last executing test programs: 13m32.399495401s ago: executing program 2 (id=19): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x800}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003dc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000004080)=@newtfilter={0x212c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffff}, {0x8, 0x6}, {0x10, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_route={{0xa}, {0x20f4, 0x2, [@TCA_ROUTE4_POLICE={0x50, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x8000, 0x8, 0x5, {0x8, 0x1, 0x1, 0x100, 0xf, 0x80000001}, {0x3, 0x0, 0x8, 0x40, 0x5, 0x4}, 0x2, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_ROUTE4_POLICE={0x14, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb2}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9, 0x4}}, @TCA_ROUTE4_ACT={0xf84, 0x6, [@m_vlan={0x9c, 0x11, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x5e, 0x6, "328c84a5a1615907d66ca83b7c1df4e9184c927e2d6ef77736b861b4773206d946cc142ed5af6feb06b0d07b7f8529ef7faabf8ed81ba075ad627b02a0504b0aec7f2d5e969dd74c30a98c7a2fd96355056de61a4ff406a6fe42"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x38, 0xb, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0xf4, 0x6, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5dd}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x808}]}, {0xb5, 0x6, "2300d591cce4b4278f648d441f894a022e00afb5644d9e44164fe15aaf35aa10738291508196c1b4010add5e827033edb07d6dfe16ca64fad082da1988661a19dd84bc111831320405de6c8cec25b89ee0179396bbcdd35cbb5ad40598bea3fb98bffd250a334a05e65878d0572627e3ac73f640b2953f0242d002b55a91df29764812fda5995ff60c10d0f2a75b5254573efba4e6b10845ba1d6aa8d32095c21913eecd0ce1b473d5fa7380a530d55dab"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbedit={0xf4, 0x5, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x1ff, 0x7, 0x5}}]}, {0xaf, 0x6, "4e60e762e9dc57a110b043ae6d35aee8cc61f925292182f86d989cd9e610831caa9ffc12e105b658dd99d165b677c7ba8578d7c3aeb17c50fa29e0d571dce1b29a84a458fe46265542f757838462a2ae304d1f07c1494f2cfbc56aba96c54d212bf1e1e7de26bcad8222b69c48506fc63615e2cdbc8ad324c9e8f22b466f78add7c1acb00174d88171eeaefd231dd11dcf698a1978cdfe8f7b14f50aca9422befcfb76421ebbbb66c91ab3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xc74, 0x1f, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0xfffffffe, 0x0, 0x8000, 0x5}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x9, 0x6, 0x80, 0x6}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xa, 0x9, 0x1, 0x8, 0x7c}}]}, {0xbfe, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x50, 0x20, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "927091fe505e175ead6795880be83189"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}]}, {0xa, 0x6, "ddc3d1e7c7e1"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_ROUTE4_ACT={0x10e8, 0x6, [@m_sample={0x1060, 0x1a, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x14}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x400}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x1004, 0x6, "36b40941c7969f7b6fa5332412fc056dd8f8d9f125801934a5b32b0171014261ac4c4427a62d05a13261f88147e2b1fffc587b34f0bfe766c9f7a504ddc7b73b33187eee5e9455821d2b481c621f0956aaa7841610a52809844cec8d4e3eeaceb3fbc10f5ec2ffdb6d78de82048297d1f5740ac9b6ea285bba62fe2f4ec913e4cdcd48e20301ca0ac54e2bdf10379c10c0ecca08825484e498fdc6982b74710dc13ef65930e0f9aa8b250fd3d3fe7188524db69b8cfe17f92a1f6c49d88590404ec619d0f52318f8ee98a68a5054952dbfc358f236b5b783e608c6684675ad4cb8746895c9a2c8985fcc7eedbd71121dd7fa0e8dd218c593e65d8541ec8a25b2ce838de51ab8ac9c8c232127d8c4fc3bba34618fcfc5300d457afad87fccd5ef1d42a6f1a1966c130aa38b5e4cd24fa41f7856baeb704daad40c6eb39422974dbcf1f8a77ed597815beb1fce3c8cddf3489063f96f03db54cb152f4b001fa62a09cb96572afe9cd955b5704dfd134cf8eaed8984984edcc6a7ee57fa4dc85d5ec1f0e4d7f932c377df976d2762aa36d544c4af8fb191f13fe12d62ab8129c06aae52331aab800a9c4a5e48da88cb2188bbca0a2d6f5e0bf42400248ff69344a8729f6351e6d2501c1bfb1f61c922871ec1d17156e797f722bac0e8f114b0acec8d5b1437c2fe7de5481b3bd888ccdd9dd6ef3b8ca490a77926f7de5389d864baf74695d6307bd387466018d4178dd07b83caea065dc3d02acca79de71a78392c2ddcf05024478ed8df1c7432518c40c5c56e7cb82181ecf9b034a66f2ffd2e864b0656c722c26dd795878390b87ba82e120ee82391309ae12ee3fee73aa70a13a851d12b8f0e7f4af9ff394147068c7e22e3bdbbd84332428d80b7e14f3f75f8442f152fb19def0e289f709fddffc75ab73d25d497e0998c6e849b4bef19e569edc3b30e2307130f6a2a4ac5cb8b806a12336844c0d48a8ee937ec97197399d5847dd969ef6f3a786d038328118d64391c7d691a3b0e2d0a7e1a2a6d2add0655ec09b37457b2a2bc71e5a0f929b1c06dd95763968b46e315e20eb4674df9d99fdbcc486c6d9e3a339e35cab251fb60b608ade221d54875fea6b3aaf059a7cd1e429d9be02a75bcbfc37331ee3bafa6f9f085cf2705dcca75e1a585baa7ffd8f83a2d03455ae9194cc52f2264e1421a05805a9328e0e75554341bc96f1ade2d77b29ff403dc3ecc27054f0bd6ab36e3c44709e0a0f0bf1cc5c5f4d8b90e1df5a9c1c9d45f5244573ce518df03b39ee494719ae9009fff48c31b965205c1754c844bafe5a4a92f61f5788d52d8d8cc0d2dfa50bc2212ff5bdf2599754ae471b68a36a98a92425dade0445985e9aa666b84c30d0172b7cb35e167c5fdd0f06eec262a0055624dff860ca1ec428c1761b24b1a9b99650548f183ead4912222e91b6fbf0c720f1696e32d742be83c336f819569e6fab7cb78925f33c2c5c14596a4d3566bfec8f3256491fac5147312e1c68eefb3f382772198767fab64469fe89c335404bd912582c212901d7e0d87859cafe876baa8d602633f43a482ab3c45fd124c1531c4a3b46e9cb44defe0fdea59b0419da651c7ad6998cfa336264fe56310a1385905e87f98fbe1392729464ee2bb173e81f6e03f3d07718b870f00e2242f9ac8620bc30dd7dd4b9e260b806aa45e9234d377d4441090d877758d7fe2dfb57fcb7c4c31914a55de5fdbbc5071f0d86df46563d6759f3b60fb3bd4291f5fafb3d83db30fa6da5d81d864dbcfb8c9a36450d5ec42e68cf4903c3731a6fdcaa00eceaabc6c18585cae349a5cada2542ea2275033e3a124cc6560c201afcc440612434fe92705f10062b7ebd74faacfc150bf863ad72030e3ab24333f511936b298a3274a341add095c20a48df75f56758bb89a49d80898a5204584cc076124787b30e22746113502750e56d4a79dfc05bf2e37060d18b2144f5e3e4888ca099c4edd7dd0c6836c2c0c009172d5f6de5396705f5fe2b2f479a167f4cf281f471de81b84dcdffa8b033693ef69511be7a58a2ef043f219610bf8150e40e9ade156fe8637b0b5a06b15dfe44d21c362a727be606c6c0c4d560f49b719eada461ab2a24253b7a72db184533fffef720db4d04a9dd9dcb3576af5f3d4dd25501c3c145349f47e1ca4db0482e3150ffdb32bc5f1cbf1bcbcc8f77df5237f7ece632d8ad72dba929091816926ea4a6c681a51071314b507b55ce759c56087dc463cd0fac2a521d33a5d2dd1cfeeb14ba00365514e31092d93269ec8deee42c77713cf1681fdc8b1dfbb360cd00881b73b89f68e5e76e8aea0d97169c43bcf9b6a4b715371bef62a2c72aaacda64d251294f59f94f415ff5f15efaecd87146305a72293358530284e2a5c4859620757b54c5ce2f93a3c35ade433acea7b93f2caf4e2d34bbbbf294f761b51658e7f60c2b435e23f3a4d7ff5d1e393bb8160a9d072773495f186554eca449384971e05f38bc0132f1243833f7e5352310db4fffd1973d4f98ada89cea8a35b6941adf5d8ff47ace4926c0c9c32d34b47bf77094f2dd69aa906d18224e061ed6dcd1e0cff0bf3c9a7f3c9091072fcce26461bf738cc7ca04df50c7c5ae8fba6831293b57940fdf344a979264b9c651bd0e062058486ba4741ff9ee7645eb824cfc784af06acb42713ed231ac5204879c6d930a3184808f09d2ae5f0fb492d9d420b0121f453a0cc113f7f8ce4b5c5555d10da3246a6002f29d768b940fcf68560c7cfe3e90b1e7b5ebf39dda8d7a4ae4ca1bed7cdc793e4a6076ca096b1445afdcfd8ee7c9ab53ec62f2c100ada976057497307ed634dfac0070759e82ca4b463b4a88e093e57b09babe774806e11eeaa03d40097f80daea4e7501182d82e86bb7ff44a01bb93dc77d89f09bb54b952ecba35ac80b714b795581d776692f431399c91934f79a04280afdda246fa416678df6bbba160a71dfddd2f437beb9b4202264503181419715a1b82d7a1d1885ad3c0e4f8c73d023337e3f15ae0895cbd3a124161d0c7330954010b5aa3f3d6978707cf719549756199ff864c13dd46dae86b7ff724cd588a31e87b5156c9beb9f34a88d585b1634ce6734ca332b782e244483584328d0b15123a6a41fbbad9746444f4476515fc769b3b4a47c96c3871bed4cd32906d3089cc049246be3dd7d0aebac99f8323bffc4aa591ded725755516a47e859cd302e2eee606666fc7cb723b7827ae352bd18d35dbd4359edcb66b50b15b995cf4daf6e8d11d0df5b68508f25f62cf3ef48edf883701de7fd6b61ee16c1af860c6a943e1d2d803495a36afb2aa367205b6ae463407051c6c9b8dd5fd96e55f477173d63031506eb1cf3ddc4fb716322c9bf9030c24a55170553cf1ac81b6cdf81ee9f6d5a3f08d8dc3c4a47cb11b809fb751dc002583303b15d134649504be7d89031d5562f896cf10ab6d20f452a8c3a16da68f3e54d63a526031cc970ff21673b4b7f66f99984f97d363d2b64dba1aecc44d14a121ce90b3df994bf8f3fae4193d1053be460f7801d60f4aef87d57a995ddda4b2058d8fdbcb19ebafdcbdf333ffc12bca327694ac7ad275e0d6c53b9d022cba57af4753664d3c4a0b5c10a943a7204c6fa97d0d437b031d0f892950f0d970fe4581b3cf4a0182d8db3ddf69f433550ea4470ca907371d685464086baeb1794af92cb02ffe0e9a546b284fb05d6749e22b8b858a7e7a37d9d1978d47451028cd8042d346e055f94c43f117fdb06870ebab2e60b639b819abd22e47851cc67f4ee31b572071f50e311e446afa3ff9e28bddc7ca2a8c7c5a13c050a61f24a700ea74b674826a62bd8366077acced12b7c2021606a7c2bd4402b18fd73f28b6ecabe7ba8a11ac550d8614282e714df6184e2ffbd5b2674b56910b6a9934597ad70fda0a59ecceecce6abae6bc92d3138fb620136c474e95ce546475527f6670e634786d753e279ecf1aab75194236b2146714999af23ceab1813e42b126a5ba425b86b772e945b539d7ea421986917aa585809c3fe1972aa03da27ac10319e08e0a90832e322e6c4db1e6ea00eb6e91a06f416f9c77fb603a028c096d6b81ea9d25c6511a5230e9cae9356ae472223bf8f9da8e4889cbf94858af03201c8c8ff0a7fd799e376c489985c6da9f0e3e50b85216e664b15711b7b877805a11a8863df980fa3455b85279e1092f9827930ad7424ae37843b036a26499a83416b5e02edc6763966bd4b459c5c97f87e6292f8c809c65484de640c1cea194b7d5d329f64dd15036eb93abbffba5c9d8224776d04a0870d97a882c0db2cd63ba5e0089a2ce1af65dbeb770625564669bd6241e6745de00ad1d019b6185685590060683d6b598e33a4ed1c636aa752926da63b60e00a1863f84cf44f0196fcfccb2d46f1f579b1e2c1bbca106400a607df502db1c484d1717dabcf0e23e88ac15aded9b4bf80e98b302c527aa356e9ca2a112b2370cdf335e6ddd3406da726ecbd54ba33a4e7b9e4d829b4ec223868e6d144fd18ea4ff0a22a56e79b0fdf9cf364dcfa7aba18ed71652bff17612d0b730a788e26859750684b2cff03c4b788676dd37bbc867852e2a5899b972f655b195e47f26dbca0ad819d013fe603bf4010494ac987e6fabf385ca42f481e0130c9ef7dfc5a5d4059b8ab367edcf704c4be90cd9486154f07cf343dd35af73ca48209770b84ba4d4119e206bfb8313e53ba5c48d00ba5f00682249621f1175bd86d6edfc1ed1f6b16ea5a19a286742151e5d80553ab5e81afb62fe618dbfaaf02c529fd664153f7af7656ab18af57ac56cdfd475f91f84a5b2453f698c1b8db391ee4c6ff2026091999aefed86a8d8882fc3586b551dbdb4422ca413071be11c9be55d5ff128cadabb8fe4ad3b7c74ae47917704cdec2f282d3c5111bc2b97d7faaaa4df6006fd012b4f01c2fa04021c4e22c29226082eaa9f68b5ac9ad961a66d08990930b5a2f5dda7e641e202220985ce12747fcec943a90f7628ad742706831f32f554fa855600a4ecebfaacf9606d2e378e0dbf36de49f13315d1ced8afd4738c07a08aac3878c0b38a8faa491bfe5ee677af94b3187a7d72e4c5b14c936d11cee4099156b458a6089a33ddb31a756cba17f25ca346e85a395d4a241d0bfd3094f72584ce68f465fb1a6f408d1eaa7a631979222035c8a61ceb13d069d1613303f2ed3eed8552cf56cacb0173e343a7f4d036b79b43dbe86cb624312e01aefa370e7965bf43e3c6ebe903207bb0d94ec9bc7f48b3e906c74c85b38b86e51c4c9452110629464ff7e941f3eab443eda888301b680595c42e14397d3f72aeceef3584c922d76208fd35f9a3655bc07242543c437f213143604335141598b066aa0df40314cdc3764e7dffd9ab6de63cc0deda9106796c7c6364ee621d8db0a104a729e667243d530cc123421d476f16a1ab47c0181fca62c15a7d0d760ffab1e2de1d4379af8b224a916144f1a54da801ce6752794d4a3a12f8fd1c13e0cfb97d4c7fbdd6624ec1abb2171cca6068f4fa09ed588a854b6c384330c9e30ac54f41fb2b652e0641c3e912086e37b5958725b004ad3c4f45a7ac2165ec40cf0aca219413a22d7909f97d72952d66464c6f2f5f61c46170bab6e23869a8be20a80379252dc1bec3ab4e6178c78b2e50e3b4e0b28d6195bbeb8b7f51655d81ae56323a088a327bf9af20b41baad255b79272175a9a9286e7298ead004d059481e7b5cf9245550e59dcc1281d7ea188b3d041edaedbd0223"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x84, 0xa, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_MARK={0x8, 0x5, 0x4}, @TCA_CT_ZONE={0x6, 0x4, 0x6}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x17}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24f1578475b8be1f, 0x2}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x3}]}}]}, 0x212c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 13m30.962142214s ago: executing program 5 (id=22): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000000)={'trans=unix,', {[{@msize={'msize', 0x3d, 0xffffffff00000000}}]}}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) rt_sigqueueinfo(r2, 0x3b, &(0x7f0000000540)={0x0, 0xe, 0xfffffffb}) write$UHID_INPUT(r1, 0x0, 0x0) 13m26.437747205s ago: executing program 5 (id=29): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) rename(0x0, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 13m24.573474791s ago: executing program 5 (id=30): r0 = open_tree(0xffffffffffffffff, 0x0, 0x89901) fspick(r0, &(0x7f0000000000)='.\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000218000/0xc00000)=nil, 0xc00000, 0xb, 0x6011, r2, 0x12533000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) mremap(&(0x7f000034e000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000a4b000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 13m24.146633245s ago: executing program 2 (id=32): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000000000), 0x800, &(0x7f0000000080)=ANY=[]) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x6, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000001c0)={0x7, r4, 0x32, {0x4, 0xbb2}, 0x1}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_io_uring_setup(0xbc6, &(0x7f0000001480)={0x0, 0x1068, 0x200, 0x4, 0x18b}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_enter(r6, 0x47f8, 0x0, 0x38, 0x0, 0x0) unshare(0x2040400) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)="ac298fb5f4a590ce6b2723239445d7b21d6794aa9eb2a14f413f54075093e3ccb69912ae456735709455509ced8f4b202faf7b36aeb0b7", &(0x7f00000000c0), 0x4, r1}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9, 0x0, 0x100}, 0x18) unshare(0x2000400) splice(r0, 0x0, r4, 0x0, 0xbfd1, 0x0) 13m23.069851011s ago: executing program 5 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080)=0x1ed8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9ab46000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 13m21.432380586s ago: executing program 5 (id=38): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 13m21.38111952s ago: executing program 2 (id=39): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 13m21.038715666s ago: executing program 2 (id=40): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000035980e2f74b53d6cf79f6b62d2177770a3ca49e2"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000817000/0x2000)=nil, 0x2000, 0x9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000001200)=@raw={'raw\x00', 0x4001, 0x3, 0x3a8, 0x0, 0x700001b, 0x148, 0x250, 0x148, 0x310, 0x206, 0x240, 0x310, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 13m16.728319687s ago: executing program 2 (id=42): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf4b}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') ptrace(0x10, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000016c0)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x9) read$FUSE(0xffffffffffffffff, &(0x7f0000007fc0)={0x2020}, 0x2020) 13m16.119246182s ago: executing program 5 (id=46): fallocate(0xffffffffffffffff, 0x700100, 0x0, 0x1000f4) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x200000, 0x0, 0x4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x10f040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socket$netlink(0x10, 0x3, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setreuid(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861720065743d6d6163677265656b2c066d61736b3d30303030303030303030303030303030303030303030352c6e616d65636173653d312c7569643d", @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000014c0)="$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") socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x4, 0x0) 13m15.637862747s ago: executing program 2 (id=48): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x40000001}, 0x0, 0x4}, {{@in, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socket$inet(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb080040"], 0x0) 13m0.680443569s ago: executing program 32 (id=46): fallocate(0xffffffffffffffff, 0x700100, 0x0, 0x1000f4) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x200000, 0x0, 0x4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x10f040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socket$netlink(0x10, 0x3, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setreuid(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861720065743d6d6163677265656b2c066d61736b3d30303030303030303030303030303030303030303030352c6e616d65636173653d312c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031302c646973636172642c666d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d6575632d6a702c6572726f72733d636f6e74696e75652c616c6c6f775f7574696d653d30303030303030303030303030303030303134373037302c0092803b831534d131135366249e8a045ee656058ddf6f41400b01a0870e4c656ef6f11325a20c319fd81269acc3b77200feb4294a821f553876d64b4a41390c44492e6f79c4b09bbe8e5cb02585b919505651c34f3e21f9532204a0c936a1da6422edb1108cf73536e8fbe241e030f5b5e1d081994fbe8a093c44b63f3da6a8a46706b47fa3"], 0x1, 0x1528, &(0x7f00000014c0)="$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") socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x4, 0x0) 13m0.491789033s ago: executing program 33 (id=48): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x40000001}, 0x0, 0x4}, {{@in, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socket$inet(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$eJzs3c9vHFcdAPDvjH9t0zROoAeogAQoBBRlN960UdVLwwWEqkqIigPikBp7Y5nsZkN2XWoTCfdvAAkkTvAncEDigNQTB24cEELigBDlgFTAAsVIHBbN7Njd2rvNNl7v1t7PR5rMj/dmvu+ts/PevrXnBTC1LkXEdkTMR8RrEbFYHE+KJW52lyzfw50HK7s7D1aS6HRe/WeSp2fHoueczJPFNUsR8fWvRHw7ORy3tbl1Z7ler90v9ivtxr1Ka3Pr6npjea22Vrtbrd5YunHthevPVw+c+Ydzj1vXi41fvPPl9Ze/8etfffLt321/8ftZsc4Wab31GKVu1ef242RmI+Ll4wg2ATPFen7C5eDxpBHxkYj4TP7+X4yZ/H8nAHCadTqL0Vns3R+gNDAFADhh0nwMLEnLEZGmRSeg3B3DezrOpPVmq33ldnPj7mp3rOx8zKW31+u1axcW/vTdPPNcku0v5Wl5er5fPbB/PSIuRMSPFp7I98srzfrqZLo8ADD1nuxt/yPiPwtpWi4PdWqfb/UAgBOjNOkCAABjp/0HgOmj/QeA6TNE+1982b997GUBAMbD538AmD7afwCYPtp/AJgqX3vllWzp7BbPv159fXPjTvP1q6u11p1yY2OlvNK8f6+81myu5c/saTzqevVm897Sc7HxRqVda7Urrc2tW43mxt32rfy53rdqc2OpFQDwfi5cfOuPSURsv/hEvkTPXA7aajjd0hHmAk6WmaOcrIMAJ5rZvmB6DdWE552E3x57WYDJ6Psw71Lfzff6yQcI4veM4EPl8seHH/83xzOcLh9wZP/3xzJJPjARjzf+/9LIywGMn/F/mF6dTnJwzv/5/SQA4FQ6wq/wdX4wqk4IMFGPmsx7JN//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwClzNiK+E0lazucCT7N/03I54qmIOB9zye31eu1aRJyLixExt5DtL0260ADAEaV/T4r5vy4vPnv2YOp88t+FfB0R3/vpqz9+Y7ndvr+UHf/X/vGFvenDqu+ed4R5BQGA4f11mEx5+10t1j0f5B/uPFjZW46xjIe886X9yUdXdnce5Es3ZTY6nU4nopT3Jc78O4nZ4pxSRDwTETMjiL/9ZkR8rF/9k3xs5Hwx82lv/ChiPzXW+Ol74qd5WnedvXwfHUFZYNq8ld1/bvZ7/6VxKV/3f/+X8jvU0eX3v1LE3r1vtyf+bBFppk/87D1/adgYz/3mq4cOdha7aW9GPDPbL36yHz8ZEP/ZIeP/+ROf+uFLA9I6P4u4HP3j98aqtBv3Kq3NravrjeW12lrtbrV6Y+nGtReuP1+t5GPUlb2R6sP+8eKVc4PKltX/zID4pb71n98/93ND1v/n/3vtW59+d3fhYPwvfLb/z//pvvG7sjbx80PGXz7zy4HTd2fxVwfU/1E//ytDxn/7b1urQ2YFAMagtbl1Z7ler90/0kb2KXQU1zm0kRVxuMx73cXBeYoMN9/vOn+JfGNEL8uAjawzNkzmueN6VY99Y3a/rzjaK38zu+KYq5OOvBZH2ng4rliTuR8B43OoeQQAAAAAAAAAAAAAAD50xvGnS5OuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfX/wMAAP//8RXBxA==") socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb080040"], 0x0) 11m59.547105637s ago: executing program 3 (id=182): syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 11m57.838107323s ago: executing program 3 (id=184): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=@newnexthop={0x20, 0x68, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x4, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}, @NHA_GROUP={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x654201, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x27, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x38011, r2, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 11m55.662222261s ago: executing program 3 (id=189): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x8c) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000440)={0x0, 0x2, 0xa, 0x0, &(0x7f0000000200)}) keyctl$setperm(0x5, r4, 0x800) bind$can_raw(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1026864, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESOCT=r7]) syz_open_procfs(0x0, 0x0) 11m49.543110402s ago: executing program 3 (id=198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x9) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)={@val={0x2000, 0xedfa}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @remote}, {0x600, 0x0, 0x28, 0x0, @gue={{0x1, 0x1, 0x0, 0xbc, 0x100, @void}, "dc4af54d683031622a519e0f7ec781c37954a9950463128538142832"}}}}}}}, 0x52) 11m48.455455479s ago: executing program 3 (id=201): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000280)={[&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000100)='$\x00', &(0x7f0000000300)='\x05^\x04\x00\x11\xcb\xa6\xd6L\xd5X\xc5\xc7\xf9\xa3]=\xf4\x80\x10\xd9\xbf\xe9a\xc2\x8bL\xfbb\xe1\xaf>\x92$\xa9\xac\n#\xf9\xde\xab\x0fr\x98\xda\x9a_S\xe4\xb4\x94h\xf5I\b\xcc\t\x04\xb1/\b\xde[\xc0C\x8e\xc6\x86xY\xba\x86l\x7fR\x1e]\bv\x1b%0\x8a\xbb\x1a\x12\xcf\x999\v&\x1eL\xc1r\x00R\x8fF\xdb\xb1\x92\x9bE\xa8\xd7\xe3\xe98r\x94&\x84~^\x1cQ\x96\xf1*\xb0\xe2\x86!