 [ 390.134286][ T9] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 390.162314][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 390.169649][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 390.249290][ T9] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 390.307153][ T9] usb 4-1: USB disconnect, device number 11 [ 390.865163][ T8549] loop5: detected capacity change from 0 to 8 [ 392.811414][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.838956][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 392.853913][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 392.862992][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 392.870816][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 394.203993][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.970665][ T5858] Bluetooth: hci4: command tx timeout [ 395.453018][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.647969][ T8565] loop0: detected capacity change from 0 to 32768 [ 395.698143][ T8565] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.816 (8565) [ 395.742975][ T8580] loop3: detected capacity change from 0 to 8192 [ 395.754748][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.778513][ T8580] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 396.604561][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.060162][ T5858] Bluetooth: hci4: command tx timeout [ 397.493202][ T8608] loop1: detected capacity change from 0 to 8192 [ 397.569752][ T36] bridge_slave_1: left promiscuous mode [ 397.581331][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.598072][ T8608] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 397.736504][ T8616] bio_check_eod: 3 callbacks suppressed [ 397.736551][ T8616] syz.1.826: attempt to access beyond end of device [ 397.736551][ T8616] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 398.236815][ T36] bridge_slave_0: left allmulticast mode [ 398.244192][ T36] bridge_slave_0: left promiscuous mode [ 398.277816][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.389827][ T5858] Bluetooth: hci4: command tx timeout [ 399.479606][ T8623] qrtr: Invalid version 0 [ 400.352244][ T8626] loop0: detected capacity change from 0 to 2048 [ 400.396409][ T8626] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 400.514627][ T8632] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.023900][ T8635] loop1: detected capacity change from 0 to 8192 [ 401.114438][ T8635] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 401.287900][ T8636] syz.1.832: attempt to access beyond end of device [ 401.287900][ T8636] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 401.455874][ T5858] Bluetooth: hci4: command tx timeout [ 401.947345][ T8633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.081134][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.158939][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.346557][ T36] bond0 (unregistering): Released all slaves [ 402.822495][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz.5.835'. [ 402.836152][ T8567] chnl_net:caif_netlink_parms(): no params data found [ 402.843440][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz.5.835'. [ 402.987295][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz.5.835'. [ 403.198947][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz.5.835'. [ 403.236195][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz.5.835'. [ 403.301133][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz.5.835'. [ 404.253458][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 404.570149][ T5826] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 404.720133][ T5826] usb 6-1: Using ep0 maxpacket: 32 [ 404.747694][ T5826] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 404.859714][ T5826] usb 6-1: config 0 has no interface number 0 [ 404.871850][ T36] hsr_slave_0: left promiscuous mode [ 404.932840][ T36] hsr_slave_1: left promiscuous mode [ 404.944073][ T5826] usb 6-1: config 0 interface 12 has no altsetting 0 [ 404.973243][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.005552][ T5826] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 405.046158][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.069422][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.317912][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.341028][ T5826] usb 6-1: Product: syz [ 406.110046][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.117263][ T5826] usb 6-1: Manufacturer: syz [ 406.122372][ T5826] usb 6-1: SerialNumber: syz [ 406.146073][ T5826] usb 6-1: config 0 descriptor?? [ 406.336297][ T36] veth1_macvtap: left promiscuous mode [ 406.344830][ T36] veth0_macvtap: left promiscuous mode [ 406.354926][ T36] veth1_vlan: left promiscuous mode [ 406.363966][ T36] veth0_vlan: left promiscuous mode [ 407.914889][ T5826] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 408.092074][ T5826] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 408.173160][ T8700] loop0: detected capacity change from 0 to 8 [ 408.835855][ T5826] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 408.843600][ T5826] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 408.971435][ T5826] usb 6-1: USB disconnect, device number 16 [ 409.158173][ T8698] loop1: detected capacity change from 0 to 8192 [ 409.230248][ T8698] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 409.426172][ T8707] syz.1.845: attempt to access beyond end of device [ 409.426172][ T8707] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 410.245627][ T8713] loop2: detected capacity change from 0 to 2048 [ 410.260997][ T8713] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 410.301046][ T8714] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 410.545317][ T36] team0 (unregistering): Port device team_slave_1 removed [ 410.607776][ T36] team0 (unregistering): Port device team_slave_0 removed [ 410.707129][ T8716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 411.800950][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.808648][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.826491][ T8567] bridge_slave_0: entered allmulticast mode [ 411.848827][ T8567] bridge_slave_0: entered promiscuous mode [ 411.960943][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.068302][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.106334][ T8567] bridge_slave_1: entered allmulticast mode [ 412.183084][ T8567] bridge_slave_1: entered promiscuous mode [ 413.848978][ T8567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.913288][ T8732] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 413.982915][ T8567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.985638][ T8741] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 414.069020][ T5945] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 414.154996][ T8567] team0: Port device team_slave_0 added [ 414.183005][ T8567] team0: Port device team_slave_1 added [ 414.242421][ T5945] usb 6-1: Using ep0 maxpacket: 32 [ 414.261863][ T5945] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 414.297081][ T5945] usb 6-1: config 0 has no interface number 0 [ 414.320120][ T5945] usb 6-1: config 0 interface 12 has no altsetting 0 [ 414.324337][ T8750] loop3: detected capacity change from 0 to 256 [ 414.351597][ T5945] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 414.356186][ T8750] exfat: Deprecated parameter 'utf8' [ 414.370146][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.377189][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.392458][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.426586][ T8750] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 414.429060][ T5945] usb 6-1: Product: syz [ 414.460024][ T5945] usb 6-1: Manufacturer: syz [ 414.464720][ T5945] usb 6-1: SerialNumber: syz [ 414.481652][ T8567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.505589][ T5945] usb 6-1: config 0 descriptor?? [ 414.514826][ T8567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.525256][ T8567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.599993][ T8567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.623619][ T8757] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 414.825810][ T8567] hsr_slave_0: entered promiscuous mode [ 414.868077][ T8567] hsr_slave_1: entered promiscuous mode [ 414.882755][ T8567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.921389][ T8567] Cannot create hsr debugfs directory [ 415.722672][ T8567] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 415.768316][ T8567] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 415.836991][ T8567] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 415.868103][ T8567] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 415.950427][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 416.031769][ T8782] loop1: detected capacity change from 0 to 4096 [ 416.149760][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 416.166790][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 416.185479][ T8782] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 416.195742][ T9] usb 3-1: config 0 has no interface number 0 [ 416.205723][ T8782] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 416.212762][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 416.223345][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 416.228047][ T8567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.233874][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.251858][ T9] usb 3-1: Product: syz [ 416.256063][ T9] usb 3-1: Manufacturer: syz [ 416.261360][ T9] usb 3-1: SerialNumber: syz [ 416.290344][ T9] usb 3-1: config 0 descriptor?? [ 416.301897][ T8782] ntfs3(loop1): ino=1e, "file1" attr_set_size [ 416.331951][ T8567] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.347624][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.354849][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.388858][ T5945] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 416.419865][ T5945] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 416.437055][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.444352][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.452246][ T5945] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 416.470156][ T5945] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 416.553579][ T5945] usb 6-1: USB disconnect, device number 17 [ 416.763215][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 416.772787][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 416.782498][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 416.794523][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 416.802897][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 416.940116][ T5898] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 417.084462][ T8802] loop0: detected capacity change from 0 to 16 [ 417.113462][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.160127][ T5898] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 417.162356][ T8802] erofs (device loop0): mounted with root inode @ nid 36. [ 417.203558][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.523203][ T5898] usb 2-1: config 0 descriptor?? [ 417.562500][ T5898] pwc: Askey VC010 type 2 USB webcam detected. [ 418.455454][ T5898] pwc: recv_control_msg error -32 req 02 val 2b00 [ 418.478021][ T5898] pwc: recv_control_msg error -32 req 02 val 2700 [ 418.488971][ T9] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 418.494383][ T8794] chnl_net:caif_netlink_parms(): no params data found [ 418.513521][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 418.540320][ T5898] pwc: recv_control_msg error -32 req 02 val 2c00 [ 418.564419][ T5898] pwc: recv_control_msg error -32 req 04 val 1000 [ 418.580615][ T5898] pwc: recv_control_msg error -32 req 04 val 1300 [ 418.597455][ T5898] pwc: recv_control_msg error -32 req 04 val 1400 [ 418.607872][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 418.626710][ T5898] pwc: recv_control_msg error -32 req 02 val 2000 [ 418.639082][ T5898] pwc: recv_control_msg error -32 req 02 val 2100 [ 418.657405][ T5898] pwc: recv_control_msg error -32 req 04 val 1500 [ 418.672380][ T5898] pwc: recv_control_msg error -32 req 02 val 2500 [ 418.685819][ T5898] pwc: recv_control_msg error -32 req 02 val 2400 [ 418.702369][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 418.808977][ T9] usb 3-1: USB disconnect, device number 21 [ 418.890447][ T5858] Bluetooth: hci5: command tx timeout [ 418.911990][ T5898] pwc: recv_control_msg error -71 req 02 val 2900 [ 418.919661][ T5898] pwc: recv_control_msg error -71 req 02 val 2800 [ 418.940091][ T5898] pwc: recv_control_msg error -71 req 04 val 1100 [ 418.965058][ T5898] pwc: recv_control_msg error -71 req 04 val 1200 [ 418.971735][ T8567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.985720][ T5898] pwc: Registered as video103. [ 419.030442][ T5898] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 419.080403][ T5898] usb 2-1: USB disconnect, device number 16 [ 420.086689][ T8794] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.064352][ T8794] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.071726][ T8794] bridge_slave_0: entered allmulticast mode [ 421.079701][ T8794] bridge_slave_0: entered promiscuous mode [ 421.086026][ T5858] Bluetooth: hci5: command tx timeout [ 421.370265][ T8794] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.380182][ T8794] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.387402][ T8794] bridge_slave_1: entered allmulticast mode [ 421.412060][ T8794] bridge_slave_1: entered promiscuous mode [ 421.422835][ T8865] loop5: detected capacity change from 0 to 16 [ 421.461376][ T8865] erofs (device loop5): mounted with root inode @ nid 36. [ 421.547680][ T1202] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 421.721717][ T1202] usb 3-1: Using ep0 maxpacket: 32 [ 421.794756][ T1202] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 421.795512][ T8794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.992969][ T8794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.687845][ T1202] usb 3-1: config 0 has no interface number 0 [ 422.722313][ T1202] usb 3-1: config 0 interface 12 has no altsetting 0 [ 422.747071][ T1202] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 422.767302][ T1202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.775852][ T1202] usb 3-1: Product: syz [ 422.780311][ T1202] usb 3-1: Manufacturer: syz [ 422.784917][ T1202] usb 3-1: SerialNumber: syz [ 422.820769][ T1202] usb 3-1: config 0 descriptor?? [ 423.142944][ T5858] Bluetooth: hci5: command tx timeout [ 423.206240][ T8794] team0: Port device team_slave_0 added [ 423.214869][ T8879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.890'. [ 423.224026][ T8879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.890'. [ 423.233203][ T8879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.890'. [ 423.258133][ T8794] team0: Port device team_slave_1 added [ 423.308061][ T8879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.890'. [ 423.317006][ T8879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.890'. [ 423.329519][ T8879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.890'. [ 423.454372][ T8794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.472023][ T8794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.499817][ T8879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.890'. [ 423.504813][ T8794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.510277][ T8879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.890'. [ 423.528166][ T8879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.890'. [ 423.586329][ T8567] veth0_vlan: entered promiscuous mode [ 423.597206][ T8794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.605958][ T8794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.637228][ T8794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.716988][ T8567] veth1_vlan: entered promiscuous mode [ 423.937405][ T8794] hsr_slave_0: entered promiscuous mode [ 423.949329][ T8794] hsr_slave_1: entered promiscuous mode [ 423.960520][ T8794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.968978][ T8794] Cannot create hsr debugfs directory [ 424.010879][ T1202] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 424.039141][ T1202] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 424.069007][ T1202] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 424.106006][ T1202] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 424.141458][ T1202] usb 3-1: USB disconnect, device number 22 [ 425.220792][ T5858] Bluetooth: hci5: command tx timeout [ 425.544145][ T8567] veth0_macvtap: entered promiscuous mode [ 425.606095][ T8567] veth1_macvtap: entered promiscuous mode [ 425.881456][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.938761][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.973673][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 426.000427][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.040096][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.050316][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.061864][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.071798][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.082313][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.101171][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.744692][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.756337][ T8567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.026175][ T8930] loop2: detected capacity change from 0 to 16 [ 427.079442][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.112051][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.129655][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.140416][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.162785][ T8930] erofs (device loop2): mounted with root inode @ nid 36. [ 427.234264][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.326487][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.354958][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.600563][ T5898] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 428.036327][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.046252][ T8567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.057340][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 428.063695][ T8567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.101813][ T5898] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 428.168384][ T5898] usb 2-1: config 0 has no interface number 0 [ 428.207273][ T8567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.226841][ T5898] usb 2-1: config 0 interface 12 has no altsetting 0 [ 428.307646][ T5898] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 428.327098][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.341031][ T8567] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.347345][ T5898] usb 2-1: Product: syz [ 428.374786][ T8567] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.383561][ T5898] usb 2-1: Manufacturer: syz [ 428.383587][ T5898] usb 2-1: SerialNumber: syz [ 428.391428][ T5898] usb 2-1: config 0 descriptor?? [ 428.426710][ T8567] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.435508][ T8567] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.519852][ T8941] loop5: detected capacity change from 0 to 4096 [ 428.705616][ T8794] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 428.803407][ T8794] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 428.825991][ T8941] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 428.834014][ T8794] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 428.848801][ T8941] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 429.405166][ T8794] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 429.683686][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.761668][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.919269][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.940783][ T1202] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 429.966196][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.044746][ T5898] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 430.067776][ T8794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.081120][ T5898] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 430.088438][ T5898] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 430.121070][ T1202] usb 6-1: Using ep0 maxpacket: 32 [ 430.131265][ T5898] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 430.144643][ T8794] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.157121][ T1202] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 430.187799][ T1202] usb 6-1: config 0 has no interface number 0 [ 430.194833][ T5898] usb 2-1: USB disconnect, device number 17 [ 430.202714][ T1202] usb 6-1: config 0 interface 12 has no altsetting 0 [ 430.240387][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.247406][ T1202] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 430.247439][ T1202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.247466][ T1202] usb 6-1: Product: syz [ 430.256602][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.303801][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.311007][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.348461][ T1202] usb 6-1: Manufacturer: syz [ 