last executing test programs: 5m4.125677651s ago: executing program 4 (id=225): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 5m2.67215025s ago: executing program 4 (id=233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)={0xa4, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x3, 0x8}}, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x18, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, "d9"}, @NL80211_FTM_RESP_ATTR_LCI={0x7, 0x2, "6378e4"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x1b, 0x91, "c8224f47d85607c510c6726dc3afd7cfd80e59d720df5d"}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa4}}, 0x0) 5m2.335913256s ago: executing program 4 (id=237): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r1 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xa8bf, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m2.078438922s ago: executing program 4 (id=239): socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000000100000fd03000001"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x18) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) 5m1.631737852s ago: executing program 4 (id=244): creat(&(0x7f0000000000)='./file0\x00', 0x60) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5ba868878d6ff3a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x8, {0x0, 0x3572111cb2a712f5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280, 0x2) 4m59.680280537s ago: executing program 4 (id=256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad3", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4m56.704520217s ago: executing program 32 (id=256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad3", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4m17.71451186s ago: executing program 5 (id=421): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 4m16.077931276s ago: executing program 5 (id=427): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r0, 0x8800000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001100), 0x80902, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) sendfile(r1, r0, 0x0, 0x558410e9) 4m15.687713578s ago: executing program 5 (id=429): gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x60, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000a40)=[{&(0x7f00000007c0)="4eab", 0x2}, {&(0x7f0000000640)="5e1d", 0x2}], 0x2) 4m14.749966652s ago: executing program 5 (id=434): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) 4m14.476789633s ago: executing program 5 (id=435): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x58, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x6) 4m13.879843813s ago: executing program 5 (id=440): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0xe) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 4m13.018152616s ago: executing program 33 (id=440): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0xe) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 3m48.713544233s ago: executing program 6 (id=560): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "1a3952b5"}]}}, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 3m44.927214131s ago: executing program 6 (id=577): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x200, 0xb0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @broadcast, 0x0, 0x0, 'geneve0\x00', 'syz_tun\x00', {}, {0xff}, 0x62, 0x2, 0x49}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x8, "4edef53db37bf84c784ad890537bb2408afac8dfac7fc9d26ae9804d8470"}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000, 0x0, 'rose0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5e, 0x1, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x3, 0x4, 0x3, 0x6, 0x2], 0x1, 0x3}, {0x3, [0x1, 0x4, 0x7, 0x1, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x0, 0xf, [0x1, 0x25, 0x19, 0x31, 0x22, 0x33, 0x30, 0x37, 0x3d, 0x2a, 0x16, 0x1, 0x7, 0x3a, 0x0, 0x21], 0x2, 0xfffffffa, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m42.632549035s ago: executing program 6 (id=583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c00078008000640457899af11000300686173683a69702c6d61726b"], 0x58}, 0x1, 0x0, 0x0, 0x110}, 0x0) 3m42.443509012s ago: executing program 6 (id=586): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) 3m42.303757183s ago: executing program 6 (id=590): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff2000000000000000000d0001007564703a73797a32"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 3m41.591745868s ago: executing program 6 (id=595): open(&(0x7f0000000100)='./file0\x00', 0x615, 0x61) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000000), 0x10, 0xe) 3m40.639964263s ago: executing program 34 (id=595): open(&(0x7f0000000100)='./file0\x00', 0x615, 0x61) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000000), 0x10, 0xe) 1m28.922142382s ago: executing program 0 (id=1010): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000500)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c757466383d312c696f636861727365743d69736f383835392d31332c636865636b3d7374726963742c726f6469722c757466383d302c756e695f786c6174653d312c636f6465706167653d3836362c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c646d61736b3d30303030303030303030303030303030303030303030312c646d61736b3d30303030303030303030303030303030303030303030362c756e695f786c6174653d302c696f636861727365743d63703835352c73686f72746e616d653d77696e39352c726f6469722c6e6e6f6e756d7461696c3d312c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c757466383d312c757466383d302c756e695f786c6174653d302c0500695f786c6174653d312c696f636861727365743d6370313235352c757466383d302c646566636f6e7465010000006e636f6e66696e65645f752c00"], 0x46, 0x2d1, &(0x7f0000000740)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 1m26.027844906s ago: executing program 0 (id=1013): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 1m24.673984243s ago: executing program 0 (id=1018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2142, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 1m23.75159437s ago: executing program 0 (id=1022): syz_mount_image$fuse(0x0, &(0x7f0000002280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(r0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x141a82, 0x0) sendmsg$inet6(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") capset(&(0x7f0000000380)={0x20080522}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1m17.861399642s ago: executing program 0 (id=1030): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000004c0)="$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") chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f00000002c0)=@v1={0x0, @adiantum, 0x4, @desc1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fchmod(r8, 0x1) 1m15.37224105s ago: executing program 0 (id=1038): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x1, 0x4) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m11.621473719s ago: executing program 35 (id=1038): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x1, 0x4) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 18.580160912s ago: executing program 7 (id=1133): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x8008841) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, 0x0, 0x12) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4008000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000000700)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x700, 0x1, 0x0, 0x6, {{0x6, 0x4, 0x0, 0x3, 0x18, 0x68, 0x0, 0x3, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x3, 0x6c}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000814) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)) pipe2$9p(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 17.459766775s ago: executing program 3 (id=1137): r0 = socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 16.214877304s ago: executing program 7 (id=1139): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x200, 0xb0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @broadcast, 0x0, 0x0, 'geneve0\x00', 'syz_tun\x00', {}, {0xff}, 0x62, 0x2, 0x49}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x8, "4edef53db37bf84c784ad890537bb2408afac8dfac7fc9d26ae9804d8470"}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000, 0x0, 'rose0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5e, 0x1, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x3, 0x4, 0x3, 0x6, 0x2], 0x1, 0x3}, {0x3, [0x1, 0x4, 0x7, 0x1, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x0, 0xf, [0x1, 0x25, 0x19, 0x31, 0x22, 0x33, 0x30, 0x37, 0x3d, 0x2a, 0x16, 0x1, 0x7, 0x3a, 0x0, 0x21], 0x2, 0xfffffffa, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 16.055850943s ago: executing program 3 (id=1140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xb, 