\x03\xef\xa4k\xab y\x97\xe8\\\xbe\xfak\x89\x9a\x81\xb6r\xdc\x88s\xe8\xb6\xc4\x16\xc6$\x1d?\xb4\xf6\xe3\xe6\xbeSQ}@\x00\xa8z=\x84\xe8=#k\xfd\xf6(6\x85=W\xa9\xcc\x80\xfc\xad8\xae\x0f\xd5\xdb\x9b\x00'/200, 0x0]}, 0x0) 11m48.127605957s ago: executing program 3 (id=202): bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unshare(0x64000600) 11m31.725554637s ago: executing program 34 (id=202): bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unshare(0x64000600) 7m23.629077374s ago: executing program 4 (id=847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @fwd={0x2}]}}, &(0x7f0000000b80)=""/230, 0x32, 0xe6, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000005840)='./file1\x00', 0x1000806, &(0x7f00000016c0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="2c666d61736b3d30303030b8463c983030303030303030303030303030362c696f6368617273652acf418b743d637e3737352c6769643d00", @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000027,errors=continue,errors=remount-ro,namecase=1,fmask=00000000000000000000003,umask=00000000000000000000003,allow_utime=00000000000000000000200,\x00'], 0x9, 0x1505, &(0x7f0000000180)="$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") 7m18.408969844s ago: executing program 4 (id=855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x2000005, 0x13, r1, 0x0) r2 = userfaultfd(0x80801) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x3, 0x0, {0x3}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfff}}, './file0\x00'}) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0xffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7m14.404035468s ago: executing program 4 (id=866): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r3, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/44, 0x10b8c}], 0x1}}], 0x1, 0x2001, 0x0) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) 7m8.77718053s ago: executing program 4 (id=873): unshare(0x22020400) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 7m6.120296068s ago: executing program 4 (id=882): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf4b}) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') ptrace(0x10, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000016c0)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x9) read$FUSE(0xffffffffffffffff, &(0x7f0000007fc0)={0x2020}, 0x2020) 7m1.494650937s ago: executing program 4 (id=884): socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0xc446806) write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES8], 0xfce1) 6m46.210826365s ago: executing program 35 (id=884): socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0xc446806) write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES8], 0xfce1) 13.058620819s ago: executing program 9 (id=2150): bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default, 0x2}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) writev(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000000340)="d05141d3b81f31fa3ff7c612d0bc114e8fc0b7e349c37b979fef3cef09946703b486546dcba430974a69982db634d67f6c17b9cf1ff73197cbd9f5f11cc7be69f9555bd36ae4217132c3eb1800000000d72a7e545ac6e274208e966575a113c9ebb3b49dbcb4ad9031908891ba912b6f884ba82dac47ea44c58929e347c23a01ca8843e306f923e8ff5cc7b2518836a58e10343eed6656c74b4bf73b759b51cad33452e719ae66bb957060ec51a0149ce9c19a4bb770004505ccc6eaad389e3eeef966974502000e", 0xfc5a}], 0x1) 11.447218684s ago: executing program 6 (id=2153): r0 = socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 11.110724596s ago: executing program 9 (id=2155): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/243, 0xb1, 0x0, 0x0}, &(0x7f00000064c0)=0x40) 10.661247289s ago: executing program 7 (id=2157): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, 0x0, 0x4048081) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x0, 0x1, 0x3}, 0x2}, 0x18) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0xa, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 10.052367955s ago: executing program 7 (id=2162): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000300)='./file0/file0\x00', 0x5) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001b40)=ANY=[], 0x835, 0x2) 9.950781275s ago: executing program 9 (id=2163): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x3, 0xfff3}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xc, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x200400d4) 8.755308493s ago: executing program 7 (id=2166): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x4004081) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0x0) 8.659785282s ago: executing program 9 (id=2168): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000002180)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c636f6465706167653d3836342c636f6465706167653d3836352c726f6469722c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6d697865642c757466383d302c726f6469722c756e695f786c6174653d312c001533912f7d7b3f05c87b0b"], 0x1, 0x26c, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_merged\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 7.535549437s ago: executing program 1 (id=2170): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32], 0x78}}, 0x20000800) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x45, &(0x7f0000001540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x67, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x23, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}, "65c2e8282ec975aa26d67a0c4ae32a05821e06"}}}}}}, 0x0) 7.485897949s ago: executing program 9 (id=2172): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.13186917s ago: executing program 1 (id=2175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 6.755775963s ago: executing program 6 (id=2177): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000080)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x80000000}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_mixed}, {@uni_xlate}, {@shortname_lower}, {@uni_xlate}], [{@appraise}]}, 0x25, 0x365, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvdpJsGtpfcvhB0dPqTRBpKoJ6SigVijloZfHfxcWmWrNrIYsL6SGbvSjFk+JF0JO3HvTYs3gQ8ebBqxakKl7sRQoNjuzu7OxsdqPJYWOLn88hfPN97zvvzcwjMwnJy2vt2Lg4G5du374V8/OlmFk5uxJ3SrEUxyKJvp2Y6P25yXkA4B53J03j97Tvn3t/uDCIPPsB4P7Ve/6/cXKYKB+i+NqJaUwJAJiyA37//9zE7JWpTQsAmKKx5//DI817fsw/k/9OAABw/3rh5VeeXV2LuFCpzEc03mtVW9V4eti+eikuRz3W43Qsxm5E/0Wh/7bQ/fjM+bVzpytdPy9FtVvRqkY02q1q/01hNYnLaT3KsRyLsZTVp3l90q1f7tVXImKn3Rs/GqVWdTYWsvF/WIj1OBOL8f+x+ojza+fOVLIDVBuD+nZEJ+YHJ9GdfxKL8d3rcSXqcTG6tcP5by9XKmfTtZH61vVyrx8AAAAAAAAAAAAAAAAAAAAAAEzDY5XcUr7/Tdpot969MNLhZtY/3x+n2v882x+o098fKC0Pdue5luzdH2h0f55WdSaO/WtnDQAAAAAAAAAAAAAAAAAAAPeW5tZc1Or19c3m1tWNYtAuZN7+5vOvjsegaSYrfSsZVkWWXN9szuZHHnQsHDmJfIg0L0+TkT5ZkEQMOu/Urt/IZ1zsU87HGivvBuWxplI2p1q9fvKhnz6ZVPVnN9jpZZIYuyyjQSkbv9DU+F83MR8Ru/tV7R+UJ9+LPPgjTdP9yrc/Hq+KUsRMHHoaBwi+vvXmA483Tz3Ry3yZbfrwyKOLL/740We/btTq0elfmXp9brO5m04+zoni3enOdbxPUlg/pew6lyashMlBZ5jpbDa3asn3v7304Aff7umcTF4/aTHzzv5jfbE3M9cPShFLg4vwd1OdnbD4u8GTo7fy6kbt1bv56j38jTv16UrtxvbNXw5aVfgiYaMOAAAAAAAAAAAAAAAAAAA4EoU/MD6Ep56f3owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OgN//9/IeiMZQ4S3G3HeFN5fbO57+DHj/RUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4D/srAAD//xu8baw=") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 6.634725163s ago: executing program 8 (id=2179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001040), 0x0, 0x4000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @bcast, @bpq0, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001b80)={0x0, @in6={{0xa, 0x4e24, 0x80000001, @private2, 0xbd64}}, 0xc, 0x4df}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) 5.439347534s ago: executing program 0 (id=2180): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x3, 0xfff3}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xc, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x200400d4) 4.813325036s ago: executing program 6 (id=2181): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)="b8dc", 0x2}], 0x1, &(0x7f0000003440)=ANY=[], 0x118, 0x20000004}], 0x1, 0x20004000) 4.395140971s ago: executing program 1 (id=2182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x6, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000000)={0xd616, 0x1, [{0x1, 0x1}]}) 4.346816162s ago: executing program 8 (id=2183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001040), 0x0, 0x4000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @bcast, @bpq0, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r4 = accept(r1, &(0x7f0000001700)=@ax25={{}, [@null, @default, @default, @rose, @default, @remote, @remote, @default]}, &(0x7f00000012c0)=0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001b80)={0x0, @in6={{0xa, 0x4e24, 0x80000001, @private2, 0xbd64}}, 0xc, 0x4df}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) 4.254110478s ago: executing program 6 (id=2184): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r1, 0x0, 0x5}, 0x18) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) 3.166795694s ago: executing program 1 (id=2185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001040), 0x0, 0x4000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @bcast, @bpq0, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r4 = accept(r1, &(0x7f0000001700)=@ax25={{}, [@null, @default, @default, @rose, @default, @remote, @remote, @default]}, &(0x7f00000012c0)=0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001b80)={0x0, @in6={{0xa, 0x4e24, 0x80000001, @private2, 0xbd64}}, 0xc, 0x4df}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) 3.10548441s ago: executing program 0 (id=2186): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x10010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000017000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) flock(r2, 0x6) 2.990603252s ago: executing program 0 (id=2187): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x45, &(0x7f0000001540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x67, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x23, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}, "65c2e8282ec975aa26d67a0c4ae32a05821e06"}}}}}}, 0x0) 2.970326656s ago: executing program 8 (id=2188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9a}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}}}, 0x24}}, 0x0) 2.900490707s ago: executing program 6 (id=2189): r0 = socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 2.80034429s ago: executing program 9 (id=2190): bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unshare(0x64000600) 2.760145691s ago: executing program 7 (id=2191): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0xf8, r0, 0x1, 0x5, 0x6, @multicast}, 0x14) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) 2.751990256s ago: executing program 1 (id=2192): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000080)=[{0x2050, 0x5800, 0x0, 0x0}], 0x1}) 2.463656821s ago: executing program 8 (id=2193): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000080)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x80000000}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_mixed}, {@uni_xlate}, {@shortname_lower}, {@uni_xlate}], [{@appraise}]}, 0x25, 0x365, &(0x7f0000000640)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 2.35217429s ago: executing program 0 (id=2194): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) 2.298847538s ago: executing program 7 (id=2195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 1.319729216s ago: executing program 8 (id=2196): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)="b8dc", 0x2}], 0x1, &(0x7f0000003440)=ANY=[], 0x118, 0x20000004}], 0x1, 0x20004000) 1.243213969s ago: executing program 0 (id=2197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x6, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000000)={0xd616, 0x1, [{0x1, 0x1}]}) 981.043084ms ago: executing program 8 (id=2198): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x3, 0xfff3}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xc, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x200400d4) 52.188993ms ago: executing program 7 (id=2199): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)="15677f", 0x3}, {0x0}], 0x2) 44.489513ms ago: executing program 1 (id=2200): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x10010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000017000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) flock(r2, 0x6) 11.300645ms ago: executing program 6 (id=2201): clock_gettime(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d030000000000000000000001050020008000"/59], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 0s ago: executing program 0 (id=2202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) kernel console output (not intermixed with test programs): 0, skipping remainder of the config [ 606.476753][ T9] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 606.512644][ T10] usb 2-1: config 0 has no interfaces? [ 606.534866][ T9] usb 9-1: USB disconnect, device number 6 [ 606.554776][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 606.564672][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.789654][ T10] usb 2-1: Product: syz [ 606.829161][ T10] usb 2-1: Manufacturer: syz [ 606.860254][ T10] usb 2-1: SerialNumber: syz [ 606.891214][ T10] usb 2-1: config 0 descriptor?? [ 607.300960][T10798] loop6: detected capacity change from 0 to 512 [ 607.398429][T10798] EXT4-fs: Conflicting test_dummy_encryption options [ 609.966947][ T10] usb 2-1: USB disconnect, device number 18 [ 610.062737][ T916] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 610.289421][T10838] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 610.422753][ T916] usb 10-1: Using ep0 maxpacket: 16 [ 610.447102][ T916] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.492293][ T916] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.532469][ T916] usb 10-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 610.583022][ T916] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.651095][ T916] usb 10-1: config 0 descriptor?? [ 610.708258][T10845] loop7: detected capacity change from 0 to 64 [ 611.082990][T10845] minix_free_block (loop7:1): bit already cleared [ 611.127080][T10845] minix_free_block (loop7:4): bit already cleared [ 611.149019][T10845] minix_free_block (loop7:3): bit already cleared [ 611.173633][T10832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.222946][T10845] minix_free_block (loop7:2): bit already cleared [ 611.235863][T10845] minix_free_block (loop7:1): bit already cleared [ 611.236444][T10832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.392241][ T30] audit: type=1326 audit(1747301719.554:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10831 comm="syz.9.1200" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe62b38e969 code=0x0 [ 611.671240][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1200'. [ 611.745143][T10851] netlink: 6 bytes leftover after parsing attributes in process `syz.9.1200'. [ 611.823988][T10857] netlink: 'syz.9.1200': attribute type 2 has an invalid length. [ 611.888538][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 611.928236][ T916] usbhid 10-1:0.0: can't add hid device: -32 [ 611.942433][ T916] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 612.114599][ T10] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 612.140632][T10866] netlink: 4083 bytes leftover after parsing attributes in process `syz.8.1208'. [ 612.163405][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.196696][T10863] netlink: 4083 bytes leftover after parsing attributes in process `syz.8.1208'. [ 612.227750][ T10] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.289310][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 612.335560][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.449081][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 612.475926][ T10] usb 1-1: invalid MIDI out EP 0 [ 612.760099][ T10] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 612.832354][ T10] usb 1-1: USB disconnect, device number 15 [ 613.173150][ T10] usb 10-1: USB disconnect, device number 8 [ 613.265142][T10898] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 613.338177][T10902] loop9: detected capacity change from 0 to 64 [ 613.447750][T10902] minix_free_block (loop9:1): bit already cleared [ 613.519052][T10902] minix_free_block (loop9:4): bit already cleared [ 613.557443][T10902] minix_free_block (loop9:3): bit already cleared [ 613.599505][T10902] minix_free_block (loop9:2): bit already cleared [ 613.645905][T10902] minix_free_block (loop9:1): bit already cleared [ 615.269200][T10919] tty tty39: ldisc open failed (-12), clearing slot 38 [ 617.313046][ T6004] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 617.396835][ T30] audit: type=1326 audit(1747301981.578:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f905d52ab39 code=0x7ffc0000 [ 617.486370][ T30] audit: type=1326 audit(1747301981.578:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f905d52ab39 code=0x7ffc0000 [ 617.513024][ T5892] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 617.531315][ T6004] usb 2-1: Using ep0 maxpacket: 16 [ 617.549196][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.578321][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.602958][ T30] audit: type=1326 audit(1747301981.578:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f905d52ab39 code=0x7ffc0000 [ 617.638402][ T6004] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 617.658060][ T6004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.678859][ T30] audit: type=1326 audit(1747301981.578:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f905d52ab39 code=0x7ffc0000 [ 617.716447][ T5892] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 617.749928][ T6004] usb 2-1: config 0 descriptor?? [ 617.788752][ T5892] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 617.814626][ T30] audit: type=1326 audit(1747301981.578:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f905d52ab39 code=0x7ffc0000 [ 617.893589][ T5892] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 617.937370][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.942573][ T30] audit: type=1326 audit(1747301981.578:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f905d52ab39 code=0x7ffc0000 [ 618.000333][ T30] audit: type=1326 audit(1747301981.578:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f905d52ab39 code=0x7ffc0000 [ 618.023120][ T30] audit: type=1326 audit(1747301981.578:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f905d52ab39 code=0x7ffc0000 [ 618.066277][ T5892] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.083183][ T30] audit: type=1326 audit(1747301981.578:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f905d52ab39 code=0x7ffc0000 [ 618.123715][ T5892] usb 8-1: invalid MIDI out EP 0 [ 618.124128][T10962] loop8: detected capacity change from 0 to 1024 [ 618.177233][T10962] EXT4-fs: Ignoring removed nobh option [ 618.206541][ T30] audit: type=1326 audit(1747301981.578:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f905d52ab39 code=0x7ffc0000 [ 618.245386][T10962] EXT4-fs: Ignoring removed bh option [ 618.258629][T10947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.296703][T10947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.434297][T10962] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.853502][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1230'. [ 618.905918][ T5892] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 618.943647][T10975] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1230'. [ 618.955126][T10976] netlink: 'syz.1.1230': attribute type 2 has an invalid length. [ 619.165439][ T5892] usb 8-1: USB disconnect, device number 15 [ 619.218231][ T6004] usbhid 2-1:0.0: can't add hid device: -32 [ 619.224411][ T6004] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 619.424593][T10984] overlayfs: conflicting lowerdir path [ 620.393109][ T5892] usb 2-1: USB disconnect, device number 19 [ 621.193569][ T5892] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 621.601094][ T5892] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 621.714919][ T5892] usb 7-1: config 0 has no interface number 0 [ 621.721198][ T5892] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 621.768550][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.850105][ T5892] usb 7-1: config 0 descriptor?? [ 621.886440][ T5892] usb 7-1: selecting invalid altsetting 1 [ 621.947815][ T5892] dvb_ttusb_budget: ttusb_init_controller: error [ 621.992776][ T5892] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 622.167238][T11035] loop0: detected capacity change from 0 to 1024 [ 622.212848][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 622.234271][T11035] EXT4-fs: Ignoring removed nobh option [ 622.242625][T11035] EXT4-fs: Ignoring removed bh option [ 622.279957][ T5892] DVB: Unable to find symbol cx22700_attach() [ 622.318449][T11035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.352665][T11035] overlayfs: conflicting lowerdir path [ 622.414650][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 622.429290][ T9] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 622.456121][ T5892] DVB: Unable to find symbol tda10046_attach() [ 622.471968][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 622.481247][ T5892] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 622.505431][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.522164][ T5892] usb 7-1: USB disconnect, device number 11 [ 622.526807][ T7893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.571126][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 622.618679][ T9] usb 2-1: invalid MIDI out EP 0 [ 622.720503][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.001911][T11053] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1254'. [ 623.071100][T11050] netlink: 'syz.7.1256': attribute type 27 has an invalid length. [ 623.080215][T11050] lo: left promiscuous mode [ 623.088641][T11050] tunl0: left promiscuous mode [ 623.241083][ T6112] udevd[6112]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.277705][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 623.297898][ T9] usb 2-1: USB disconnect, device number 20 [ 623.382801][T11050] gre0: left promiscuous mode [ 623.556506][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1256'. [ 623.879413][T11050] gretap0: left promiscuous mode [ 624.024619][T11050] erspan0: left promiscuous mode [ 624.044291][T11050] ip_vti0: left promiscuous mode [ 624.051884][T11050] ip6_vti0: left promiscuous mode [ 624.061235][T11050] sit0: left promiscuous mode [ 624.072331][T11050] ip6tnl0: left promiscuous mode [ 624.080832][T11050] ip6gre0: left promiscuous mode [ 624.188533][T11050] syz_tun: left promiscuous mode [ 624.429670][T11050] ip6gretap0: left promiscuous mode [ 624.456034][T11050] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.465435][T11050] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.479555][T11050] bridge0: left promiscuous mode [ 624.493195][T11050] vcan0: left promiscuous mode [ 624.503195][T11050] bond0: left promiscuous mode [ 624.508056][T11050] bond_slave_0: left promiscuous mode [ 624.514474][T11050] bond_slave_1: left promiscuous mode [ 624.529934][T11050] team0: left promiscuous mode [ 624.535188][T11050] team_slave_0: left promiscuous mode [ 624.541629][T11050] team_slave_1: left promiscuous mode [ 624.559368][T11050] dummy0: left promiscuous mode [ 624.606014][T11050] nlmon0: left promiscuous mode [ 624.617759][T11050] caif0: left promiscuous mode [ 624.788159][T11050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.817937][T11050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.217258][T11050] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.226612][T11050] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.235724][T11050] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.244747][T11050] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.342907][T11050] geneve2: left promiscuous mode [ 626.447072][T11112] loop9: detected capacity change from 0 to 16 [ 626.452746][ T10] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 626.503864][T11112] erofs (device loop9): mounted with root inode @ nid 36. [ 626.626021][T11114] erofs (device loop9): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 626.634737][T11114] erofs (device loop9): readahead error at folio 47 @ nid 36 [ 626.642312][T11114] erofs (device loop9): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 626.650827][T11114] erofs (device loop9): readahead error at folio 46 @ nid 36 [ 626.658839][T11114] erofs (device loop9): readahead error at folio 45 @ nid 36 [ 626.666971][T11114] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 626.675603][T11114] erofs (device loop9): readahead error at folio 43 @ nid 36 [ 626.687330][T11114] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 626.692571][ T5879] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 626.704484][T11114] erofs (device loop9): readahead error at folio 42 @ nid 36 [ 626.712146][T11114] erofs (device loop9): bogus lookback distance 774 @ lcn 40 of nid 36 [ 626.720756][T11114] erofs (device loop9): readahead error at folio 41 @ nid 36 [ 626.728382][T11114] erofs (device loop9): bogus lookback distance 774 @ lcn 40 of nid 36 [ 626.736976][T11114] erofs (device loop9): readahead error at folio 40 @ nid 36 [ 626.744658][T11114] erofs (device loop9): readahead error at folio 39 @ nid 36 [ 626.752311][T11114] erofs (device loop9): readahead error at folio 38 @ nid 36 [ 626.760680][T11114] erofs (device loop9): readahead error at folio 36 @ nid 36 [ 626.769519][T11114] erofs (device loop9): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 626.778165][T11114] erofs (device loop9): readahead error at folio 31 @ nid 36 [ 626.787046][T11114] erofs (device loop9): readahead error at folio 25 @ nid 36 [ 626.794699][T11114] erofs (device loop9): readahead error at folio 24 @ nid 36 [ 626.802930][T11114] erofs (device loop9): readahead error at folio 19 @ nid 36 [ 626.812950][T11114] syz.9.1271: attempt to access beyond end of device [ 626.812950][T11114] loop9: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 626.828183][T11114] syz.9.1271: attempt to access beyond end of device [ 626.828183][T11114] loop9: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 626.844290][T11114] syz.9.1271: attempt to access beyond end of device [ 626.844290][T11114] loop9: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 626.859645][T11114] syz.9.1271: attempt to access beyond end of device [ 626.859645][T11114] loop9: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 627.448590][ T5879] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 627.471220][ T5879] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 627.499972][ T5879] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 627.522018][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.645127][ T10] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 627.662912][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.680374][ T5879] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 627.696282][ T10] usb 2-1: config 0 has no interface number 0 [ 627.704957][ T10] usb 2-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 627.724810][ T10] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 627.871146][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.942961][ T10] usb 2-1: Product: syz [ 627.947412][ T10] usb 2-1: Manufacturer: syz [ 627.952082][ T10] usb 2-1: SerialNumber: syz [ 627.972599][ T10] usb 2-1: config 0 descriptor?? [ 627.989192][ T10] cyberjack 2-1:0.69: required endpoints missing [ 628.035274][ T5879] usb 1-1: invalid MIDI out EP 0 [ 628.957556][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.963981][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.495582][ T5879] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 629.627815][ T5879] usb 1-1: USB disconnect, device number 16 [ 629.774795][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.984178][T11149] usb usb8: usbfs: process 11149 (syz.8.1280) did not claim interface 0 before use [ 630.958980][T11156] loop8: detected capacity change from 0 to 512 [ 631.021349][T11156] EXT4-fs: Conflicting test_dummy_encryption options [ 634.551842][ T10] usb 2-1: USB disconnect, device number 21 [ 635.585669][T11214] usb usb8: usbfs: process 11214 (syz.7.1296) did not claim interface 0 before use [ 643.175300][ T53] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 643.678226][ T6004] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 644.188629][ T53] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.559173][ T53] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 645.142811][ T53] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 645.312903][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.350027][ T53] usb 9-1: config 0 descriptor?? [ 645.999572][T11323] loop9: detected capacity change from 0 to 512 [ 646.029832][T11323] EXT4-fs: Conflicting test_dummy_encryption options [ 648.923763][ T5879] usb 9-1: USB disconnect, device number 7 [ 649.035062][ T2065] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 649.372560][ T2065] usb 2-1: Using ep0 maxpacket: 16 [ 649.384174][ T2065] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.395855][ T2065] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 650.072549][ T2065] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.087957][ T2065] usb 2-1: config 0 descriptor?? [ 650.547305][ T2065] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 650.655141][ T2065] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 650.662304][ T2065] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 650.669948][ T2065] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 650.677312][ T2065] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 650.685422][ T2065] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 650.822870][T11394] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1340'. [ 651.015525][T10955] usb 2-1: USB disconnect, device number 22 [ 651.869580][T11411] batadv1: entered promiscuous mode [ 652.322570][ T5879] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 652.632791][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.805536][ T5879] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 652.922723][ T5879] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 652.976455][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.053191][ T5879] usb 1-1: config 0 descriptor?? [ 654.630321][T11450] sctp: [Deprecated]: syz.6.1351 (pid 11450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.630321][T11450] Use struct sctp_sack_info instead [ 656.589861][T11469] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1356'. [ 656.736114][ T53] usb 1-1: USB disconnect, device number 17 [ 659.642640][T10955] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 659.832602][T10955] usb 10-1: Using ep0 maxpacket: 16 [ 659.841610][T10955] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.852764][T10955] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.882189][T10955] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 659.918128][T10955] usb 10-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 659.932557][T10955] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.946728][T10955] usb 10-1: config 0 descriptor?? [ 661.606742][T11529] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1369'. [ 662.042599][ T5892] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 662.235188][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.301370][ T5892] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 662.342643][ T5892] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 662.443725][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.636581][ T5892] usb 2-1: config 0 descriptor?? [ 662.662956][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1375'. [ 663.464097][T11548] netlink: 'syz.7.1371': attribute type 12 has an invalid length. [ 663.511449][T11553] hsr0: entered promiscuous mode [ 663.707588][T11558] netlink: 'syz.0.1376': attribute type 10 has an invalid length. [ 663.770553][T10955] usbhid 10-1:0.0: can't add hid device: -71 [ 663.779621][T10955] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 663.815588][T11560] netlink: 'syz.0.1376': attribute type 10 has an invalid length. [ 663.839120][T10955] usb 10-1: USB disconnect, device number 10 [ 663.856115][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1376'. [ 664.608992][ T53] usb 2-1: USB disconnect, device number 23 [ 664.645631][T11558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.684937][T11558] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 664.774860][T11560] batadv0: entered promiscuous mode [ 664.785311][T11560] batadv0: entered allmulticast mode [ 664.820555][T11560] bond0: (slave batadv0): Releasing backup interface [ 664.896296][T11560] bridge0: port 4(batadv0) entered blocking state [ 665.118914][T11560] bridge0: port 4(batadv0) entered disabled state [ 665.217397][ T6067] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 665.227323][ T6067] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 666.470067][T11590] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1383'. [ 667.152564][ T53] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 667.932566][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 667.939726][ T53] usb 8-1: config index 0 descriptor too short (expected 31, got 27) [ 667.948501][ T53] usb 8-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 668.026289][ T53] usb 8-1: config 1 interface 0 has no altsetting 0 [ 668.168059][ T53] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 668.198815][ T53] usb 8-1: New USB device strings: Mfr=28, Product=45, SerialNumber=3 [ 668.211924][ T53] usb 8-1: Product: syz [ 668.237555][ T53] usb 8-1: Manufacturer: syz [ 668.258873][ T53] usb 8-1: SerialNumber: syz [ 668.300475][T11605] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 668.828364][ T53] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 668.874783][ T53] usb 8-1: USB disconnect, device number 16 [ 668.906817][ T53] usblp0: removed [ 669.827793][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 669.827814][ T30] audit: type=1800 audit(1747302034.008:57): pid=11642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1395" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 670.368455][T11655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1400'. [ 670.877635][T11665] batadv1: entered promiscuous mode [ 670.913744][ T5848] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 671.083763][ T53] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 671.142598][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 671.154149][ T5848] usb 2-1: config index 0 descriptor too short (expected 31, got 27) [ 671.163321][ T5848] usb 2-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 671.212761][ T5848] usb 