last executing test programs: 15m20.714208262s ago: executing program 0 (id=138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009b80)=@newtfilter={0x19e8, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x19b8, 0x2, [@TCA_CGROUP_EMATCHES={0x1ec, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x1ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x1}, {0x9, 0x9, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x7}, {0xb, 0x60, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x198, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x6}, "bb949062dbbdc2bac44e28b16d3db753b8d3bb9abd7d162a53466da118860f9f4ea1875d96136e6f833c42444576a511b23cbd7ebbf3fbf76126a4fd1676d385e02092ae85bd1bf28cf79425df6c64f56f5c365aa68db06eed04fd4cd0842ce614de1fcc66af66e713e787d7e0bf02714084028b134c6dc3a99858de79523cc36cc39298b4a6194c0d3ffb130e8e6e9a856adfee0055d40eb1f4e8f9c429590b2b80f726a8c53f3582f4642e11d622edef967ffdbaa8344b0ef646079b5ecd"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7fff, 0x3, 0x867}, {0x4, 0x6, 0x4, 0x8000}}}, @TCF_EM_IPT={0xac, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x78c}, [@TCA_EM_IPT_MATCH_DATA={0x95, 0x5, "99cca969ec63820efd751cb1b7bb0c0efdb8bb49ecbf75905f0a24650a0ebf4c65e5494c3a72ce18b59139aef1ad9fbd94846e230515edea185b45d7d318c09f4e35f2eaedadb8b1013b1b309b6edd9ef842714c73f7492d6127d19c2dec88205192e4c6b8d302267eab072a2b0b2939e83ac3fc7d5c382c72fc71b751ba548e741c922da77ea9bea9508f303ec5384d28"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf5}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_EMATCHES={0x220, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4b0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x20c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xac, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x8}, "e2afe2b11afff5a2137a7a31a8f7bf3f347ec0f2c86e8e86c4d30e589a2024863e9a21673fadac2609105c9d10153f85de6d6a4e931c12b3ea877c47108a39063dde26b9cf6602730d4d4f19c7120d0a43aab6534fac124d833da918e0969be3ba8aa24f18b0a072b507281bb81dd8b9156c65f4820c350315f23a02372504efb116be802c8efc5d3b10aa48a2ec796acbd139030c964f8517bde1fcca32be"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x4007}, {{0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x6}, {0x7f, 0x9, 0x4, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xb98, 0x2, 0x2}, {0x8, 0x5, 0x0, "a9bc9d17bf"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x8}, {0x9, 0x1d55, 0x81, 0x81}}}, @TCF_EM_CONTAINER={0xf8, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x5}, "4e0cdeefeb0c19dcca9a71a8e0d9d0661bc5ce9b1f0332e109364f030f70440285037ce433fbab737992629e7c7310e6b06447b60d50574a3fd2ab2cc445bba3a6e477442a973f4fbdb90392f9b4e463419413b0c19747235fcc979861f3a8a00e61dc94ae084165a1b203da69d91f6ae5dd441a2a52078ba960bb2e32aeeb697206186243acc6562a78d4d4739eabc5dcb03050f3d465b77e4bfa227e969f8aaaca75046470d5e0095d809792203733489986de8060bd895ce0769894233ef33212dbfe4f65c48ec6cce8fe96ee096fb6c9fff8e55fb66808b58fb007ad49fbfa4245af29fe7181d1"}}]}]}, @TCA_CGROUP_EMATCHES={0x17c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x134, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x8c, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x4}, "70731e9d973322ed263781be205faed4861362b731b71c69857d5f8e487782e0abbd4b4a366fb8c1c8ac2ab18a7e539166b79662209dda88e9ea8cc35f29762d483490f5cb09f457e6d5bbafd26dfacfa78896bdf79b5d1699cfcfbd65e359b7cce20823ab657c754bfaa6c7e244eb3c1fe050b079d81f498a5d8660f16536c4"}}, @TCF_EM_META={0x28, 0x3, 0x0, 0x0, {{0x0, 0x4, 0xee}, [@TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="070595ccf100a20f144c", @TCF_META_TYPE_VAR="86384dfe31a394", @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1000, 0x8, 0x6}, {0x1}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x8f01}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xac}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x81}, {0x2, 0x7, 0x38ff, 0x2, 0x6, 0x1}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x4}, {0xffffffffffffffff}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x90, 0x8, 0xc}, {0x1, 0x1, 0x5}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x40}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x5, 0x0, 0x0, {{0xf, 0x1, 0xfb3b}, {0x40, 0x129, 0xffb6, 0x1, 0x8}}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x8001}, {0x47d5, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_POLICE={0x43c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3, 0x7, 0x40, 0x3, 0x2f, 0x7, 0x2, 0x1, 0x2641, 0xffffffbf, 0x0, 0xf, 0xc1, 0x5, 0x9, 0x5, 0xfffffff7, 0xff, 0xfffbff7f, 0x3, 0x8, 0xffffffff, 0x1, 0x4e4b, 0x4, 0x0, 0x6, 0x5, 0x1, 0x7, 0x10, 0x5, 0x74, 0x4, 0xe5d, 0x400, 0x10000, 0x7, 0x7, 0xffffffff, 0x9, 0x81, 0x0, 0x4, 0x9, 0x3, 0x7fff, 0x7, 0x3d, 0x2, 0x2, 0x8, 0x713, 0x8, 0x1, 0x8, 0x4b2, 0x20f3, 0x3eb, 0x65ad8de0, 0xfffffffd, 0x1, 0x4fe, 0x10001, 0xdafa, 0xc8, 0x827, 0x9, 0x7, 0x1, 0x0, 0x7, 0x7, 0x0, 0x1, 0xcc9, 0x0, 0xc0000000, 0xc07f, 0x95e, 0x80000000, 0xf, 0x9, 0x2, 0x100, 0x25c, 0x3f6ca3f6, 0xd, 0x36f, 0x73b, 0x3, 0xdf72, 0x3, 0x9, 0x4, 0x1, 0x7, 0x3, 0x7ff, 0x6, 0xffffffff, 0x5, 0x2, 0x1000, 0x8008001, 0x4, 0x6, 0x3, 0xfffffff7, 0x7, 0x4, 0x40, 0x7, 0x3, 0xd, 0xa3e7, 0x6, 0x401, 0x1, 0x4, 0xfffffff9, 0x3, 0x2, 0x800, 0x4, 0xfffffff7, 0x10, 0x1, 0xa, 0xffffffff, 0xfff, 0x7, 0x7, 0x10000, 0xc, 0x1, 0x800, 0x1, 0x1000, 0x800, 0x0, 0x9, 0xfffffff7, 0xc74e, 0x81, 0x7, 0x7, 0xf6, 0x8, 0x5, 0x7fffffff, 0x5, 0x46db, 0x9, 0x0, 0x8000, 0x0, 0x1, 0x200, 0x4, 0x5, 0x8, 0xfffffff7, 0x4f, 0xea7, 0x6, 0xd, 0xfb4, 0xd5df, 0x9, 0x1, 0x9, 0x3817, 0xa324, 0x3ff, 0x44620000, 0x4, 0x3, 0x4, 0x4, 0xffffffff, 0x3a, 0x2, 0xe, 0x6, 0x1d8d, 0x101, 0x2, 0x2, 0xff, 0x1, 0x1, 0xffffffff, 0x81, 0xfffffffc, 0x7, 0x3, 0x8, 0xe648, 0x1, 0x9, 0x2, 0x2, 0x6, 0x1000000, 0x8, 0xfffffff0, 0x2, 0x0, 0x9, 0xc, 0x3ff, 0x100, 0x7, 0x2, 0x6, 0x30, 0x9, 0x1, 0x9, 0xae4, 0x9, 0x1, 0x7, 0xffffffff, 0x8, 0x7, 0x6, 0xb56b, 0xf, 0x11812, 0x8, 0x23, 0x0, 0x4, 0x9, 0x200, 0x81, 0x3, 0x4, 0x99, 0x2, 0xfffffffa, 0xe, 0xffff, 0x2, 0x0, 0x1, 0x8, 0x2, 0x7, 0x6, 0x8, 0x7fffffff, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8e7f}]}, @TCA_CGROUP_POLICE={0xc58, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xd20}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0xef84, 0x4, 0x9, {0xe, 0x0, 0x5, 0x5b9f, 0x2, 0xf}, {0x5d, 0x0, 0x81, 0x0, 0x8, 0x9}, 0x60b0, 0x0, 0xffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x33f1, 0x1, 0x8, 0x0, 0x3, 0x2, 0x6, 0x0, 0x80, 0x72, 0x9, 0x7fffffff, 0x3, 0x2, 0x7fffffff, 0x7, 0x7ea6, 0xfffffffd, 0x9, 0x0, 0x4, 0x8, 0xd, 0x8, 0xc, 0xa3d8, 0x1, 0x270c, 0xc24a, 0xfffffffa, 0x81, 0x1, 0xc, 0x7, 0x10, 0x400, 0x9, 0x0, 0x10, 0x3, 0xa, 0xb, 0x80, 0xd, 0x4, 0x9, 0x8, 0xa3, 0x5, 0x3, 0x40, 0x1, 0x3, 0x3, 0x9, 0x9, 0xffffff7f, 0x6, 0x9f, 0x4, 0x8000, 0x4, 0x8, 0xf, 0xffffffff, 0x9, 0x7f, 0x7f, 0x5, 0xb25, 0x6, 0x4, 0x1000, 0x4, 0x7, 0x40, 0x8, 0x5, 0x4, 0x9, 0x200, 0x1ce5, 0x8000, 0xa3c, 0x6df30703, 0x80000001, 0x8, 0x527, 0x2, 0x7ff, 0x1, 0x400, 0x9, 0x1, 0x7, 0x0, 0x7, 0x1, 0x2, 0x3ff, 0xdd36, 0x4, 0x800, 0x8, 0x1, 0xffffff7f, 0x4, 0x2a897e25, 0x401, 0x0, 0x7, 0x5, 0xffff, 0x7, 0x2, 0x5, 0x1, 0x4, 0xd, 0xa4, 0x7f, 0xa9, 0xa, 0x2, 0x9, 0x3, 0x6, 0x1, 0x7ff, 0x7, 0x6, 0x4, 0xffffffff, 0x3, 0x3, 0x3, 0x7fffffff, 0xfffffff9, 0xfffffffb, 0x7, 0x7fffffff, 0x0, 0x1, 0xe3, 0x3, 0x80, 0xfffffffa, 0x559, 0xdd4, 0x1c, 0x3ff, 0x6, 0x2, 0x1, 0x188b, 0x0, 0x3, 0xfff, 0x0, 0xd755, 0x5, 0x1, 0x9, 0x5, 0x7, 0x2c667b41, 0x2, 0x7c, 0x4, 0x0, 0x85d, 0xebab, 0x6, 0x5, 0x8001, 0xffffff8d, 0x5, 0x4, 0x3, 0x6912b3a9, 0x4e5f, 0x7, 0xb, 0x80, 0x8000, 0x8, 0x8, 0x3, 0x8, 0x2, 0xe19, 0x3, 0x3, 0xd, 0x5, 0xab, 0x9, 0x5, 0x9, 0xfffffff7, 0x401, 0x3, 0x4, 0x80, 0xa, 0x8000, 0x5, 0x6, 0x5, 0xb, 0x4, 0x40, 0x3e, 0x6, 0x7, 0xd114, 0x50e3aa14, 0x8, 0x1000, 0x2, 0x7fff, 0xb4, 0x8, 0x2, 0x7, 0x57c, 0x0, 0x8, 0x4, 0x8, 0x8, 0x7, 0x400, 0x3, 0x9, 0xff0, 0x5, 0xffffffd9, 0x9, 0x2, 0x6, 0xfffffffd, 0x2, 0xb, 0x5, 0x4, 0x7, 0x7, 0x200, 0x7ff, 0x2, 0x2, 0x3, 0x32, 0x77b]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x16, 0x5, 0x8, 0x0, 0x7, 0x3, 0x3, 0x8, 0x1, 0x0, 0x6cf, 0x3, 0x9, 0x8, 0xd7, 0x10, 0x7, 0x5, 0x6, 0x6, 0x5ec6, 0x67c2, 0x9, 0x400, 0x9, 0x4, 0x18, 0x0, 0x25, 0xfffffffb, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x3, 0x0, 0x0, 0x8, 0x8, 0x0, 0x4, 0x9, 0x28, 0x6, 0x4, 0x4, 0xb1, 0x7, 0x2, 0x8001, 0x2, 0x6, 0xd, 0x0, 0x0, 0x7, 0x26f, 0x4, 0x2, 0x38, 0x6, 0x1, 0x1, 0xffff1e20, 0x3, 0xb, 0x81, 0xaea0, 0x4, 0xa, 0x8, 0x401, 0x0, 0x3, 0xd90, 0x68d, 0x814c, 0x7, 0x2, 0x0, 0x3, 0x8, 0x81, 0x4, 0x401, 0x4, 0x4, 0x8, 0xffffff01, 0x7, 0x4, 0x1, 0x4, 0x3, 0x6, 0xe, 0x9, 0x5, 0xb, 0x2, 0x3, 0x4, 0x409, 0x3, 0x8, 0xe7, 0x2, 0x9, 0x3, 0x7, 0x6, 0x3, 0xc9a, 0x1, 0x81, 0xfff, 0x3, 0x7, 0x80, 0xffffffff, 0x401, 0x0, 0x1, 0xffffffff, 0x3, 0x85, 0x68, 0x1, 0x7, 0x1, 0x40, 0x7, 0x6, 0x100, 0xffffffff, 0xb1, 0x1, 0x2, 0xfffffffc, 0x5, 0xc, 0x5, 0x5, 0x0, 0x8, 0x0, 0x9, 0x7, 0xfff, 0x1, 0x0, 0xfffffffa, 0x3, 0x3, 0x3, 0x7, 0x9, 0x6, 0x101, 0x7, 0x0, 0x3, 0x2, 0x40, 0x7ff, 0x88e6, 0x0, 0x8, 0x101, 0x3, 0x3, 0x2, 0x7, 0x208, 0x7fff, 0x1, 0xad4, 0x2, 0x0, 0xc1, 0x1, 0x6, 0x8, 0x3, 0x3, 0xffff, 0x10001, 0x6, 0x9, 0x7, 0xfffffff8, 0x460f0cda, 0xffff7a33, 0xffffffff, 0x7, 0x1, 0x8, 0x4, 0x1, 0x33, 0x1, 0x2, 0x80, 0x9026, 0x3, 0x1, 0x879, 0x2, 0x0, 0x100, 0x6, 0x5, 0xc00000, 0x8, 0x6, 0x8, 0x5, 0x1, 0x71, 0x444e, 0x9, 0x4, 0x1, 0xdf, 0x4, 0x3, 0x7, 0x200, 0xfffffffa, 0x4, 0x9, 0x6, 0x40, 0x8b7, 0x10000, 0xfffffff8, 0x1, 0x8, 0xa8, 0x7ff, 0x7, 0x2, 0x9, 0x5, 0x3, 0x4, 0x4, 0x1, 0x10001, 0x3, 0x87, 0x200]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0xffff, 0xffff2f1f, 0x4, 0x0, 0x9, 0x8f8, 0x5, 0x971, 0x575, 0x3, 0x6, 0x1, 0x0, 0x8, 0x7ff, 0xffffff95, 0x4e923fee, 0x200000, 0x1, 0xf764, 0x8, 0x2, 0x9a, 0x1020000, 0x4, 0x1, 0x1, 0xea0, 0x6, 0x7fffffff, 0x1c3c6bca, 0x1, 0x0, 0x80, 0x9, 0xa, 0x5, 0x2, 0x4, 0x2, 0x3, 0x3, 0x3, 0x4, 0x7, 0x3, 0xff, 0xff, 0x4, 0x830, 0x3, 0x7, 0x4, 0x2, 0x1, 0x1, 0xfffffffe, 0x8, 0x6b, 0x4, 0x6, 0x4, 0x7, 0x7, 0x3, 0x10, 0x0, 0xe, 0x80000001, 0x8, 0xb, 0x7, 0x20a, 0xb, 0x8, 0x3, 0x5, 0xffffffff, 0x200, 0xf89b, 0x9, 0x4, 0x8, 0x3, 0xfffffc00, 0x7, 0x7, 0x0, 0xfffffffe, 0x0, 0x5, 0x200, 0x0, 0x4, 0x9, 0x28, 0x7, 0xa, 0x0, 0xd3b, 0x23be, 0x7, 0x5, 0x1ff, 0x8, 0x7f, 0x4, 0x4322, 0x1, 0x3, 0x1ff, 0x101, 0x0, 0x3, 0x7, 0x800, 0x2, 0x1, 0xfff, 0x9, 0xfffffff9, 0x18b, 0x6a, 0x7, 0x5a, 0x1, 0x400, 0x1f21, 0x4, 0x4, 0x3ff, 0x8, 0x3, 0x1, 0x6, 0x8fd1, 0x1c000000, 0x9, 0x7, 0x1, 0x9, 0x2, 0x5, 0x2, 0xa, 0x1ff, 0x5, 0x3, 0x0, 0xfffffffc, 0x9, 0x8, 0x1, 0x0, 0x2, 0x10000, 0x2, 0x4, 0xa, 0x2, 0x1c6f, 0x6, 0x6, 0x10, 0x30000000, 0x2, 0x6, 0x6, 0x4, 0xa, 0x1, 0x3, 0x100, 0xd792, 0x5, 0x3, 0x40, 0x101, 0x3, 0x4, 0x1, 0x7f, 0x4, 0x8, 0x9, 0x401, 0x5, 0x6, 0x735, 0x3, 0x7, 0x7abba55c, 0x8, 0xa8fd, 0xb, 0x9, 0x6, 0xe7d, 0x9, 0x4, 0x7, 0x7fff, 0x2, 0x400, 0x1, 0x0, 0xa, 0x200, 0x7, 0x7f, 0x2, 0x3310, 0x401, 0x3, 0x4, 0x8, 0x5, 0xfffffff9, 0x2, 0x1, 0xde000000, 0x2, 0x4068d107, 0x1, 0x100, 0x2, 0x80000001, 0x2a92, 0x4, 0xfffffeff, 0x0, 0x9, 0xfffffffd, 0x0, 0x2, 0x4, 0x4, 0x32a6, 0x8, 0x40000000, 0xf, 0x5, 0x8, 0x101, 0x2, 0x7, 0x0, 0xa4, 0x3, 0x100, 0x40, 0xe03b, 0x4, 0x6]}]}, @TCA_CGROUP_ACT={0x394, 0x1, [@m_pedit={0xd0, 0x10, 0x0, 0x0, {{0xa}, {0x4}, {0xa4, 0x6, "7df2b8770dac8b0d2fec9af709aa3b5c850449a033ca7477144080226789cda42cc5b84fe202a6a0cec99190e5cf876ef6f8b1317c7d7ed2cf3c0b2e190ab07a71f1bd011d5e0c69694dde33cf48a60371ab0a4a446c4e9f9a7b156519122de0c76152fdf94f336cb4ff24f72c474f40c7fabb62eb507547e52790d761b45365c8a249b364aa90318bec827239736716b2fab26585c345cbb7781d9c492acbc6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x170, 0x10, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0xe5, 0x6, "50450e8203cc14af56776175d5c8f2a79b49616ae44cd25ff0c8b5ef0fa18833debebfdd7090d103c1b632dbad6d32826b2694a5b510e75ba3708e3b95b488b1deb31603783219322898e4d5720b243d9919e886a799343d7bfc3c0de79473327f0283916db1b4739dd9e0579f2fe6007f81d0f542bab7aa23912effec59f99ba7ee5ac798997d17b3f8724cf913f4785508065d972b88564f71f577bc955f6326d8f3c45c22578190d999eb975f16f68bfbbe9b8ee7f239a77f19eb1e9fe3bd2ffaa6a7973aa04f781659f6563d6755c81f3c84a1bc5fe431e59dcb2d85b18b6e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x150, 0x9, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x2, 0x0, 0x1000, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xbdc}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff9}]}, {0xea, 0x6, "13714b45e310593f7e7dc46fd131082dcad8b6eb0d37679138fe78d00361f7badba14fd87e40b454b4fe923fcf0e7ec10def14adc5b2c1b53d2cbab2968e22180bc888e55c8d6f8f11c9ab9b3890139a741eda0364b1acf54e35f23d03810d2a2498b91083d659c75eb48f2e779be77b729a6c4b8311809a08a1164bc693e7cd9101b7ec311bd70e432d664c6872fafe48f492e05291be8856ffb6dad47e14d0f205ebc8e73714fb9e56230e874c14b1fe01faaed44bd57a232b5494e72de34fb035de351c22fff081da0bfdaea84391a4bd60089b4c221b02c5b6ce7b15dee519249b163b98"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_CGROUP_POLICE={0x4}]}}]}, 0x19e8}}, 0x20040054) 15m20.416098619s ago: executing program 0 (id=141): r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x8800) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x7fffffffffffffff) 15m19.536510207s ago: executing program 0 (id=144): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x1, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m13.81567193s ago: executing program 0 (id=150): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 15m11.91508953s ago: executing program 0 (id=156): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20, 0x0, 0xffffffffffffffff, 0x5e}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x4000000) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)}, 0x1}], 0x1, 0x20, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd09000085000000410000", @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x82, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x1f8, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 15m10.704583406s ago: executing program 0 (id=160): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) clock_gettime(0x0, &(0x7f0000000880)) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000000c0)=@rc={0x1f, @none, 0xff}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)="3a7f40860e1505f56228e30bffdd624e52671fe99e4006b71264b7836317fba6100b98cf63498212783a4887b0ca75571aad7063591ed03dbcd16f796fbe75ebc34873ef1e8f18a408d44a385f0c1a42b4bbe86e9a12732ed357426b8a07e270415329bfe4fcece8bc4cb740c5aa7572bb46c6b7747dc9ab25ede82c11fe477cbbf466901b16ac198a461266be3f0ab0336f128a925b21e7694b", 0x9a}, {&(0x7f0000000440)="b49c08d0f69b72529af3d474b0882c", 0xf}, {0x0}], 0x3, &(0x7f0000000580)}}], 0x1, 0x4000) ptrace$ARCH_GET_GS(0x1e, r0, 0x0, 0x1004) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) 14m54.910568444s ago: executing program 32 (id=160): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) clock_gettime(0x0, &(0x7f0000000880)) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000000c0)=@rc={0x1f, @none, 0xff}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)="3a7f40860e1505f56228e30bffdd624e52671fe99e4006b71264b7836317fba6100b98cf63498212783a4887b0ca75571aad7063591ed03dbcd16f796fbe75ebc34873ef1e8f18a408d44a385f0c1a42b4bbe86e9a12732ed357426b8a07e270415329bfe4fcece8bc4cb740c5aa7572bb46c6b7747dc9ab25ede82c11fe477cbbf466901b16ac198a461266be3f0ab0336f128a925b21e7694b", 0x9a}, {&(0x7f0000000440)="b49c08d0f69b72529af3d474b0882c", 0xf}, {0x0}], 0x3, &(0x7f0000000580)}}], 0x1, 0x4000) ptrace$ARCH_GET_GS(0x1e, r0, 0x0, 0x1004) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) 12m25.769073051s ago: executing program 1 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0xfffffffffffffffc, 0x5a, 0xfffffffffffffff9}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m24.798923601s ago: executing program 1 (id=487): r0 = socket(0x2b, 0x4, 0x4000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) capget(&(0x7f0000000100)={0x20080522, r3}, &(0x7f0000000180)={0x9, 0xab22, 0xffffff00, 0x1000, 0x87a, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f0000000800)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c707f73697861636c2c63616368653d5c7363616368652c00"]) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001300050026bd7000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="00000000000000000c001a800800048004000880"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) 12m23.768285643s ago: executing program 1 (id=491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x240008c4) 12m23.360392212s ago: executing program 1 (id=493): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8901, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 12m22.194765846s ago: executing program 1 (id=496): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000140)=0x400030, 0x4) 12m18.29622527s ago: executing program 1 (id=500): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x38f9, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000002c0)={0x0, 0xfc, 0x2, &(0x7f00000008c0)={0x0, "cc3df0b97c31c635d41f1db17008852daad3915d105cea6345c0bd492ca56f24ee"}}) sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12m1.067074838s ago: executing program 33 (id=500): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x38f9, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000002c0)={0x0, 0xfc, 0x2, &(0x7f00000008c0)={0x0, "cc3df0b97c31c635d41f1db17008852daad3915d105cea6345c0bd492ca56f24ee"}}) sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m38.296351893s ago: executing program 2 (id=1143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x15, 0x5, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) vmsplice(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x20000044) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000440)={{{@in=@empty, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, 0x0) 7m37.260312635s ago: executing program 2 (id=1144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r1, 0x80044dfd, &(0x7f00000000c0)) 7m34.616593641s ago: executing program 2 (id=1153): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 7m34.332960997s ago: executing program 2 (id=1155): r0 = socket(0x10, 0x80002, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010004, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x24, 0x628f, &(0x7f000000c880)="$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") syz_clone(0x2000000, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) 7m32.697686832s ago: executing program 2 (id=1164): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x4000000000002, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102384, 0x18ff0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$igmp(0x2, 0x3, 0x2) 7m29.270546155s ago: executing program 2 (id=1171): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000001b80)=[{0x2000, 0x0, 0x0, 0x0}, {0x3, 0x2200, 0x0, 0x0}, {0x7, 0x1000, 0x0, 0x0}], 0x3}) 7m28.956822902s ago: executing program 34 (id=1171): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000001b80)=[{0x2000, 0x0, 0x0, 0x0}, {0x3, 0x2200, 0x0, 0x0}, {0x7, 0x1000, 0x0, 0x0}], 0x3}) 6m36.60453275s ago: executing program 7 (id=1293): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000140)={0x200, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x62, 0xa, 0xff00, 0x14}, [@call={0x75}, @exit, @map_fd, @jmp]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x168, 0x111, 0x4b4, 0x0, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0xd}, @empty, [], [0x0, 0xff], 'vlan0\x00', 'vlan1\x00', {}, {}, 