430.388035][ T1202] usb 6-1: SerialNumber: syz [ 430.417990][ T1202] usb 6-1: config 0 descriptor?? [ 430.468934][ T8794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.524050][ T8964] loop6: detected capacity change from 0 to 128 [ 430.600305][ T8964] FAT-fs (loop6): bogus number of reserved sectors [ 430.606882][ T8964] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 430.700166][ T8964] FAT-fs (loop6): Can't find a valid FAT filesystem [ 431.419683][ T8794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.247558][ T1202] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 432.270406][ T1202] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 432.277742][ T1202] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 432.420282][ T1202] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 432.510914][ T1202] usb 6-1: USB disconnect, device number 18 [ 432.891938][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'. [ 434.662645][ T9025] loop5: detected capacity change from 0 to 2048 [ 435.297689][ T9025] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.688307][ T8794] veth0_vlan: entered promiscuous mode [ 435.759687][ T8794] veth1_vlan: entered promiscuous mode [ 437.313732][ T8794] veth0_macvtap: entered promiscuous mode [ 437.584813][ T8794] veth1_macvtap: entered promiscuous mode [ 437.726734][ T8794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.045370][ T8794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.057397][ T8794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.068000][ T8794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.080051][ T8794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.965106][ T8794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.039487][ T8794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.050729][ T8794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.088258][ T8794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.134902][ T8794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.177777][ T8794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.198509][ T8794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.221959][ T8794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.292192][ T8794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.380311][ T8794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.450084][ T8794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.517505][ T8794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.529836][ T8794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.547725][ T8794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.558732][ T8794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.580441][ T8794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.600820][ T8794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.696565][ T8794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.730494][ T8794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.760104][ T8794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.813784][ T8794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.009227][ T8794] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.100470][ T8794] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.150242][ T8794] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.216280][ T8794] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.517181][ T9095] xt_hashlimit: size too large, truncated to 1048576 [ 444.051152][ T9125] netlink: 'syz.5.935': attribute type 1 has an invalid length. [ 444.060631][ T9125] netlink: 'syz.5.935': attribute type 4 has an invalid length. [ 444.068295][ T9125] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.935'. [ 444.180222][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.190655][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.394286][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.417838][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.640100][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.646590][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.907202][ T9177] loop0: detected capacity change from 0 to 512 [ 450.746322][ T9184] loop6: detected capacity change from 0 to 8 [ 450.849576][ T9177] EXT4-fs: Ignoring removed oldalloc option [ 451.225740][ T968] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 451.401878][ T9177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.468009][ T9177] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.487534][ T9191] netlink: 'syz.7.948': attribute type 1 has an invalid length. [ 451.495292][ T9191] netlink: 'syz.7.948': attribute type 4 has an invalid length. [ 451.519935][ T9191] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.948'. [ 451.535407][ T968] usb 3-1: Using ep0 maxpacket: 8 [ 451.552388][ T968] usb 3-1: config 0 interface 0 has no altsetting 0 [ 451.591593][ T968] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 451.615500][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.669219][ T968] usb 3-1: Product: syz [ 451.695976][ T968] usb 3-1: Manufacturer: syz [ 451.720066][ T968] usb 3-1: SerialNumber: syz [ 451.768421][ T968] usb 3-1: config 0 descriptor?? [ 451.777146][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.809160][ T968] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 452.013782][ T968] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 452.087904][ T968] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 452.139586][ T968] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 452.237140][ T968] usb 3-1: USB disconnect, device number 23 [ 453.600319][ T1202] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 453.818975][ T1202] usb 6-1: Using ep0 maxpacket: 32 [ 453.844687][ T1202] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 454.584098][ T1202] usb 6-1: config 0 has no interface number 0 [ 454.597030][ T1202] usb 6-1: config 0 interface 12 has no altsetting 0 [ 454.607205][ T1202] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 454.811519][ T1202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.819568][ T1202] usb 6-1: Product: syz [ 454.840076][ T1202] usb 6-1: Manufacturer: syz [ 454.850226][ T1202] usb 6-1: SerialNumber: syz [ 454.871134][ T1202] usb 6-1: config 0 descriptor?? [ 454.990202][ T5902] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 455.156045][ T9240] loop7: detected capacity change from 0 to 4096 [ 455.191666][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.220719][ T5902] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 455.262222][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.279576][ T5902] usb 3-1: config 0 descriptor?? [ 455.367228][ T5902] pwc: Askey VC010 type 2 USB webcam detected. [ 455.769547][ T9248] loop6: detected capacity change from 0 to 2048 [ 455.955331][ T9248] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 456.207715][ T9246] netlink: 'syz.1.962': attribute type 1 has an invalid length. [ 456.238368][ T9246] netlink: 'syz.1.962': attribute type 4 has an invalid length. [ 456.289867][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.7.960'. [ 456.309795][ T9246] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.962'. [ 456.342443][ T9240] netlink: 'syz.7.960': attribute type 1 has an invalid length. [ 456.449546][ T5902] pwc: recv_control_msg error -32 req 02 val 2b00 [ 456.488318][ T5902] pwc: recv_control_msg error -32 req 02 val 2700 [ 456.542438][ T5902] pwc: recv_control_msg error -32 req 02 val 2c00 [ 456.574300][ T5902] pwc: recv_control_msg error -32 req 04 val 1000 [ 456.615349][ T5902] pwc: recv_control_msg error -32 req 04 val 1300 [ 456.642949][ T5902] pwc: recv_control_msg error -32 req 04 val 1400 [ 456.690324][ T5902] pwc: recv_control_msg error -32 req 02 val 2000 [ 456.747757][ T5902] pwc: recv_control_msg error -32 req 02 val 2100 [ 456.799703][ T5902] pwc: recv_control_msg error -32 req 04 val 1500 [ 456.826861][ T5902] pwc: recv_control_msg error -32 req 02 val 2500 [ 456.828912][ T1202] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 456.868844][ T9258] loop6: detected capacity change from 0 to 2048 [ 456.890843][ T1202] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 456.898169][ T1202] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 456.908514][ T5902] pwc: recv_control_msg error -32 req 02 val 2400 [ 456.974405][ T1202] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 456.986498][ T9258] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 457.082257][ T1202] usb 6-1: USB disconnect, device number 19 [ 457.095900][ T9266] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 457.140479][ T5902] pwc: recv_control_msg error -71 req 02 val 2900 [ 457.170189][ T5902] pwc: recv_control_msg error -71 req 02 val 2800 [ 457.220612][ T5902] pwc: recv_control_msg error -71 req 04 val 1100 [ 457.227521][ T5902] pwc: recv_control_msg error -71 req 04 val 1200 [ 457.287924][ T5902] pwc: Registered as video103. [ 457.337338][ T5902] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 457.448254][ T5902] usb 3-1: USB disconnect, device number 24 [ 460.041458][ T9304] netlink: 'syz.2.977': attribute type 1 has an invalid length. [ 460.110971][ T9304] netlink: 'syz.2.977': attribute type 4 has an invalid length. [ 460.135218][ T9304] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.977'. [ 460.730642][ T968] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 461.100131][ T968] usb 2-1: Using ep0 maxpacket: 16 [ 461.119934][ T968] usb 2-1: config 1 has an invalid interface number: 203 but max is 0 [ 461.137422][ T968] usb 2-1: config 1 has no interface number 0 [ 461.194418][ T968] usb 2-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=63.9c [ 461.264636][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.329228][ T968] usb 2-1: Product: syz [ 461.360979][ T968] usb 2-1: Manufacturer: syz [ 461.365619][ T968] usb 2-1: SerialNumber: syz [ 461.678459][ T5898] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 461.686457][ T968] aqc111 2-1:1.203: probe with driver aqc111 failed with error -22 [ 462.720027][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 462.727538][ T5898] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 462.873745][ T9325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.978'. [ 462.882802][ T9325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.978'. [ 462.895025][ T9325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.978'. [ 462.912817][ T5898] usb 3-1: config 0 has no interface number 0 [ 462.927009][ T5898] usb 3-1: config 0 interface 12 has no altsetting 0 [ 462.963966][ T5898] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 463.062377][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.112278][ T5898] usb 3-1: Product: syz [ 463.148638][ T5898] usb 3-1: Manufacturer: syz [ 463.221268][ T5898] usb 3-1: SerialNumber: syz [ 463.249677][ T9325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.978'. [ 463.260398][ T9325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.978'. [ 463.269325][ T9325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.978'. [ 463.305107][ T5898] usb 3-1: config 0 descriptor?? [ 464.550222][ T1202] usb 2-1: USB disconnect, device number 18 [ 465.045649][ T9353] loop1: detected capacity change from 0 to 8192 [ 465.082191][ T9353] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 465.152558][ T5898] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 465.250277][ T9360] syz.1.983: attempt to access beyond end of device [ 465.250277][ T9360] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 465.654399][ T5898] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 465.664426][ T5898] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 465.672222][ T5898] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 465.720471][ T5898] usb 3-1: USB disconnect, device number 25 [ 467.382413][ T9381] netlink: 'syz.7.991': attribute type 1 has an invalid length. [ 467.429246][ T9377] loop6: detected capacity change from 0 to 2048 [ 467.470417][ T9381] netlink: 'syz.7.991': attribute type 4 has an invalid length. [ 467.479928][ T9381] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.991'. [ 467.625982][ T9377] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 467.719791][ T9387] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 467.881789][ T9392] loop7: detected capacity change from 0 to 256 [ 467.890085][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 467.943643][ T9392] exfat: Deprecated parameter 'utf8' [ 468.018355][ T9392] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 468.813604][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.826684][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.837393][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 468.894808][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 469.035483][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.121192][ T9] usb 6-1: config 0 descriptor?? [ 470.287315][ T9] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 470.420781][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 470.440725][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 470.448148][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 470.497558][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 470.531061][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 470.600081][ T6020] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 470.619484][ T9] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 470.687124][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 470.870357][ T6020] usb 3-1: Using ep0 maxpacket: 16 [ 470.883871][ T6020] usb 3-1: config 1 has an invalid interface number: 203 but max is 0 [ 470.893317][ T9] usb 6-1: USB disconnect, device number 20 [ 470.907522][ T6020] usb 3-1: config 1 has no interface number 0 [ 470.950469][ T6020] usb 3-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=63.9c [ 470.959546][ T6020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.058505][ T6020] usb 3-1: Product: syz [ 471.080372][ T6020] usb 3-1: Manufacturer: syz [ 471.084992][ T6020] usb 3-1: SerialNumber: syz [ 471.869591][ T6020] aqc111 3-1:1.203: probe with driver aqc111 failed with error -22 [ 472.200055][ T6020] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 