2-1: config 1 interface 0 has no altsetting 0 [ 671.222800][ T5848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 671.231983][ T5848] usb 2-1: New USB device strings: Mfr=28, Product=45, SerialNumber=3 [ 671.240415][ T5848] usb 2-1: Product: syz [ 671.255298][ T5848] usb 2-1: Manufacturer: syz [ 671.269571][ T5848] usb 2-1: SerialNumber: syz [ 671.295356][T11659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 671.682563][ T53] usb 7-1: Using ep0 maxpacket: 16 [ 671.696116][ T53] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 671.704336][ T53] usb 7-1: config 0 has no interface number 0 [ 671.710614][ T53] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 671.719115][ T5848] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 671.721695][ T53] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 671.744626][ T53] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 671.762577][ T53] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 671.772536][ T53] usb 7-1: Product: syz [ 671.776774][ T53] usb 7-1: SerialNumber: syz [ 671.806944][ T53] usb 7-1: config 0 descriptor?? [ 671.825301][ T53] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 671.836165][ T53] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input40 [ 672.118873][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 672.127764][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 672.135083][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 672.142246][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 672.149400][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 672.156572][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 672.163766][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 672.170957][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 672.178108][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 672.185243][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 672.199145][ T5848] usb 2-1: USB disconnect, device number 24 [ 672.213367][ T53] usb 7-1: USB disconnect, device number 12 [ 672.219315][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 672.320351][ T53] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 672.322891][ T5848] usblp0: removed [ 672.352868][T11680] hub 8-0:1.0: USB hub found [ 672.406776][T11680] hub 8-0:1.0: 1 port detected [ 672.767837][T11683] loop1: detected capacity change from 0 to 40427 [ 672.790649][T11683] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 672.798491][T11683] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 672.848767][T11683] F2FS-fs (loop1): invalid crc value [ 673.117347][T11683] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 673.125912][T11683] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 673.742620][ T53] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 674.004303][ T53] usb 9-1: Using ep0 maxpacket: 32 [ 674.027746][ T53] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 674.072639][ T53] usb 9-1: config 0 has no interface number 0 [ 674.090587][ T53] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 674.138784][ T53] usb 9-1: config 0 interface 85 has no altsetting 0 [ 674.180143][ T53] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 674.209961][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.232629][ T5848] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 674.261839][ T53] usb 9-1: Product: syz [ 674.280066][ T53] usb 9-1: Manufacturer: syz [ 674.296684][ T53] usb 9-1: SerialNumber: syz [ 674.332119][ T53] usb 9-1: config 0 descriptor?? [ 674.413667][ T5848] usb 10-1: Using ep0 maxpacket: 16 [ 674.489850][ T5848] usb 10-1: config 0 has no interfaces? [ 674.539269][ T5848] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 674.589757][ T5848] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.620298][ T5848] usb 10-1: Product: syz [ 674.637536][ T5848] usb 10-1: Manufacturer: syz [ 674.653088][ T5848] usb 10-1: SerialNumber: syz [ 674.666260][T11711] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1416'. [ 674.693669][ T5848] r8152-cfgselector 10-1: Unknown version 0x0000 [ 674.703383][ T5848] r8152-cfgselector 10-1: config 0 descriptor?? [ 675.001464][ T53] appletouch 9-1:0.85: Geyser mode initialized. [ 675.032730][ T53] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input41 [ 675.303010][ T53] usb 9-1: USB disconnect, device number 8 [ 675.344390][T11724] hub 8-0:1.0: USB hub found [ 675.349320][T11724] hub 8-0:1.0: 1 port detected [ 675.387474][ T53] appletouch 9-1:0.85: input: appletouch disconnected [ 675.792541][ T6004] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 675.889274][ T5848] r8152-cfgselector 10-1: USB disconnect, device number 11 [ 676.005087][ T6004] usb 8-1: config 0 has no interfaces? [ 676.147833][ T6004] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 676.259465][ T6004] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.343340][ T6004] usb 8-1: Product: syz [ 676.364289][ T6004] usb 8-1: Manufacturer: syz [ 676.385896][ T6004] usb 8-1: SerialNumber: syz [ 676.416640][ T6004] usb 8-1: config 0 descriptor?? [ 677.053043][ T6004] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 677.066414][T11749] loop1: detected capacity change from 0 to 40427 [ 677.074775][T11749] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 677.082682][T11749] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 677.097605][T11729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.134706][T11727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 677.155212][T11749] F2FS-fs (loop1): invalid crc value [ 677.292354][T11729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.311728][T11749] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 677.318845][T11749] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 677.327044][ T6004] usb 1-1: Using ep0 maxpacket: 16 [ 677.507116][ T6004] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 677.515288][ T6004] usb 1-1: config 0 has no interface number 0 [ 677.521667][ T6004] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 677.532724][ T6004] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 677.605142][ T6004] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 677.631555][ T6004] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 677.669446][ T6004] usb 1-1: Product: syz [ 677.688658][ T6004] usb 1-1: SerialNumber: syz [ 677.836677][ T6004] usb 1-1: config 0 descriptor?? [ 677.944498][ T6004] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 677.962367][ T6004] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input42 [ 678.383582][ C1] cm109_urb_ctl_callback: 98 callbacks suppressed [ 678.383613][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 678.395280][ T916] usb 1-1: USB disconnect, device number 18 [ 678.396984][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 678.493818][ T916] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 680.305275][ T6004] usb 8-1: USB disconnect, device number 17 [ 681.755653][T11826] hub 8-0:1.0: USB hub found [ 681.763154][T11826] hub 8-0:1.0: 1 port detected [ 681.770824][T11821] batadv1: entered promiscuous mode [ 682.227928][T11838] xt_bpf: check failed: parse error [ 683.021984][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1443'. [ 683.093471][T11844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1429'. [ 683.645843][ T5848] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 683.812603][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 683.827439][ T5848] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 683.864900][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.902892][ T5848] usb 2-1: Product: syz [ 683.919072][ T5848] usb 2-1: Manufacturer: syz [ 683.956704][ T5848] usb 2-1: SerialNumber: syz [ 684.004341][ T5848] usb 2-1: config 0 descriptor?? [ 684.052392][ T5848] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 684.602745][ T5879] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 684.725972][ T5848] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 684.823236][ T5848] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 684.833654][ T5879] usb 9-1: config 0 has no interfaces? [ 684.854166][ T5879] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 684.874912][ T5879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.908175][ T5879] usb 9-1: Product: syz [ 684.918791][ T5879] usb 9-1: Manufacturer: syz [ 684.934418][ T5879] usb 9-1: SerialNumber: syz [ 685.004837][T11897] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1462'. [ 685.020035][ T5848] usb 2-1: USB disconnect, device number 25 [ 685.055657][ T5879] usb 9-1: config 0 descriptor?? [ 687.548574][T11946] hub 8-0:1.0: USB hub found [ 687.553939][T11946] hub 8-0:1.0: 1 port detected [ 688.553487][ T53] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 688.763025][ T53] usb 10-1: Using ep0 maxpacket: 8 [ 688.835579][ T53] usb 10-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 688.872587][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.912510][ T53] usb 10-1: Product: syz [ 688.937126][ T53] usb 10-1: Manufacturer: syz [ 688.961148][ T53] usb 10-1: SerialNumber: syz [ 689.042423][ T53] usb 10-1: config 0 descriptor?? [ 689.064865][ T53] radio-usb-si4713 10-1:0.0: Si4713 development board discovered: (10C4:8244) [ 689.442753][ T5879] usb 9-1: USB disconnect, device number 9 [ 689.709941][ T53] radio-usb-si4713 10-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 689.752032][ T53] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 689.846579][ T53] usb 10-1: USB disconnect, device number 12 [ 690.303103][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.309471][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.323562][ T5892] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 690.492652][ T5892] usb 8-1: Using ep0 maxpacket: 8 [ 690.500772][ T5892] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.511802][ T5892] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.521741][ T5892] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 690.534703][ T5892] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 690.546596][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.571390][ T5892] usb 8-1: config 0 descriptor?? [ 691.379135][T11973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.389156][T11973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.984966][T12002] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 692.722656][ T5848] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 692.925003][ T5848] usb 7-1: config 0 has no interfaces? [ 692.943047][ T5848] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 692.964184][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.972231][ T5848] usb 7-1: Product: syz [ 693.066987][ T5848] usb 7-1: Manufacturer: syz [ 693.081156][ T5848] usb 7-1: SerialNumber: syz [ 693.104925][ T5848] usb 7-1: config 0 descriptor?? [ 694.049480][T12035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1502'. [ 694.926204][ T5892] usbhid 8-1:0.0: can't add hid device: -71 [ 694.932290][ T5892] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 695.016707][ T5892] usb 8-1: USB disconnect, device number 18 [ 695.264560][T12042] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1504'. [ 695.363152][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1504'. [ 696.117329][T12057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1509'. [ 696.221769][T12057] vlan0: entered promiscuous mode [ 696.260986][T12057] bridge0: entered promiscuous mode [ 696.833005][ T5848] usb 7-1: USB disconnect, device number 13 [ 697.083236][ T5892] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 697.242516][ T5892] usb 10-1: Using ep0 maxpacket: 16 [ 697.271648][ T5892] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.392610][ T5892] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 697.420658][ T5892] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.560040][ T5892] usb 10-1: config 0 descriptor?? [ 697.853871][ T6004] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 697.889278][T12096] batadv1: entered promiscuous mode [ 698.058729][ T6004] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.065845][ T5892] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 698.105916][T12103] loop6: detected capacity change from 0 to 512 [ 698.119571][ T6004] usb 9-1: config 0 has no interfaces? [ 698.129244][ T5892] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 698.138460][ T6004] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 698.158196][T12103] EXT4-fs: Conflicting test_dummy_encryption options [ 698.169750][ T5892] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 698.172490][ T6004] usb 9-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1 [ 698.211727][ T6004] usb 9-1: Manufacturer: syz [ 698.224787][ T6004] usb 9-1: SerialNumber: syz [ 698.225122][ T5892] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 698.270714][ T6004] usb 9-1: config 0 descriptor?? [ 698.301583][ T5892] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 698.385186][ T5892] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 698.522943][ T5892] usb 10-1: USB disconnect, device number 13 [ 698.532603][T12091] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1522'. [ 698.601752][T12091] vlan0: entered promiscuous mode [ 698.672653][T12091] dummy0: entered promiscuous mode [ 698.888351][ T2065] usb 9-1: USB disconnect, device number 10 [ 698.983995][ T6004] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 699.177334][ T6004] usb 8-1: config 0 has no interfaces? [ 699.255310][ T6004] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 699.400314][ T6004] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.463941][ T6004] usb 8-1: Product: syz [ 699.468145][ T6004] usb 8-1: Manufacturer: syz [ 699.524522][ T6004] usb 8-1: SerialNumber: syz [ 699.575851][ T6004] usb 8-1: config 0 descriptor?? [ 700.047012][ T2065] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 700.392761][ T2065] usb 2-1: Using ep0 maxpacket: 16 [ 700.439030][ T2065] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 700.452751][ T2065] usb 2-1: can't read configurations, error -61 [ 700.612740][ T2065] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 700.842561][ T2065] usb 2-1: Using ep0 maxpacket: 16 [ 701.041295][ T2065] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 701.079020][T12155] syz_tun: entered allmulticast mode [ 701.127951][ T2065] usb 2-1: can't read configurations, error -61 [ 701.143600][T12154] syz_tun: left allmulticast mode [ 701.411881][ T2065] usb usb2-port1: attempt power cycle [ 701.493884][T12159] usb 8-1: USB disconnect, device number 19 [ 702.115699][T12160] hub 8-0:1.0: USB hub found [ 702.120666][T12160] hub 8-0:1.0: 1 port detected [ 702.392869][ T6004] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 702.822951][ T916] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 703.032535][ T916] usb 7-1: Using ep0 maxpacket: 16 [ 703.085667][ T916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.283177][ T916] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 703.351642][ T916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.376736][T12192] xt_TPROXY: Can be used only with -p tcp or -p udp [ 703.552577][ T916] usb 7-1: config 0 descriptor?? [ 703.997608][ T916] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 704.054048][ T916] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 704.061154][ T916] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 704.099930][ T916] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 704.362638][ T916] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 704.370936][ T916] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 704.581771][ T916] usb 7-1: USB disconnect, device number 14 [ 706.142620][ T6004] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 706.402571][ T6004] usb 2-1: Using ep0 maxpacket: 16 [ 706.498862][T12251] fuse: Bad value for 'fd' [ 706.648647][ T6004] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 706.668494][ T6004] usb 2-1: can't read configurations, error -61 [ 707.424642][ T5879] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 707.472588][T10955] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 707.623861][ T5879] usb 7-1: Using ep0 maxpacket: 16 [ 707.633102][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.644911][ T6004] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 707.668605][ T5879] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 707.681124][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.710576][ T5879] usb 7-1: config 0 descriptor?? [ 707.812765][ T6004] usb 2-1: Using ep0 maxpacket: 16 [ 707.829097][ T6004] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 707.839056][ T6004] usb 2-1: can't read configurations, error -61 [ 707.854214][ T6004] usb usb2-port1: attempt power cycle [ 707.871231][T10955] usb 9-1: config 0 has no interfaces? [ 707.993290][T10955] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 708.010469][T10955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.052597][T10955] usb 9-1: Product: syz [ 708.073896][T10955] usb 9-1: Manufacturer: syz [ 708.089656][T10955] usb 9-1: SerialNumber: syz [ 708.191507][T10955] usb 9-1: config 0 descriptor?? [ 708.302695][ T6004] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 708.335503][ T5879] usbhid 7-1:0.0: can't add hid device: -71 [ 708.365332][ T5879] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 708.389503][ T5879] usb 7-1: USB disconnect, device number 15 [ 708.400707][ T6004] usb 2-1: Using ep0 maxpacket: 16 [ 708.420662][ T6004] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 708.449198][ T6004] usb 2-1: can't read configurations, error -61 [ 708.602635][ T6004] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 708.653177][ T6004] usb 2-1: Using ep0 maxpacket: 16 [ 708.660619][ T6004] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 708.709935][ T6004] usb 2-1: can't read configurations, error -61 [ 708.729331][ T6004] usb usb2-port1: unable to enumerate USB device [ 709.120795][T12282] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1576'. [ 711.050602][ T5892] usb 9-1: USB disconnect, device number 11 [ 711.811113][T12297] loop1: detected capacity change from 0 to 40427 [ 711.865145][T12297] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 711.919974][T12297] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 712.041892][T12297] F2FS-fs (loop1): invalid crc value [ 712.426745][T12297] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 712.439289][T12297] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 