0x88}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @common=@unspec=@connlabel={{0x28}, {0x5, 0x5}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7095, 0x5, 0xf461, 'pptp\x00', {0x8000000000000003}}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x300}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4) 6m35.416031496s ago: executing program 7 (id=1296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) request_key(0x0, &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) vmsplice(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x20000044) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000440)={{{@in=@empty, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, 0x0) 6m33.551229286s ago: executing program 7 (id=1298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000b0ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m32.537598577s ago: executing program 7 (id=1301): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) capget(&(0x7f0000000100)={0x20080522, r2}, &(0x7f0000000180)={0x9, 0xab22, 0xffffff00, 0x1000, 0x87a, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f0000000800)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c707f73697861636c2c63616368653d5c7363616368652c00"]) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001300050026bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="00000000000000000c001a800800048004000880"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) 6m31.507680289s ago: executing program 7 (id=1305): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback}}}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000), 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380"], 0x44}}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000180)={0x15}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x6) ioctl$TIOCCONS(r5, 0x541d) 6m29.713545358s ago: executing program 7 (id=1308): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000140)={0x200, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x62, 0xa, 0xff00, 0x14}, [@call={0x75}, @exit, @map_fd, @jmp]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x168, 0x111, 0x4b4, 0x0, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0xd}, @empty, [], [0x0, 0xff], 'vlan0\x00', 'vlan1\x00', {}, {}, 0x88}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @common=@unspec=@connlabel={{0x28}, {0x5, 0x5}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7095, 0x5, 0xf461, 'pptp\x00', {0x8000000000000003}}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x300}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4) 6m12.936642086s ago: executing program 35 (id=1308): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000140)={0x200, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x62, 0xa, 0xff00, 0x14}, [@call={0x75}, @exit, @map_fd, @jmp]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x168, 0x111, 0x4b4, 0x0, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0xd}, @empty, [], [0x0, 0xff], 'vlan0\x00', 'vlan1\x00', {}, {}, 0x88}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @common=@unspec=@connlabel={{0x28}, {0x5, 0x5}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7095, 0x5, 0xf461, 'pptp\x00', {0x8000000000000003}}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x300}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4) 20.749262394s ago: executing program 4 (id=2358): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x8001, 0x0, 0x3, 0x13, 0x4}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000100)=0xd5a2) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0xd5a2) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000280)=0x1) prctl$PR_GET_SECCOMP(0x15) 15.483039057s ago: executing program 5 (id=2370): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000002140)={0x0, @reserved}) 15.248349942s ago: executing program 5 (id=2371): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20, 0x12, 0x5, {0x5, 0x1, '\x00t\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x54840) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x400) 12.329547495s ago: executing program 4 (id=2377): fsopen(&(0x7f00000000c0)='hfs\x00', 0x0) 12.207602677s ago: executing program 4 (id=2378): r0 = socket(0x2b, 0x4, 0x4000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capget(&(0x7f0000000100)={0x20080522, r3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x800, &(0x7f0000000800)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB]) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001300050026bd7000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="00000000000000000c001a800800048004000880"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) 12.048224481s ago: executing program 5 (id=2380): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) munmap(&(0x7f0000552000/0x2000)=nil, 0x2000) userfaultfd(0x80801) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @local}, {0x2, 0x200, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 11.196585859s ago: executing program 4 (id=2383): mknodat$null(0xffffffffffffff9c, 0x0, 0x408, 0x103) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000009c0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x7, 0x4, 0x1, 0x22, 0xfc0, 0x69, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast, {[@generic={0x94, 0x5, "d507c0"}]}}, "14f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb5a28ada390a7b0a58177e7d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5ebe25ed9991203e04d3bdc1e70ef759d8f6ca8744bd9d672c1c9368faa9f538c1e6d3f741c022ddc02e6d3e1881c4ebf6d62df9fc11edf041909cea12539f7b05232c1cd9a748ff7e4a6b7ce7420bab33b3ce6da2742316d128730875e8c1d068a59aef9030e56546effdf83fe2b6fcadf2a73552e77d9cfdb452639cae6aa8f5c7aba74516be0a290f60c30c51e8de293376c07b999d87ac564e47f21f28fda4d277beb21a78ab228bfa2b84461fc73b9a82c9ac29bf066fa44f3f676ef64edab4c6dcaa57c48c0065817b0cbf3263361e93334a400fd74ae663ccc959da070390c833a3dc9381a771d719ae9417cd07b43c30e6a10ae8a59c4fd0a9004cc3f9cb772a64d240d7a0d0dac57f4d7978a304adf48f94ce0b7d6a2dff5d3ff8738a81daad9df5b8d6f361e7032c0d2cc84c73a7a2f07a35b1b26966bb08fe07ecb2438006de2d9ff9b9ca0b94bc44c858e785a261bbfbf5f6cfa78b017d671ee8180312522c8031744591711d0517fb8b120e27fb7752f0a0e85bbf1e7059aa2711bf2355fe98e3df0d7cece9741623e2fa492af8287e0fa75daea5725e0519e70aba398c00ae69c572e327755ba2fa81dc47bdcd4e5b722e0ecc8f92f4cd821d575f5f8421dc2e2994621d17da042fd59a2c3ee0ba998a771e066fcf3646007ef3c731edb9472baaa6a5722b09aa6a4da93d855fee7bc2a4db816880160449c576ed46b4ca1e299595f0116946b841308bbd9c2d8e82ce9bcd9173476523bfa8abb82cbd16ddf2efb4aeb5476ab0f5dadbe2528360195a317f3106d25b016901b65b6eed65062083234f205cf4fefe2ee0af15a86feb5d7473d1cdf202387127171d633c02dc39faca7d69721074c0e7eee28ff71fb9e75d80d8fa6bc70a50bd71f60569cb9a30b0cf5599c790353590fd3fb91f77ec89257faa66ff3d13913906166604af616d8de1b92b9cc459a05daad927ebf023c53afdf5ebad5e1d73632777374dfe33b0b90e0cc4cf85bbba301ffe94b26b9f792bdde6d5a9c644bd15ad45c373f768a3a3868ed96c112f2429a27a97bd7756cec800e4ed644a22a81f1010ec376a5726e530d5bcecc635db756ff9a6e2ee89248949d52f88c84cf71be5428a4675430ecef15f1c8ff6a786e5b74eeb76fd26b53dd6287b8e9134b8096b9425f650039af1b3465ab57662ce70c5e29c559e6ffed62f731fd95d31c2f7fa57d98a8aa0b30e454ea73d4f8ba1242bb511e2d0d0e7a764f87cc6b208f85b79b980285cd890dacf77dc2668e3c2ad211998f5e3f15be32a3600a2c59821e7e48d46974d17d642ff7b3f1334057c88bea888120095582d257ccaa903d341c850bd2b446c31980acc6f02f0c559a895614f62aea0eee4a904bd1b35193fd2cbff4354834b5f7e8698bad049cfea27a76ec83dfbe2071ff1523bf127713b062ee3ebf6986bd12c31ab386a490734a47466cdde3a82dc7535b1b068a1aa585322c4bf8dd8cf0ca2b8eb56fcf98cf8129148142344d00fca2cd5611e42c607168abcf92c94be28c15be3485375290b825136e0f4047212a866831bc670b9b038355e0c976673b80584c640ec6681ae724ea58685581d493c809fc8861c60ff245cdc486228b0c3c0ac562a3fd777b7d3d43dcc4cf031b70a101bc64a3727d1f5890890070dfc14847f225a82f5a1b3c702970a25a672aa8c4a24bd7d414bb52c839611e48afe3a9022aa9eeedb2dc4cb20aaeb244b0e438f28d3c6cac9fb16171a8b66b93e48d1afb3feae84bb6a4ed0d00ba862dc6fd474fe210faa0d6d51132dcdc4dcdd5d4f94f1ba7dc8b5712188b0f80bd7f6cc211c1a2796d5c8568a97dbfb9e1bcc6e43858342767ffe5d648873215971e968382870afb0f0b33e3a0dbfe70b982abd73b340abaedd3f71ea30c90544b6a3fb8ce0c240d0bc9da7c12a927223185e5ba907d93c30089ca68525983f04ff85ef98314f69e5c9b4a388ca67813fcd0a9b2c083defac488cb3f7e4ebabc7bf6f4f7601a6c4c1a8d10c2fb13f6863c29cf3dcb8bd56768bb0a9e642bb6b94e5957deaeab3e24223e03764bbb16a7084a05735a8d188cbfabcccfce95848a804b56bd5e2051b1755a0e4262044ea2b037113af2e4e90bfed33bdcdc33824245cad3f94c4c9ea0f414a539c36b55d423fbfe4461774696012ee12e9d9c1d645d6dd72b57cca7e8526cc98b2f9e97e23503428642bd8793a87ab120f20092b6e4cbcbb52ec9a406dbb893e303077b675ecbd48e6bec13b700ab09d55e17c8815077a31cd75057c9cd65e7a881924a50bed228517be9c0abb19c3d24c458160405dab3ad0deb989a4e1b2e509b7fa57bcddbe8292512c9656df46acc62a028bb484ad0a6548ed9efdff0e83ca82a1d4c86c7d8810d1e4ff1846d1dc8e80f8206c6834bf9c433bc92ce73560d22ba0c8030b694d737fa0f4deb8b59ea9a35147efc891e993b6489a1ed86bbbf159c590bad0b5892c72383f5afedd58b7fa5e11271b35381dbf4a14daf70505b346cbd83b3258b1b413f7247d04e30e1a9eddbf82e8a25a70903c21e6a16ea34f6d7fe3cad0d51812e827596d50549153e394c4926e5e87b78d0faf440472c12929bb7fd49c959e5b06eb48c51915d80f003c2019525c91bdd4efc0e58d7811b083af3164f254c9c6cf3f8345525770033901308d02a9439131e632d073705e7a28312f8c1ccbeec064113009a34f177d7cd953c9a635f6bb12f0ed871a1d80ba86011e13df3220bda5e49c7c3d70f8c49397f69720f31b38cac3ddc7758f7bd1c99dca967a5aa5c788faf18eb2d996be835c3e5901349104ea63bdf1c195f4d29b8c63a0dcf58d501a102b8ac34709e82c0b0d19f762b1d3c40f01e0cb05b0909b90fb587ea260cdc0a043ac67f649486d3c57b9dbf94e44334fd8034218f82c937e6b8c97b627e8803cab0a27f33ebf0e447ab198cdbfc81371fdb6061dcf8c87c24084614ddfdc71cc2a5324e0ea9a1f7cb21ec46d7e5fd936a2a9224e5fe3c39051eb7269f51832751a36814db4aa01eb1a79eca73480c12b1d7f79bb20ba7b957f7e8343af7c38c81edb6aa48eeb82e17f47f5335f4086ef2cb57c4e70e847a77362271e16158e010f95c3227162caa7f911e94893d3bdf17fb914dddddf7f982ae898914378e3f5a4bc810f246d84ae977290d20773761b8d52bb493076052022586b8ce915b1f4c8f6ef6093e3e12f56e642b1cde9dda220fd7fb26f40ba08899e0217cf2a0883ab552c9432a7d60c6316f936b57c271e13b35d5cc4f20dfbe5fb1b13e916e62cd39e5bec37d0885f6fb5523860f8ae09592d32574e3d9c570c651fa9f4db0d4b9fbd002af8b6919d7587504989123533804e4a496def7d1d9740ec83e0670233a732d55425014276efcf6b6634c5ed5a97f25deaab14fe934efe0eb13992ef48e29a7f190f253d3cce9929f3183c01c72315b6a36998016af08f84155ca1ad18acf1a54d23fe605957f7016873187a47d7ded54667d3ba4aab222319c5968d0192a1af47be415fce025329b81d5034d2c608ddb108d7acac2c145bf4abadb97cc6a05398c04a8385dab86979a0c857d2b27eeb7bdcd154e9f3ea7e394d3a41d81b0410356e252f5d0fba812d5099ede64b20d4a865fc359092ed619f0e3e6728acc69ce41b585e3c54f73fac28c38aa41ea53440cec35cebf03caaef987b18d9942c644c3f6a389970f3d7d18db8ea1f2c5ab2c0bb84478ce5e439c10749b278dfe8348391cb2bd4c7634a3ac813a6ea36f95bdd80c87fae037775834eb5029854cfe59c99a9597944e7cbce895d14ed0ee8b84ea586e77dc12fe709cf9a083c2a4806913d8914b379b4ecf27525e84fc1df3ff520f79ec244da60f680b59d848e591c89f069cec4b497d9579a86c19a710c5cc00239d6cf3c8596c924561843ae20ad5cac9bc92bf42157ab35329cd62242fec48117f1f6f801c68f9f3ec9677875916ceea7795dfbdd23121cfb3bb1813fe1ee14ddbd5a45985bc496449f82a2cc200905eaaadd1333bf79128459f47b580fdd5a10787094b08418c1dac843ab0e15d824aff2b3d242fe78d9762d39c713ded38cf972c227831ba6fb963c956458eef5689180baa3ef2aef3d3e57c63c2d4509759fb711dfe2772341ae308a7892e583be0917ef5355bfe68becce5bc5971733ca260055ee6481c0998698a49a1f03a0f537145d051179601c04cd887a64917480ba96ac046638dd6977599f72a7235506737e7e81a03095cc7e102586ec33b79eff0d1dc2b34912fa89dfb434f0256be53f6695685688af05361d3b6954d416f4be06b9ab7846a44ce25b39c7c79012b2f16159fdf96a3998098691364dbbf930a8e224701ee6f8b899fcde632077a03f649bcfad6f506924db17558b708d38d0b286d6f16f286b26cbf11094def0d017eda65328fe2a24d129bd7ac28679f2a98999e6ae508c3bb31b4e384de7593cf8ac46727cb8a07c30d97c87b638f154e1ae2223a8158e292d9467049cd9115051d3dc0c090f9e9ff6cc425f2fbcd3a4471af5182c0e45485194b6627839d356adf2cf7159b6360f7983a5c50f5cdfcf253cc40a413ed280b9ce7d9d70bef8233fbc8f6e0f5e9100f110519088ce84b41d861171f607338f5acf0664f56c88dd50e86851f59e81c2601f66ee9ced3ecae2dcbd37c55f6058390d6237837ff601900971806e987abbca25221d08f7ccb11a41b3a6246efffaff359e04fa52d7ac630f7d96bc5976817f8a347ddacfe079da0633d855343884bf4d2eb58638cd29d499de7af8490a6d9db3922363839371e819e49e54ef7dc953aa8125e053e3689a22d785c3c1729936eedccf682fd56e0aa6069c1ac88d46b0c06c1f43e631f74f9c8b4557678e90ad7788d25caca67b70da4470cc8d28606acf1fed5d4585085449ced76b1a871ebe8ede8d86570d505010c4f6f4656d2195b6190a1dfe423860b5f767f96c1e0fbf1194b9cab5c87dc2f6ce5f408681e2af319ada237e4232cd356574d7a5edbf7c292acc0c0ca04303614e46b6875f2b58f8b400fda08e24020739c2493ecf7c5d0695ecac14e486bc36a575e6a765d43313c4a4c43c5cc32488c045466504cc690f6b14f12e0a669b701d305a056c610b5f3e696e002bd5b940abac2edde34dbadc88881a5a5fc1d7db4389f33eed574ff8ed69eaf3a656635963e297cf2915c2da4bc7739c5d24017c4757a4aaca2b3323bd4fefefc004d2a675a40b7b31a221d825f79fc12f12b9d6637ca48fc2b55c9e982db14d8cce59172d7d7ee6a1f98a2839d263d7382e81ee306d27e7463a3a0cc71c74df84060ca69331afa4e19e0b124ddf430f4323e682d99f7d77854ba416162182dc161a41af02c75eef1688bef190ca86f712994db24d81831cfe4f54229ba2f5df634e45c2d2980cec96d8aefecdb35dcd7fb360c6117af12bcf894ada94069ba44814334ba4b4d487a866e484b45d7348e07a49460ab64c89f45f8b6f74507179fb6b5f03c202dedbc7cc70723ddb56a"}}, 0xfce) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) r3 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) mknod$loop(0x0, 0xfff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x2c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0, 0x1}, {0xfff2, 0xffff}, {0x0, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x2c}}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x49d8, 0x1, 0x5, 0x1, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r4}) close(0x3) 8.194435674s ago: executing program 4 (id=2386): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x0, 0x91, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0) read$msr(r1, &(0x7f000004b680)=""/102392, 0x18ff8) r2 = creat(0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x10005}, &(0x7f0000000380)=0x8) dup2(r2, r2) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={'\x00', 0x842, 0xa, 0x3, 0x40000000, 0x800000000000010}) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 7.044703548s ago: executing program 8 (id=2390): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 6.857124362s ago: executing program 8 (id=2392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) sendmsg$inet_sctp(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000014c0)="87", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x4048000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) socket$pppoe(0x18, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) pipe(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="919b2cbd7000fedbdf25010000000400030004000280a7bf924f077c0c681ab09beede77f10ca58430e3dd8a52990828e82543295d5bffea64bc053950caaf275dbbe6d57d078c4fc082eb7ca49e957b5c6f64eef2dd728ab495a42710134df81edd1b60bcca36271649fc087b0e4d1709c9beb292a41900ee8f7901760094c6f2c1a7bbd45e0d592917937a9b5487ddc9ea83d0257ec147af30b92963966e1c7bf2de6902b81046e06e43d113e79a763dce8331db59d0a8e0"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 4.382607335s ago: executing program 8 (id=2396): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000094}, 0x0) 4.109805701s ago: executing program 8 (id=2400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.006013403s ago: executing program 8 (id=2402): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 3.399821397s ago: executing program 8 (id=2404): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$midi(0x4, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x5b, &(0x7f0000000300)=@string={0x5b, 0x3, "96c6744dc98588583069a3dcc0fc241403a90cd22ada9e6ceb3e21c5b918baf5e1cde63d3fb307f5a085c3a1667fc7a231b76fa1cc0ef8d9a7f8cb9778158796195aed7a12c7aaebfa65eca2b1343904f3bcb1aae80206857c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}, {0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.208338691s ago: executing program 3 (id=2405): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000002600)=""/4113, 0x1011) 2.938448837s ago: executing program 5 (id=2406): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) 2.536156185s ago: executing program 4 (id=2407): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x5c1803) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x3ff) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340)}}, 0x18) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r2, 0x0, 0x0) 2.409249878s ago: executing program 6 (id=2408): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r2, r4}) sendmmsg$inet(r5, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000180)={0x4, 0x7c, 0x2, 0xfc, 0x4, 0x7, 0x9}, 0xc) syz_open_dev$sndmidi(&(0x7f0000000340), 0x3, 0x0) 2.283396891s ago: executing program 3 (id=2409): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x468, 0x3fe, 0x50565559, 0x4, 0x8, 0x46, 0x7, 0x3, 0x0, 0x2, 0x0, 0x7}}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x81) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1.506266598s ago: executing program 6 (id=2410): read$char_usb(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xffffffff, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 1.308261242s ago: executing program 6 (id=2411): mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) 1.272512033s ago: executing program 3 (id=2412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.191353504s ago: executing program 6 (id=2413): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) getpid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001e00050300000008fedbdf250000000008", @ANYRES32=0x0, @ANYRES32], 0x24}, 0x1, 0x8000000}, 0x0) 1.096250417s ago: executing program 3 (id=2414): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 981.214569ms ago: executing program 3 (id=2415): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24008004) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x24, 0x7, 0xa, 0x201, 0x0, 0x0, {0xf, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x480d5}, 0x1400c084) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8020) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r3, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 938.18451ms ago: executing program 6 (id=2416): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000012c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xd, 0x1, 0x88}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) 908.69292ms ago: executing program 5 (id=2417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) 323.908633ms ago: executing program 5 (id=2418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000100)={0xa, 0x100, 0xdf, @empty}, 0x1c, 0x0}}], 0x6a9, 0x4008004) 323.559603ms ago: executing program 3 (id=2419): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x5c1803) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106, 0x1}}, 0x20) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x134, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x4d4, 0x6c}, @in6=@local, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x8}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x3503, 0x0, 0x2, 0x78, 0xfffffff7, 0x8, 0x2}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 0s ago: executing program 6 (id=2420): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r2, r4}) sendmmsg$inet(r5, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000180)={0x4, 