0x0, &(0x7f0000000600)="c9f7b98600000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.714730996s ago: executing program 9 (id=1142): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) rt_sigaction(0x1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) chown(0x0, 0x0, 0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}}, 0x0) listen(r3, 0x0) dup3(0xffffffffffffffff, r3, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x206, &(0x7f0000000600)="$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") io_uring_enter(0xffffffffffffffff, 0x7, 0x464f, 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1815, 0x0, 0x0, 0x0, 0x0) 14.39972893s ago: executing program 3 (id=1143): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000004c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000002c0)=@v1={0x0, @adiantum, 0x4, @desc1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 13.203290179s ago: executing program 2 (id=1145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x0, 0x1a2) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001600)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 12.78734892s ago: executing program 1 (id=1146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r3, @ANYRES64=0x0, @ANYBLOB="6cbd57ac8bab36ccff74972dd5a5c1ac38d238d844817e7588d941357acd9fca3bca1429892228450fb9b2ffd924b39d49341f40ec14adbfbb22437fca739f8fc1dafc7f9119"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x3, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff0200"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) keyctl$set_reqkey_keyring(0xe, 0x0) socketpair(0x28, 0x3, 0x0, &(0x7f00000001c0)) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000980)={0x70, 0x0, &(0x7f0000000b40)=[@clear_death={0x400c630f, 0x3}, @decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000a00)={@flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fda={0x66646185, 0x3, 0x0, 0x1d}, @ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/165, 0xa5, 0x0, 0x1}}, 0x0}}, @acquire={0x40046305, 0x1}, @register_looper, @acquire={0x40046305, 0x3}], 0xbd, 0x0, &(0x7f0000000bc0)="1e2a3197d6c9560355dd018cb705bcd9b446a8f15b0b1540af5402a7178990f10e9d7cd4ad5f67831ac9edadea4cd6f49c7777262c642e2c06a756be2148ab98f19a76f4e48e194b13bbfbfe25b1aa2d6c5e2c951a2b571f8f58580d130f63880f851e6f5684afb0493ca225c4ff7d93151bec0fdf96b765f03f2a25b6029c761af84908ba405e49a9cf0094be99fd0e4a1deee1c452534907e1d6316dc716310cc25da05bb86dd4c75a182e1b291ce6b6ae1cffbdd29b5bc1b4877426"}) r9 = io_uring_setup(0x21e3, &(0x7f0000000700)={0x0, 0x87e9, 0x1, 0x2, 0x1dd}) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 11.433584024s ago: executing program 1 (id=1147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) writev(r0, &(0x7f0000001380)=[{0x0}], 0x1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r4, 0x0, 0x6a1c2, 0x51) faccessat(0xffffffffffffffff, 0x0, 0x6ae65e579ba89554) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1018ef8, &(0x7f0000000d40)={[{@data_writeback}, {@noauto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x80000000000004}}, {@nodiscard}, {@errors_continue}, {@quota}], [{@dont_appraise}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '](&/&\\g+..$+,'}}]}, 0x1, 0x644, &(0x7f00000006c0)="$eJzs3c9rHG0dAPDvzCZ5kzS+6SsiNigGPLQgTZNarHqxrQd7KFiwBxEPDU1SQ7c/SFKwtdAEPCgoiHgt0ov/gHfp3ZsI6s2zUEUqFrR0ZWZnm81mN7ttsrtJ5vOBzT7zzLN5nm9mn8wzM/vsBFBas9mPNOJUxNubScR007qpqK+cLcq9+teTW9kjiVrtu/9MIinyGuWT4vlEsTAeEX+8EvHpyu561x89vrNYrdU9jTi3cffBufVHj8+u3l28vXx7+d7C+a9duDj/9YULC00N/XAniuer177z+V/85IdfXflT9WwSl+LG6I+XoiWOgzIbs/G2CLE5fyQiLmaJNn+Xo+YYhFBqleL9OBoRn43pqORLddOx+vOhNg7oq1olora3pFsB4KjSvaGsGuOAxrF9b8fBN/o8Khmcl5frB0C74x8pTjmM58dGk6+SpiOj+rmNkwdQf1bHmyfjz948mXkWO85DvH63dUYOoJ5ONrci4nPt4k/ytp3MI83iT3cc6ycRMR8RY0X7vrWPNiRN6X6ch9lLj/FXsvibt0MaEZeK5yz/ygfW33paa9DxA1BOLy4XO/LNbGl7/5eNPRrjn9ge/zxtvG5q/5dkcsPe/3Ue/zX29+P5uCdtGYdlY5br7X/laGvG33529Ved6q+P/2aeNR5Z/Y2x4CC83IqYaYn/p1mwxfgniz9pM/7Nity81Fsd3/7zP652Wjfs+GvPI063Pf7ZHpVmqT2uT55bWa0uz9d/tq3j93/4wW871d8+/o/6EGl72faf7BB/0/ZPW1+X/U0etP+VW60Zv7v+/G6n+qe6bv/072NJ/XhzrMj50dbGxtpCxFhyrShS5C9ubKyd3zveepnXtfx5oR7/mS+17/873v8tUU00/mX24MH37rzqtO5D3v9NF5Pf1npsQydZ/Evdt/+u/p/l/bLHOv7z/Ydf6LSuffzJvmICAAAAAACAskrza7BJOvcunaZzc/X5sp+JybR6f33jyyv3H95bijiTfx5yNI00yT8yMl1fTlZWq8sLxedhG8vnW5a/EhGfRMSvKxP58tyt+9WlYQcPAAAAAAAAAAAAAAAAAAAAh8SJYv5/4z7V/67U5/8DJdH9BnO77v8AHBP9vMEkcLjl/X+vXfzHg2sLMFj2/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4P5aX/AwAAAMCx9MkXX/w1iYjNb0zkj8xYsc6kXzjeRt+rdKVv7QAGT4+G8np36d9gH0qnp/H/f4svB+x/c4AhSNpl5oOD2t6d/0XbV27b2n/bAAAAAAAAAAAAAIC606c6z/9/v7nBwFFj2h+U1z7m//vqADjifPU/lJdjfKDLLP4Y77Si2/x/AAAAAAAAAAAAAODATOWPJJ0r5gJPRZrOzUV8KiJOxmiyslpdno+IjyPiL5XRj7LlhWE3GgAAAAAAAAAAAAAAAAAAAI6Z9UeP7yxWq8trzYn/7co53onGXVC7F671UGbPxDfjPV8VyeD/LBMRMfSN0rfESFNOErGZbflD0bC19TgczcgTQ/7HBAAAAAAAAAAAAAAAAAAAJdQ097i9md8MuEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMHjb9//vkliarL+gp8I7E8OOEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4mv4fAAD//6AzO/k=") syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0xfe, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 11.381697478s ago: executing program 3 (id=1148): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 11.001654971s ago: executing program 9 (id=1149): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 10.12389636s ago: executing program 2 (id=1150): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0005}]}) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 9.520282925s ago: executing program 3 (id=1153): syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000002100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2) readv(r4, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) 8.767624331s ago: executing program 8 (id=1154): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500010000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r3}, 0x18) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000bd676e835ae095e9c0238b853d00000009000000000000000000000000698c0000000000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r9, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x2, 0x1, 0x3, 0x1}}, 0x2e) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x8000, 0x9, 0x37d7, 0x0, 0x7f, "d205ae072597e79b2010e33c769d207a9d0f8d", 0x7f}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r11}, 0x18) 8.595307092s ago: executing program 1 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xb, 0x0, &(0x7f0000000600)="c9f7b98600000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.444665528s ago: executing program 1 (id=1156): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @float={0x8, 0x0, 0x0, 0x10, 0x10}, @ptr={0xe, 0x0, 0x0, 0x2, 0x2}, @const={0x5, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x5f, 0x2e, 0x61, 0x30, 0x61]}}, &(0x7f0000000000)=""/54, 0x58, 0x36, 0x1, 0x8}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x5}]}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0x1}, @volatile={0x2, 0x0, 0x0, 0x9, 0x4}, @union={0x7, 0x2, 0x0, 0x5, 0x1, 0x3, [{0x8, 0x5, 0x3}, {0x3, 0x0, 0x7ac5}]}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @var={0x8, 0x0, 0x0, 0xe, 0x4}, @enum64={0x7, 0x1, 0x0, 0x13, 0x1, 0xa, [{0x6, 0x7, 0x8}]}, @const={0x1, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x30, 0x0, 0x0, 0x2e, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000440)=""/197, 0xb5, 0xc5, 0x1, 0x1d}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000ffe107010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) tkill(r3, 0x12) 8.371660068s ago: executing program 9 (id=1157): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 7.476473415s ago: executing program 1 (id=1158): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 7.431613769s ago: executing program 2 (id=1159): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1, 0x21d, &(0x7f0000000240)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x80, 0x32) 7.364459311s ago: executing program 8 (id=1160): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000002100050100000000000000000200000000000000010001000c001400", @ANYRES32=r0, @ANYRES16], 0x28}}, 0x20000090) 6.311786802s ago: executing program 7 (id=1161): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) bind$xdp(r0, 0x0, 0x0) 6.275172314s ago: executing program 8 (id=1162): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)={[{@nr_blocks}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1a0000000000f22f7d0b00000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x4d, 0x2}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000004500)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000010000000000000800000000005f2e61"], &(0x7f0000004580)=""/218, 0x2a, 0xda, 0x1}, 0x28) exit(0x0) 