713.053350][T12353] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 713.514711][T12371] fuse: Bad value for 'fd' [ 713.563121][T10955] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 713.802540][ T6004] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 714.042564][ T6004] usb 9-1: Using ep0 maxpacket: 32 [ 714.068116][T10955] usb 1-1: config 0 has no interfaces? [ 714.083317][T10955] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 714.092968][T10955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.122860][ T6004] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 714.122951][T10955] usb 1-1: Product: syz [ 714.135714][ T6004] usb 9-1: config 0 has no interface number 0 [ 714.180380][ T6004] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.200485][T10955] usb 1-1: Manufacturer: syz [ 714.231230][T10955] usb 1-1: SerialNumber: syz [ 714.252752][ T6004] usb 9-1: config 0 interface 85 has no altsetting 0 [ 714.535211][ T6004] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 714.556356][T10955] usb 1-1: config 0 descriptor?? [ 714.564898][ T6004] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.589374][ T6004] usb 9-1: Product: syz [ 714.595781][ T6004] usb 9-1: Manufacturer: syz [ 714.635236][ T6004] usb 9-1: SerialNumber: syz [ 714.707062][ T6004] usb 9-1: config 0 descriptor?? [ 715.344036][ T6004] appletouch 9-1:0.85: Geyser mode initialized. [ 715.369477][ T6004] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input43 [ 715.548018][ T6004] usb 9-1: USB disconnect, device number 12 [ 715.619341][ T6004] appletouch 9-1:0.85: input: appletouch disconnected [ 715.933959][ T916] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 716.113734][ T916] usb 7-1: Using ep0 maxpacket: 16 [ 716.166840][ T916] usb 7-1: config 0 has no interfaces? [ 716.230663][ T916] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 716.414162][ T916] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 716.447569][ T916] usb 7-1: Manufacturer: syz [ 716.464597][ T916] usb 7-1: config 0 descriptor?? [ 716.727222][ T6004] usb 7-1: USB disconnect, device number 16 [ 717.225086][ T916] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 717.312768][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1612'. [ 717.557363][ T916] usb 2-1: config 0 has no interfaces? [ 717.574984][ T916] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 717.632942][ T916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.870541][ T916] usb 2-1: Product: syz [ 717.876193][ T916] usb 2-1: Manufacturer: syz [ 717.880958][ T916] usb 2-1: SerialNumber: syz [ 717.898313][ T916] usb 2-1: config 0 descriptor?? [ 718.115318][T10955] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 718.322603][T10955] usb 10-1: Using ep0 maxpacket: 32 [ 718.331323][T10955] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 718.346102][T10955] usb 10-1: config 0 has no interface number 0 [ 718.359126][T10955] usb 10-1: config 0 interface 184 has no altsetting 0 [ 718.383003][T10955] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 718.478346][T10955] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.514715][T10955] usb 10-1: Product: syz [ 718.522706][T10955] usb 10-1: Manufacturer: syz [ 718.532888][T10955] usb 10-1: SerialNumber: syz [ 718.540617][T10955] usb 10-1: config 0 descriptor?? [ 718.556182][T10955] smsc75xx v1.0.0 [ 718.559835][T10955] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 718.587884][T10955] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -22 [ 718.871974][T10955] usb 1-1: USB disconnect, device number 19 [ 718.904230][T12419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.961244][T12419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.988692][T12419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.007208][T12419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.057330][T12433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.078471][T12433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.248380][ T2065] usb 2-1: USB disconnect, device number 33 [ 721.672581][ T916] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 722.032571][ T916] usb 9-1: Using ep0 maxpacket: 16 [ 722.040568][ T916] usb 9-1: config 0 has no interfaces? [ 722.051580][ T916] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 722.159613][T10955] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 722.210348][ T916] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 722.287252][T12449] loop6: detected capacity change from 0 to 40427 [ 722.328524][T12449] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 722.348001][T12449] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 722.574623][T12449] F2FS-fs (loop6): invalid crc value [ 722.641807][ T916] usb 9-1: Manufacturer: syz [ 722.721459][T10955] usb 2-1: config 0 has no interfaces? [ 722.903864][T10955] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 722.950351][ T916] usb 9-1: config 0 descriptor?? [ 722.977034][T10955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.996854][T10955] usb 2-1: Product: syz [ 723.008234][T10955] usb 2-1: Manufacturer: syz [ 723.036361][T10955] usb 2-1: SerialNumber: syz [ 723.086178][T10955] usb 2-1: config 0 descriptor?? [ 723.092797][ T916] usb 10-1: USB disconnect, device number 14 [ 723.215991][ T6004] usb 9-1: USB disconnect, device number 13 [ 724.653511][T12520] loop8: detected capacity change from 0 to 256 [ 724.670236][T12520] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 726.629248][ T5879] usb 2-1: USB disconnect, device number 34 [ 727.766833][T12551] loop6: detected capacity change from 0 to 128 [ 727.974699][T12551] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 728.033503][T12551] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 729.237666][ T7668] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 729.622508][ T5879] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 729.792834][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 729.814690][ T5879] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 730.672524][ T5879] usb 1-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 730.700480][ T5879] usb 1-1: config 1 interface 0 has no altsetting 0 [ 730.722037][ T5879] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 730.903502][ T5879] usb 1-1: New USB device strings: Mfr=28, Product=45, SerialNumber=3 [ 730.911751][ T5879] usb 1-1: Product: syz [ 731.061371][ T5879] usb 1-1: Manufacturer: syz [ 731.112555][ T6004] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 731.226278][ T5879] usb 1-1: SerialNumber: syz [ 731.302705][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 731.525194][T12566] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 731.622234][T12598] loop9: detected capacity change from 0 to 256 [ 731.632705][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 731.679903][ T9] usb 7-1: config 0 has no interfaces? [ 731.696269][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 731.721515][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 731.731312][T12598] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 731.740694][ T9] usb 7-1: Manufacturer: syz [ 731.777223][ T6004] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 731.792154][ T6004] usb 8-1: can't read configurations, error -61 [ 731.806033][ T9] usb 7-1: config 0 descriptor?? [ 731.962666][ T6004] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 732.379777][ T6004] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 732.388753][T10955] usb 7-1: USB disconnect, device number 17 [ 732.398429][ T6004] usb 8-1: can't read configurations, error -61 [ 732.416559][ T5879] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 732.462565][ T6004] usb usb8-port1: attempt power cycle [ 733.284269][ T5879] usb 1-1: USB disconnect, device number 20 [ 733.296214][ T5879] usblp0: removed [ 733.552577][ T6004] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 736.785422][T12648] binder: 12647:12648 ioctl c0306201 200000000540 returned -22 [ 736.914770][T12650] binder: 12647:12650 ioctl c0306201 200000000640 returned -22 [ 738.433187][T12668] loop0: detected capacity change from 0 to 256 [ 739.117276][ T6004] usb 8-1: device descriptor read/8, error -110 [ 739.215309][T12668] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 740.040172][ T6004] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 740.205858][T12675] loop7: detected capacity change from 0 to 128 [ 740.247372][T12678] loop8: detected capacity change from 0 to 1024 [ 740.255555][T12675] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 740.268936][T12678] EXT4-fs: Ignoring removed nobh option [ 740.274776][T12678] EXT4-fs: Ignoring removed bh option [ 740.282359][T12675] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 740.282573][ T6004] usb 8-1: device not accepting address 24, error -71 [ 740.304973][ T6004] usb usb8-port1: unable to enumerate USB device [ 740.422541][ T2065] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 740.450285][T12678] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.669259][T12688] hub 8-0:1.0: USB hub found [ 740.675891][T12688] hub 8-0:1.0: 1 port detected [ 741.272522][ T2065] usb 7-1: Using ep0 maxpacket: 32 [ 741.292233][ T2065] usb 7-1: config index 0 descriptor too short (expected 31, got 27) [ 741.471330][ T2065] usb 7-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 741.481713][ T2065] usb 7-1: config 1 interface 0 has no altsetting 0 [ 741.490853][ T2065] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 742.484345][ T2065] usb 7-1: New USB device strings: Mfr=28, Product=45, SerialNumber=3 [ 742.507250][ T2065] usb 7-1: Product: syz [ 742.529639][T12694] overlayfs: conflicting lowerdir path [ 743.484472][ T2065] usb 7-1: Manufacturer: syz [ 743.489147][ T2065] usb 7-1: SerialNumber: syz [ 743.737102][ T2065] usb 7-1: can't set config #1, error -71 [ 743.877384][ T2065] usb 7-1: USB disconnect, device number 18 [ 743.882697][ T7665] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 744.436407][ T7893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.801203][T12722] binder: 12721:12722 ioctl c0306201 200000000540 returned -22 [ 747.251708][T12746] loop1: detected capacity change from 0 to 256 [ 748.527676][T12746] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 749.385454][T12759] hub 8-0:1.0: USB hub found [ 749.392610][T12759] hub 8-0:1.0: 1 port detected [ 749.853197][T12762] loop6: detected capacity change from 0 to 2048 [ 749.950712][T12762] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 749.963660][T12762] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 750.083713][T12775] loop8: detected capacity change from 0 to 1024 [ 750.192823][T12775] EXT4-fs: Ignoring removed nobh option [ 750.198447][T12775] EXT4-fs: Ignoring removed bh option [ 750.204504][ T7668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.540125][T12775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.936886][T12789] overlayfs: conflicting lowerdir path [ 752.404886][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.411239][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.991323][ T7893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.378743][T12813] loop6: detected capacity change from 0 to 256 [ 755.594643][T12813] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 756.361729][T12822] loop9: detected capacity change from 0 to 4096 [ 756.506694][T12822] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.659899][ T2065] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 757.844237][ T9687] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.128843][ T2065] usb 1-1: Using ep0 maxpacket: 8 [ 758.139002][ T2065] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 758.148289][ T2065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.162876][ T2065] usb 1-1: Product: syz [ 758.184201][ T2065] usb 1-1: Manufacturer: syz [ 758.912471][ T2065] usb 1-1: SerialNumber: syz [ 758.948650][ T2065] usb 1-1: config 0 descriptor?? [ 759.011802][T12845] loop8: detected capacity change from 0 to 128 [ 759.082943][ T2065] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 759.124493][T12845] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 759.168270][T12845] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 759.497295][T12852] loop9: detected capacity change from 0 to 40427 [ 759.546922][ T2065] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 759.564681][T12852] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 759.575908][T12852] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 759.757225][T12858] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1706'. [ 759.789894][T12858] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1706'. [ 759.887495][T12852] F2FS-fs (loop9): invalid crc value [ 760.235280][T12852] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 760.242849][T12852] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 760.263442][ T2065] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 760.303612][ T2065] usb 1-1: USB disconnect, device number 21 [ 760.541528][ T7893] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 760.578824][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1709'. [ 764.855204][T12907] tty tty38: ldisc open failed (-12), clearing slot 37 [ 766.455596][T12935] loop1: detected capacity change from 0 to 128 [ 766.787888][T12943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 767.621525][T12935] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 767.722827][T12935] ext4 filesystem being mounted at /339/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 767.779080][T12950] loop0: detected capacity change from 0 to 256 [ 767.808612][T12947] loop7: detected capacity change from 0 to 512 [ 767.903745][T12947] journal_path: Non-blockdev passed as './file1' [ 768.088510][T12949] loop9: detected capacity change from 0 to 40427 [ 768.112518][T12949] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 768.120308][T12949] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 768.199978][T12947] EXT4-fs: error: could not find journal device path [ 768.207367][T12949] F2FS-fs (loop9): invalid crc value [ 768.310790][T12949] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 768.318097][T12949] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 769.785657][T12973] loop7: detected capacity change from 0 to 256 [ 769.804100][ T5825] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 769.897760][T12973] exfat: Unknown parameter 'iochar' [ 770.993304][T12973] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1733'. [ 771.092229][T12973] gretap0: entered promiscuous mode [ 771.101331][T12973] netlink: 5 bytes leftover after parsing attributes in process `syz.7.1733'. [ 771.272704][T12973] 0ªX¹¦D: renamed from gretap0 [ 771.370874][T12973] 0ªX¹¦D: left promiscuous mode [ 771.413553][T12973] 0ªX¹¦D: entered allmulticast mode [ 771.473160][T12973] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 772.991583][T12992] xt_CT: You must specify a L4 protocol and not use inversions on it [ 775.089895][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'. [ 777.385663][T13024] loop7: detected capacity change from 0 to 2048 [ 777.657103][T13027] loop8: detected capacity change from 0 to 40427 [ 777.666721][T13027] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 777.674613][T13027] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 777.712010][T13027] F2FS-fs (loop8): invalid crc value [ 777.954991][T13027] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 777.962231][T13027] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 781.440797][T13063] loop7: detected capacity change from 0 to 1024 [ 781.651009][T13063] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.757164][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1762'. [ 783.774233][ T7665] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.223077][T13091] fuse: Bad value for 'group_id' [ 785.252961][T13091] fuse: Bad value for 'group_id' [ 785.413130][T13098] loop1: detected capacity change from 0 to 1024 [ 785.452123][T13098] EXT4-fs: Ignoring removed orlov option [ 785.551421][T13098] EXT4-fs: Ignoring removed nomblk_io_submit option [ 785.783395][T13107] loop6: detected capacity change from 0 to 1024 [ 785.822587][T13107] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 785.832927][T13107] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 785.843288][T13107] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 787.459985][T13098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.825228][ T5848] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 788.840585][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.853801][ T5848] usb 9-1: Using ep0 maxpacket: 8 [ 788.901582][ T5848] usb 9-1: device descriptor read/all, error -71 [ 790.008826][T13122] loop1: detected capacity change from 0 to 128 [ 790.094422][T13122] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 790.229440][T13122] ext4 filesystem being mounted at /350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 790.389366][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1777'. [ 791.922681][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1773'. [ 792.521770][ T5825] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 793.572188][T13151] fuse: Bad value for 'group_id' [ 793.587186][T13151] fuse: Bad value for 'group_id' [ 793.952599][ T5879] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 794.192693][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 794.407265][ T5879] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 794.518361][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.533438][ T5879] usb 1-1: Product: syz [ 794.537745][ T5879] usb 1-1: Manufacturer: syz [ 794.542491][ T5879] usb 1-1: SerialNumber: syz [ 794.563646][ T5879] usb 1-1: config 0 descriptor?? [ 794.573877][ T5879] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 794.814657][ T7567] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 794.888657][T13171] geneve2: entered promiscuous mode [ 795.077115][ T5879] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 795.092984][ T5848] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 795.112716][ T7567] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 795.175643][ T7567] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.191749][ T5879] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 795.246573][ T7567] usb 7-1: config 0 descriptor?? [ 795.266029][ T5879] usb 1-1: USB disconnect, device number 22 [ 795.277788][T13177] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1792'. [ 