0x7c, 0x2, 0xfc, 0x4, 0x7, 0x9}, 0xc) syz_open_dev$sndmidi(&(0x7f0000000340), 0x3, 0x0) kernel console output (not intermixed with test programs): read capabilities [ 597.229541][ T14] usb 6-1: device descriptor read/64, error -71 [ 597.496106][ T9392] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 597.519512][ T14] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 597.558177][ T8045] usb 5-1: USB disconnect, device number 33 [ 597.638041][ T9394] loop6: detected capacity change from 0 to 512 [ 597.679665][ T14] usb 6-1: device descriptor read/64, error -71 [ 597.772933][ T9394] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 597.793710][ T9394] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 597.809617][ T14] usb usb6-port1: attempt power cycle [ 597.855130][ T9394] EXT4-fs (loop6): unmounting filesystem. [ 598.887017][ T14] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 598.940041][ T14] usb 6-1: device descriptor read/8, error -71 [ 599.229518][ T14] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 599.270162][ T14] usb 6-1: device descriptor read/8, error -71 [ 599.337924][ T9414] overlayfs: failed to clone lowerpath [ 599.361841][ T9409] loop2: detected capacity change from 0 to 32768 [ 599.368804][ T9414] overlayfs: failed to clone lowerpath [ 599.399285][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1159'. [ 599.425704][ T14] usb usb6-port1: unable to enumerate USB device [ 599.638671][ T27] audit: type=1800 audit(1783541488.259:32): pid=9409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1155" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 600.031737][ T4275] non-latin1 character 0x3ff found in JFS file name [ 600.254914][ T4275] mount with iocharset=utf8 to access [ 600.977025][ T4275] read_mapping_page failed! [ 601.009227][ T4275] ERROR: (device loop2): txCommit: [ 601.009227][ T4275] [ 601.063407][ T4275] ERROR: (device loop2): remounting filesystem as read-only [ 602.287236][ T9441] syz.5.1167 (9441): drop_caches: 2 [ 603.238448][ T4362] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.348852][ T4362] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.462462][ T4362] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.575242][ T4362] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.002647][ T4362] tipc: Left network mode [ 604.633523][ T9470] netlink: 'syz.6.1177': attribute type 9 has an invalid length. [ 604.658654][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 604.675017][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 604.686298][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 604.699915][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 604.709071][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 604.717135][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 605.181679][ T9487] syz.4.1179 (9487): drop_caches: 2 [ 606.017885][ T9492] loop4: detected capacity change from 0 to 1024 [ 606.050430][ T9492] EXT4-fs: Ignoring removed i_version option [ 606.056609][ T9492] EXT4-fs: Ignoring removed bh option [ 606.168190][ T9492] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 606.510592][ T9472] chnl_net:caif_netlink_parms(): no params data found [ 606.689682][ T27] audit: type=1800 audit(1783541495.279:33): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1181" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 606.883231][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 607.061112][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 607.639913][ T4317] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 607.859548][ T4317] usb 4-1: Using ep0 maxpacket: 32 [ 607.872890][ T4317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.987024][ T4317] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 608.023702][ T4317] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 608.073884][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.200353][ T4317] usb 4-1: config 0 descriptor?? [ 608.981919][ T9472] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.116119][ T9472] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.486871][ T9472] device bridge_slave_0 entered promiscuous mode [ 609.537749][ T4362] device hsr_slave_0 left promiscuous mode [ 609.560946][ T4362] device hsr_slave_1 left promiscuous mode [ 609.585071][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 609.731431][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.766248][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.792289][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.807012][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.845798][ T4362] device dummy0 left promiscuous mode [ 609.859299][ T4362] bridge0: port 3(dummy0) entered disabled state [ 609.882118][ T4362] device bridge_slave_1 left promiscuous mode [ 609.904162][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.928681][ T4362] device bridge_slave_0 left promiscuous mode [ 609.947332][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.037391][ T4362] device veth1_macvtap left promiscuous mode [ 610.049799][ T4362] device veth0_macvtap left promiscuous mode [ 610.066253][ T4362] device veth1_vlan left promiscuous mode [ 610.072374][ T4362] device veth0_vlan left promiscuous mode [ 610.552740][ T4317] usb 4-1: USB disconnect, device number 16 [ 611.659516][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 611.790972][ T4362] device team_slave_1 left promiscuous mode [ 611.812149][ T4362] team0 (unregistering): Port device team_slave_1 removed [ 611.988908][ T4362] device team_slave_0 left promiscuous mode [ 612.037593][ T4362] team0 (unregistering): Port device team_slave_0 removed [ 612.466575][ T4362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.570502][ T4362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.302556][ T4362] bond0 (unregistering): Released all slaves [ 613.467435][ T9472] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.478328][ T9472] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.486372][ T9472] device bridge_slave_1 entered promiscuous mode [ 613.500971][ T9545] netlink: 'syz.4.1193': attribute type 9 has an invalid length. [ 613.684754][ T9472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.719547][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 613.792464][ T9472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.888438][ T9596] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1202'. [ 614.675489][ T9472] team0: Port device team_slave_0 added [ 614.711495][ T9472] team0: Port device team_slave_1 added [ 614.809315][ T9472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.836791][ T9472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.969903][ T9472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.090202][ T9472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.291822][ T9472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.494593][ T9472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.220488][ T9620] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 617.232383][ T9620] UDF-fs: Scanning with blocksize 512 failed [ 617.264415][ T9472] device hsr_slave_0 entered promiscuous mode [ 617.283605][ T9620] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 617.291860][ T9472] device hsr_slave_1 entered promiscuous mode [ 617.298288][ T9620] UDF-fs: Scanning with blocksize 1024 failed [ 617.308369][ T9620] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 617.316128][ T9620] UDF-fs: Scanning with blocksize 2048 failed [ 617.333446][ T9620] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 617.341838][ T9620] UDF-fs: Scanning with blocksize 4096 failed [ 617.355526][ T9472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.386382][ T9472] Cannot create hsr debugfs directory [ 617.921801][ T9472] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 617.932647][ T9472] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 617.967682][ T9472] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 618.005025][ T9472] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 618.136376][ T9472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.162215][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 618.241773][ T9637] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 618.328114][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 618.659823][ T9472] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.687408][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 618.749777][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.785019][ T4802] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.792265][ T4802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.853056][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 618.896830][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 618.935846][ T4802] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.943048][ T4802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.990854][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 619.029638][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 619.066899][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 619.102709][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 619.138928][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 619.179455][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 619.218920][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 619.249247][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 619.288959][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 619.313242][ T9472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 619.349298][ T9472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 619.386187][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 619.402468][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 619.432993][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 620.388122][ T9662] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1214'. [ 621.437171][ T9668] loop4: detected capacity change from 0 to 32768 [ 621.667093][ T9668] XFS (loop4): Mounting V5 Filesystem [ 622.886755][ T9668] XFS (loop4): Ending clean mount [ 622.960016][ T9668] XFS (loop4): Quotacheck needed: Please wait. [ 623.534578][ T9668] XFS (loop4): Quotacheck: Done. [ 623.583429][ T9689] Unknown options in mask 5 [ 623.845239][ T27] audit: type=1800 audit(1783541512.449:34): pid=9692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1215" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 624.139853][ T4279] XFS (loop4): Unmounting Filesystem [ 624.151030][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 624.159611][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 624.193875][ T9472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.384947][ T9717] overlayfs: failed to clone lowerpath [ 625.471112][ T9718] overlayfs: failed to clone lowerpath [ 628.052856][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 628.081411][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 628.128393][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 628.168408][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 628.393965][ T9472] device veth0_vlan entered promiscuous mode [ 628.419059][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 629.082597][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 629.226463][ T9472] device veth1_vlan entered promiscuous mode [ 629.243335][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.249758][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.324796][ T9763] loop5: detected capacity change from 0 to 256 [ 629.340806][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 629.540559][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 629.566046][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 629.631649][ T9472] device veth0_macvtap entered promiscuous mode [ 629.679252][ T9472] device veth1_macvtap entered promiscuous mode [ 629.743163][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.839581][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.900573][ T9768] loop3: detected capacity change from 0 to 32768 [ 629.909417][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.919918][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.931294][ T9472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.938957][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 629.973579][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 629.982873][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 629.992246][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 630.003960][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.063542][ T9768] XFS (loop3): Mounting V5 Filesystem [ 630.143477][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.179908][ T9472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.204664][ T9472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.235450][ T9768] XFS (loop3): Ending clean mount [ 630.250726][ T9768] XFS (loop3): Quotacheck needed: Please wait. [ 630.295062][ T9472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.332032][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 630.347650][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 630.358624][ T9768] XFS (loop3): Quotacheck: Done. [ 630.472520][ T9472] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.522470][ T9472] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.531397][ T9472] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.541502][ T9472] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.676248][ T27] audit: type=1800 audit(1783541519.279:35): pid=9789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1233" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 631.117379][ T4284] XFS (loop3): Unmounting Filesystem [ 631.143528][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.251010][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.314724][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 631.502645][ T4468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.533403][ T4468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.541229][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 632.155107][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1173'. [ 633.640228][ T9813] tipc: Started in network mode [ 633.645250][ T9813] tipc: Node identity 4246, cluster identity 4711 [ 633.689420][ T9813] tipc: Node number set to 16966 [ 633.922913][ T9805] device team0 entered promiscuous mode [ 633.928518][ T9805] device team_slave_0 entered promiscuous mode [ 635.691111][ T9805] device team_slave_1 entered promiscuous mode [ 637.166784][ T9838] loop5: detected capacity change from 0 to 1024 [ 639.163373][ T9838] hfsplus: failed to load extents file [ 641.691130][ T9860] loop5: detected capacity change from 0 to 32768 [ 642.203513][ T9860] XFS (loop5): Mounting V5 Filesystem [ 643.138222][ T9860] XFS (loop5): Ending clean mount [ 643.634135][ T9860] XFS (loop5): Quotacheck needed: Please wait. [ 643.927134][ T9860] XFS (loop5): Quotacheck: Done. [ 644.069128][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1255'. [ 644.161738][ T5087] XFS (loop5): Unmounting Filesystem [ 645.492176][ T9946] loop5: detected capacity change from 0 to 256 [ 648.376981][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1269'. [ 648.579005][ T9978] loop3: detected capacity change from 0 to 32768 [ 648.670647][ T9978] XFS (loop3): Mounting V5 Filesystem [ 648.819490][ T9978] XFS (loop3): Ending clean mount [ 648.864851][ T9978] XFS (loop3): Quotacheck needed: Please wait. [ 649.027930][ T9978] XFS (loop3): Quotacheck: Done. [ 649.219509][ T14] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 649.499416][ T14] usb 6-1: Using ep0 maxpacket: 32 [ 649.506682][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.527445][ T14] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 649.567499][ T14] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 649.587274][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.094646][ T14] usb 6-1: config 0 descriptor?? [ 650.103567][ T14] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 651.590851][T10046] Unknown options in mask 5 [ 652.322652][ T5577] usb 6-1: USB disconnect, device number 18 [ 653.212392][ T4284] XFS (loop3): Unmounting Filesystem [ 655.522868][T10102] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1291'. [ 655.762187][T10108] loop3: detected capacity change from 0 to 256 [ 655.839415][ T5577] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 656.029585][ T5577] usb 5-1: Using ep0 maxpacket: 32 [ 656.045254][ T5577] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.071464][ T5577] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.086995][T10113] Unknown options in mask 5 [ 656.114235][ T5577] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 656.304969][ T5577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.485810][ T5577] usb 5-1: config 0 descriptor?? [ 656.555079][ T5577] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 659.109684][ T4349] usb 5-1: USB disconnect, device number 34 [ 661.137082][T10167] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 661.938206][T10171] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1305'. [ 663.209469][ T4328] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 663.552141][T10194] loop4: detected capacity change from 0 to 32768 [ 663.814368][ T4328] usb 6-1: Using ep0 maxpacket: 32 [ 663.823857][ T4328] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.799838][ T4328] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 664.812992][ T4328] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 664.822177][ T4328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.150185][ T4328] usb 6-1: config 0 descriptor?? [ 665.299625][T10197] Unknown options in mask 5 [ 665.325345][ T4328] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 665.339511][T10194] XFS (loop4): Mounting V5 Filesystem [ 665.425372][T10194] XFS (loop4): Ending clean mount [ 665.433668][T10194] XFS (loop4): Quotacheck needed: Please wait. [ 666.010816][T10194] XFS (loop4): Quotacheck: Done. [ 666.408483][ T27] audit: type=1800 audit(1783541555.029:36): pid=10223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1312" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 667.238707][ T4368] usb 6-1: USB disconnect, device number 19 [ 667.683625][T10240] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 668.401515][T10238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1318'. [ 675.837325][ T4279] XFS (loop4): Unmounting Filesystem [ 675.840853][T10301] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1332'. [ 681.366040][T10352] loop5: detected capacity change from 0 to 256 [ 682.385442][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 682.397344][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 682.399825][T10367] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1348'. [ 682.414474][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 682.422452][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 682.430436][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 682.438572][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 683.643736][T10364] chnl_net:caif_netlink_parms(): no params data found [ 684.451516][T10364] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.460339][T10364] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.468605][T10364] device bridge_slave_0 entered promiscuous mode [ 