6.043808073s ago: executing program 9 (id=1163): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000200)={@local, @broadcast, @void, {@llc_tr={0x11, {@llc={0xfc, 0x0, "17"}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) chown(0x0, 0x0, 0x0) 4.614726173s ago: executing program 8 (id=1164): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/12], 0x48) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') keyctl$setperm(0x5, r6, 0x52b242d) bind$inet6(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, 0x0, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 3.971492767s ago: executing program 2 (id=1165): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 3.969942242s ago: executing program 3 (id=1166): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff03000000090582020000000000b1575dd7d428e287e56e67221915ee9ec78144f2f269194e5a1f1d7bf35d00a5507ed4"], 0x0) syz_usb_connect$cdc_ncm(0x7, 0x73, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x6, 0x90, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "cde4f4e85f"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x8000, 0x4, 0x8}, {0x6, 0x24, 0x1a, 0xd, 0x2c}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0xa, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0xcf, 0x9}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x0, 0x2, 0x2, 0x20}, 0x126, &(0x7f00000002c0)={0x5, 0xf, 0x126, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "b09da124f0446595d9cd129e6a1cfb76"}, @generic={0x8a, 0x10, 0x4, "168fe72cd1d1f3fcc9fe4ce850aa0d2d8fad8b68afb5a088d01fa9c0b7afa1334915f7be306122662a443165e891ae0e4a1538c0efd279a2f90f0ac6802ebaac54963f0dd05923c4eb0829d14b1b95fded49cd9f8e38ae64d6b840c2ed1491b52f7620e6ec80e61bc3ce0282891287478bd37bce6d1aa2758dd43d2da379d499aa391c51f8d2b1"}, @generic={0x72, 0x10, 0x3, "cf173c7f91c98716a9b80313f2439380a5e22ceff0c3f03d9b5443405807b2dacc3c377d5cb01351fc7b6708c56b9b2d39c24650a92be85d2fbbac4d45467b7a01c9d8f4eaa8320431f975bc59e168ed4ec39a33d99d4b3f143ef6549e9a07626919b44ebfefd689d2159eba6b86d8"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x3, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x80, 0xff, 0x2}]}, 0x5, [{0xb9, &(0x7f0000000400)=@string={0xb9, 0x3, "a25cb6ec60203d9322d95f5d82465721eb54d6d35e8bdb821ea2b7d4938c7ffc257217e72e2281f2c7e828174356061c884f2a35456624a6e19ac41e2f3c820c248fa64a037eb21a925acc9e76668e2e04b17311388780d9860f8b7bb5a30deb05966fe69054c81b5f0a85c569ba722cc9931ec8b5c7968ab4ffd4eb8539142dc96e915205da694440efc555c0d5771f15d1fa2e7b2aa1ed577236e34d2a01653746b8f18f7a55e143323e1e215f1bc49bcc31f82414d0"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1407}}, {0xb4, &(0x7f0000000500)=@string={0xb4, 0x3, "b5bd0e85c9efa713153563eaeebf9d627222653c8ffd1fe17d15c6c316a889a721c3bddd3a90bf8ab6ddc4c104d64fc8d2b1653a0ca8a4c750175de16cdc0648a04123de60050471a339658dfe477657118c0e88b3671736c24d74122d83f3bc47d29c5dd8c3d2c8afe5644118e8acdb12a0b74ecc41a9778a5b60584dc54de972915f89988a8f7248d269447543fcf60848441288799bc01479f30ca59cfe5ed537fd40b05224a1a48868ff70ac793e44d4"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x100a}}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/188, 0xbc) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) r1 = syz_usb_connect(0x4, 0x11a, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x53, 0xa4, 0xd5, 0xff, 0x19d2, 0x151, 0xc5de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x2, 0x2, 0xf0, 0x50, 0x6, [{{0x9, 0x4, 0x12, 0x6, 0x3, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xc, 0x1b, 0x200, 0x9, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x80, 0x3, 0x8, [@generic={0x66, 0x9, "e8fb961e912573f73e3b5c73308bdf91fbfc62a9437fbea0b029abb3d8e5b658f865d872412e148592f4aaf0b4583bc58e28f67b8bf9bb901341e207ee23a4a90775b0299ea5ecb672aeec52a99c1c9e747a179fa754be95e3f30928410d59d5b9021e91"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x3, 0x5, 0xd2}}]}}, {{0x9, 0x4, 0xdc, 0x7, 0x1, 0xff, 0x1a, 0x47, 0x61, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x2, 0x0, 0x10, "ee6e7362364bfeb660"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x1, 0x2, 0x2, "a2", '7'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x7f, 0x2, "9d"}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x35}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3, 0x1, 0x7f}, {0x6, 0x24, 0x1a, 0x4, 0x12}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x1, 0xb, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0xbe, 0x8, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x80}]}], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x6, 0xff, 0x2, [@generic={0x2, 0xa}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x250, 0x1, 0x2d, 0x1, 0x10, 0x9}, 0x8, &(0x7f0000000a00)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x4}]}, 0x4, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x43f}}, {0x0, 0x0}]}) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x28, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b80)={0x0, 0x0, 0x4, "30827906"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x11}, 0x0, 0x0}) 3.040516308s ago: executing program 8 (id=1167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ptrace$poke(0x4, 0x0, 0x0, 0x5) dup2(r0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x26f9, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.933975847s ago: executing program 7 (id=1168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x2}) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext2\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_targets\x00') pread64(r8, &(0x7f0000000200)=""/162, 0xa2, 0xae) 2.6558444s ago: executing program 1 (id=1169): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 2.47487552s ago: executing program 2 (id=1170): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$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") mkdir(0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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") sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000004180)=ANY=[@ANYBLOB="b000000000000000", @ANYRES64, @ANYBLOB="010000000000000001000000000000007a010000000000000500000000000000b70d00004f0000000000000000000000080000000000000007000000000000000000000000000000360b000000000000010000000000000005000000ffffff7f670000000040000001000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="17a6e61e2fab00000000000003000000000000000d0000000000004003d3738997f6d229e72543c5000000000800072d7d5b0000"], 0xb0) quotactl_fd$Q_QUOTAOFF(r3, 0x0, r6, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0x9, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x16) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0xdf, 0x1, 0x2, 0x0, @loopback, @mcast1, 0x0, 0x8000, 0x0, 0x80000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r7, 0x0, 0x0, 0x3, 0x0, 0x14, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x6}}) 2.370261931s ago: executing program 8 (id=1171): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.570412097s ago: executing program 7 (id=1172): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @float={0x8, 0x0, 0x0, 0x10, 0x10}, @ptr={0xe, 0x0, 0x0, 0x2, 0x2}, @const={0x5, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x5f, 0x2e, 0x61, 0x30, 0x61]}}, &(0x7f0000000000)=""/54, 0x58, 0x36, 0x1, 0x8}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x5}]}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0x1}, @volatile={0x2, 0x0, 0x0, 0x9, 0x4}, @union={0x7, 0x2, 0x0, 0x5, 0x1, 0x3, [{0x8, 0x5, 0x3}, {0x3, 0x0, 0x7ac5}]}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @var={0x8, 0x0, 0x0, 0xe, 0x4}, @enum64={0x7, 0x1, 0x0, 0x13, 0x1, 0xa, [{0x6, 0x7, 0x8}]}, @const={0x1, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x30, 0x0, 0x0, 0x2e, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000440)=""/197, 0xb5, 0xc5, 0x1, 0x1d}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[], 0x24, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000ffe107010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) tkill(r3, 0x12) 1.351766989s ago: executing program 9 (id=1173): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0x8008976) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000e80)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f60e", 0x44}, {&(0x7f00000009c0)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e", 0xf4}, {&(0x7f0000000f00)="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", 0x102}, {&(0x7f0000000c40)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5d28c905d5b4dc64f1a", 