795.317678][ T5848] usb 10-1: config 0 has an invalid interface number: 69 but max is 0 [ 795.359879][ T5848] usb 10-1: config 0 has no interface number 0 [ 795.378134][ T5848] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 795.406010][ T5848] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 795.438184][ T5848] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 43776, setting to 64 [ 795.475122][ T7567] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 795.499884][ T5848] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 795.512196][ T5848] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.582064][ T5848] usb 10-1: Product: syz [ 795.601495][ T5848] usb 10-1: Manufacturer: syz [ 795.621380][ T7567] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 795.666932][ T5848] usb 10-1: SerialNumber: syz [ 795.728423][ T5848] usb 10-1: config 0 descriptor?? [ 795.748947][T13169] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 795.806086][T13169] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 795.838605][ T7567] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 795.843172][ T5848] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 795.902243][ T5848] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 795.932883][ T7567] [drm] Initialized udl on minor 2 [ 795.942145][ T7567] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 796.021550][ T7567] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 796.817588][ T6004] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 796.826228][ T5879] usb 7-1: USB disconnect, device number 19 [ 796.841425][ T6004] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 797.222907][ T6004] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 797.395592][ T6004] usb 1-1: Using ep0 maxpacket: 32 [ 797.455135][ T6004] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 797.488982][ T6004] usb 1-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 797.533139][ T6004] usb 1-1: config 1 interface 0 has no altsetting 0 [ 797.585954][ T6004] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 797.612141][T13203] fuse: Bad value for 'group_id' [ 797.642491][ T6004] usb 1-1: New USB device strings: Mfr=28, Product=45, SerialNumber=3 [ 797.650719][ T6004] usb 1-1: Product: syz [ 797.652615][T13203] fuse: Bad value for 'group_id' [ 797.692735][ T6004] usb 1-1: Manufacturer: syz [ 797.710557][ T6004] usb 1-1: SerialNumber: syz [ 797.762834][T13197] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 799.062874][ T6004] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 799.396572][ T6004] usb 1-1: USB disconnect, device number 23 [ 799.425901][ T6004] usblp0: removed [ 801.273077][ T6004] usb 10-1: USB disconnect, device number 15 [ 801.289492][ T6004] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 801.304017][ T6004] cyberjack 10-1:0.69: device disconnected [ 801.432247][T13225] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1808'. [ 804.608244][ T2065] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 804.770877][T13271] hub 8-0:1.0: USB hub found [ 804.777970][T13271] hub 8-0:1.0: 1 port detected [ 804.842670][ T2065] usb 9-1: Using ep0 maxpacket: 32 [ 805.452991][ T2065] usb 9-1: config index 0 descriptor too short (expected 31, got 27) [ 805.499398][ T2065] usb 9-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 805.512634][ T2065] usb 9-1: config 1 interface 0 has no altsetting 0 [ 805.521999][ T2065] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 805.539850][ T2065] usb 9-1: New USB device strings: Mfr=28, Product=45, SerialNumber=3 [ 805.552724][ T2065] usb 9-1: Product: syz [ 805.556919][ T2065] usb 9-1: Manufacturer: syz [ 805.730953][ T2065] usb 9-1: SerialNumber: syz [ 805.831722][T13261] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 805.853926][T13280] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1824'. [ 806.596154][ T2065] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 806.618074][ T2065] usb 9-1: USB disconnect, device number 16 [ 806.642253][ T2065] usblp0: removed [ 808.704444][T13309] loop7: detected capacity change from 0 to 1024 [ 808.711933][T13309] EXT4-fs: Ignoring removed nobh option [ 808.768226][T13313] loop6: detected capacity change from 0 to 1024 [ 808.802584][T13309] EXT4-fs: Ignoring removed bh option [ 808.861720][T13313] EXT4-fs: Ignoring removed orlov option [ 808.905264][T13313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 808.924784][T13309] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 809.954511][T13313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.175405][T13324] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1837'. [ 810.465246][ T7665] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.090875][ T7668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.222677][T13331] netlink: 'syz.7.1838': attribute type 10 has an invalid length. [ 811.234376][T13331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.245639][T13331] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 811.355226][T13331] netlink: 'syz.7.1838': attribute type 10 has an invalid length. [ 811.363852][T13331] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1838'. [ 811.373254][T13331] batadv0: entered promiscuous mode [ 811.392514][T13331] batadv0: entered allmulticast mode [ 811.402463][ T6004] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 811.413531][T13331] bond0: (slave batadv0): Releasing backup interface [ 811.494769][T13331] bridge0: port 3(batadv0) entered blocking state [ 811.523465][T13331] bridge0: port 3(batadv0) entered disabled state [ 811.682065][ T6004] usb 1-1: config 0 has no interfaces? [ 811.865356][ T6004] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 811.913515][ T6004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.930554][ T6004] usb 1-1: Product: syz [ 811.945564][ T6004] usb 1-1: Manufacturer: syz [ 811.957066][ T6004] usb 1-1: SerialNumber: syz [ 812.008505][ T6004] usb 1-1: config 0 descriptor?? [ 812.195458][ T1139] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 812.204847][ T1139] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 813.251802][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.264723][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.407775][T13355] binder: 13354:13355 ioctl c0306201 200000000540 returned -22 [ 813.469068][T13356] binder: 13354:13356 ioctl c0306201 200000000640 returned -22 [ 813.547910][T13358] loop8: detected capacity change from 0 to 64 [ 814.076043][T13368] geneve2: entered promiscuous mode [ 814.136417][T13368] netlink: 156 bytes leftover after parsing attributes in process `syz.9.1852'. [ 815.934663][T13386] netlink: 'syz.9.1857': attribute type 10 has an invalid length. [ 815.960758][T13386] netlink: 'syz.9.1857': attribute type 10 has an invalid length. [ 815.980638][T13386] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1857'. [ 816.653002][ T5848] usb 1-1: USB disconnect, device number 24 [ 816.685001][ T6004] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 816.862951][ T6004] usb 10-1: Using ep0 maxpacket: 16 [ 816.874678][ T6004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.887394][ T6004] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 816.932330][ T6004] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.949822][ T6004] usb 10-1: config 0 descriptor?? [ 817.631748][ T6004] usbhid 10-1:0.0: can't add hid device: -71 [ 817.638902][ T6004] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 817.682948][ T6004] usb 10-1: USB disconnect, device number 16 [ 818.036174][T13407] binder: 13406:13407 ioctl c0306201 200000000540 returned -22 [ 818.863649][T13407] binder: 13406:13407 ioctl c0306201 200000000640 returned -22 [ 819.398258][T13421] netlink: 'syz.7.1870': attribute type 10 has an invalid length. [ 819.497906][T13421] batadv0: left allmulticast mode [ 819.558592][T13421] batadv0: left promiscuous mode [ 819.559766][T13431] netlink: 'syz.7.1870': attribute type 10 has an invalid length. [ 819.568607][T13421] bridge0: port 3(batadv0) entered disabled state [ 819.642562][T13431] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1870'. [ 819.767768][T13421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.817909][T13421] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 819.832731][T13431] batadv0: entered promiscuous mode [ 819.862231][T13431] batadv0: entered allmulticast mode [ 819.992816][T13431] bond0: (slave batadv0): Releasing backup interface [ 820.123434][T13431] bridge0: port 3(batadv0) entered blocking state [ 820.163998][T13431] bridge0: port 3(batadv0) entered disabled state [ 820.691489][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 820.700853][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 821.997340][T13458] binder: 13457:13458 ioctl c0306201 200000000540 returned -22 [ 822.113009][T13462] binder: 13457:13462 ioctl c0306201 200000000640 returned -22 [ 822.294191][ T2065] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 822.892470][ T2065] usb 8-1: Using ep0 maxpacket: 16 [ 822.906173][ T2065] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.926420][ T2065] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 822.936233][ T2065] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.953846][ T2065] usb 8-1: config 0 descriptor?? [ 823.486407][T13473] loop6: detected capacity change from 0 to 1024 [ 823.548782][T13473] EXT4-fs: Ignoring removed orlov option [ 823.579649][ T2065] usbhid 8-1:0.0: can't add hid device: -71 [ 823.591250][T13473] EXT4-fs: Ignoring removed nomblk_io_submit option [ 823.601062][ T2065] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 823.711173][T13478] loop8: detected capacity change from 0 to 16 [ 823.739323][ T2065] usb 8-1: USB disconnect, device number 25 [ 823.762213][T13478] erofs (device loop8): mounted with root inode @ nid 36. [ 823.847215][T13482] erofs (device loop8): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 823.856047][T13482] erofs (device loop8): readahead error at folio 47 @ nid 36 [ 823.863497][T13482] erofs (device loop8): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 823.871865][T13482] erofs (device loop8): readahead error at folio 46 @ nid 36 [ 823.879873][T13482] erofs (device loop8): readahead error at folio 45 @ nid 36 [ 823.887861][T13482] erofs (device loop8): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 823.896756][T13482] erofs (device loop8): readahead error at folio 43 @ nid 36 [ 823.904409][T13482] erofs (device loop8): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 823.912884][T13482] erofs (device loop8): readahead error at folio 42 @ nid 36 [ 823.920626][T13482] erofs (device loop8): bogus lookback distance 774 @ lcn 40 of nid 36 [ 823.929099][T13482] erofs (device loop8): readahead error at folio 41 @ nid 36 [ 823.936638][T13482] erofs (device loop8): bogus lookback distance 774 @ lcn 40 of nid 36 [ 823.945083][T13482] erofs (device loop8): readahead error at folio 40 @ nid 36 [ 823.952739][T13482] erofs (device loop8): readahead error at folio 39 @ nid 36 [ 823.960559][T13482] erofs (device loop8): readahead error at folio 38 @ nid 36 [ 823.969054][T13482] erofs (device loop8): readahead error at folio 36 @ nid 36 [ 823.977529][T13482] erofs (device loop8): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 823.986267][T13482] erofs (device loop8): readahead error at folio 31 @ nid 36 [ 823.994761][T13482] erofs (device loop8): readahead error at folio 25 @ nid 36 [ 824.002346][T13482] erofs (device loop8): readahead error at folio 24 @ nid 36 [ 824.010706][T13482] erofs (device loop8): readahead error at folio 19 @ nid 36 [ 824.020592][T13482] syz.8.1887: attempt to access beyond end of device [ 824.020592][T13482] loop8: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 824.035780][T13482] syz.8.1887: attempt to access beyond end of device [ 824.035780][T13482] loop8: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 824.051051][T13482] syz.8.1887: attempt to access beyond end of device [ 824.051051][T13482] loop8: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 824.066165][T13482] syz.8.1887: attempt to access beyond end of device [ 824.066165][T13482] loop8: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 824.151265][T13473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.628545][T13489] netlink: 'syz.8.1890': attribute type 10 has an invalid length. [ 824.645483][T13489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.664932][T13489] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 824.677857][T13489] netlink: 'syz.8.1890': attribute type 10 has an invalid length. [ 824.706389][T13489] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1890'. [ 824.893479][T13489] batadv0: entered promiscuous mode [ 824.899067][T13489] batadv0: entered allmulticast mode [ 825.285043][T13489] bond0: (slave batadv0): Releasing backup interface [ 825.310690][T13489] bridge0: port 3(batadv0) entered blocking state [ 825.357768][T13489] bridge0: port 3(batadv0) entered disabled state [ 825.743261][ T6350] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 825.753929][ T6350] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 829.756513][T13539] hub 8-0:1.0: USB hub found [ 829.767149][T13539] hub 8-0:1.0: 1 port detected [ 829.791878][ T5879] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 830.665581][ T5879] usb 10-1: Using ep0 maxpacket: 16 [ 830.728705][ T5879] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.769518][ T5879] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 830.827343][ T5879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.887754][ T5879] usb 10-1: config 0 descriptor?? [ 831.533191][ T7668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.543642][ T5879] usbhid 10-1:0.0: can't add hid device: -71 [ 831.553716][ T5879] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 831.640177][ T5879] usb 10-1: USB disconnect, device number 17 [ 831.918499][T13556] loop6: detected capacity change from 0 to 256 [ 831.945940][T13555] syzkaller1: entered promiscuous mode [ 831.992981][T13555] syzkaller1: entered allmulticast mode [ 832.044062][T13556] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 832.546640][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059456400: rx timeout, send abort [ 832.675718][T13564] loop0: detected capacity change from 0 to 128 [ 832.739964][T13564] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 832.872730][ T916] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 832.883026][T13564] ext4 filesystem being mounted at /383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 833.042534][ T916] usb 2-1: Using ep0 maxpacket: 16 [ 833.047805][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059454c00: rx timeout, send abort [ 833.056408][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059456400: abort rx timeout. Force session deactivation [ 833.124668][ T916] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 833.156129][ T916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.213882][ T916] usb 2-1: config 0 has no interface number 0 [ 833.547890][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059454c00: abort rx timeout. Force session deactivation [ 833.861395][ T5829] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 833.863840][ T916] usb 2-1: config 0 interface 143 has no altsetting 0 [ 833.885580][ T916] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 833.896780][ T916] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 833.905016][ T916] usb 2-1: Product: syz [ 833.909231][ T916] usb 2-1: SerialNumber: syz [ 833.920579][ T916] usb 2-1: config 0 descriptor?? [ 834.172208][ T5848] usb 2-1: USB disconnect, device number 35 [ 834.874682][T13597] loop0: detected capacity change from 0 to 1024 [ 834.914461][T13597] EXT4-fs: Ignoring removed orlov option [ 834.942517][T13597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 834.997002][T13597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 835.124044][ T5848] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 835.422589][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 835.437673][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.010144][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.029603][ T5848] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 836.080980][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.108542][ T5848] usb 2-1: config 0 descriptor?? [ 836.247229][T13613] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1926'. [ 836.645473][T13617] loop6: detected capacity change from 0 to 40427 [ 836.680529][T13617] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 836.688503][T13617] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 836.723547][T13617] F2FS-fs (loop6): invalid crc value [ 836.859614][T13617] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 836.866867][T13617] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 836.876316][ T5848] usbhid 2-1:0.0: can't add hid device: -71 [ 836.887700][T13629] loop8: detected capacity change from 0 to 256 [ 837.061454][ T5848] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 837.087728][ T5848] usb 2-1: USB disconnect, device number 36 [ 838.384966][T13640] netlink: 'syz.7.1932': attribute type 1 has an invalid length. [ 838.435909][T13640] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1932'. [ 839.214552][T13651] loop9: detected capacity change from 0 to 128 [ 839.375918][T13651] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 839.409847][T13651] ext4 filesystem being mounted at /158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 840.393119][ T9687] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 840.891124][T13667] syzkaller1: entered promiscuous mode [ 840.921449][T13667] syzkaller1: entered allmulticast mode [ 840.999635][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1941'. [ 841.236147][T13675] loop9: detected capacity change from 0 to 256 [ 841.397019][T13675] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 841.806228][T13681] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1943'. [ 841.850366][T13681] netlink: 'syz.6.1943': attribute type 7 has an invalid length. [ 842.063831][T13686] hub 8-0:1.0: USB hub found [ 842.070432][T13686] hub 8-0:1.0: 1 port detected [ 842.592522][T13681] netlink: 'syz.6.1943': attribute type 8 has an invalid length. [ 843.201178][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1943'. [ 843.249435][T13681] bond0: entered promiscuous mode [ 843.298486][T13681] bond_slave_0: entered promiscuous mode [ 