684.477398][T10364] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.485125][T10364] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.500531][T10364] device bridge_slave_1 entered promiscuous mode [ 684.519510][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 684.556644][T10364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.612168][T10364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.689269][T10364] team0: Port device team_slave_0 added [ 684.739188][T10364] team0: Port device team_slave_1 added [ 684.797298][T10364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.819497][ T126] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 684.838536][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.906970][T10364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.964075][T10364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.999143][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.129852][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 685.155710][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.217841][ T126] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 685.480597][T10364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.536970][ T126] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 685.717634][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.748797][ T126] usb 5-1: config 0 descriptor?? [ 685.823321][ T126] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 686.686563][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 686.823340][T10364] device hsr_slave_0 entered promiscuous mode [ 686.859824][T10364] device hsr_slave_1 entered promiscuous mode [ 686.896033][T10364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.932768][T10364] Cannot create hsr debugfs directory [ 688.556197][ T4374] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.612886][ T8046] usb 5-1: USB disconnect, device number 35 [ 688.789733][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 688.858575][ T4374] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.093700][ T4374] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.216886][ T4374] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.809232][ T4374] tipc: Left network mode [ 689.857701][T10364] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 691.223912][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.230514][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 691.249192][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.381993][T10364] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 691.400722][T10472] loop3: detected capacity change from 0 to 256 [ 692.701388][T10364] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 692.723948][T10364] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 693.170162][T10364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.427647][T10364] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.437846][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 693.462509][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 693.556324][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 693.576705][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 693.595850][T10438] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.603103][T10438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.622650][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 693.631813][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 693.684114][T10438] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.691418][T10438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.749859][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 693.762748][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 693.891689][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 693.910259][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 693.939794][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 694.139851][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1371'. [ 694.228784][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 694.271349][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 694.298022][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 694.394944][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 694.422533][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 695.440943][T10364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 695.456231][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 695.465204][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 695.481592][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 695.832519][T10530] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1376'. [ 698.195736][ T4389] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 698.396571][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 698.417980][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 698.439567][ T4389] usb 6-1: Using ep0 maxpacket: 32 [ 698.447342][ T4389] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 698.467599][T10364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.484284][ T4389] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 698.493960][ T4389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.515441][ T4389] usb 6-1: config 0 descriptor?? [ 698.571394][ T4389] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 698.582357][ T4374] device hsr_slave_0 left promiscuous mode [ 698.612677][ T4374] device hsr_slave_1 left promiscuous mode [ 698.772716][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.810337][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.858636][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.873473][T10574] loop4: detected capacity change from 0 to 256 [ 698.889570][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.911211][ T4374] device bridge_slave_1 left promiscuous mode [ 698.917526][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.030280][ T4374] device bridge_slave_0 left promiscuous mode [ 699.036577][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.146426][ T4374] device veth1_macvtap left promiscuous mode [ 699.166694][ T4374] device veth0_macvtap left promiscuous mode [ 699.173160][ T4374] device veth1_vlan left promiscuous mode [ 699.179017][ T4374] device veth0_vlan left promiscuous mode [ 700.637888][ T4374] device team_slave_1 left promiscuous mode [ 700.649117][ T4374] team0 (unregistering): Port device team_slave_1 removed [ 700.704422][ T4374] device team_slave_0 left promiscuous mode [ 700.713671][ T4374] team0 (unregistering): Port device team_slave_0 removed [ 700.769910][ T4374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.824838][ T4389] usb 6-1: USB disconnect, device number 20 [ 700.856156][ T4374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.077451][ T4374] bond0 (unregistering): Released all slaves [ 703.219301][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1384'. [ 704.207134][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 704.225404][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 704.276242][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 704.302631][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 704.368955][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 704.379820][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 704.432330][T10364] device veth0_vlan entered promiscuous mode [ 704.471842][T10364] device veth1_vlan entered promiscuous mode [ 704.571159][T10364] device veth0_macvtap entered promiscuous mode [ 704.607836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 704.626169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 704.678896][T10364] device veth1_macvtap entered promiscuous mode [ 704.719855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 704.767973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 705.274043][T10364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.410070][T10364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.480403][T10364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.491151][T10364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.542154][T10364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.550843][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 705.571809][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 705.624664][T10364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.645990][T10364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.666940][T10364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.698109][T10364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.720860][T10364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.738947][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 705.764642][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 705.789942][ T2167] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 705.812795][T10364] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.848015][T10364] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.857797][T10364] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.867266][T10364] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.979454][ T2167] usb 4-1: Using ep0 maxpacket: 32 [ 705.986499][ T2167] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 706.022687][ T2167] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 706.059021][ T2167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.131455][ T2167] usb 4-1: config 0 descriptor?? [ 706.157357][ T5930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.165557][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.181572][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.183165][ T5930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.238968][ T5941] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 706.899908][ T2167] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 706.950103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 707.027075][T10686] loop5: detected capacity change from 0 to 256 [ 708.091109][T10698] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 708.098788][T10698] UDF-fs: Scanning with blocksize 512 failed [ 708.107850][T10698] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 708.115619][T10698] UDF-fs: Scanning with blocksize 1024 failed [ 708.124177][T10698] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 708.133762][T10698] UDF-fs: Scanning with blocksize 2048 failed [ 708.187193][T10698] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 708.196286][T10698] UDF-fs: Scanning with blocksize 4096 failed [ 709.384473][T10706] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1403'. [ 709.414585][ T4349] usb 4-1: USB disconnect, device number 17 [ 711.865347][T10757] netlink: 'syz.3.1413': attribute type 4 has an invalid length. [ 711.873183][T10757] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1413'. [ 713.068945][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1415'. [ 714.394442][T10796] loop4: detected capacity change from 0 to 256 [ 718.015675][T10831] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 718.967368][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1427'. [ 719.130999][T10838] netlink: 'syz.5.1425': attribute type 4 has an invalid length. [ 719.165196][T10838] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1425'. [ 721.207011][T10877] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 721.222211][T10877] UDF-fs: Scanning with blocksize 512 failed [ 721.263629][T10877] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 721.271637][T10877] UDF-fs: Scanning with blocksize 1024 failed [ 721.280318][T10877] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 721.288131][T10877] UDF-fs: Scanning with blocksize 2048 failed [ 721.296295][T10877] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 721.304047][T10877] UDF-fs: Scanning with blocksize 4096 failed [ 723.979539][T10909] netlink: 'syz.3.1442': attribute type 4 has an invalid length. [ 724.039441][T10909] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1442'. [ 725.976167][T10941] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 725.984648][T10941] UDF-fs: Scanning with blocksize 512 failed [ 726.098708][T10941] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 726.106424][T10941] UDF-fs: Scanning with blocksize 1024 failed [ 726.115247][T10941] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 726.122947][T10941] UDF-fs: Scanning with blocksize 2048 failed [ 726.130806][T10941] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 726.138484][T10941] UDF-fs: Scanning with blocksize 4096 failed [ 726.939100][T10944] netlink: 'syz.4.1449': attribute type 9 has an invalid length. [ 727.967849][T10961] netlink: 'syz.6.1456': attribute type 4 has an invalid length. [ 727.976063][T10961] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1456'. [ 730.741579][T10997] UBIFS error (pid: 10997): cannot open "ubifs", error -22 [ 731.434478][T11007] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 734.017350][T11040] UBIFS error (pid: 11040): cannot open "ubifs", error -22 [ 734.224360][T11047] loop8: detected capacity change from 0 to 1024 [ 734.973910][T11047] EXT4-fs: Ignoring removed i_version option [ 734.980088][T11047] EXT4-fs: Ignoring removed bh option [ 735.080754][T11056] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 735.159985][T11047] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 735.941240][ T27] audit: type=1800 audit(1783541624.569:37): pid=11064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1477" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 736.565988][T10364] EXT4-fs (loop8): unmounting filesystem. [ 736.746683][T11077] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 738.134616][T11104] UBIFS error (pid: 11104): cannot open "ubifs", error -22 [ 739.097939][T11109] loop4: detected capacity change from 0 to 1024 [ 739.177268][T11109] EXT4-fs: Ignoring removed i_version option [ 739.201435][T11109] EXT4-fs: Ignoring removed bh option [ 739.269142][T11109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 739.463960][T11123] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 740.300108][ T27] audit: type=1800 audit(1783541628.889:38): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1496" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 740.625233][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 741.244437][T11146] loop4: detected capacity change from 0 to 512 [ 741.284521][T11146] EXT4-fs: inline encryption not supported [ 741.499560][T11146] EXT4-fs: Ignoring removed orlov option [ 741.505288][T11146] EXT4-fs: Ignoring removed mblk_io_submit option [ 741.813021][T11146] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1504: corrupted in-inode xattr [ 741.829876][T11146] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1504: couldn't read orphan inode 15 (err -117) [ 741.882421][T11146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 743.075621][T11172] UBIFS error (pid: 11172): cannot open "ubifs", error -22 [ 743.990333][T11179] device syzkaller0 entered promiscuous mode [ 744.206221][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 745.655180][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1513'. [ 745.674786][T11185] tipc: Started in network mode [ 745.698356][T11185] tipc: Node identity 4246, cluster identity 4711 [ 745.728199][T11185] tipc: Node number set to 16966 [ 745.771405][T11192] device team0 entered promiscuous mode [ 745.929960][T11192] device team_slave_0 entered promiscuous mode [ 745.936351][T11192] device team_slave_1 entered promiscuous mode [ 748.711378][T11245] UBIFS error (pid: 11245): cannot open "ubifs", error -22 [ 749.580703][T11250] device syzkaller0 entered promiscuous mode [ 750.119783][T11261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1528'. [ 750.383512][T11263] loop4: detected capacity change from 0 to 32768 [ 750.608451][T11263] XFS (loop4): Mounting V5 Filesystem [ 750.953977][T11263] XFS (loop4): Ending clean mount [ 751.378618][T11263] XFS (loop4): Quotacheck needed: Please wait. [ 751.635563][T11263] XFS (loop4): Quotacheck: Done. [ 752.105185][ T27] audit: type=1800 audit(1783541640.539:39): pid=11294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1529" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 752.152026][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.158904][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.161949][ T4279] XFS (loop4): Unmounting Filesystem [ 753.749456][ T4328] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 754.359453][ T4328] usb 5-1: Using ep0 maxpacket: 32 [ 754.366346][ T4328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.400634][ T4328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.417405][ T4328] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 754.433229][ T4328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.461373][ T4328] usb 5-1: config 0 descriptor?? [ 754.601086][T11328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1541'. [ 754.636954][T11326] device syzkaller0 entered promiscuous mode [ 754.987585][ T4328] usbhid 5-1:0.0: can't add hid device: -32 [ 755.009483][ T4328] usbhid: probe of 5-1:0.0 failed with error -32 [ 755.254589][T11341] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 756.233754][T11351] loop3: detected capacity change from 0 to 32768 [ 756.395654][T11356] UBIFS error (pid: 11356): cannot open "ubifs", error -22 [ 756.790109][ T5577] usb 5-1: USB disconnect, device number 36 [ 756.967448][T11351] XFS (loop3): Mounting V5 Filesystem [ 757.071296][T11351] XFS (loop3): Ending clean mount [ 757.078706][T11351] XFS (loop3): Quotacheck needed: Please wait. [ 757.652089][T11351] XFS (loop3): Quotacheck: Done. [ 758.078025][ T27] audit: type=1800 audit(1783541646.499:40): pid=11377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1544" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 758.165398][ T4284] XFS (loop3): Unmounting Filesystem [ 759.287356][T11387] loop5: detected capacity change from 0 to 512 [ 759.304099][T11387] EXT4-fs: inline encryption not supported [ 759.331107][T11387] EXT4-fs: Ignoring removed orlov option [ 759.338200][T11387] EXT4-fs: Ignoring removed mblk_io_submit option [ 759.385089][T11387] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.1553: corrupted in-inode xattr [ 759.804031][T11397] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 759.843786][T11387] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1553: couldn't read orphan inode 15 (err -117) [ 760.041347][T11387] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 761.268314][ T5087] EXT4-fs (loop5): unmounting filesystem. [ 761.429780][T11412] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 762.182227][T11416] loop8: detected capacity change from 0 to 256 [ 762.409584][ T4328] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 762.619604][ T4328] usb 6-1: Using ep0 maxpacket: 32 [ 762.671281][ T4328] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.901424][ T4328] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.095493][ T4328] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 763.181909][ T4328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.233064][ T4328] usb 6-1: config 0 descriptor?? [ 763.353658][T11430] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 763.911576][T11434] loop3: detected capacity change from 0 to 32768 [ 764.069315][T11434] XFS (loop3): Mounting V5 Filesystem [ 764.188417][T11434] XFS (loop3): Ending clean mount [ 764.200566][T11434] XFS (loop3): Quotacheck needed: Please wait. [ 764.268139][T11434] XFS (loop3): Quotacheck: Done. [ 764.328230][ T4328] usbhid 6-1:0.0: can't add hid device: -32 [ 764.334776][ T4328] usbhid: probe of 6-1:0.0 failed with error -32 [ 764.562134][ T27] audit: type=1800 audit(1783541653.179:41): pid=11459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1561" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 764.896701][ T4284] XFS (loop3): Unmounting Filesystem [ 766.064997][ T2167] usb 6-1: USB disconnect, device number 21 [ 767.932236][T11503] loop5: detected capacity change from 0 to 256 [ 768.933745][T11513] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 769.923847][T11532] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 772.071552][T10839] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 772.299490][T10839] usb 4-1: Using ep0 maxpacket: 32 [ 772.306846][T10839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.325636][T10839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.359691][T10839] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 772.370102][T10839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.533173][T10839] usb 4-1: config 0 descriptor?? [ 772.615492][T11571] loop4: detected capacity change from 0 to 512 [ 772.651004][T11571] EXT4-fs: inline encryption not supported [ 772.670545][T11571] EXT4-fs: Ignoring removed orlov option [ 772.703852][T11571] EXT4-fs: Ignoring removed mblk_io_submit option [ 772.810010][T11571] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1587: corrupted in-inode xattr [ 772.845788][T11571] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1587: couldn't read orphan inode 15 (err -117) [ 772.889707][T11571] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 772.947576][T10839] usbhid 4-1:0.0: can't add hid device: -32 [ 773.116162][T10839] usbhid: probe of 4-1:0.0 failed with error -32 [ 774.462436][T10839] usb 4-1: USB disconnect, device number 18 [ 775.058217][T11606] overlayfs: missing 'lowerdir' [ 777.177899][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 777.347104][T11621] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 777.377875][T11620] loop5: detected capacity change from 0 to 1024 [ 777.400680][T11620] EXT4-fs: Ignoring removed i_version option [ 777.407793][T11620] EXT4-fs: Ignoring removed bh option [ 777.482500][T11620] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 777.910991][ T27] audit: type=1800 audit(1783541666.519:42): pid=11637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1596" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 778.379970][ T5087] EXT4-fs (loop5): unmounting filesystem. [ 778.879779][ T4389] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 779.130934][ T4389] usb 6-1: Using ep0 maxpacket: 32 [ 779.158948][ T4389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.299208][ T4389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.422887][ T4389] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 779.502847][ T4389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.516559][ T4389] usb 6-1: config 0 descriptor?? [ 779.941427][ T4389] usbhid 6-1:0.0: can't add hid device: -32 [ 779.947471][ T4389] usbhid: probe of 6-1:0.0 failed with error -32 [ 780.224367][T11640] loop4: detected capacity change from 0 to 32768 [ 780.322130][T11640] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 780.650786][T11675] (syz.4.1600,11675,1):ocfs2_double_lock:1188 ERROR: status = -2 [ 780.719867][T11677] UBIFS error (pid: 11677): cannot open "ubifs", error -22 [ 781.849455][T11675] (syz.4.1600,11675,0):ocfs2_rename:1297 ERROR: status = -2 [ 781.949494][T11675] (syz.4.1600,11675,1):ocfs2_rename:1687 ERROR: status = -2 [ 781.957744][T10839] usb 6-1: USB disconnect, device number 22 [ 782.056692][T11679] loop3: detected capacity change from 0 to 512 [ 782.170259][T11679] EXT4-fs: inline encryption not supported [ 782.176315][T11679] EXT4-fs: Ignoring removed orlov option [ 782.249165][T11679] EXT4-fs: Ignoring removed mblk_io_submit option [ 782.272285][ T4279] ocfs2: Unmounting device (7,4) on (node local) [ 782.536445][T11679] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.1607: corrupted in-inode xattr [ 782.977781][T11679] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1607: couldn't read orphan inode 15 (err -117) [ 783.079611][T11679] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 785.699429][T11730] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 786.079662][ T8046] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 786.239999][T11744] loop5: detected capacity change from 0 to 128 [ 786.270960][ T8046] usb 5-1: Using ep0 maxpacket: 32 [ 786.299144][ T8046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.343376][ T8046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.377523][ T8046] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 786.417127][ T8046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.466967][ T8046] usb 5-1: config 0 descriptor?? [ 786.680407][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 787.219126][T11760] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 787.287302][ T8046] usbhid 5-1:0.0: can't add hid device: -32 [ 787.344461][ T8046] usbhid: probe of 5-1:0.0 failed with error -32 [ 789.299931][T10839] usb 5-1: USB disconnect, device number 37 [ 791.088567][T11788] loop5: detected capacity change from 0 to 512 [ 791.100533][T11788] EXT4-fs: inline encryption not supported [ 791.117449][T11788] EXT4-fs: Ignoring removed orlov option [ 791.144785][T11788] EXT4-fs: Ignoring removed mblk_io_submit option [ 791.300818][T11792] loop3: detected capacity change from 0 to 32768 [ 791.383684][T11788] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.1631: corrupted in-inode xattr [ 791.402602][T11788] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1631: couldn't read orphan inode 15 (err -117) [ 791.438336][T11792] XFS (loop3): Mounting V5 Filesystem [ 791.458530][T11788] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 791.597030][T11792] XFS (loop3): Ending clean mount [ 791.667979][T11792] XFS (loop3): Quotacheck needed: Please wait. [ 791.749648][ T4349] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 791.835109][T11792] XFS (loop3): Quotacheck: Done. [ 792.051907][ T5087] EXT4-fs (loop5): unmounting filesystem. [ 792.074608][ T27] audit: type=1800 audit(1783541680.709:43): pid=11812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1630" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 792.139137][ T4349] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 792.160688][ T4349] usb 9-1: config 0 has no interface number 0 [ 792.166852][ T4349] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 792.309214][ T4349] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 792.324071][ T4284] XFS (loop3): Unmounting Filesystem [ 792.333994][ T4349] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 792.363759][ T4349] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.438740][ T4349] usb 9-1: config 0 descriptor?? [ 792.444719][T11808] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 792.486848][ T4349] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 792.672651][T11828] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 792.776043][ T22] usb 9-1: USB disconnect, device number 2 [ 793.344385][T11840] UBIFS error (pid: 11840): cannot open "ubifs", error -22 [ 793.809616][ T5577] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 794.249527][ T5577] usb 5-1: Using ep0 maxpacket: 32 [ 794.257020][ T5577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.370156][ T5577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.450353][ T5577] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 794.497740][ T5577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.535367][ T5577] usb 5-1: config 0 descriptor?? [ 794.610397][T11861] loop8: detected capacity change from 0 to 512 [ 794.635956][T11861] EXT4-fs: inline encryption not supported [ 794.672327][T11861] EXT4-fs: Ignoring removed orlov option [ 794.700066][T11861] EXT4-fs: Ignoring removed mblk_io_submit option [ 794.764188][T11861] EXT4-fs error (device loop8): ext4_iget_extra_inode:4763: inode #15: comm syz.8.1645: corrupted in-inode xattr [ 794.772200][T11860] loop3: detected capacity change from 0 to 32768 [ 794.780023][T11861] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.1645: couldn't read orphan inode 15 (err -117) [ 794.829990][T11861] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 794.906809][T11873] loop5: detected capacity change from 0 to 256 [ 794.914151][T11873] exfat: Deprecated parameter 'utf8' [ 794.919792][T11873] exfat: Deprecated parameter 'utf8' [ 794.925302][T11873] exfat: Unknown parameter 'nameVase' [ 795.505296][T11860] XFS (loop3): Mounting V5 Filesystem [ 795.517510][ T8332] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 795.705318][T11860] XFS (loop3): Ending clean mount [ 795.720265][ T5577] usbhid 5-1:0.0: can't add hid device: -32 [ 795.726947][ T5577] usbhid: probe of 5-1:0.0 failed with error -32 [ 795.727919][T10364] EXT4-fs (loop8): unmounting filesystem. [ 795.738295][T11860] XFS (loop3): Quotacheck needed: Please wait. [ 796.308312][T11860] XFS (loop3): Quotacheck: Done. [ 796.538814][ T27] audit: type=1800 audit(1783541685.159:44): pid=11901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1646" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 796.754555][T11904] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 796.916162][ T4284] XFS (loop3): Unmounting Filesystem [ 797.438743][ T2167] usb 5-1: USB disconnect, device number 38 [ 798.189974][T11912] device ip6_vti0 entered promiscuous mode [ 798.533852][T11926] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 799.282243][T11939] overlayfs: missing 'lowerdir' [ 799.855350][T11940] loop5: detected capacity change from 0 to 256 [ 799.955036][T11940] exfat: Deprecated parameter 'utf8' [ 800.357010][T11940] exfat: Deprecated parameter 'utf8' [ 800.408738][T11940] exfat: Unknown parameter 'nameVase' [ 800.413709][T11945] loop3: detected capacity change from 0 to 512 [ 800.421904][T11945] EXT4-fs: inline encryption not supported [ 800.427809][T11945] EXT4-fs: Ignoring removed i_version option [ 800.491033][T11945] EXT4-fs (loop3): 1 orphan inode deleted [ 800.506398][T11943] overlayfs: failed to resolve './file0': -2 [ 800.519911][T11945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 800.623475][T11945] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.1663: Directory hole found for htree leaf block 0 [ 801.350409][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 801.409559][ T5577] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 801.739433][ T5577] usb 5-1: Using ep0 maxpacket: 32 [ 801.746327][ T5577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.828720][T11964] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 802.488367][ T5577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.510093][ T5577] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 802.519181][ T5577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.560289][ T5577] usb 5-1: config 0 descriptor?? [ 803.002647][ T5577] usbhid 5-1:0.0: can't add hid device: -32 [ 803.116037][ T5577] usbhid: probe of 5-1:0.0 failed with error -32 [ 803.300696][T11985] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 804.346805][T11999] netlink: 'syz.3.1673': attribute type 1 has an invalid length. [ 804.355463][T11999] netlink: 'syz.3.1673': attribute type 2 has an invalid length. [ 804.481694][ T2167] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 804.691449][ T4389] usb 5-1: USB disconnect, device number 39 [ 804.851388][ T2167] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 804.874232][ T2167] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 804.909992][ T2167] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 805.132983][T12007] loop8: detected capacity change from 0 to 256 [ 805.135520][ T2167] usb 6-1: config 0 interface 0 has no altsetting 0 [ 805.147484][ T2167] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 805.157812][ T2167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.163736][T12007] exfat: Deprecated parameter 'utf8' [ 806.350449][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 806.351185][ T4285] Bluetooth: hci5: command 0x0406 tx timeout [ 806.775362][ T4389] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 806.775897][ T2167] usb 6-1: config 0 descriptor?? [ 806.789574][T12007] exfat: Deprecated parameter 'utf8' [ 806.795630][T11996] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 806.803522][T12007] exfat: Unknown parameter 'nameVase' [ 807.628360][T12025] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 807.653018][ T4389] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 807.679425][ T4389] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 807.699479][ T4389] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 807.708932][ T4389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.720981][T12005] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 807.842129][ T2167] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.0016/input/input6 [ 808.070444][ T2167] sony 0003:054C:03D5.0016: input,hidraw0: USB HID v0.09 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0 [ 808.102494][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1682'. [ 808.114222][ T4389] usb 5-1: USB disconnect, device number 40 [ 808.242816][ T2167] usb 6-1: USB disconnect, device number 23 [ 809.120564][T12046] udevd[12046]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 809.149553][ T4349] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 809.359465][ T4349] usb 4-1: Using ep0 maxpacket: 16 [ 809.373170][ T4349] usb 4-1: unable to get BOS descriptor or descriptor too short [ 809.556842][ T4349] usb 4-1: config 208 has an invalid interface number: 37 but max is 0 [ 809.656091][ T4349] usb 4-1: config 208 has no interface number 0 [ 809.708897][ T4349] usb 4-1: config 208 interface 37 has no altsetting 0 [ 809.775013][ T4349] usb 4-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=e5.8e [ 809.821361][ T4349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.831379][ T4349] usb 4-1: Product: syz [ 809.835653][ T4349] usb 4-1: Manufacturer: syz [ 809.841872][ T4349] usb 4-1: SerialNumber: syz [ 809.846555][T12047] fido_id[12047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 810.168931][T12039] loop3: detected capacity change from 0 to 4096 [ 810.176016][T12039] UDF-fs: bad mount option "ŒGyº" or missing value [ 810.252270][T12044] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 811.127297][T12060] loop5: detected capacity change from 0 to 32768 [ 811.254623][T12060] XFS (loop5): Mounting V5 Filesystem [ 811.310998][ T4349] gspca_main: kinect-2.14.0 probing 045e:02ae [ 811.406007][T12089] loop4: detected capacity change from 0 to 256 [ 811.436255][T12089] exfat: Deprecated parameter 'utf8' [ 811.464551][ T4349] usb 4-1: USB disconnect, device number 19 [ 811.587525][T12089] exfat: Deprecated parameter 'utf8' [ 811.616878][T12060] XFS (loop5): Ending clean mount [ 811.628783][T12089] exfat: Unknown parameter 'nameVase' [ 811.637728][T12060] XFS (loop5): Quotacheck needed: Please wait. [ 812.613175][T12060] XFS (loop5): Quotacheck: Done. [ 813.397318][ T5087] XFS (loop5): Unmounting Filesystem [ 813.563987][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.570687][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.735176][T12153] loop8: detected capacity change from 0 to 256 [ 817.763489][T12153] exfat: Deprecated parameter 'utf8' [ 817.819394][T12153] exfat: Deprecated parameter 'utf8' [ 817.824792][T12153] exfat: Unknown parameter 'nameVase' [ 817.859112][T12136] loop4: detected capacity change from 0 to 32768 [ 817.954434][T12136] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1699 (12136) [ 818.165678][T12157] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 818.462165][T12044] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 818.908145][T12136] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 818.961075][T12136] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 819.020558][T12136] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 819.059591][T12136] BTRFS info (device loop4): use zstd compression, level 3 [ 819.086718][T12136] BTRFS info (device loop4): using free space tree [ 819.290330][T12136] BTRFS info (device loop4): enabling ssd optimizations [ 819.432111][ T4279] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 821.422252][T12213] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 821.689431][T12048] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 823.406850][T12233] loop8: detected capacity change from 0 to 256 [ 823.468275][T12233] exfat: Deprecated parameter 'utf8' [ 823.505082][T12233] exfat: Deprecated parameter 'utf8' [ 823.525404][T12233] exfat: Unknown parameter 'nameVase' [ 823.759959][T12240] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 826.683741][T12231] netlink: 'syz.3.1717': attribute type 4 has an invalid length. [ 826.708886][T12231] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1717'. [ 826.884634][T12268] netlink: 348 bytes leftover after parsing attributes in process `syz.8.1726'. [ 829.352835][T12206] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 829.403364][T12285] loop3: detected capacity change from 0 to 32768 [ 830.200799][T12201] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 830.391148][T12201] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 830.445800][T12206] usb 6-1: device not accepting address 24, error -71 [ 830.631530][T12303] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1734'. [ 831.532178][T12201] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 831.543161][T12201] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 831.556119][T12201] usb 5-1: config 0 interface 0 has no altsetting 0 [ 831.564070][T12201] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 831.573191][T12201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.623948][T12201] usb 5-1: config 0 descriptor?? [ 831.634400][T12287] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 831.757942][T12318] netlink: 'syz.5.1738': attribute type 4 has an invalid length. [ 831.766228][T12318] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1738'. [ 832.260242][T12315] loop3: detected capacity change from 0 to 1024 [ 832.267975][T12315] EXT4-fs: Ignoring removed i_version option [ 832.282492][T12315] EXT4-fs: Ignoring removed bh option [ 832.349976][T12201] usbhid 5-1:0.0: can't add hid device: -71 [ 832.357128][T12201] usbhid: probe of 5-1:0.0 failed with error -71 [ 832.385901][T12201] usb 5-1: USB disconnect, device number 41 [ 832.405962][T12315] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 832.810230][ T27] audit: type=1800 audit(1783541721.429:45): pid=12331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1737" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 833.215538][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 833.253417][T12334] loop8: detected capacity change from 0 to 256 [ 833.533300][T12325] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 833.946972][T12346] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 834.835240][T12357] loop3: detected capacity change from 0 to 256 [ 834.973304][T12357] exfat: Deprecated parameter 'utf8' [ 835.058392][T12357] exfat: Deprecated