0xb9}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc77a271c54201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000002300)="9d2aba98f0b975bf7210f7e7d7d3e223f4d186282fe89a5b99d5c2ea2863634e543819ec0ae3fcdfd6c5ad048df8fe8110603326b3fd088763e7d695fcff918a8c5c1f7ea86505918c7773e5d247f6d714fb99e7a86dc53673d48d61d079cbf2c7298d22ddedc4103338fd0af6f0b5308ca1c7d34f26fb9f964c1d2b42173024df139d7b2146635a6002ce9d439265593fda27820c4899009d0e9e64542b5eae59df7a197bb1dfff597e2886a314b6b00b56664a0829b5bac45860aa6c1f7be92f29cd82a3ac64d6cd312390bd6cd3535dd6f9ecc3c92cb40196d68e610e4e7e99b9e9aaceeb9887ecbeb0c369c44b6aae92a0b646e48fec4280c10a1f1cc2fe4d1d51c72b983e2f2c3a05cb91d26c7132d821b05e26bafcd4c7699639f7003d62d112f5c2f6f8c6939bd812e16e6a6927ebb45ab6a66e4630f1476f48a113f0a89235a085e14b166a7ce525308ae322aea9b9805b6392c4280b509679503ccbbe137d6185ff25437e5e4e6240a4a07e4051c6d030da271f946171b1ade790bdf2289c5e0ddcb33de11961264734ce77e04f94c330dac130362d5af3a5754cd69f72271157c82dd4ecf473f8b1bebcb5b9eaff0933322ca28291c278bd7f623eefc3779d980b9c39c1753488fb90ff8f4e0ce31b6e7f945f1feb0e0089b9e375c52218fbc945459f3861a6b197c74afafd944167eb991ea18ca878b59212e8d7172f6a64969eb647282588e5a54f2bc01b8f6bc43a407ce57ff99cd078e9865e2dbd0f546358448dcf5f57f1e0449ca903f7b4d2751c4ab5c5deb0299aca356bbf7a86effc0f062a2f6018d4c9698fd43cee73caadb4f7cb0f6a7082fc419afa4cf9a27f52e575ce90c5350b2e6a09b18a302475485cd207677230d58a708c3ad9d92789ba583e8b6ee89a8a9eb8cb8d9cc8ee4a629ad4b2bef279944cfa31d6ff44366a582cd953bac3897a714ddb", 0x2af}], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 279.02981ms ago: executing program 7 (id=1174): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x200, 0xb0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @broadcast, 0x0, 0x0, 'geneve0\x00', 'syz_tun\x00', {}, {0xff}, 0x62, 0x2, 0x49}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x8, "4edef53db37bf84c784ad890537bb2408afac8dfac7fc9d26ae9804d8470"}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000, 0x0, 'rose0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5e, 0x1, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x3, 0x4, 0x3, 0x6, 0x2], 0x1, 0x3}, {0x3, [0x1, 0x4, 0x7, 0x1, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x0, 0xf, [0x1, 0x25, 0x19, 0x31, 0x22, 0x33, 0x30, 0x37, 0x3d, 0x2a, 0x16, 0x1, 0x7, 0x3a, 0x0, 0x21], 0x2, 0xfffffffa, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 64.397619ms ago: executing program 9 (id=1175): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000480)="580000001400add427327b472545b45602117fffffff81000e7518217f000001925aa80020007b00e6ff00e809000000ff0000f038c71036000000ffffffffffffffffffe7ee000000000000000002000000000000000000", 0x58}], 0x1) 0s ago: executing program 2 (id=1176): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x3, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(r4, 0x0, &(0x7f0000000700)) socket$key(0xf, 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0x0, &(0x7f0000000040)=@filename='./file0\x00', r7, &(0x7f0000000440)={0x7, 0x4, 0x5, 0xfff, 0xffffffffffffff80, 0x9, 0x9, 0x1, 0x4}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x89402, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): b 3-1: config 0 descriptor?? [ 204.682870][ T7363] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 204.693450][ T978] hub 3-1:0.0: bad descriptor, ignoring hub [ 204.719053][ T978] hub 3-1:0.0: probe with driver hub failed with error -5 [ 204.914961][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.964761][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.978942][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.996885][ T7388] netlink: 32 bytes leftover after parsing attributes in process `syz.1.412'. [ 205.628969][ T5836] Bluetooth: hci2: command 0x0401 tx timeout [ 205.653962][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.839891][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.858784][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 205.915638][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.978160][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.025222][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 206.259009][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.422344][ T5906] raw-gadget.0 gadget.2: failed to queue suspend event [ 206.518787][ T7363] raw-gadget.0 gadget.2: failed to queue resume event [ 206.618981][ T978] raw-gadget.0 gadget.2: failed to queue suspend event [ 206.698664][ T7363] raw-gadget.0 gadget.2: failed to queue resume event [ 206.719912][ T5835] raw-gadget.0 gadget.2: failed to queue suspend event [ 206.790841][ T7363] raw-gadget.0 gadget.2: failed to queue resume event [ 206.840695][ T5835] raw-gadget.0 gadget.2: failed to queue suspend event [ 206.918956][ T7363] raw-gadget.0 gadget.2: failed to queue resume event [ 206.971007][ T5835] raw-gadget.0 gadget.2: failed to queue suspend event [ 207.059173][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 207.118985][ T7363] raw-gadget.0 gadget.2: failed to queue resume event [ 207.224155][ T5965] raw-gadget.0 gadget.2: failed to queue suspend event [ 207.657859][ T7363] raw-gadget.0 gadget.2: failed to queue disconnect event [ 207.938663][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 207.982283][ T5835] usb 3-1: USB disconnect, device number 5 [ 208.155938][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 208.349177][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.883494][ T7435] loop3: detected capacity change from 0 to 1024 [ 208.924776][ T7435] EXT4-fs: Ignoring removed orlov option [ 208.977061][ T7435] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 209.884947][ T7458] netlink: 14 bytes leftover after parsing attributes in process `syz.2.430'. [ 210.178657][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 210.569354][ T7458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.612187][ T7458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.649530][ T7458] bond0 (unregistering): Released all slaves [ 211.089911][ T7480] syz_tun: entered allmulticast mode [ 211.141698][ T7478] syz_tun: left allmulticast mode [ 211.343619][ T7479] tipc: Started in network mode [ 211.360844][ T7479] tipc: Node identity ac14140f, cluster identity 4711 [ 211.406778][ T7479] tipc: New replicast peer: 255.255.255.32 [ 211.430425][ T7479] tipc: Enabled bearer , priority 10 [ 211.469582][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.439'. [ 211.486586][ T7482] tipc: Disabling bearer [ 212.487328][ T7505] loop6: detected capacity change from 0 to 1024 [ 212.521308][ T7505] EXT4-fs: Ignoring removed orlov option [ 212.569801][ T7505] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 213.535421][ T7517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.716129][ T60] bridge_slave_1: left allmulticast mode [ 214.050160][ T7521] netlink: 14 bytes leftover after parsing attributes in process `syz.2.451'. [ 214.884178][ T60] bridge_slave_1: left promiscuous mode [ 214.892573][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.925145][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.979250][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.987227][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.995592][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.003753][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.030968][ T7533] binder: 7530:7533 ioctl 4018620d 0 returned -22 [ 215.063338][ T7533] binder: 7530:7533 ioctl c0306201 200000000000 returned -22 [ 215.094412][ T60] bridge_slave_0: left allmulticast mode [ 215.150548][ T60] bridge_slave_0: left promiscuous mode [ 215.202536][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.053102][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.080558][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.091483][ T60] bond0 (unregistering): Released all slaves [ 217.058875][ T5836] Bluetooth: hci0: command tx timeout [ 217.378689][ T60] hsr_slave_0: left promiscuous mode [ 217.410177][ T60] hsr_slave_1: left promiscuous mode [ 217.416288][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.488694][ T5835] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 217.521205][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.573766][ T7607] netlink: 14 bytes leftover after parsing attributes in process `syz.0.474'. [ 217.900912][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.918127][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.932958][ T5835] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.943648][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.977578][ T5835] usb 2-1: config 0 descriptor?? [ 218.005874][ T5835] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 218.145585][ T60] team0 (unregistering): Port device team_slave_1 removed [ 218.172897][ T60] team0 (unregistering): Port device team_slave_0 removed [ 218.715818][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 218.715842][ T30] audit: type=1326 audit(1762473001.372:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.6.