843.332034][T13681] bond_slave_1: entered promiscuous mode [ 843.610482][T13681] bond0: left promiscuous mode [ 843.655329][T13681] bond_slave_0: left promiscuous mode [ 843.696235][T13681] bond_slave_1: left promiscuous mode [ 844.443091][T13710] loop6: detected capacity change from 0 to 128 [ 844.544398][T13710] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 844.634836][T13710] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 844.933630][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1955'. [ 845.576494][T13730] syzkaller1: entered promiscuous mode [ 845.582034][T13730] syzkaller1: entered allmulticast mode [ 845.654835][ T7668] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 847.216889][T13745] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1963'. [ 847.329765][T13745] netlink: 'syz.8.1963': attribute type 7 has an invalid length. [ 847.665396][T13745] netlink: 'syz.8.1963': attribute type 8 has an invalid length. [ 847.797134][T13760] hub 8-0:1.0: USB hub found [ 847.810481][T13760] hub 8-0:1.0: 1 port detected [ 847.872285][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1963'. [ 849.059234][T13770] loop8: detected capacity change from 0 to 256 [ 849.971388][T13777] loop9: detected capacity change from 0 to 256 [ 850.097549][T13777] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 850.131716][T13779] loop8: detected capacity change from 0 to 128 [ 850.271671][T13779] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 851.128813][T13779] ext4 filesystem being mounted at /230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 851.160836][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.768521][ T7893] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 853.519888][T13798] syzkaller1: entered promiscuous mode [ 853.527807][T13798] syzkaller1: entered allmulticast mode [ 854.194140][T13824] loop9: detected capacity change from 0 to 256 [ 857.115446][T13847] loop9: detected capacity change from 0 to 128 [ 857.212036][T13849] loop0: detected capacity change from 0 to 128 [ 857.284249][T13849] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 857.300415][T13847] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 857.336445][T13849] ext4 filesystem being mounted at /396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 857.368899][T13847] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 858.502264][T13863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1987'. [ 859.027623][ T9687] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 859.078415][ T5829] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 859.220566][T13865] loop9: detected capacity change from 0 to 256 [ 859.414381][T13865] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 859.717147][T13872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1993'. [ 859.733866][T13871] syzkaller1: entered promiscuous mode [ 859.768304][T13871] syzkaller1: entered allmulticast mode [ 859.778397][T13872] netlink: 'syz.1.1993': attribute type 7 has an invalid length. [ 859.812648][T13872] netlink: 'syz.1.1993': attribute type 8 has an invalid length. [ 859.848368][T13872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1993'. [ 863.275705][T13902] loop0: detected capacity change from 0 to 128 [ 864.387674][T13902] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 864.498200][T13902] ext4 filesystem being mounted at /400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 864.530130][ C0] vkms_vblank_simulate: vblank timer overrun [ 864.782780][ T5879] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 865.435579][ T5829] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 865.526618][T13922] loop7: detected capacity change from 0 to 256 [ 865.790424][T13926] loop0: detected capacity change from 0 to 1024 [ 865.819386][T13926] EXT4-fs: Ignoring removed nobh option [ 865.858545][T13926] EXT4-fs: Ignoring removed bh option [ 866.031437][T13934] loop7: detected capacity change from 0 to 1024 [ 866.042852][T13934] EXT4-fs: Ignoring removed orlov option [ 866.044732][T13926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 866.048525][T13934] EXT4-fs: Ignoring removed nomblk_io_submit option [ 866.108526][T13934] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.496706][ T7665] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.738719][T13955] loop8: detected capacity change from 0 to 256 [ 868.746535][T13958] netlink: 'syz.7.2014': attribute type 15 has an invalid length. [ 868.755569][T13958] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2014'. [ 868.854046][T13951] overlayfs: conflicting lowerdir path [ 869.067729][T13955] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 870.113828][T13968] loop9: detected capacity change from 0 to 128 [ 870.613567][ T5879] usb 2-1: device descriptor read/all, error -110 [ 871.133998][T13968] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 871.244019][T13968] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 871.292615][ T5879] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 871.434368][ T5879] usb 2-1: device descriptor read/64, error -32 [ 871.640319][ T5879] usb usb2-port1: attempt power cycle [ 872.293857][ T9687] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 873.184484][T13992] loop9: detected capacity change from 0 to 1024 [ 873.216408][T13992] EXT4-fs: Ignoring removed orlov option [ 873.263103][T13992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 873.279274][T13996] loop6: detected capacity change from 0 to 512 [ 873.319865][T13996] EXT4-fs: Conflicting test_dummy_encryption options [ 873.337347][T13992] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 874.517945][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.697288][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.928524][T14010] loop6: detected capacity change from 0 to 1024 [ 874.977129][T14010] EXT4-fs: Ignoring removed nobh option [ 874.989710][ T9687] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.992573][T14010] EXT4-fs: Ignoring removed bh option [ 875.137145][T14016] loop1: detected capacity change from 0 to 128 [ 875.157146][T14010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 875.834822][T14016] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 875.965627][T14024] overlayfs: conflicting lowerdir path [ 876.603797][T14016] ext4 filesystem being mounted at /390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 876.912608][ T5892] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 877.597977][ T5825] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 877.614077][ T7668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.662492][ T5892] usb 8-1: Using ep0 maxpacket: 32 [ 877.670706][ T5892] usb 8-1: config index 0 descriptor too short (expected 31, got 27) [ 877.694583][ T5892] usb 8-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 877.749413][ T5892] usb 8-1: config 1 interface 0 has no altsetting 0 [ 877.777002][ T5892] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 877.778469][T14047] sctp: [Deprecated]: syz.8.2043 (pid 14047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 877.778469][T14047] Use struct sctp_sack_info instead [ 877.886069][ T5892] usb 8-1: New USB device strings: Mfr=28, Product=45, SerialNumber=3 [ 877.972831][ T5892] usb 8-1: Product: syz [ 877.987828][ T5892] usb 8-1: Manufacturer: syz [ 878.002028][ T5892] usb 8-1: SerialNumber: syz [ 878.048004][T14029] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 878.093366][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 878.117469][T14054] loop1: detected capacity change from 0 to 512 [ 878.157080][T14054] EXT4-fs: Conflicting test_dummy_encryption options [ 878.825968][ T9] usb 1-1: config 0 has no interfaces? [ 878.880070][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 878.889296][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.897397][ T9] usb 1-1: Product: syz [ 878.901578][ T9] usb 1-1: Manufacturer: syz [ 879.155722][ T9] usb 1-1: SerialNumber: syz [ 879.169890][ T9] usb 1-1: config 0 descriptor?? [ 879.970578][ T5892] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 880.135621][ T5892] usb 8-1: USB disconnect, device number 26 [ 880.160960][ T5892] usblp0: removed [ 880.288480][T14066] loop8: detected capacity change from 0 to 256 [ 880.319945][T14066] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 882.490500][T14088] loop7: detected capacity change from 0 to 128 [ 882.613958][T14088] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 882.669639][T14090] loop6: detected capacity change from 0 to 1024 [ 882.723666][T14090] EXT4-fs: Ignoring removed nobh option [ 882.730695][T14090] EXT4-fs: Ignoring removed bh option [ 882.736982][T14088] ext4 filesystem being mounted at /281/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 882.768890][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.882885][T14090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.763163][T14098] overlayfs: conflicting lowerdir path [ 884.337570][ T7665] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 884.427949][ T6004] usb 1-1: USB disconnect, device number 25 [ 884.912653][ T5892] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 885.064285][ T7668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.192405][ T5892] usb 10-1: Using ep0 maxpacket: 32 [ 885.303693][ T5892] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 885.338667][T14107] loop7: detected capacity change from 0 to 512 [ 885.346087][ T5892] usb 10-1: config 0 has no interface number 0 [ 885.352296][ T5892] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 885.407660][ T5892] usb 10-1: config 0 interface 85 has no altsetting 0 [ 885.446830][ T5892] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 885.469482][T14107] EXT4-fs: Conflicting test_dummy_encryption options [ 885.489698][ T5892] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.504062][T14109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 885.526789][ T5892] usb 10-1: Product: syz [ 885.531362][ T5892] usb 10-1: Manufacturer: syz [ 885.697052][ T5892] usb 10-1: SerialNumber: syz [ 885.753471][ T5892] usb 10-1: config 0 descriptor?? [ 886.122077][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2060'. [ 886.466061][ T5892] appletouch 10-1:0.85: Geyser mode initialized. [ 886.515214][ T5892] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input44 [ 886.672523][ T5892] usb 10-1: USB disconnect, device number 18 [ 886.942190][T14129] loop1: detected capacity change from 0 to 128 [ 886.959847][T14133] loop0: detected capacity change from 0 to 128 [ 886.979981][ T5892] appletouch 10-1:0.85: input: appletouch disconnected [ 886.984709][T14129] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 887.172202][T14137] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2069'. [ 887.266681][T14129] ext4 filesystem being mounted at /396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 887.344568][T14133] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 887.577315][T14133] ext4 filesystem being mounted at /406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 888.020983][T14143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2067'. [ 888.056552][T14146] loop6: detected capacity change from 0 to 512 [ 888.084824][T14146] EXT4-fs: Conflicting test_dummy_encryption options [ 888.360967][ T5825] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 888.976276][ T916] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 889.119256][T14165] loop7: detected capacity change from 0 to 256 [ 889.232299][ T916] usb 10-1: config 0 has no interfaces? [ 889.250941][T14165] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 889.276908][T14164] loop6: detected capacity change from 0 to 1024 [ 889.278579][ T916] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 889.306304][ T916] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.494483][ T916] usb 10-1: Product: syz [ 889.498867][ T916] usb 10-1: Manufacturer: syz [ 889.503797][ T916] usb 10-1: SerialNumber: syz [ 889.518241][ T916] usb 10-1: config 0 descriptor?? [ 889.544695][T14164] EXT4-fs: Ignoring removed orlov option [ 889.572655][T14164] EXT4-fs: Ignoring removed nomblk_io_submit option [ 889.795841][T14164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.742996][ T7668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.245165][T14196] loop1: detected capacity change from 0 to 128 [ 892.301967][T14196] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 892.354412][T14196] ext4 filesystem being mounted at /402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 892.386359][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.762496][T14205] loop8: detected capacity change from 0 to 512 [ 892.770790][T14205] EXT4-fs: Conflicting test_dummy_encryption options [ 892.794222][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2086'. [ 893.177799][ T5825] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 894.389670][ T5829] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 894.598623][T14231] erspan0: entered promiscuous mode [ 894.628169][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2095'. [ 894.635780][ T6004] usb 10-1: USB disconnect, device number 19 [ 894.679236][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'. [ 895.166116][T14246] loop1: detected capacity change from 0 to 128 [ 895.323643][T14246] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 895.372782][T14246] ext4 filesystem being mounted at /407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 895.614618][T14255] loop9: detected capacity change from 0 to 256 [ 895.845455][T14256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2101'. [ 895.870699][T14255] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 895.906935][T14258] loop8: detected capacity change from 0 to 512 [ 895.949118][T14258] EXT4-fs: Conflicting test_dummy_encryption options [ 896.351582][ T5825] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 896.488200][T14265] loop7: detected capacity change from 0 to 128 [ 896.518908][T14265] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 896.543204][T14265] ext4 filesystem being mounted at /291/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 896.575144][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.462286][T14273] loop1: detected capacity change from 0 to 128 [ 897.472060][ T7665] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 897.526892][T14275] netlink: 'syz.8.2110': attribute type 1 has an invalid length. [ 897.554728][T14273] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 897.599406][T14273] ext4 filesystem being mounted at /408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 897.928629][T14285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2107'. [ 897.938992][T14285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2107'. [ 898.057427][T14282] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 898.151203][ T6068] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 898.166547][T14288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 898.356150][ T5967] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 898.579355][ T5825] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 899.719302][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2117'. [ 899.750619][T14307] loop9: detected capacity change from 0 to 128 [ 899.833594][T14307] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 899.942826][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 900.012535][T14307] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 900.204454][ T9] usb 1-1: config 0 has no interfaces? [ 900.214168][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 900.230120][T14315] loop7: detected capacity change from 0 to 1024 [ 900.351796][T14316] loop1: detected capacity change from 0 to 256 [ 900.360454][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.364556][T14315] EXT4-fs: Ignoring removed nobh option [ 900.378986][T14315] EXT4-fs: Ignoring removed bh option [ 900.385069][T14317] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2119'. [ 900.417550][ T9] usb 1-1: Product: syz [ 900.441645][T14316] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 900.454669][ T9] usb 1-1: Manufacturer: syz [ 900.459367][ T9] usb 1-1: SerialNumber: syz [ 900.486663][T14315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 900.500901][ T9] usb 1-1: config 0 descriptor?? [ 900.936246][ T9687] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 901.134065][T14324] overlayfs: conflicting lowerdir path [ 901.749683][T14327] loop6: detected capacity change from 0 to 128 [ 902.073142][T14327] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 902.139623][ T2065] usb 1-1: USB disconnect, device number 26 [ 902.162078][T14327] ext4 filesystem being mounted at /290/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 902.626925][T14343] loop8: detected capacity change from 0 to 128 [ 902.732232][T14343] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 902.777916][T14348] loop9: detected capacity change from 0 to 1024 [ 902.799570][T14348] EXT4-fs: Ignoring removed orlov option [ 902.805685][T14348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 902.812957][T14343] ext4 filesystem being mounted at /258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 903.144886][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2128'. [ 903.157248][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2128'. [ 903.179486][ T7668] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 903.190067][T14348] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.575332][ T7893] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 904.565114][ T7665] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.414576][ T9687] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.481350][T14373] loop6: detected capacity change from 0 to 128 [ 905.554673][T14375] loop7: detected capacity change from 0 to 256 [ 905.589924][T14373] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 905.637648][T14373] ext4 filesystem being mounted at /292/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 905.669670][ C0] vkms_vblank_simulate: vblank timer overrun [ 905.705472][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2135'. [ 906.036256][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2136'. [ 906.437990][ T7668] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 906.801459][T14395] loop6: detected capacity change from 0 to 128 [ 906.941492][T14395] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 906.989502][T14395] ext4 filesystem being mounted at /293/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 906.997445][T14407] loop7: detected capacity change from 0 to 1024 [ 907.029699][T14407] EXT4-fs: Ignoring removed nobh option [ 907.035883][T14407] EXT4-fs: Ignoring removed bh option [ 907.136708][T14407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.137983][T14412] loop9: detected capacity change from 0 to 1024 [ 907.157239][T14412] EXT4-fs: Ignoring removed orlov option [ 907.163022][T14412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 907.350746][T14412] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.435827][ T7668] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 908.448404][ T9687] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.669841][T14432] loop1: detected capacity change from 0 to 256 [ 909.203184][T14438] usb usb8: usbfs: process 14438 (syz.6.2149) did not claim interface 0 before use [ 910.532666][T14446] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2154'. [ 910.726412][ T7665] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.091524][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2157'. [ 911.142052][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'. [ 911.385465][T14462] loop1: detected capacity change from 0 to 128 [ 911.425556][T14462] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 911.445737][T14462] ext4 filesystem being mounted at /420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 911.488892][T14465] loop7: detected capacity change from 0 to 1024 [ 911.506993][T14465] EXT4-fs: Ignoring removed orlov option [ 911.514499][T14465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 911.571006][T14465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 912.548069][ T5825] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 912.668640][ T7665] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.817836][T14483] loop9: detected capacity change from 0 to 256 [ 913.171323][T14494] usb usb8: usbfs: process 14494 (syz.1.2165) did not claim interface 0 before use [ 913.989755][T14498] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2170'. [ 914.029813][T14500] fuse: Bad value for 'rootmode' [ 914.227580][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2173'. [ 914.605341][T14512] bridge_slave_0: left allmulticast mode [ 914.611137][T14512] bridge_slave_0: left promiscuous mode [ 914.642904][T14512] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.811790][T14517] loop0: detected capacity change from 0 to 1024 [ 914.844538][T14512] bridge_slave_1: left allmulticast mode [ 914.934679][T14512] bridge_slave_1: left promiscuous mode [ 914.942303][T14517] EXT4-fs: Ignoring removed orlov option [ 914.948394][T14517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 914.960448][T14512] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.963767][T14522] loop6: detected capacity change from 0 to 128 [ 914.984636][T14512] bond0: (slave bond_slave_0): Releasing backup interface [ 915.054795][T14512] bond0: (slave bond_slave_1): Releasing backup interface [ 915.068998][T14517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 915.136376][T14522] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 915.944904][T14512] team0: Port device team_slave_0 removed [ 915.981809][T14522] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 916.120519][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.313547][T14512] team0: Port device team_slave_1 removed [ 916.320992][T14512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.394024][T14512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.604285][T14512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.623136][ T7668] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 916.650712][T14512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.496842][T14544] usb usb8: usbfs: process 14544 (syz.1.2182) did not claim interface 0 before use [ 918.289638][T14547] fuse: Bad value for 'rootmode' [ 918.536821][T14551] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2187'. [ 918.550122][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2188'. [ 918.608525][T14553] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2188'. [ 918.889805][T14560] loop9: detected capacity change from 0 to 1024 [ 918.931926][T14560] EXT4-fs: Ignoring removed nobh option [ 918.952612][T14560] EXT4-fs: Ignoring removed bh option [ 918.982491][ T916] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 919.040986][T14568] loop8: detected capacity change from 0 to 128 [ 919.092075][T14573] bridge0: port 3(batadv0) entered disabled state [ 919.133264][T14560] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.211604][T14573] bridge_slave_0: left allmulticast mode [ 919.218113][T14568] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 919.232623][ T916] usb 2-1: Using ep0 maxpacket: 16 [ 919.250676][T14573] bridge_slave_0: left promiscuous mode [ 919.257121][ T916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.277192][ T916] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 919.286610][T14573] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.300744][ T916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.342787][T14568] ext4 filesystem being mounted at /268/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 919.378981][ T916] usb 2-1: config 0 descriptor?? [ 919.748867][T14560] overlayfs: conflicting lowerdir path [ 919.783434][T14573] bridge_slave_1: left allmulticast mode [ 919.792192][T14573] bridge_slave_1: left promiscuous mode [ 919.856268][T14573] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.889068][ T916] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 919.977530][T14573] bond0: (slave bond_slave_0): Releasing backup interface [ 920.044089][ T916] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 920.051196][ T916] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 920.064209][ T916] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 920.071334][ T916] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 920.077768][ T7893] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 920.084154][ T916] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 920.104476][T14573] bond0: (slave bond_slave_1): Releasing backup interface [ 920.215329][T14573] team0: Port device team_slave_0 removed [ 920.263289][T14573] team0: Port device team_slave_1 removed [ 920.282221][T14573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.290778][ T916] usb 2-1: USB disconnect, device number 40 [ 920.514819][T14573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.654868][T14594] usb usb8: usbfs: process 14594 (syz.0.2197) did not claim interface 0 before use [ 921.482041][T14599] ================================================================== [ 921.490164][T14599] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 921.497819][T14599] Read of size 1 at addr ffff888024491030 by task syz.7.2199/14599 [ 921.505707][T14599] [ 921.508025][T14599] CPU: 0 UID: 0 PID: 14599 Comm: syz.7.2199 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 921.508051][T14599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 921.508066][T14599] Call Trace: [ 921.508074][T14599] [ 921.508083][T14599] dump_stack_lvl+0x189/0x250 [ 921.508123][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.508150][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.508176][T14599] ? __kasan_check_byte+0x12/0x40 [ 921.508205][T14599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 921.508236][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.508261][T14599] ? rcu_is_watching+0x15/0xb0 [ 921.508282][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.508308][T14599] ? lock_release+0x4b/0x3e0 [ 921.508342][T14599] ? __virt_addr_valid+0x18c/0x540 [ 921.508373][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.508398][T14599] ? __virt_addr_valid+0x469/0x540 [ 921.508430][T14599] print_report+0xb4/0x290 [ 921.508457][T14599] ? rose_get_neigh+0x391/0x990 [ 921.508488][T14599] kasan_report+0x118/0x150 [ 921.508518][T14599] ? rose_get_neigh+0x391/0x990 [ 921.508554][T14599] rose_get_neigh+0x391/0x990 [ 921.508584][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.508615][T14599] rose_connect+0x416/0x10a0 [ 921.508640][T14599] ? __pfx_current_check_access_socket+0x10/0x10 [ 921.508669][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.508695][T14599] ? aa_sk_perm+0x81e/0x950 [ 921.508717][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.508743][T14599] ? __pfx_rose_connect+0x10/0x10 [ 921.508769][T14599] ? aa_af_perm+0x210/0x2b0 [ 921.508789][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.508814][T14599] ? tomoyo_socket_connect_permission+0x164/0x290 [ 921.508845][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.508873][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.508900][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.508925][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.508954][T14599] __sys_connect+0x316/0x440 [ 921.508982][T14599] ? __pfx___sys_connect+0x10/0x10 [ 921.509022][T14599] __x64_sys_connect+0x7a/0x90 [ 921.509050][T14599] do_syscall_64+0xf6/0x210 [ 921.509080][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.509105][T14599] ? exc_page_fault+0x91/0x110 [ 921.509137][T14599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.509159][T14599] RIP: 0033:0x7f1fb5b8e969 [ 921.509177][T14599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.509196][T14599] RSP: 002b:00007f1fb69ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 921.509219][T14599] RAX: ffffffffffffffda RBX: 00007f1fb5db5fa0 RCX: 00007f1fb5b8e969 [ 921.509236][T14599] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000004 [ 921.509251][T14599] RBP: 00007f1fb5c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 921.509264][T14599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.509278][T14599] R13: 0000000000000000 R14: 00007f1fb5db5fa0 R15: 00007ffeb44221a8 [ 921.509303][T14599] [ 921.509311][T14599] [ 921.811534][T14599] Allocated by task 13591: [ 921.815943][T14599] kasan_save_track+0x3e/0x80 [ 921.820622][T14599] __kasan_kmalloc+0x93/0xb0 [ 921.825236][T14599] __kmalloc_cache_noprof+0x230/0x3d0 [ 921.830611][T14599] rose_add_node+0x23a/0xde0 [ 921.835208][T14599] rose_rt_ioctl+0xa48/0xfb0 [ 921.839806][T14599] rose_ioctl+0x3ce/0x8b0 [ 921.844137][T14599] sock_do_ioctl+0xdc/0x300 [ 921.848634][T14599] sock_ioctl+0x576/0x790 [ 921.852955][T14599] __se_sys_ioctl+0xfc/0x170 [ 921.857540][T14599] do_syscall_64+0xf6/0x210 [ 921.862046][T14599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.867935][T14599] [ 921.870247][T14599] Freed by task 14520: [ 921.874301][T14599] kasan_save_track+0x3e/0x80 [ 921.878979][T14599] kasan_save_free_info+0x46/0x50 [ 921.883999][T14599] __kasan_slab_free+0x62/0x70 [ 921.888765][T14599] kfree+0x193/0x440 [ 921.892665][T14599] rose_rt_device_down+0x66d/0x6c0 [ 921.897782][T14599] rose_device_event+0x603/0x6a0 [ 921.902721][T14599] notifier_call_chain+0x1b6/0x3e0 [ 921.907830][T14599] __dev_notify_flags+0x18d/0x2e0 [ 921.912868][T14599] netif_change_flags+0xe8/0x1a0 [ 921.917808][T14599] dev_change_flags+0x130/0x260 [ 921.922667][T14599] dev_ioctl+0x7b4/0x1150 [ 921.926996][T14599] sock_do_ioctl+0x22c/0x300 [ 921.931578][T14599] sock_ioctl+0x576/0x790 [ 921.935900][T14599] __se_sys_ioctl+0xfc/0x170 [ 921.940485][T14599] do_syscall_64+0xf6/0x210 [ 921.944992][T14599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.950881][T14599] [ 921.953196][T14599] The buggy address belongs to the object at ffff888024491000 [ 921.953196][T14599] which belongs to the cache kmalloc-512 of size 512 [ 921.967245][T14599] The buggy address is located 48 bytes inside of [ 921.967245][T14599] freed 512-byte region [ffff888024491000, ffff888024491200) [ 921.980952][T14599] [ 921.983267][T14599] The buggy address belongs to the physical page: [ 921.989665][T14599] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24490 [ 921.998422][T14599] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 922.006933][T14599] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 922.014909][T14599] page_type: f5(slab) [ 922.018886][T14599] raw: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 922.027468][T14599] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 922.036049][T14599] head: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 922.044717][T14599] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 922.053385][T14599] head: 00fff00000000002 ffffea0000912401 00000000ffffffff 00000000ffffffff [ 922.062053][T14599] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 922.070716][T14599] page dumped because: kasan: bad access detected [ 922.077121][T14599] page_owner tracks the page as allocated [ 922.082823][T14599] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4373, tgid 4373 (kworker/u8:7), ts 98508851173, free_ts 98441441711 [ 922.104191][T14599] post_alloc_hook+0x1d8/0x230 [ 922.108973][T14599] get_page_from_freelist+0x21ce/0x22b0 [ 922.114516][T14599] __alloc_frozen_pages_noprof+0x181/0x370 [ 922.120316][T14599] alloc_pages_mpol+0x232/0x4a0 [ 922.125169][T14599] allocate_slab+0x8a/0x3b0 [ 922.129664][T14599] ___slab_alloc+0xbfc/0x1480 [ 922.134346][T14599] __kmalloc_noprof+0x305/0x4f0 [ 922.139197][T14599] fib6_info_alloc+0x30/0xf0 [ 922.143784][T14599] ip6_route_info_create+0x4b3/0x1360 [ 922.149155][T14599] addrconf_f6i_alloc+0x1c6/0x3f0 [ 922.154181][T14599] ipv6_add_addr+0x56e/0x1090 [ 922.158873][T14599] addrconf_add_linklocal+0x28c/0x6c0 [ 922.164240][T14599] addrconf_addr_gen+0x490/0x580 [ 922.169177][T14599] addrconf_init_auto_addrs+0x711/0xb50 [ 922.174727][T14599] addrconf_notify+0xacc/0x1010 [ 922.179579][T14599] notifier_call_chain+0x1b6/0x3e0 [ 922.184686][T14599] page last free pid 5822 tgid 5822 stack trace: [ 922.191002][T14599] __free_frozen_pages+0xb0e/0xcd0 [ 922.196122][T14599] __put_partials+0x161/0x1c0 [ 922.200804][T14599] put_cpu_partial+0x17c/0x250 [ 922.205565][T14599] __slab_free+0x2f7/0x400 [ 922.209974][T14599] qlist_free_all+0x9a/0x140 [ 922.214561][T14599] kasan_quarantine_reduce+0x148/0x160 [ 922.220046][T14599] __kasan_slab_alloc+0x22/0x80 [ 922.224900][T14599] __kmalloc_cache_noprof+0x1be/0x3d0 [ 922.230275][T14599] netdevice_event+0x3a1/0x8a0 [ 922.235047][T14599] notifier_call_chain+0x1b6/0x3e0 [ 922.240154][T14599] netif_set_mac_address+0x37c/0x4c0 [ 922.245444][T14599] do_setlink+0x908/0x40d0 [ 922.249866][T14599] rtnl_newlink+0x160b/0x1c70 [ 922.254540][T14599] rtnetlink_rcv_msg+0x7cf/0xb70 [ 922.259482][T14599] netlink_rcv_skb+0x21c/0x490 [ 922.264249][T14599] netlink_unicast+0x75b/0x8d0 [ 922.269011][T14599] [ 922.271325][T14599] Memory state around the buggy address: [ 922.276945][T14599] ffff888024490f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 922.285001][T14599] ffff888024490f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 922.293058][T14599] >ffff888024491000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 922.301113][T14599] ^ [ 922.306734][T14599] ffff888024491080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 922.314791][T14599] ffff888024491100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 922.322849][T14599] ================================================================== [ 922.331041][T14599] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 922.338247][T14599] CPU: 0 UID: 0 PID: 14599 Comm: syz.7.2199 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 922.350326][T14599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 922.360391][T14599] Call Trace: [ 922.363677][T14599] [ 922.366606][T14599] dump_stack_lvl+0x99/0x250 [ 922.371210][T14599] ? __asan_memcpy+0x40/0x70 [ 922.375804][T14599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 922.381017][T14599] ? __pfx__printk+0x10/0x10 [ 922.385611][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.391276][T14599] panic+0x2db/0x790 [ 922.395180][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.400821][T14599] ? __pfx_panic+0x10/0x10 [ 922.405252][T14599] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 922.411147][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.416782][T14599] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 922.422678][T14599] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 922.429012][T14599] ? print_memory_metadata+0x314/0x400 [ 922.434477][T14599] ? rose_get_neigh+0x391/0x990 [ 922.439336][T14599] check_panic_on_warn+0x89/0xb0 [ 922.444282][T14599] ? rose_get_neigh+0x391/0x990 [ 922.449142][T14599] end_report+0x78/0x160 [ 922.453392][T14599] kasan_report+0x129/0x150 [ 922.457903][T14599] ? rose_get_neigh+0x391/0x990 [ 922.462768][T14599] rose_get_neigh+0x391/0x990 [ 922.467458][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.473100][T14599] rose_connect+0x416/0x10a0 [ 922.477691][T14599] ? __pfx_current_check_access_socket+0x10/0x10 [ 922.484022][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.489660][T14599] ? aa_sk_perm+0x81e/0x950 [ 922.494161][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.499796][T14599] ? __pfx_rose_connect+0x10/0x10 [ 922.504831][T14599] ? aa_af_perm+0x210/0x2b0 [ 922.509336][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.514970][T14599] ? tomoyo_socket_connect_permission+0x164/0x290 [ 922.521391][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.527028][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.532667][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.538301][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.543938][T14599] __sys_connect+0x316/0x440 [ 922.548533][T14599] ? __pfx___sys_connect+0x10/0x10 [ 922.553661][T14599] __x64_sys_connect+0x7a/0x90 [ 922.558429][T14599] do_syscall_64+0xf6/0x210 [ 922.562938][T14599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.568574][T14599] ? exc_page_fault+0x91/0x110 [ 922.573344][T14599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.579237][T14599] RIP: 0033:0x7f1fb5b8e969 [ 922.583651][T14599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 922.603258][T14599] RSP: 002b:00007f1fb69ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 922.611683][T14599] RAX: ffffffffffffffda RBX: 00007f1fb5db5fa0 RCX: 00007f1fb5b8e969 [ 922.619656][T14599] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000004 [ 922.627624][T14599] RBP: 00007f1fb5c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 922.635592][T14599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.643558][T14599] R13: 0000000000000000 R14: 00007f1fb5db5fa0 R15: 00007ffeb44221a8 [ 922.651537][T14599] [ 922.654788][T14599] Kernel Offset: disabled [ 922.659133][T14599] Rebooting in 86400 seconds..