parameter 'utf8' [ 835.196685][T12357] exfat: Unknown parameter 'nameVase' [ 835.937946][T12367] netlink: 'syz.6.1751': attribute type 4 has an invalid length. [ 835.946637][T12367] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1751'. [ 836.028791][T12370] binder: 12369:12370 ioctl c0306201 200000000040 returned -14 [ 836.079480][T12206] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 836.249244][T12376] loop3: detected capacity change from 0 to 1024 [ 836.275767][T12376] EXT4-fs: Ignoring removed i_version option [ 836.299449][T12206] usb 6-1: Using ep0 maxpacket: 16 [ 836.312092][T12206] usb 6-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 836.324735][T12376] EXT4-fs: Ignoring removed bh option [ 836.332690][T12206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.345073][T12206] usb 6-1: Product: syz [ 836.349288][T12206] usb 6-1: Manufacturer: syz [ 836.363222][T12206] usb 6-1: SerialNumber: syz [ 836.381056][T12206] usb 6-1: config 0 descriptor?? [ 836.391535][T12376] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 836.402120][T12206] usb 6-1: selecting invalid altsetting 1 [ 836.408526][T12206] technisat-usb2: could not set alternate setting to 0 [ 836.415874][ T22] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 836.609666][ T22] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 836.628911][T12206] technisat-usb2: firmware version: 0.0 [ 836.634847][T12206] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 836.652529][ T22] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 836.679447][ T22] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 836.713335][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 836.794566][ T27] audit: type=1800 audit(1783541725.409:46): pid=12387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1755" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 836.904311][ T22] usb 9-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 837.070253][T12206] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 837.109858][ T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.148900][T12206] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 837.182982][ T22] usb 9-1: config 0 descriptor?? [ 837.188666][T12374] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 837.216819][T12206] usb 6-1: media controller created [ 837.225984][T12206] technisat-usb2: i2c-error: out failed 53 = -22 [ 837.237689][T12206] dvb-usb: MAC address reading failed. [ 837.264741][T12388] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 837.286365][T12206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 837.316968][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 837.562173][T12206] DVB: Unable to find symbol stv090x_attach() [ 837.577382][T12206] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 837.623237][ T22] usbhid 9-1:0.0: can't add hid device: -71 [ 837.631107][T12396] technisat-usb2: i2c-error: out failed 00 = -22 [ 837.683443][T12397] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 838.289463][ T22] usbhid: probe of 9-1:0.0 failed with error -71 [ 838.310441][ T22] usb 9-1: USB disconnect, device number 3 [ 838.439465][T12206] rc_core: IR keymap rc-technisat-usb2 not found [ 838.445862][T12206] Registered IR keymap rc-empty [ 838.485674][T12206] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 838.592153][T12206] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input7 [ 838.602597][T12404] loop5: detected capacity change from 0 to 764 [ 838.615531][T12401] loop8: detected capacity change from 0 to 256 [ 838.631907][T12401] exfat: Deprecated parameter 'utf8' [ 838.784659][T12401] exfat: Deprecated parameter 'utf8' [ 838.916564][T12401] exfat: Unknown parameter 'nameVase' [ 839.468118][T12206] dvb-usb: schedule remote query interval to 100 msecs. [ 839.599739][T12206] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 839.691364][T12206] usb 6-1: USB disconnect, device number 26 [ 839.837024][T12412] overlayfs: failed to clone lowerpath [ 839.888903][T12415] overlayfs: failed to clone lowerpath [ 840.028423][T12416] netlink: 'syz.4.1764': attribute type 4 has an invalid length. [ 840.038816][T12416] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1764'. [ 840.519578][T12206] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 841.407043][ T22] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 842.909561][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 846.064303][ T27] audit: type=1326 audit(1783541734.689:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12451 comm="syz.4.1775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9e0d9de59 code=0x0 [ 846.083420][T12454] loop8: detected capacity change from 0 to 256 [ 846.100743][T12454] exfat: Deprecated parameter 'utf8' [ 846.106264][T12454] exfat: Deprecated parameter 'utf8' [ 846.126608][T12454] exfat: Unknown parameter 'nameVase' [ 846.382381][ T4317] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 846.604503][ T4317] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 847.029443][ T4317] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 847.040657][ T4317] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 847.056199][ T4317] usb 6-1: config 0 interface 0 has no altsetting 0 [ 847.063134][ T4317] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 847.072453][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.101769][ T4317] usb 6-1: config 0 descriptor?? [ 847.107671][T12450] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 847.147913][ T22] usb 4-1: device descriptor read/all, error -71 [ 848.173265][ T4317] usbhid 6-1:0.0: can't add hid device: -71 [ 848.233387][ T4317] usbhid: probe of 6-1:0.0 failed with error -71 [ 848.294431][ T4317] usb 6-1: USB disconnect, device number 27 [ 848.444984][T12471] netlink: 'syz.3.1778': attribute type 4 has an invalid length. [ 848.583913][T12471] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1778'. [ 849.581959][T12489] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 850.763421][T12490] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 851.732873][T12502] loop5: detected capacity change from 0 to 256 [ 851.797959][T12502] exfat: Deprecated parameter 'utf8' [ 851.799015][T12501] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 851.829848][T12502] exfat: Deprecated parameter 'utf8' [ 851.845664][T12502] exfat: Unknown parameter 'nameVase' [ 856.467193][T12541] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 858.608183][T12564] loop8: detected capacity change from 0 to 2048 [ 858.924538][T12571] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 861.930344][T12591] loop4: detected capacity change from 0 to 32768 [ 862.027902][T12591] XFS (loop4): Mounting V5 Filesystem [ 863.001074][T12591] XFS (loop4): Ending clean mount [ 863.008688][T12591] XFS (loop4): Quotacheck needed: Please wait. [ 863.099804][T12591] XFS (loop4): Quotacheck: Done. [ 863.556013][ T27] audit: type=1800 audit(1783541751.949:48): pid=12591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1811" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 865.898964][ T4279] XFS (loop4): Unmounting Filesystem [ 867.178443][T12646] loop8: detected capacity change from 0 to 64 [ 868.795624][T12663] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1828'. [ 869.223039][ T2167] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 869.445357][ T2167] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 869.567054][ T2167] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 869.803162][ T2167] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 869.928011][ T2167] usb 5-1: config 0 interface 0 has no altsetting 0 [ 869.955750][ T2167] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 870.109235][ T2167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.126767][ T2167] usb 5-1: config 0 descriptor?? [ 870.133799][T12658] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 871.029290][ T2167] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0017/input/input8 [ 872.078063][ T2167] sony 0003:054C:03D5.0017: input,hidraw0: USB HID v0.09 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 872.092064][ T2167] usb 5-1: USB disconnect, device number 42 [ 872.240723][T12691] loop8: detected capacity change from 0 to 1024 [ 872.567671][T12695] fido_id[12695]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 874.270327][T12704] loop8: detected capacity change from 0 to 2048 [ 874.410230][T12704] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 874.424526][ T27] audit: type=1800 audit(1783541763.049:49): pid=12704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1839" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 874.475609][ T27] audit: type=1800 audit(1783541763.069:50): pid=12704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1839" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 875.376766][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.383143][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.120578][T12718] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 876.136020][T12718] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 876.162559][T12718] EXT4-fs (loop8): This should not happen!! Data will be lost [ 876.162559][T12718] [ 876.311227][T12718] EXT4-fs (loop8): Total free blocks count 0 [ 876.357034][T12718] EXT4-fs (loop8): Free/Dirty block details [ 876.411450][T12718] EXT4-fs (loop8): free_blocks=66060288 [ 876.417372][T12718] EXT4-fs (loop8): dirty_blocks=256 [ 876.511101][T12718] EXT4-fs (loop8): Block reservation details [ 876.756185][T12718] EXT4-fs (loop8): i_reserved_data_blocks=16 [ 877.412030][ T5943] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 34 with max blocks 222 with error 28 [ 877.839666][T12201] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 878.076856][T12201] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 878.253751][T12201] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 878.430561][T12201] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 878.444467][T12201] usb 6-1: config 0 interface 0 has no altsetting 0 [ 878.451376][T12201] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 878.460725][T12201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.478918][T12201] usb 6-1: config 0 descriptor?? [ 878.514754][T12736] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 878.590685][T12749] Cannot find add_set index 0 as target [ 878.799559][ T4317] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 879.274514][ T4317] usb 9-1: Using ep0 maxpacket: 32 [ 879.295590][ T4317] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.302063][T12201] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.0018/input/input9 [ 880.721544][T12201] sony 0003:054C:03D5.0018: input,hidraw0: USB HID v0.09 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0 [ 880.735960][T12201] usb 6-1: USB disconnect, device number 28 [ 880.841061][ T4317] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.126167][T12764] loop3: detected capacity change from 0 to 32768 [ 881.311415][ T4317] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 881.631166][T12764] XFS (loop3): Mounting V5 Filesystem [ 881.633389][ T4317] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.655297][ T4317] usb 9-1: config 0 descriptor?? [ 881.660897][ T4317] usb 9-1: can't set config #0, error -71 [ 881.667993][ T4317] usb 9-1: USB disconnect, device number 4 [ 881.781944][T12769] fido_id[12769]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 881.805599][T12780] loop8: detected capacity change from 0 to 512 [ 881.850349][T12780] EXT4-fs: Ignoring removed oldalloc option [ 881.875412][T12780] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 881.884879][T12764] XFS (loop3): Ending clean mount [ 881.924539][T12764] XFS (loop3): Quotacheck needed: Please wait. [ 882.007334][T12780] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 882.090245][T12780] ext4 filesystem being mounted at /93/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 882.114475][T12764] XFS (loop3): Quotacheck: Done. [ 882.421674][ T27] audit: type=1800 audit(1783541771.039:51): pid=12794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1857" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 882.732759][ T4284] XFS (loop3): Unmounting Filesystem [ 882.744473][T12790] netlink: 'syz.4.1861': attribute type 4 has an invalid length. [ 882.752336][T12790] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1861'. [ 883.197577][T12801] loop3: detected capacity change from 0 to 512 [ 883.233523][T12801] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 883.276300][T12801] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.1864: bad orphan inode 131083 [ 883.307886][T12801] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 884.866677][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 885.819635][T12206] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 886.055459][T12206] usb 5-1: Using ep0 maxpacket: 32 [ 886.069659][T12206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.080841][T12206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.090933][T12206] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 886.138626][T12206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.187066][T12206] usb 5-1: config 0 descriptor?? [ 886.644213][T12206] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 886.656002][T12206] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 886.664796][T12206] ft260 0003:0403:6030.0019: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 888.021156][T12206] ft260 0003:0403:6030.0019: failed to retrieve chip version [ 888.034863][T12206] ft260: probe of 0003:0403:6030.0019 failed with error -32 [ 888.200611][ T22] usb 5-1: reset high-speed USB device number 43 using dummy_hcd [ 888.379933][ T22] usb 5-1: device descriptor read/64, error -32 [ 888.435944][T12848] netlink: 'syz.5.1875': attribute type 4 has an invalid length. [ 888.444486][T12848] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1875'. [ 888.649747][ T22] usb 5-1: reset high-speed USB device number 43 using dummy_hcd [ 888.830330][T10364] EXT4-fs (loop8): unmounting filesystem. [ 888.834695][ T22] usb 5-1: device descriptor read/64, error -32 [ 889.109545][ T22] usb 5-1: reset high-speed USB device number 43 using dummy_hcd [ 889.232226][ T22] usb 5-1: device descriptor read/8, error -32 [ 890.880690][T12206] usb 5-1: USB disconnect, device number 43 [ 893.130730][T12884] netlink: 'syz.4.1888': attribute type 4 has an invalid length. [ 893.139146][T12884] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1888'. [ 893.954757][T12894] UBIFS error (pid: 12894): cannot open "ubifs", error -22 [ 895.063284][T12206] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 895.144879][T12897] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1893'. [ 895.279190][T12206] usb 6-1: Using ep0 maxpacket: 32 [ 896.110737][T12206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.126701][T12206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.136792][T12206] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 896.146515][T12206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.158060][T12206] usb 6-1: config 0 descriptor?? [ 896.710974][T12206] ft260 0003:0403:6030.001A: unknown main item tag 0x0 [ 896.718445][T12206] ft260 0003:0403:6030.001A: unknown main item tag 0x0 [ 896.726838][T12206] ft260 0003:0403:6030.001A: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 897.519186][T12206] ft260 0003:0403:6030.001A: failed to retrieve chip version [ 897.532417][T12206] ft260: probe of 0003:0403:6030.001A failed with error -5 [ 897.620453][T12936] netlink: 'syz.6.1903': attribute type 4 has an invalid length. [ 897.628251][T12936] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1903'. [ 897.824346][T12939] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1906'. [ 898.809073][ T14] usb 6-1: USB disconnect, device number 29 [ 900.593859][T12984] netlink: 'syz.8.1917': attribute type 4 has an invalid length. [ 900.604006][T12984] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1917'. [ 901.143824][T12988] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1919'. [ 901.171751][T12989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1920'. [ 901.958828][ T4317] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 902.879274][ T22] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 903.096667][ T22] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 903.362208][ T22] usb 5-1: config 0 has no interface number 0 [ 903.378652][ T4317] usb 6-1: Using ep0 maxpacket: 32 [ 903.384783][ T22] usb 5-1: config 0 interface 1 altsetting 149 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 903.401373][ T22] usb 5-1: config 0 interface 1 altsetting 149 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.402048][ T4317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.434895][ T22] usb 5-1: config 0 interface 1 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.458512][ T22] usb 5-1: config 0 interface 1 has no altsetting 0 [ 903.466148][ T22] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 903.468758][ T4317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.492525][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.521279][ T4317] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 903.534571][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.555199][ T22] usb 5-1: config 0 descriptor?? [ 903.590906][ T4317] usb 6-1: config 0 descriptor?? [ 903.969201][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 903.989671][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.022426][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.042824][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.050852][ T4317] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 904.060743][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.078211][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.085673][ T4317] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 904.098427][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.106137][ T4317] ft260 0003:0403:6030.001C: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 904.121328][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.148234][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.165795][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.183140][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.221558][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.248985][ T4317] ft260 0003:0403:6030.001C: failed to retrieve chip version [ 904.301912][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.309390][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.316847][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.324049][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.331174][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.339136][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.339861][ T4317] ft260: probe of 0003:0403:6030.001C failed with error -5 [ 904.346208][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.368571][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.375659][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.424742][T13021] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1931'. [ 