472.427263][ T6020] usb 6-1: Using ep0 maxpacket: 32 [ 472.463498][ T6020] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 472.521399][ T6020] usb 6-1: config 0 has no interface number 0 [ 472.552500][ T6020] usb 6-1: config 0 interface 12 has no altsetting 0 [ 472.618467][ T6020] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 472.667585][ T6020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.764646][ T6020] usb 6-1: Product: syz [ 472.768858][ T6020] usb 6-1: Manufacturer: syz [ 472.830169][ T6020] usb 6-1: SerialNumber: syz [ 472.866271][ T6020] usb 6-1: config 0 descriptor?? [ 472.924511][ T9] usb 3-1: USB disconnect, device number 26 [ 472.974745][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 473.470747][ T9448] loop0: detected capacity change from 0 to 8 [ 473.660496][ T5902] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 475.375197][ T5902] usb 7-1: Using ep0 maxpacket: 32 [ 475.575788][ T5902] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 475.624285][ T5902] usb 7-1: config 0 has no interface number 0 [ 475.690101][ T5902] usb 7-1: config 0 interface 12 has no altsetting 0 [ 475.732877][ T5902] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 475.782219][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.294543][ T6020] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 476.600383][ T5902] usb 7-1: Product: syz [ 476.604600][ T5902] usb 7-1: Manufacturer: syz [ 476.622757][ T5902] usb 7-1: SerialNumber: syz [ 476.662293][ T6020] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 476.663219][ T5902] usb 7-1: config 0 descriptor?? [ 476.669605][ T6020] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 476.800942][ T5902] usb 7-1: can't set config #0, error -71 [ 476.868069][ T6020] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 476.881849][ T5902] usb 7-1: USB disconnect, device number 2 [ 478.461429][ T6020] usb 6-1: USB disconnect, device number 21 [ 478.651036][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 478.662657][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 478.672218][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 478.681334][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 478.689047][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 479.253047][ T9493] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1011'. [ 479.262206][ T9493] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1011'. [ 479.273110][ T9493] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1011'. [ 479.911962][ T9491] loop0: detected capacity change from 0 to 40427 [ 479.941773][ T9491] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 479.948431][ T9491] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 480.039551][ T9491] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 480.046746][ T9491] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 480.117663][ T9497] netlink: 'syz.6.1013': attribute type 1 has an invalid length. [ 480.143617][ T9497] netlink: 'syz.6.1013': attribute type 4 has an invalid length. [ 480.264398][ T9497] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1013'. [ 480.440633][ T5838] syz-executor: attempt to access beyond end of device [ 480.440633][ T5838] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 480.552727][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 480.552765][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 480.552781][ T5838] Call Trace: [ 480.552791][ T5838] [ 480.552802][ T5838] dump_stack_lvl+0x241/0x360 [ 480.552851][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.552890][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.552919][ T5838] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 480.552960][ T5838] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 480.552999][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.553027][ T5838] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 480.553070][ T5838] f2fs_handle_critical_error+0x392/0x5a0 [ 480.553116][ T5838] f2fs_write_end_io+0x563/0x790 [ 480.553165][ T5838] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 480.553209][ T5838] ? bio_endio+0x7e4/0x890 [ 480.553248][ T5838] ? bio_endio+0x82a/0x890 [ 480.553281][ T5838] __submit_merged_bio+0x2a9/0x710 [ 480.553310][ T5838] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 480.553352][ T5838] f2fs_submit_merged_write_cond+0x29f/0x380 [ 480.553403][ T5838] f2fs_write_data_pages+0x2f99/0x38d0 [ 480.553497][ T5838] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 480.553604][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.553633][ T5838] ? __mod_memcg_lruvec_state+0x301/0x4f0 [ 480.553679][ T5838] ? __pfx___mod_memcg_lruvec_state+0x10/0x10 [ 480.553723][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.553776][ T5838] ? __mod_zone_page_state+0xda/0x150 [ 480.553806][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.553834][ T5838] ? folios_put_refs+0x711/0x800 [ 480.553885][ T5838] ? lockdep_hardirqs_on+0x9d/0x150 [ 480.553912][ T5838] ? __pfx_folios_put_refs+0x10/0x10 [ 480.553945][ T5838] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 480.553983][ T5838] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 480.554025][ T5838] do_writepages+0x366/0x890 [ 480.554066][ T5838] ? __pfx_do_writepages+0x10/0x10 [ 480.554088][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.554117][ T5838] ? __lock_acquire+0xad5/0xd80 [ 480.554152][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.554179][ T5838] ? do_raw_spin_lock+0x151/0x370 [ 480.554235][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.554301][ T5838] ? do_raw_spin_unlock+0x13c/0x8b0 [ 480.554352][ T5838] filemap_fdatawrite+0x1f2/0x2a0 [ 480.554387][ T5838] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 480.554412][ T5838] ? mlock_drain_local+0x79/0x490 [ 480.554505][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.554533][ T5838] ? do_raw_spin_unlock+0x13c/0x8b0 [ 480.554584][ T5838] f2fs_sync_dirty_inodes+0x34f/0x860 [ 480.554648][ T5838] f2fs_write_checkpoint+0x857/0x1da0 [ 480.554720][ T5838] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 480.554829][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.554859][ T5838] ? kill_f2fs_super+0x290/0x6d0 [ 480.554908][ T5838] kill_f2fs_super+0x2b8/0x6d0 [ 480.554958][ T5838] ? __pfx_kill_f2fs_super+0x10/0x10 [ 480.555009][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.555038][ T5838] ? shrinker_free+0x2ca/0x3d0 [ 480.555076][ T5838] deactivate_locked_super+0xc6/0x130 [ 480.555109][ T5838] cleanup_mnt+0x422/0x4c0 [ 480.555137][ T5838] ? lockdep_hardirqs_on+0x9d/0x150 [ 480.555168][ T5838] task_work_run+0x253/0x310 [ 480.555228][ T5838] ? __pfx_task_work_run+0x10/0x10 [ 480.555279][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 480.555315][ T5838] syscall_exit_to_user_mode+0x13f/0x340 [ 480.555347][ T5838] do_syscall_64+0x100/0x230 [ 480.555382][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.555407][ T5838] RIP: 0033:0x7fe20d78e497 [ 480.555430][ T5838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 480.555451][ T5838] RSP: 