904.433921][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.478943][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.501781][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.522042][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.543759][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.552434][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.564021][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.572208][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.584223][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.591585][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.599689][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.607566][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.615011][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.622447][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.629815][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.645029][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.675283][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.690438][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.705854][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.723290][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.738612][ T4317] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 904.748058][ T22] chicony 0003:04F2:1236.001B: unknown main item tag 0x0 [ 904.778764][ T22] chicony 0003:04F2:1236.001B: hidraw0: USB HID v0.01 Device [HID 04f2:1236] on usb-dummy_hcd.4-1/input1 [ 904.832290][ T22] usb 5-1: USB disconnect, device number 44 [ 904.935629][ T4317] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 904.966639][ T4317] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 904.992886][ T4317] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 905.078362][ T4317] usb 9-1: config 0 interface 0 has no altsetting 0 [ 905.114472][ T4317] usb 9-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 905.216096][T13034] netlink: 'syz.4.1934': attribute type 4 has an invalid length. [ 905.224900][T13034] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1934'. [ 905.429552][ T4317] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.552759][ T22] usb 6-1: USB disconnect, device number 30 [ 905.588159][ T4317] usb 9-1: config 0 descriptor?? [ 905.617804][T13023] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 905.904793][T13045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1939'. [ 905.919747][T13039] fido_id[13039]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 906.143774][ T4317] usbhid 9-1:0.0: can't add hid device: -71 [ 906.579143][ T22] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 906.794450][ T4317] usbhid: probe of 9-1:0.0 failed with error -71 [ 906.942122][ T22] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 906.961491][ T22] usb 5-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 906.968622][ T4317] usb 9-1: USB disconnect, device number 5 [ 906.972069][ T22] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 907.006306][ T22] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 907.399620][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.595601][T13061] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1943'. [ 908.604570][T13070] loop8: detected capacity change from 0 to 256 [ 909.622554][ T14] usb 5-1: USB disconnect, device number 45 [ 909.778097][T13079] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 910.701903][T13088] loop5: detected capacity change from 0 to 764 [ 910.929088][ T4794] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 910.996946][T13093] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1952'. [ 911.238557][ T4794] usb 5-1: Using ep0 maxpacket: 32 [ 911.246547][ T4794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.257763][ T4794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.271017][ T4794] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 911.280634][ T4794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.298480][ T4794] usb 5-1: config 0 descriptor?? [ 911.497298][T13089] netlink: 'syz.6.1949': attribute type 4 has an invalid length. [ 911.505704][T13089] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1949'. [ 911.739574][ T4794] ft260 0003:0403:6030.001D: unknown main item tag 0x0 [ 911.783099][ T4794] ft260 0003:0403:6030.001D: unknown main item tag 0x0 [ 912.531307][ T4794] ft260 0003:0403:6030.001D: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 912.610721][ T4794] ft260 0003:0403:6030.001D: failed to retrieve chip version [ 912.637331][ T4794] ft260: probe of 0003:0403:6030.001D failed with error -5 [ 913.064476][T13104] syz.3.1955 (13104): drop_caches: 2 [ 913.146293][T13110] loop5: detected capacity change from 0 to 256 [ 913.987367][T12206] usb 5-1: USB disconnect, device number 46 [ 914.530331][T13127] loop4: detected capacity change from 0 to 512 [ 914.563793][T13127] EXT4-fs: inline encryption not supported [ 914.597138][T13127] EXT4-fs: Ignoring removed orlov option [ 914.631402][T13127] EXT4-fs: Ignoring removed mblk_io_submit option [ 914.700409][T13127] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1961: corrupted in-inode xattr [ 914.738339][T13127] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1961: couldn't read orphan inode 15 (err -117) [ 914.781182][T13127] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 916.459526][T13141] overlayfs: failed to clone lowerpath [ 916.491384][T13141] overlayfs: failed to clone lowerpath [ 916.550440][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 916.647892][T13142] netlink: 'syz.3.1964': attribute type 4 has an invalid length. [ 916.656838][T13142] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1964'. [ 917.159640][T13151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1967'. [ 918.530792][T13167] loop8: detected capacity change from 0 to 256 [ 919.537882][ T4794] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 919.620044][T13179] loop8: detected capacity change from 0 to 512 [ 919.663189][T13179] EXT4-fs: inline encryption not supported [ 919.675537][T13179] EXT4-fs: Ignoring removed orlov option [ 919.727870][ T4794] usb 4-1: Using ep0 maxpacket: 32 [ 919.819514][T13182] netlink: 'syz.5.1976': attribute type 4 has an invalid length. [ 919.827380][T13182] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1976'. [ 919.851264][T13179] EXT4-fs: Ignoring removed mblk_io_submit option [ 919.865287][ T4794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.124618][ T4794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.134871][ T4794] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 920.255902][ T4794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.269382][ T4794] usb 4-1: config 0 descriptor?? [ 920.367516][T13188] loop4: detected capacity change from 0 to 128 [ 921.425755][ T4794] ft260 0003:0403:6030.001E: unknown main item tag 0x0 [ 921.435965][T13179] EXT4-fs error (device loop8): ext4_iget_extra_inode:4763: inode #15: comm syz.8.1975: corrupted in-inode xattr [ 921.499709][T13179] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.1975: couldn't read orphan inode 15 (err -117) [ 921.522215][ T4794] ft260 0003:0403:6030.001E: unknown main item tag 0x0 [ 921.534851][T13179] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 921.551777][ T4794] ft260 0003:0403:6030.001E: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 921.747661][ T4794] ft260 0003:0403:6030.001E: failed to retrieve chip version [ 921.758912][ T4794] ft260: probe of 0003:0403:6030.001E failed with error -5 [ 923.188984][T10364] EXT4-fs (loop8): unmounting filesystem. [ 923.809415][T13207] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1980'. [ 923.829421][ T8046] usb 4-1: USB disconnect, device number 22 [ 923.889629][T13197] fido_id[13197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 925.555407][T13228] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1985'. [ 925.755651][T13228] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 926.714618][T13228] device team0 left promiscuous mode [ 926.925452][T13229] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 926.942722][T13228] device team_slave_0 left promiscuous mode [ 926.949552][T13228] device team_slave_1 left promiscuous mode [ 926.990296][T13228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 927.019966][T13228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 928.722469][T13246] UBIFS error (pid: 13246): cannot open "ubifs", error -22 [ 929.027198][ T4328] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 929.170826][T13258] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1995'. [ 929.237175][ T4328] usb 4-1: Using ep0 maxpacket: 32 [ 929.244235][ T4328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.261771][ T4328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.273292][ T4328] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 929.286679][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.350706][ T4328] usb 4-1: config 0 descriptor?? [ 929.769839][ T4328] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 929.781024][ T4328] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 929.798012][ T4328] ft260 0003:0403:6030.001F: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 930.085223][ T4328] ft260 0003:0403:6030.001F: failed to retrieve chip version [ 930.119603][ T4328] ft260: probe of 0003:0403:6030.001F failed with error -5 [ 932.245564][T12206] usb 4-1: USB disconnect, device number 23 [ 932.781362][T13307] UBIFS error (pid: 13307): cannot open "ubifs", error -22 [ 933.367553][T13312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2011'. [ 934.745165][T13335] loop5: detected capacity change from 0 to 512 [ 934.769008][T13335] EXT4-fs: inline encryption not supported [ 934.793164][T13335] EXT4-fs: Ignoring removed orlov option [ 934.813483][T13335] EXT4-fs: Ignoring removed mblk_io_submit option [ 934.933450][T13335] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.2017: corrupted in-inode xattr [ 934.963919][T13335] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.2017: couldn't read orphan inode 15 (err -117) [ 935.029160][T13340] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 935.119687][T13335] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 936.053565][ T5087] EXT4-fs (loop5): unmounting filesystem. [ 936.448945][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.455394][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.723382][T13376] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 938.295709][T13386] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 938.641375][T13391] loop8: detected capacity change from 0 to 1024 [ 938.658583][T13391] EXT4-fs: Ignoring removed i_version option [ 938.747935][T13391] EXT4-fs: Ignoring removed bh option [ 939.593453][T13391] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 939.892349][ T4389] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 940.298429][ T27] audit: type=1800 audit(2000000051.072:52): pid=13411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2036" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 940.366673][ T4389] usb 6-1: device descriptor read/64, error -71 [ 940.382363][T10364] EXT4-fs (loop8): unmounting filesystem. [ 940.656550][ T4389] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 940.820991][ T4389] usb 6-1: device descriptor read/64, error -71 [ 940.862678][T13425] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2045'. [ 940.872847][T13425] device ip6_vti0 left promiscuous mode [ 940.879915][T13425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 940.887659][T13425] device team0 left promiscuous mode [ 940.893186][T13425] device team_slave_0 left promiscuous mode [ 940.899384][T13425] device team_slave_1 left promiscuous mode [ 940.906043][T13425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 940.913585][T13425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 940.957035][ T4389] usb usb6-port1: attempt power cycle [ 941.576958][ T4389] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 941.668783][ T4389] usb 6-1: device descriptor read/8, error -71 [ 941.953936][ T4389] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 941.987139][ T4389] usb 6-1: device descriptor read/8, error -71 [ 942.296768][ T4389] usb usb6-port1: unable to enumerate USB device [ 949.152853][T13523] loop4: detected capacity change from 0 to 764 [ 954.945231][T13572] overlayfs: failed to clone lowerpath [ 954.976964][T13572] overlayfs: failed to clone lowerpath [ 955.101504][T13581] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 956.029991][T13593] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 957.665850][T13610] ªªªªªª: renamed from dummy0 [ 958.796719][T13624] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 962.758624][T13671] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 963.482995][T13686] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 966.825150][ T4328] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 967.135129][ T4328] usb 9-1: Using ep0 maxpacket: 32 [ 967.143142][ T4328] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.161945][ T4328] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.172408][ T4328] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 967.212061][ T4328] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.290402][ T4328] usb 9-1: config 0 descriptor?? [ 967.763112][ T4328] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 967.782953][ T4328] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 967.814297][ T4328] ft260 0003:0403:6030.0020: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 967.960798][ T4328] ft260 0003:0403:6030.0020: chip code: 0000 0000 [ 968.059862][T13737] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 968.168197][ T4328] ft260 0003:0403:6030.0020: failed to retrieve system status [ 968.197825][ T4328] ft260: probe of 0003:0403:6030.0020 failed with error -32 [ 970.546154][ T4328] usb 9-1: USB disconnect, device number 6 [ 971.200229][T13768] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 973.814702][ T4389] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 974.024794][ T2167] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 974.215876][ T2167] usb 4-1: device descriptor read/64, error -71 [ 974.494959][ T2167] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 974.697710][ T2167] usb 4-1: device descriptor read/64, error -71 [ 974.714661][ T4389] usb 6-1: Using ep0 maxpacket: 32 [ 974.726267][ T4389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.764768][ T4389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.794624][ T4389] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 974.803710][ T4389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.828382][ T4389] usb 6-1: config 0 descriptor?? [ 974.833646][ T2167] usb usb4-port1: attempt power cycle [ 975.423337][ T4389] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 975.513846][ T4389] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 975.654741][ T4389] ft260 0003:0403:6030.0021: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 975.821010][ T2167] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 975.855179][ T2167] usb 4-1: device descriptor read/8, error -71 [ 975.925150][ T4389] ft260 0003:0403:6030.0021: chip code: 0000 0000 [ 975.953505][ T4389] ft260 0003:0403:6030.0021: failed to retrieve system status [ 975.971002][ T4389] ft260: probe of 0003:0403:6030.0021 failed with error -32 [ 976.124585][ T2167] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 976.137726][T13823] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 976.177303][ T2167] usb 4-1: device descriptor read/8, error -71 [ 976.315950][ T2167] usb usb4-port1: unable to enumerate USB device [ 977.275363][T13839] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 977.742322][ T2167] usb 6-1: USB disconnect, device number 35 [ 980.798642][T13869] loop4: detected capacity change from 0 to 128 [ 980.931228][T13875] loop5: detected capacity change from 0 to 256 [ 984.533014][T13915] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 985.113408][T13928] netlink: 'syz.5.2200': attribute type 4 has an invalid length. [ 985.121530][T13928] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2200'. [ 987.683215][T13953] loop4: detected capacity change from 0 to 256 [ 993.981199][ T4328] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 994.193926][T12206] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 994.243619][ T4328] usb 6-1: Using ep0 maxpacket: 32 [ 994.255154][ T4328] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.315080][ T4328] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.412160][ T4328] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 994.563844][ T4328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.729082][ T4328] usb 6-1: config 0 descriptor?? [ 994.875309][T12206] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 994.893531][T12206] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 994.914740][T12206] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 994.930424][T12206] usb 5-1: config 0 interface 0 has no altsetting 0 [ 994.977662][T12206] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 995.010151][T12206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.117983][T12206] usb 5-1: config 0 descriptor?? [ 995.162941][T14012] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 995.212611][ T4328] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 995.233579][ T4328] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 995.871455][ T4328] ft260 0003:0403:6030.0022: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 995.906679][T12206] usbhid 5-1:0.0: can't add hid device: -71 [ 996.134334][T12206] usbhid: probe of 5-1:0.0 failed with error -71 [ 996.145511][T12206] usb 5-1: USB disconnect, device number 47 [ 996.282599][ T4328] ft260 0003:0403:6030.0022: chip code: 0000 0000 [ 996.293106][ T4328] ft260 0003:0403:6030.0022: failed to retrieve system status [ 997.096551][ T4328] ft260: probe of 0003:0403:6030.0022 failed with error -5 [ 997.160692][ T4328] usb 6-1: USB disconnect, device number 36 [ 997.875964][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.882506][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.661099][T14063] fido_id[14063]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1000.543876][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2257'. [ 1000.574213][ T4794] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1000.657928][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2257'. [ 1000.763341][ T4794] usb 4-1: Using ep0 maxpacket: 32 [ 1000.774637][ T4794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.792890][ T4794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.842064][ T4794] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1000.867344][ T4794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.890726][ T4794] usb 4-1: config 0 descriptor?? [ 1001.146874][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2257'. [ 1002.170955][ T4794] ft260 0003:0403:6030.0023: unknown main item tag 0x0 [ 1002.180199][ T4794] ft260 0003:0403:6030.0023: unknown main item tag 0x0 [ 1002.191471][ T4794] ft260 0003:0403:6030.0023: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1002.389426][ T4794] ft260 0003:0403:6030.0023: chip code: 0000 0000 [ 1002.589999][ T4794] ft260 0003:0403:6030.0023: failed to retrieve system status [ 1002.612655][ T4794] ft260: probe of 0003:0403:6030.0023 failed with error -5 [ 1003.216510][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2270'. [ 1004.619825][T14156] overlayfs: failed to clone lowerpath [ 1004.681771][T14157] overlayfs: failed to clone lowerpath [ 1005.881826][ T4389] usb 4-1: USB disconnect, device number 28 [ 1007.424597][T14187] loop5: detected capacity change from 0 to 256 [ 1007.856533][T14197] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1008.873156][T14210] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1009.542872][T12203] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1009.700908][T14225] netlink: 'syz.6.2300': attribute type 29 has an invalid length. [ 1009.717109][T14225] netlink: 'syz.6.2300': attribute type 29 has an invalid length. [ 1009.932739][T12203] usb 4-1: Using ep0 maxpacket: 16 [ 1009.939652][T12203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.951676][T12203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.912759][T12203] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1011.050823][T14288] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1011.068129][T12203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.163302][T12203] usb 4-1: config 0 descriptor?? [ 1011.268452][T14292] loop8: detected capacity change from 0 to 256 [ 1011.648792][T12203] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 1011.682744][T12203] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 1011.717367][T12203] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 1011.733095][T12203] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 1011.740513][T12203] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 1011.759690][T12203] corsair 0003:1B1C:1B02.0024: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 1012.050065][T12203] usb 4-1: USB disconnect, device number 29 [ 1012.341276][T14298] fido_id[14298]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1012.636244][T14307] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1014.297410][T14320] UBIFS error (pid: 14320): cannot open "ubifs", error -22 [ 1014.612432][ T4317] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1014.692477][ T4328] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 1014.827003][ T4317] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1014.842051][ T4317] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.856713][ T4317] usb 9-1: config 220 has no interface number 2 [ 1014.871348][ T4317] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1014.889512][ T4328] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1014.905549][ T4328] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1014.917044][ T4317] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1014.927391][ T4328] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1014.939534][ T4317] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1014.946847][ T4328] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1014.958158][ T4317] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1014.966167][ T4328] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1014.982000][ T4317] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1014.992634][ T4328] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1014.999558][ T4317] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.037284][ T4317] usb 9-1: Product: syz [ 1015.042654][ T4328] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1015.053170][ T4317] usb 9-1: Manufacturer: syz [ 1015.062965][ T4328] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1015.075922][ T4317] usb 9-1: SerialNumber: syz [ 1015.093552][ T4328] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1015.107479][ T4328] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1015.126821][ T4328] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1015.157397][ T4328] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1015.177109][ T4328] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1015.189566][ T4328] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1015.210360][ T4328] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1015.230930][ T4328] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1015.246129][ T4328] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1015.260043][ T4328] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1015.296534][ T4328] usb 5-1: string descriptor 0 read error: -22 [ 1015.306043][ T4328] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1015.340023][ T4317] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 1015.352656][ T4328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.360978][ T4317] usb 9-1: No valid video chain found. [ 1015.380876][ T4328] adutux 5-1:168.0: interrupt endpoints not found [ 1015.388052][ T4317] usb 9-1: selecting invalid altsetting 0 [ 1015.517585][ T4317] usb 9-1: selecting invalid altsetting 0 [ 1015.593408][ T4317] usbtest: probe of 9-1:220.1 failed with error -22 [ 1015.610801][ T4317] usb 9-1: USB disconnect, device number 7 [ 1015.630114][ T4349] usb 5-1: USB disconnect, device number 48 [ 1016.762376][ T4328] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 1017.033896][ T4328] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1017.067642][ T4328] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1017.119932][ T4328] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1017.180466][ T4328] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1017.202307][ T4328] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1017.262486][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.299489][ T4328] usb 4-1: config 0 descriptor?? [ 1017.313382][T14353] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1018.403492][T14367] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1018.447422][T14356] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1018.700873][ T4328] usbhid 4-1:0.0: can't add hid device: -71 [ 1018.719114][ T4328] usbhid: probe of 4-1:0.0 failed with error -71 [ 1018.764148][ T4328] usb 4-1: USB disconnect, device number 30 [ 1021.225351][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'. [ 1026.163567][T14431] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1029.325702][T14463] overlayfs: failed to clone lowerpath [ 1029.385514][T14464] overlayfs: failed to clone lowerpath [ 1030.030948][T14466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2354'. [ 1030.543133][T14470] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2353'. [ 1031.433650][T14474] overlayfs: missing 'lowerdir' [ 1034.642062][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'. [ 1036.270821][T14516] overlayfs: failed to clone lowerpath [ 1036.277627][T14516] overlayfs: failed to clone lowerpath [ 1036.374345][T14518] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1037.164460][T14524] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1037.631182][ T4794] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1037.646746][T14530] overlayfs: missing 'lowerdir' [ 1039.105215][ T4794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1039.283865][T14538] misc userio: Invalid payload size [ 1040.050624][ T4794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.106957][ T4794] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1040.133100][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2375'. [ 1040.147163][ T4794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.200125][ T4794] usb 6-1: config 0 descriptor?? [ 1040.444718][ T4794] usbhid 6-1:0.0: can't add hid device: -71 [ 1040.461504][ T4794] usbhid: probe of 6-1:0.0 failed with error -71 [ 1040.479296][ T4794] usb 6-1: USB disconnect, device number 37 [ 1041.456143][T14564] device syzkaller1 entered promiscuous mode [ 1041.749559][T14567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2383'. [ 1041.898591][T14565] loop8: detected capacity change from 0 to 1024 [ 1043.532167][T14571] overlayfs: missing 'lowerdir' [ 1043.587231][T14565] EXT4-fs: Ignoring removed i_version option [ 1043.593632][T14565] EXT4-fs: Ignoring removed bh option [ 1043.691588][T14565] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1044.392371][ T27] audit: type=1800 audit(2000000155.448:53): pid=14583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2381" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 1045.252437][T10364] EXT4-fs (loop8): unmounting filesystem. [ 1045.345059][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2387'. [ 1048.323770][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2398'. [ 1049.670547][ T4317] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1049.784571][T14652] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1049.911994][ T4317] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.945932][ T4317] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1049.968880][ T4317] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.010225][ T4317] usb 9-1: config 0 descriptor?? [ 1050.234690][ T4317] usbhid 9-1:0.0: can't add hid device: -71 [ 1050.291949][ T4317] usbhid: probe of 9-1:0.0 failed with error -71 [ 1050.322971][ T4317] usb 9-1: USB disconnect, device number 8 [ 1051.200394][T12203] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1051.424584][T12203] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.450503][T12203] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1051.483691][T12203] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.527562][T12203] usb 9-1: config 0 descriptor?? [ 1052.531393][T12203] aiptek 9-1:0.0: Aiptek using 400 ms programming speed [ 1052.548783][T12203] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input10 [ 1052.580794][ C1] ================================================================================ [ 1052.590143][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 1052.598944][ C1] index 31876 is out of range for type 'const int[34]' [ 1052.605784][ C1] CPU: 1 PID: 12044 Comm: udevd Not tainted syzkaller #0 [ 1052.612802][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1052.622849][ C1] Call Trace: [ 1052.626129][ C1] [ 1052.628963][ C1] dump_stack_lvl+0x188/0x24e [ 1052.633643][ C1] ? show_regs_print_info+0x12/0x12 [ 1052.638836][ C1] ? load_image+0x410/0x410 [ 1052.643344][ C1] ubsan_epilogue+0xa/0x30 [ 1052.647772][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 1052.653546][ C1] aiptek_irq+0x1e87/0x28f0 [ 1052.658084][ C1] ? kcov_remote_start+0x86/0x7e0 [ 1052.663106][ C1] ? led_trigger_blink_setup+0x37/0x230 [ 1052.668716][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 1052.674134][ C1] dummy_timer+0xa21/0x3420 [ 1052.678667][ C1] ? dummy_free_streams+0x520/0x520 [ 1052.683869][ C1] __hrtimer_run_queues+0x522/0xc90 [ 1052.689059][ C1] ? dummy_free_streams+0x520/0x520 [ 1052.694258][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1052.699493][ C1] hrtimer_run_softirq+0x173/0x290 [ 1052.704599][ C1] handle_softirqs+0x291/0x910 [ 1052.709424][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1052.714263][ C1] ? do_softirq+0x210/0x210 [ 1052.718750][ C1] ? hrtimer_interrupt+0x775/0x980 [ 1052.723852][ C1] __irq_exit_rcu+0x13b/0x230 [ 1052.728518][ C1] ? irq_exit_rcu+0x20/0x20 [ 1052.733019][ C1] irq_exit_rcu+0x5/0x20 [ 1052.737244][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1052.742935][ C1] [ 1052.745865][ C1] [ 1052.748782][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1052.754763][ C1] RIP: 0010:lock_acquire+0x225/0x4a0 [ 1052.760066][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 1052.779667][ C1] RSP: 0018:ffffc9000dd6f500 EFLAGS: 00000206 [ 1052.785727][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 46e791101019b600 [ 1052.793686][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c2920 RDI: ffffffff8adf42e0 [ 1052.801662][ C1] RBP: ffffc9000dd6f608 R08: dffffc0000000000 R09: 1ffffffff216204a [ 1052.809635][ C1] R10: dffffc0000000000 R11: fffffbfff216204b R12: 0000000000000001 [ 1052.817603][ C1] R13: 1ffff92001badeac R14: 0000000000000246 R15: dffffc0000000000 [ 1052.825585][ C1] ? mark_lock+0x94/0x320 [ 1052.829917][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1052.835283][ C1] ? __lock_acquire+0x138a/0x7c40 [ 1052.840312][ C1] ? fs_reclaim_acquire+0x78/0x100 [ 1052.845422][ C1] fs_reclaim_acquire+0x94/0x100 [ 1052.850356][ C1] ? fs_reclaim_acquire+0x78/0x100 [ 1052.855477][ C1] slab_pre_alloc_hook+0x2a/0x300 [ 1052.860561][ C1] ? __lock_acquire+0x1465/0x7c40 [ 1052.865575][ C1] kmem_cache_alloc_lru+0x49/0x2e0 [ 1052.870675][ C1] ? __d_alloc+0x2e/0x6e0 [ 1052.874993][ C1] __d_alloc+0x2e/0x6e0 [ 1052.879156][ C1] d_alloc_parallel+0xdc/0x1590 [ 1052.883999][ C1] ? memset+0x1e/0x40 [ 1052.888048][ C1] ? lockdep_init_map_type+0x98/0x8d0 [ 1052.893415][ C1] ? lockdep_softirqs_off+0x430/0x430 [ 1052.898789][ C1] ? d_hash_and_lookup+0x1b0/0x1b0 [ 1052.903895][ C1] ? __init_waitqueue_head+0xa4/0x140 [ 1052.909263][ C1] __lookup_slow+0x134/0x3f0 [ 1052.913874][ C1] ? lookup_one_len+0x2d0/0x2d0 [ 1052.918732][ C1] ? down_read+0x1a8/0x2d0 [ 1052.923166][ C1] lookup_slow+0x53/0x70 [ 1052.927415][ C1] walk_component+0x2ad/0x3e0 [ 1052.932108][ C1] path_lookupat+0x148/0x420 [ 1052.936694][ C1] filename_lookup+0x229/0x580 [ 1052.941451][ C1] ? hashlen_string+0x110/0x110 [ 1052.946301][ C1] ? __might_fault+0xa6/0x120 [ 1052.951047][ C1] ? __virt_addr_valid+0x188/0x540 [ 1052.956313][ C1] vfs_statx+0x10e/0x610 [ 1052.960550][ C1] ? __phys_addr_symbol+0x2b/0x70 [ 1052.965574][ C1] ? vfs_fstatat+0x80/0x80 [ 1052.969989][ C1] ? getname_flags+0x206/0x500 [ 1052.974760][ C1] __x64_sys_newfstatat+0x190/0x240 [ 1052.979966][ C1] ? __ia32_sys_newlstat+0x1f0/0x1f0 [ 1052.985253][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1052.990450][ C1] do_syscall_64+0x4c/0xa0 [ 1052.994858][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1052.999531][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1053.004205][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.010114][ C1] RIP: 0033:0x7f27e6911b0a [ 1053.014524][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 1053.034126][ C1] RSP: 002b:00007fffd6270468 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 1053.042582][ C1] RAX: ffffffffffffffda RBX: 000055987fe986b2 RCX: 00007f27e6911b0a [ 1053.050550][ C1] RDX: 00007fffd6270470 RSI: 00007fffd6270500 RDI: 00000000ffffff9c [ 1053.058517][ C1] RBP: 00005598856adf10 R08: 000055987fe986b2 R09: 0000000000000000 [ 1053.066485][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00005598856ae000 [ 1053.074526][ C1] R13: 00007fffd6270500 R14: 000055987fe9800c R15: 000055987fe9ebcc [ 1053.082524][ C1] [ 1053.085539][ C1] ================================================================================ [ 1053.094933][ C1] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1053.102120][ C1] CPU: 1 PID: 12044 Comm: udevd Not tainted syzkaller #0 [ 1053.109146][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1053.119211][ C1] Call Trace: [ 1053.122484][ C1] [ 1053.125322][ C1] dump_stack_lvl+0x188/0x24e [ 1053.129995][ C1] ? memcpy+0x3c/0x60 [ 1053.133975][ C1] ? show_regs_print_info+0x12/0x12 [ 1053.139180][ C1] ? load_image+0x410/0x410 [ 1053.143687][ C1] panic+0x2d3/0x710 [ 1053.147583][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1053.152095][ C1] check_panic_on_warn+0x80/0xa0 [ 1053.157117][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 1053.162848][ C1] aiptek_irq+0x1e87/0x28f0 [ 1053.167341][ C1] ? kcov_remote_start+0x86/0x7e0 [ 1053.172364][ C1] ? led_trigger_blink_setup+0x37/0x230 [ 1053.177905][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 1053.183273][ C1] dummy_timer+0xa21/0x3420 [ 1053.187801][ C1] ? dummy_free_streams+0x520/0x520 [ 1053.193016][ C1] __hrtimer_run_queues+0x522/0xc90 [ 1053.198228][ C1] ? dummy_free_streams+0x520/0x520 [ 1053.203447][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1053.208553][ C1] hrtimer_run_softirq+0x173/0x290 [ 1053.213664][ C1] handle_softirqs+0x291/0x910 [ 1053.218423][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1053.223269][ C1] ? do_softirq+0x210/0x210 [ 1053.227764][ C1] ? hrtimer_interrupt+0x775/0x980 [ 1053.232870][ C1] __irq_exit_rcu+0x13b/0x230 [ 1053.237537][ C1] ? irq_exit_rcu+0x20/0x20 [ 1053.242032][ C1] irq_exit_rcu+0x5/0x20 [ 1053.246260][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1053.251881][ C1] [ 1053.254798][ C1] [ 1053.257709][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1053.263678][ C1] RIP: 0010:lock_acquire+0x225/0x4a0 [ 1053.268956][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 1053.288554][ C1] RSP: 0018:ffffc9000dd6f500 EFLAGS: 00000206 [ 1053.294610][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 46e791101019b600 [ 1053.302572][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c2920 RDI: ffffffff8adf42e0 [ 1053.310533][ C1] RBP: ffffc9000dd6f608 R08: dffffc0000000000 R09: 1ffffffff216204a [ 1053.318494][ C1] R10: dffffc0000000000 R11: fffffbfff216204b R12: 0000000000000001 [ 1053.326452][ C1] R13: 1ffff92001badeac R14: 0000000000000246 R15: dffffc0000000000 [ 1053.334432][ C1] ? mark_lock+0x94/0x320 [ 1053.338755][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1053.344121][ C1] ? __lock_acquire+0x138a/0x7c40 [ 1053.349136][ C1] ? fs_reclaim_acquire+0x78/0x100 [ 1053.354240][ C1] fs_reclaim_acquire+0x94/0x100 [ 1053.359164][ C1] ? fs_reclaim_acquire+0x78/0x100 [ 1053.364267][ C1] slab_pre_alloc_hook+0x2a/0x300 [ 1053.369280][ C1] ? __lock_acquire+0x1465/0x7c40 [ 1053.374317][ C1] kmem_cache_alloc_lru+0x49/0x2e0 [ 1053.379416][ C1] ? __d_alloc+0x2e/0x6e0 [ 1053.383732][ C1] __d_alloc+0x2e/0x6e0 [ 1053.387873][ C1] d_alloc_parallel+0xdc/0x1590 [ 1053.392716][ C1] ? memset+0x1e/0x40 [ 1053.396691][ C1] ? lockdep_init_map_type+0x98/0x8d0 [ 1053.402057][ C1] ? lockdep_softirqs_off+0x430/0x430 [ 1053.407425][ C1] ? d_hash_and_lookup+0x1b0/0x1b0 [ 1053.412525][ C1] ? __init_waitqueue_head+0xa4/0x140 [ 1053.417887][ C1] __lookup_slow+0x134/0x3f0 [ 1053.422463][ C1] ? lookup_one_len+0x2d0/0x2d0 [ 1053.427307][ C1] ? down_read+0x1a8/0x2d0 [ 1053.431709][ C1] lookup_slow+0x53/0x70 [ 1053.435968][ C1] walk_component+0x2ad/0x3e0 [ 1053.440642][ C1] path_lookupat+0x148/0x420 [ 1053.445216][ C1] filename_lookup+0x229/0x580 [ 1053.450051][ C1] ? hashlen_string+0x110/0x110 [ 1053.454924][ C1] ? __might_fault+0xa6/0x120 [ 1053.459591][ C1] ? __virt_addr_valid+0x188/0x540 [ 1053.464720][ C1] vfs_statx+0x10e/0x610 [ 1053.468953][ C1] ? __phys_addr_symbol+0x2b/0x70 [ 1053.473969][ C1] ? vfs_fstatat+0x80/0x80 [ 1053.478396][ C1] ? getname_flags+0x206/0x500 [ 1053.483145][ C1] __x64_sys_newfstatat+0x190/0x240 [ 1053.488342][ C1] ? __ia32_sys_newlstat+0x1f0/0x1f0 [ 1053.493625][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1053.498827][ C1] do_syscall_64+0x4c/0xa0 [ 1053.503249][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1053.508002][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1053.512667][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.518546][ C1] RIP: 0033:0x7f27e6911b0a [ 1053.522948][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 1053.542731][ C1] RSP: 002b:00007fffd6270468 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 1053.551132][ C1] RAX: ffffffffffffffda RBX: 000055987fe986b2 RCX: 00007f27e6911b0a [ 1053.559095][ C1] RDX: 00007fffd6270470 RSI: 00007fffd6270500 RDI: 00000000ffffff9c [ 1053.567049][ C1] RBP: 00005598856adf10 R08: 000055987fe986b2 R09: 0000000000000000 [ 1053.575047][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00005598856ae000 [ 1053.583039][ C1] R13: 00007fffd6270500 R14: 000055987fe9800c R15: 000055987fe9ebcc [ 1053.591010][ C1] [ 1053.594293][ C1] Kernel Offset: disabled [ 1053.598612][ C1] Rebooting in 86400 seconds..