002b:00007ffc9a263208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 480.555478][ T5838] RAX: 0000000000000000 RBX: 00007fe20d80e08c RCX: 00007fe20d78e497 [ 480.555495][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9a2632c0 [ 480.555512][ T5838] RBP: 00007ffc9a2632c0 R08: 0000000000000000 R09: 0000000000000000 [ 480.555528][ T5838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9a264350 [ 480.555545][ T5838] R13: 00007fe20d80e08c R14: 000000000007524c R15: 00007ffc9a264390 [ 480.555590][ T5838] [ 480.555601][ T5838] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 480.740449][ T55] Bluetooth: hci5: command tx timeout [ 481.170171][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 481.351418][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 481.385683][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 481.394314][ T9481] chnl_net:caif_netlink_parms(): no params data found [ 481.404072][ T9] usb 3-1: config 0 has no interface number 0 [ 481.431098][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 481.471197][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 481.499511][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.554701][ T9] usb 3-1: Product: syz [ 481.558923][ T9] usb 3-1: Manufacturer: syz [ 481.600064][ T9] usb 3-1: SerialNumber: syz [ 481.614792][ T9] usb 3-1: config 0 descriptor?? [ 481.630075][ T5902] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 481.844470][ T5902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.870140][ T5902] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 481.919917][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.954229][ T5902] usb 6-1: config 0 descriptor?? [ 482.003027][ T5902] pwc: Askey VC010 type 2 USB webcam detected. [ 482.390103][ T5902] pwc: recv_control_msg error -32 req 02 val 2b00 [ 482.415782][ T5902] pwc: recv_control_msg error -32 req 02 val 2700 [ 482.444614][ T5898] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 482.455927][ T5902] pwc: recv_control_msg error -32 req 02 val 2c00 [ 482.475271][ T5902] pwc: recv_control_msg error -32 req 04 val 1000 [ 482.483641][ T5902] pwc: recv_control_msg error -32 req 04 val 1300 [ 482.491157][ T5902] pwc: recv_control_msg error -32 req 04 val 1400 [ 482.498450][ T5902] pwc: recv_control_msg error -32 req 02 val 2000 [ 482.521682][ T5902] pwc: recv_control_msg error -32 req 02 val 2100 [ 482.529099][ T5902] pwc: recv_control_msg error -32 req 04 val 1500 [ 482.552997][ T5902] pwc: recv_control_msg error -32 req 02 val 2500 [ 482.572928][ T5902] pwc: recv_control_msg error -32 req 02 val 2400 [ 482.650295][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 482.682480][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.689926][ T5898] usb 2-1: config 1 has an invalid interface number: 203 but max is 0 [ 482.712862][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.740013][ T5898] usb 2-1: config 1 has no interface number 0 [ 482.740521][ T9481] bridge_slave_0: entered allmulticast mode [ 482.773820][ T9481] bridge_slave_0: entered promiscuous mode [ 482.773886][ T5898] usb 2-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=63.9c [ 482.809823][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.818443][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.818652][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.830132][ T5902] pwc: recv_control_msg error -71 req 02 val 2900 [ 482.869707][ T5902] pwc: recv_control_msg error -71 req 02 val 2800 [ 482.875725][ T9481] bridge_slave_1: entered allmulticast mode [ 482.879759][ T5898] usb 2-1: Product: syz [ 482.893915][ T5898] usb 2-1: Manufacturer: syz [ 482.898594][ T5898] usb 2-1: SerialNumber: syz [ 482.903984][ T5902] pwc: recv_control_msg error -71 req 04 val 1100 [ 482.916693][ T9481] bridge_slave_1: entered promiscuous mode [ 482.926615][ T5902] pwc: recv_control_msg error -71 req 04 val 1200 [ 482.946522][ T5902] pwc: Registered as video103. [ 482.974875][ T5902] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 483.048339][ T5902] usb 6-1: USB disconnect, device number 22 [ 483.056162][ T55] Bluetooth: hci5: command tx timeout [ 483.136077][ T5898] aqc111 2-1:1.203: probe with driver aqc111 failed with error -22 [ 483.283942][ T9] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 483.294412][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 483.320497][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 483.328142][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 483.393162][ T9] usb 3-1: USB disconnect, device number 27 [ 484.558323][ T9481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.654327][ T9481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.381304][ T9557] loop6: detected capacity change from 0 to 2048 [ 485.405362][ T55] Bluetooth: hci5: command tx timeout [ 485.763822][ T9557] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 485.893884][ T9553] loop2: detected capacity change from 0 to 8192 [ 486.072740][ T9553] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 486.265710][ T9481] team0: Port device team_slave_0 added [ 486.306306][ T9553] syz.2.1024: attempt to access beyond end of device [ 486.306306][ T9553] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 486.326474][ T9481] team0: Port device team_slave_1 added [ 486.844348][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.936707][ T5902] usb 2-1: USB disconnect, device number 19 [ 487.064852][ T9581] [ 487.067211][ T9581] ====================================================== [ 487.074219][ T9581] WARNING: possible circular locking dependency detected [ 487.079112][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.081231][ T9581] 6.14.0-syzkaller-12508-g92b71befc349 #0 Not tainted [ 487.081252][ T9581] ------------------------------------------------------ [ 487.081264][ T9581] syz.6.1026/9581 is trying to acquire lock: [ 487.081277][ T9581] ffffffff90252ad8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 487.136128][ T9581] [ 487.136128][ T9581] but task is already holding lock: [ 487.143492][ T9581] ffff888028b2a070 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1023/0x2370 [ 487.152938][ T9581] [ 487.152938][ T9581] which lock already depends on the new lock. [ 487.152938][ T9581] [ 487.163343][ T9581] [ 487.163343][ T9581] the existing dependency chain (in reverse order) is: [ 487.172360][ T9581] [ 487.172360][ T9581] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 487.180387][ T9581] lock_acquire+0x116/0x2f0 [ 487.185430][ T9581] _raw_spin_lock_bh+0x35/0x50 [ 487.190742][ T9581] nr_rt_device_down+0x159/0x7b0 [ 487.196230][ T9581] nr_device_event+0x134/0x150 [ 487.201535][ T9581] notifier_call_chain+0x1a7/0x3f0 [ 487.207183][ T9581] dev_close_many+0x33e/0x4c0 [ 487.212398][ T9581] netif_close+0x1c2/0x2d0 [ 487.217350][ T9581] dev_close+0x137/0x280 [ 487.222132][ T9581] bpq_device_event+0x36a/0x620 [ 487.227521][ T9581] notifier_call_chain+0x1a7/0x3f0 [ 487.233168][ T9581] dev_close_many+0x33e/0x4c0 [ 487.238380][ T9581] netif_close+0x1c2/0x2d0 [ 487.243331][ T9581] dev_close+0x137/0x280 [ 487.248118][ T9581] bond_setup_by_slave+0x64/0x420 [ 487.253677][ T9581] bond_enslave+0x7fb/0x38d0 [ 487.258803][ T9581] bond_do_ioctl+0x7c9/0xc00 [ 487.263936][ T9581] dev_ifsioc+0x97c/0x1010 [ 487.268886][ T9581] dev_ioctl+0x819/0x1380 [ 487.273748][ T9581] sock_do_ioctl+0x233/0x490 [ 487.278871][ T9581] sock_ioctl+0x644/0x900 [ 487.283731][ T9581] __se_sys_ioctl+0xf3/0x160 [ 487.288857][ T9581] do_syscall_64+0xf3/0x230 [ 487.293894][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.300315][ T9581] [ 487.300315][ T9581] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 487.308250][ T9581] lock_acquire+0x116/0x2f0 [ 487.313287][ T9581] _raw_spin_lock_bh+0x35/0x50 [ 487.318592][ T9581] nr_rt_device_down+0xb5/0x7b0 [ 487.323982][ T9581] nr_device_event+0x134/0x150 [ 487.329284][ T9581] notifier_call_chain+0x1a7/0x3f0 [ 487.334928][ T9581] dev_close_many+0x33e/0x4c0 [ 487.340132][ T9581] netif_close+0x1c2/0x2d0 [ 487.345074][ T9581] dev_close+0x137/0x280 [ 487.349851][ T9581] bpq_device_event+0x36a/0x620 [ 487.355222][ T9581] notifier_call_chain+0x1a7/0x3f0 [ 487.360864][ T9581] dev_close_many+0x33e/0x4c0 [ 487.366068][ T9581] netif_close+0x1c2/0x2d0 [ 487.371006][ T9581] dev_close+0x137/0x280 [ 487.375778][ T9581] bond_setup_by_slave+0x64/0x420 [ 487.381329][ T9581] bond_enslave+0x7fb/0x38d0 [ 487.386443][ T9581] bond_do_ioctl+0x7c9/0xc00 [ 487.391567][ T9581] dev_ifsioc+0x97c/0x1010 [ 487.396510][ T9581] dev_ioctl+0x819/0x1380 [ 487.401358][ T9581] sock_do_ioctl+0x233/0x490 [ 487.406465][ T9581] sock_ioctl+0x644/0x900 [ 487.411316][ T9581] __se_sys_ioctl+0xf3/0x160 [ 487.416428][ T9581] do_syscall_64+0xf3/0x230 [ 487.421449][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.427864][ T9581] [ 487.427864][ T9581] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 487.435790][ T9581] validate_chain+0xa69/0x24e0 [ 487.441079][ T9581] __lock_acquire+0xad5/0xd80 [ 487.446274][ T9581] lock_acquire+0x116/0x2f0 [ 487.451293][ T9581] _raw_spin_lock_bh+0x35/0x50 [ 487.456582][ T9581] nr_remove_neigh+0x25/0xe0 [ 487.461688][ T9581] nr_add_node+0x1be9/0x2370 [ 487.466812][ T9581] nr_rt_ioctl+0xd60/0xff0 [ 487.471756][ T9581] sock_do_ioctl+0x15c/0x490 [ 487.476867][ T9581] sock_ioctl+0x644/0x900 [ 487.481716][ T9581] __se_sys_ioctl+0xf3/0x160 [ 487.486834][ T9581] do_syscall_64+0xf3/0x230 [ 487.491853][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.498262][ T9581] [ 487.498262][ T9581] other info that might help us debug this: [ 487.498262][ T9581] [ 487.508492][ T9581] Chain exists of: [ 487.508492][ T9581] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 487.508492][ T9581] [ 487.522338][ T9581] Possible unsafe locking scenario: [ 487.522338][ T9581] [ 487.529773][ T9581] CPU0 CPU1 [ 487.535126][ T9581] ---- ---- [ 487.540478][ T9581] lock(&nr_node->node_lock); [ 487.545248][ T9581] lock(nr_node_list_lock); [ 487.552361][ T9581] lock(&nr_node->node_lock); [ 487.559645][ T9581] lock(nr_neigh_list_lock); [ 487.564331][ T9581] [ 487.564331][ T9581] *** DEADLOCK *** [ 487.564331][ T9581] [ 487.572470][ T9581] 1 lock held by syz.6.1026/9581: [ 487.577494][ T9581] #0: ffff888028b2a070 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1023/0x2370 [ 487.587363][ T9581] [ 487.587363][ T9581] stack backtrace: [ 487.593244][ T9581] CPU: 0 UID: 0 PID: 9581 Comm: syz.6.1026 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 487.593271][ T9581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 487.593285][ T9581] Call Trace: [ 487.593293][ T9581] [ 487.593302][ T9581] dump_stack_lvl+0x241/0x360 [ 487.593338][ T9581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.593370][ T9581] ? __pfx__printk+0x10/0x10 [ 487.593402][ T9581] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.593428][ T9581] ? print_lock+0x171/0x1a0 [ 487.593456][ T9581] print_circular_bug+0x2e1/0x300 [ 487.593497][ T9581] check_noncircular+0x142/0x160 [ 487.593531][ T9581] validate_chain+0xa69/0x24e0 [ 487.593573][ T9581] __lock_acquire+0xad5/0xd80 [ 487.593600][ T9581] lock_acquire+0x116/0x2f0 [ 487.593622][ T9581] ? nr_remove_neigh+0x25/0xe0 [ 487.593645][ T9581] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 487.593676][ T9581] ? nr_remove_neigh+0x25/0xe0 [ 487.593696][ T9581] _raw_spin_lock_bh+0x35/0x50 [ 487.593728][ T9581] ? nr_remove_neigh+0x25/0xe0 [ 487.593747][ T9581] nr_remove_neigh+0x25/0xe0 [ 487.593768][ T9581] nr_add_node+0x1be9/0x2370 [ 487.593807][ T9581] ? __pfx_nr_add_node+0x10/0x10 [ 487.593838][ T9581] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.593864][ T9581] ? nr_call_to_digi+0x7a/0x1b0 [ 487.593896][ T9581] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.593921][ T9581] ? __asan_memcpy+0x40/0x70 [ 487.593944][ T9581] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.593969][ T9581] ? nr_call_to_digi+0x120/0x1b0 [ 487.594002][ T9581] nr_rt_ioctl+0xd60/0xff0 [ 487.594041][ T9581] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.594065][ T9581] ? aa_get_newest_label+0x101/0x6f0 [ 487.594097][ T9581] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 487.594127][ T9581] ? lockdep_hardirqs_on+0x9d/0x150 [ 487.594157][ T9581] ? security_fs_context_parse_param+0xf2/0x580 [ 487.594191][ T9581] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.594218][ T9581] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.594246][ T9581] sock_do_ioctl+0x15c/0x490 [ 487.594275][ T9581] ? __pfx_sock_do_ioctl+0x10/0x10 [ 487.594303][ T9581] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.594328][ T9581] ? __lock_acquire+0xad5/0xd80 [ 487.594356][ T9581] sock_ioctl+0x644/0x900 [ 487.594382][ T9581] ? __pfx_sock_ioctl+0x10/0x10 [ 487.594404][ T9581] ? __fget_files+0x2a/0x420 [ 487.594424][ T9581] ? __fget_files+0x2a/0x420 [ 487.594443][ T9581] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.594469][ T9581] ? __fget_files+0x2a/0x420 [ 487.594494][ T9581] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.594519][ T9581] ? __pfx_sock_ioctl+0x10/0x10 [ 487.594544][ T9581] __se_sys_ioctl+0xf3/0x160 [ 487.594571][ T9581] do_syscall_64+0xf3/0x230 [ 487.594596][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.594618][ T9581] RIP: 0033:0x7f923b98d169 [ 487.594638][ T9581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.594657][ T9581] RSP: 002b:00007f923c856038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.594679][ T9581] RAX: ffffffffffffffda RBX: 00007f923bba6080 RCX: 00007f923b98d169 [ 487.594696][ T9581] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000007 [ 487.594710][ T9581] RBP: 00007f923ba0e2a0 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 487.594725][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.594738][ T9581] R13: 0000000000000001 R14: 00007f923bba6080 R15: 00007ffd1f91c258 [ 487.594762][ T9581] [ 487.957023][ T55] Bluetooth: hci5: command tx timeout [ 488.006653][ T9481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.019417][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.026402][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.052715][ T9481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.400342][ T9582] bond0: (slave rose0): Error: Device is in use and cannot be enslaved