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2a58f6c9 code=0x7ffc0000 [ 218.745050][ T30] audit: type=1326 audit(1762473001.372:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.6.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2a58f6c9 code=0x7ffc0000 [ 218.809058][ T30] audit: type=1326 audit(1762473001.372:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.6.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba2a58f6c9 code=0x7ffc0000 [ 218.853057][ T30] audit: type=1326 audit(1762473001.372:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.6.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2a58f6c9 code=0x7ffc0000 [ 218.916158][ T30] audit: type=1326 audit(1762473001.372:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.6.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2a58f6c9 code=0x7ffc0000 [ 218.955046][ T30] audit: type=1326 audit(1762473001.372:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.6.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fba2a58f6c9 code=0x7ffc0000 [ 218.977707][ T30] audit: type=1326 audit(1762473001.372:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.6.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2a58f6c9 code=0x7ffc0000 [ 219.000999][ T30] audit: type=1326 audit(1762473001.372:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.6.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2a58f6c9 code=0x7ffc0000 [ 219.024704][ T30] audit: type=1326 audit(1762473001.372:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.6.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fba2a58f6c9 code=0x7ffc0000 [ 219.120100][ T30] audit: type=1326 audit(1762473001.372:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.6.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2a58f6c9 code=0x7ffc0000 [ 219.173005][ T5836] Bluetooth: hci0: command tx timeout [ 219.488373][ T7529] chnl_net:caif_netlink_parms(): no params data found [ 219.724748][ T5835] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 219.869487][ T5835] usb 1-1: device descriptor read/64, error -71 [ 220.065352][ T7529] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.098351][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.119528][ T7529] bridge_slave_0: entered allmulticast mode [ 220.127557][ T7529] bridge_slave_0: entered promiscuous mode [ 220.158068][ T7529] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.168651][ T5835] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 220.249497][ T5965] usb 2-1: USB disconnect, device number 10 [ 220.262099][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.294043][ T7529] bridge_slave_1: entered allmulticast mode [ 220.333972][ T7529] bridge_slave_1: entered promiscuous mode [ 220.388614][ T5835] usb 1-1: device descriptor read/64, error -71 [ 220.513343][ T5835] usb usb1-port1: attempt power cycle [ 220.592782][ T7529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.882347][ T7529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.928613][ T5835] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 220.973670][ T5835] usb 1-1: device descriptor read/8, error -71 [ 221.219177][ T5836] Bluetooth: hci0: command tx timeout [ 221.228772][ T5835] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 221.290188][ T5835] usb 1-1: device descriptor read/8, error -71 [ 221.355209][ T7529] team0: Port device team_slave_0 added [ 221.378885][ T7529] team0: Port device team_slave_1 added [ 221.568663][ T5835] usb usb1-port1: unable to enumerate USB device [ 221.581584][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 222.078382][ T7529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.096801][ T7529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.131957][ T7690] loop2: detected capacity change from 0 to 1024 [ 222.153759][ T7529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.166212][ T7690] EXT4-fs: Ignoring removed orlov option [ 222.196300][ T7690] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 222.232335][ T7529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.244626][ T7529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.350762][ T7529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.359033][ T5836] Bluetooth: hci0: command tx timeout [ 224.350375][ T7529] hsr_slave_0: entered promiscuous mode [ 224.379941][ T7529] hsr_slave_1: entered promiscuous mode [ 225.303070][ T7529] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 225.371000][ T7529] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 225.527627][ T7529] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 225.616880][ T7529] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 225.779624][ T7746] netlink: 14 bytes leftover after parsing attributes in process `syz.1.509'. [ 226.008743][ T5965] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 226.070321][ T7746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.105254][ T7746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.134898][ T7746] bond0 (unregistering): Released all slaves [ 226.158648][ T5965] usb 1-1: device descriptor read/64, error -71 [ 226.375808][ T7529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.445479][ T7763] overlayfs: failed to resolve './file0': -2 [ 226.467636][ T7529] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.500447][ T5965] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 226.522156][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.529520][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.566421][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.573676][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.662782][ T5965] usb 1-1: device descriptor read/64, error -71 [ 226.789976][ T5965] usb usb1-port1: attempt power cycle [ 227.211444][ T5965] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 227.295164][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 227.452138][ T5965] usb 1-1: device descriptor read/8, error -71 [ 228.234641][ T5965] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 228.687363][ T5965] usb 1-1: device descriptor read/8, error -71 [ 228.950760][ T5965] usb usb1-port1: unable to enumerate USB device [ 229.386384][ T7529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.423112][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 229.423138][ T30] audit: type=1326 audit(1762473012.082:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x7ffc0000 [ 229.569654][ T30] audit: type=1326 audit(1762473012.082:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x7ffc0000 [ 229.652889][ T7811] netlink: 14 bytes leftover after parsing attributes in process `syz.0.526'. [ 229.683300][ T30] audit: type=1326 audit(1762473012.082:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9bf38f6c9 code=0x7ffc0000 [ 229.732581][ T30] audit: type=1326 audit(1762473012.082:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x7ffc0000 [ 229.780947][ T5965] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 229.839962][ T30] audit: type=1326 audit(1762473012.082:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x7ffc0000 [ 229.923311][ T30] audit: type=1326 audit(1762473012.112:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc9bf38f6c9 code=0x7ffc0000 [ 229.981090][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.012515][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.045442][ T30] audit: type=1326 audit(1762473012.112:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x7ffc0000 [ 230.053163][ T5965] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 230.119781][ T30] audit: type=1326 audit(1762473012.112:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x7ffc0000 [ 230.142523][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.190726][ T5965] usb 3-1: config 0 descriptor?? [ 230.243062][ T30] audit: type=1326 audit(1762473012.112:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc9bf38f6c9 code=0x7ffc0000 [ 230.352864][ T30] audit: type=1326 audit(1762473012.112:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x7ffc0000 [ 230.633557][ T5965] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 230.666755][ T5965] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 230.752182][ T5965] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0004/input/input8 [ 231.015740][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 231.569440][ T5965] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 231.585793][ T7529] veth0_vlan: entered promiscuous mode [ 231.656238][ T7529] veth1_vlan: entered promiscuous mode [ 231.727545][ T5965] usb 3-1: USB disconnect, device number 6 [ 231.963532][ T7529] veth0_macvtap: entered promiscuous mode [ 231.976737][ T7849] fido_id[7849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 232.017939][ T7529] veth1_macvtap: entered promiscuous mode [ 232.337038][ T7529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.387273][ T7529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.485342][ T188] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.545544][ T188] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.604858][ T188] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.688354][ T188] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.225359][ T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.282718][ T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.688495][ T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.715477][ T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.624270][ T7916] loop0: detected capacity change from 0 to 1024 [ 234.647987][ T7916] EXT4-fs: Ignoring removed orlov option [ 234.718061][ T7916] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 236.571512][ T7941] netlink: 14 bytes leftover after parsing attributes in process `syz.3.558'. [ 237.570782][ T5965] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 237.769023][ T5965] usb 7-1: device descriptor read/64, error -71 [ 237.919722][ T7941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.975430][ T7941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.996467][ T7941] bond0 (unregistering): Released all slaves [ 238.009231][ T5965] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 238.149281][ T5965] usb 7-1: device descriptor read/64, error -71 [ 238.290388][ T5965] usb usb7-port1: attempt power cycle [ 238.630486][ T7968] loop7: detected capacity change from 0 to 1024 [ 238.683595][ T7968] EXT4-fs: Ignoring removed orlov option [ 238.722601][ T7968] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 238.731416][ T5965] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 239.022167][ T5965] usb 7-1: device descriptor read/8, error -71 [ 239.047476][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 239.047888][ T30] audit: type=1326 audit(1762473021.702:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 239.738655][ T5965] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 239.816321][ T30] audit: type=1326 audit(1762473021.702:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 239.838691][ T30] audit: type=1326 audit(1762473021.702:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 239.901906][ T5965] usb 7-1: device descriptor read/8, error -71 [ 239.911141][ T30] audit: type=1326 audit(1762473021.702:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 240.068661][ T30] audit: type=1326 audit(1762473021.702:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 240.254255][ T5965] usb usb7-port1: unable to enumerate USB device [ 240.263735][ T30] audit: type=1326 audit(1762473021.732:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 240.286051][ T30] audit: type=1326 audit(1762473021.732:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 241.241642][ T30] audit: type=1326 audit(1762473021.732:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 242.008259][ T7996] binder: 7995:7996 ioctl c0306201 200000000000 returned -22 [ 242.063415][ T30] audit: type=1326 audit(1762473021.732:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 242.086306][ T30] audit: type=1326 audit(1762473021.732:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 242.690097][ T8022] binder: BINDER_SET_CONTEXT_MGR already set [ 242.710554][ T8022] binder: 8020:8022 ioctl 4018620d 200000000040 returned -16 [ 242.908739][ T5906] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 243.218912][ T5906] usb 8-1: device descriptor read/64, error -71 [ 243.525325][ T5906] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 244.108692][ T5906] usb 8-1: device descriptor read/64, error -71 [ 244.230239][ T5906] usb usb8-port1: attempt power cycle [ 244.588888][ T5906] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 244.640161][ T5906] usb 8-1: device descriptor read/8, error -71 [ 244.938627][ T5906] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 245.000196][ T5906] usb 8-1: device descriptor read/8, error -71 [ 245.105795][ T6108] bridge_slave_1: left allmulticast mode [ 245.129353][ T6108] bridge_slave_1: left promiscuous mode [ 245.146235][ T5906] usb usb8-port1: unable to enumerate USB device [ 245.147622][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.193118][ T6108] bridge_slave_0: left allmulticast mode [ 245.201428][ T6108] bridge_slave_0: left promiscuous mode [ 245.213914][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.368034][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.386076][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.395329][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.408158][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.416178][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.970686][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.002650][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.017737][ T6108] bond0 (unregistering): Released all slaves [ 246.033782][ T8078] binder: 8076:8078 ioctl c0306201 200000000000 returned -22 [ 246.243455][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.252759][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.464637][ T8060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.493205][ T8060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.929776][ T6108] tipc: Left network mode [ 246.934856][ T188] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.460298][ T5836] Bluetooth: hci4: command tx timeout [ 247.709347][ T188] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.773630][ T188] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.828615][ T5906] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 247.932991][ T188] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.048623][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 248.071448][ T5906] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.101997][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 248.125397][ T5906] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 248.161528][ T5906] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 248.205153][ T5906] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 248.236741][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.094055][ T5906] hub 2-1:1.0: bad descriptor, ignoring hub [ 249.104382][ T5906] hub 2-1:1.0: probe with driver hub failed with error -5 [ 249.131809][ T5906] cdc_wdm 2-1:1.0: skipping garbage [ 249.137086][ T5906] cdc_wdm 2-1:1.0: skipping garbage [ 249.163767][ T5906] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 249.203092][ T5906] cdc_wdm 2-1:1.0: Unknown control protocol [ 249.239342][ T8121] binder: BINDER_SET_CONTEXT_MGR already set [ 249.284834][ T8121] binder: 8120:8121 ioctl 4018620d 200000000040 returned -16 [ 249.538681][ T5836] Bluetooth: hci4: command tx timeout [ 249.587045][ T6108] hsr_slave_0: left promiscuous mode [ 249.625404][ T5906] usb 2-1: USB disconnect, device number 11 [ 249.633086][ T6108] hsr_slave_1: left promiscuous mode [ 249.655499][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.690930][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.056899][ T5906] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 250.099296][ T8141] netlink: 14 bytes leftover after parsing attributes in process `syz.7.629'. [ 250.261727][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 250.276157][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 250.297393][ T5906] usb 2-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 250.323320][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.342472][ T5906] usb 2-1: Product: syz [ 250.356693][ T5906] usb 2-1: Manufacturer: syz [ 250.367042][ T5906] usb 2-1: SerialNumber: syz [ 250.384175][ T5906] usb 2-1: config 0 descriptor?? [ 250.841867][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.854027][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.887167][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.947554][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.972539][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.002081][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.035661][ T5906] snd_usb_podhd 2-1:0.0: Line 6 POD HDDESKTOP found [ 251.045425][ T5906] snd_usb_podhd 2-1:0.0: set_interface failed [ 251.057918][ T5906] snd_usb_podhd 2-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 251.074747][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 251.079171][ T5906] snd_usb_podhd 2-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 251.110358][ T5906] usb 2-1: USB disconnect, device number 12 [ 251.196168][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 251.618709][ T5836] Bluetooth: hci4: command tx timeout [ 251.797668][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 251.797696][ T30] audit: type=1326 audit(1762473034.452:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 251.888947][ T30] audit: type=1326 audit(1762473034.452:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 251.974777][ T30] audit: type=1326 audit(1762473034.452:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 252.036457][ T30] audit: type=1326 audit(1762473034.452:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 252.829951][ T30] audit: type=1326 audit(1762473034.452:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 252.852352][ T30] audit: type=1326 audit(1762473034.452:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 252.874889][ T30] audit: type=1326 audit(1762473034.452:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 252.897240][ T30] audit: type=1326 audit(1762473034.452:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 252.929196][ T30] audit: type=1326 audit(1762473034.452:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 252.983997][ T30] audit: type=1326 audit(1762473034.452:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 253.025432][ T8174] loop1: detected capacity change from 0 to 1024 [ 253.054799][ T8174] EXT4-fs: Ignoring removed orlov option [ 253.083958][ T8174] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 253.198744][ T8139] smc: net device bond0 applied user defined pnetid SYZ2 [ 253.778898][ T5836] Bluetooth: hci4: command tx timeout [ 254.054724][ T8141] smc: removing net device bond0 with user defined pnetid SYZ2 [ 254.109620][ T8141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.152136][ T8141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.199625][ T8141] bond0 (unregistering): Released all slaves [ 254.608597][ T5965] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 254.795763][ T8065] chnl_net:caif_netlink_parms(): no params data found [ 254.803384][ T5965] usb 1-1: Using ep0 maxpacket: 8 [ 254.811098][ T5965] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.824160][ T5965] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 255.093323][ T5965] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 255.105165][ T5965] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 255.117018][ T5965] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 255.126151][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.142633][ T5965] hub 1-1:1.0: bad descriptor, ignoring hub [ 256.154001][ T5965] hub 1-1:1.0: probe with driver hub failed with error -5 [ 256.389565][ T5965] cdc_wdm 1-1:1.0: skipping garbage [ 256.423208][ T5965] cdc_wdm 1-1:1.0: skipping garbage [ 256.468425][ T5965] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 256.505363][ T5965] cdc_wdm 1-1:1.0: Unknown control protocol [ 256.740457][ T5965] usb 1-1: USB disconnect, device number 13 [ 257.088615][ T5965] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 257.187677][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.204341][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.232874][ T8065] bridge_slave_0: entered allmulticast mode [ 257.260000][ T8065] bridge_slave_0: entered promiscuous mode [ 257.284509][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.295665][ T5965] usb 1-1: unable to get BOS descriptor or descriptor too short [ 257.315907][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.322277][ T5965] usb 1-1: config 0 interface 0 has no altsetting 0 [ 257.334036][ T5965] usb 1-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 257.336196][ T8065] bridge_slave_1: entered allmulticast mode [ 257.348653][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.358633][ T5965] usb 1-1: Product: syz [ 257.362801][ T5965] usb 1-1: Manufacturer: syz [ 257.367397][ T5965] usb 1-1: SerialNumber: syz [ 257.371028][ T8065] bridge_slave_1: entered promiscuous mode [ 257.401883][ T5965] usb 1-1: config 0 descriptor?? [ 257.419875][ T8236] binder: 8235:8236 ioctl c0306201 0 returned -14 [ 257.902788][ T8193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.939209][ T8193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.971588][ T8193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.020104][ T8193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.020793][ T8065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.086630][ T8193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.095224][ T8250] netlink: 14 bytes leftover after parsing attributes in process `syz.3.660'. [ 258.113744][ T8065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.130051][ T8193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.166837][ T5965] snd_usb_podhd 1-1:0.0: Line 6 POD HDDESKTOP found [ 258.190406][ T5965] snd_usb_podhd 1-1:0.0: set_interface failed [ 258.219279][ T5965] snd_usb_podhd 1-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 258.248934][ T5965] snd_usb_podhd 1-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 258.275610][ T5965] usb 1-1: USB disconnect, device number 14 [ 258.444405][ T8065] team0: Port device team_slave_0 added [ 258.487461][ T8065] team0: Port device team_slave_1 added [ 258.589021][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.605357][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.675534][ T8065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.740648][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.761452][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.814040][ T8065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.880810][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 258.880836][ T30] audit: type=1326 audit(1762473041.542:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 259.015707][ T30] audit: type=1326 audit(1762473041.542:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 259.098395][ T30] audit: type=1326 audit(1762473041.572:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 259.117397][ T8065] hsr_slave_0: entered promiscuous mode [ 259.159724][ T8065] hsr_slave_1: entered promiscuous mode [ 259.167236][ T30] audit: type=1326 audit(1762473041.572:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 259.181648][ T8065] debugfs: 'hsr0' already exists in 'hsr' [ 259.216331][ T8065] Cannot create hsr debugfs directory [ 259.270423][ T30] audit: type=1326 audit(1762473041.572:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 259.397934][ T30] audit: type=1326 audit(1762473041.572:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 259.503183][ T30] audit: type=1326 audit(1762473041.572:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 259.525572][ T30] audit: type=1326 audit(1762473041.572:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 259.547855][ T30] audit: type=1326 audit(1762473041.572:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 259.570346][ T30] audit: type=1326 audit(1762473041.572:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.3.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 261.130101][ T8065] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 261.315892][ T8065] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 261.339669][ T8065] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 261.517547][ T8065] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 261.549758][ T5835] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 261.707991][ T8337] netlink: 14 bytes leftover after parsing attributes in process `syz.3.683'. [ 261.719628][ T5835] usb 1-1: Using ep0 maxpacket: 8 [ 261.740303][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.765565][ T5835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 261.784897][ T5835] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 261.842022][ T5835] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 261.882389][ T5835] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 261.917791][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'. [ 261.923423][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.977502][ T8065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.023138][ T5835] hub 1-1:1.0: bad descriptor, ignoring hub [ 262.068956][ T5835] hub 1-1:1.0: probe with driver hub failed with error -5 [ 262.109363][ T5835] cdc_wdm 1-1:1.0: skipping garbage [ 262.117030][ T8065] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.135464][ T5835] cdc_wdm 1-1:1.0: skipping garbage [ 262.161334][ T5835] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 262.182999][ T6108] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.190190][ T6108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.197784][ T5835] cdc_wdm 1-1:1.0: Unknown control protocol [ 262.265973][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.273163][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.543964][ T5835] usb 1-1: USB disconnect, device number 15 [ 262.928909][ T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 263.112512][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 263.122033][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 263.606796][ T43] usb 1-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 263.618753][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.626771][ T43] usb 1-1: Product: syz [ 263.648568][ T43] usb 1-1: Manufacturer: syz [ 263.653176][ T43] usb 1-1: SerialNumber: syz [ 263.678507][ T43] usb 1-1: config 0 descriptor?? [ 264.188818][ T8065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.372225][ T8321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.449993][ T8321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.482134][ T8321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.530119][ T8321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.584833][ T8321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.626489][ T8321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.691907][ T43] snd_usb_podhd 1-1:0.0: Line 6 POD HDDESKTOP found [ 264.713869][ T43] snd_usb_podhd 1-1:0.0: set_interface failed [ 264.730385][ T43] snd_usb_podhd 1-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 264.749925][ T43] snd_usb_podhd 1-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 264.845418][ T43] usb 1-1: USB disconnect, device number 16 [ 265.225982][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.232857][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.428952][ T8065] veth0_vlan: entered promiscuous mode [ 265.505244][ T8065] veth1_vlan: entered promiscuous mode [ 265.656293][ T8065] veth0_macvtap: entered promiscuous mode [ 265.711044][ T8065] veth1_macvtap: entered promiscuous mode [ 265.812690][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.022387][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.117543][ T1154] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.168670][ T1154] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.261444][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.280828][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.490422][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.537034][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.737198][ T6108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.762369][ T6108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.876685][ T8443] binder: BINDER_SET_CONTEXT_MGR already set [ 266.883574][ T8443] binder: 8442:8443 ioctl 4018620d 200000000040 returned -16 [ 266.908601][ T5835] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 267.079383][ T5835] usb 8-1: Using ep0 maxpacket: 8 [ 267.087670][ T5835] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.108585][ T5835] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 267.117934][ T5835] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 267.135171][ T5835] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 267.167741][ T5835] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 267.181014][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.801193][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.8.597'. [ 267.840110][ T5835] hub 8-1:1.0: bad descriptor, ignoring hub [ 267.846037][ T5835] hub 8-1:1.0: probe with driver hub failed with error -5 [ 267.880455][ T5835] cdc_wdm 8-1:1.0: skipping garbage [ 267.946127][ T5835] cdc_wdm 8-1:1.0: skipping garbage [ 267.985723][ T5835] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 268.011166][ T5835] cdc_wdm 8-1:1.0: Unknown control protocol [ 268.607302][ T5835] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 268.644964][ T5835] usb 8-1: device reset changed ep0 maxpacket size! [ 268.661595][ T5835] usb 8-1: USB disconnect, device number 6 [ 269.822802][ T5835] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 273.616006][ T8534] netlink: 14 bytes leftover after parsing attributes in process `syz.1.729'. [ 273.758862][ T5913] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 274.000606][ T5913] usb 9-1: Using ep0 maxpacket: 8 [ 274.020137][ T5913] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.050784][ T5913] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 274.068677][ T5913] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 274.090893][ T5913] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 274.128622][ T5913] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 274.168339][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.234044][ T5913] hub 9-1:1.0: bad descriptor, ignoring hub [ 274.278657][ T5913] hub 9-1:1.0: probe with driver hub failed with error -5 [ 274.336128][ T5913] cdc_wdm 9-1:1.0: skipping garbage [ 275.157544][ T5913] cdc_wdm 9-1:1.0: skipping garbage [ 275.197720][ T5913] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 275.249032][ T5913] cdc_wdm 9-1:1.0: Unknown control protocol [ 275.518913][ T5913] usb 9-1: USB disconnect, device number 2 [ 276.618596][ T5913] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 276.780728][ T5934] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 276.781630][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'. [ 276.978409][ T5934] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 277.012219][ T5934] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 277.030893][ T5934] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.052347][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.101882][ T5934] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 277.139362][ T5934] usb 1-1: no configuration chosen from 1 choice [ 277.151065][ T8586] mmap: syz.3.745 (8586) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 277.202407][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 277.202429][ T30] audit: type=1326 audit(1762473059.862:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 277.299829][ T30] audit: type=1326 audit(1762473059.862:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 277.403171][ T30] audit: type=1326 audit(1762473059.862:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 277.462672][ T30] audit: type=1326 audit(1762473059.862:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 277.513966][ T30] audit: type=1326 audit(1762473059.872:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 277.581563][ T30] audit: type=1326 audit(1762473059.872:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 277.694234][ T8593] loop3: detected capacity change from 0 to 4096 [ 277.708725][ T30] audit: type=1326 audit(1762473059.872:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 277.821894][ T8593] EXT4-fs (loop3): Test dummy encryption mode enabled [ 277.836577][ T30] audit: type=1326 audit(1762473059.872:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 277.864596][ T8593] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 277.893812][ T8593] System zones: 0-5 [ 277.918992][ T30] audit: type=1326 audit(1762473059.872:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 277.942275][ T30] audit: type=1326 audit(1762473059.872:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56058f6c9 code=0x7ffc0000 [ 278.072176][ T8593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.259607][ T8593] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 279.226192][ T5913] usb 1-1: USB disconnect, device number 17 [ 279.349929][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.831735][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'. [ 279.989084][ T5913] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 280.145696][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 280.156320][ T5913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.188940][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 280.218915][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 280.277069][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 281.098597][ T5913] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 281.107678][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.188305][ T5913] hub 4-1:1.0: bad descriptor, ignoring hub [ 281.228051][ T5913] hub 4-1:1.0: probe with driver hub failed with error -5 [ 281.271744][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 281.288451][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 281.329942][ T5913] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 281.380965][ T5913] cdc_wdm 4-1:1.0: Unknown control protocol [ 282.004571][ T8628] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 282.055039][ T8628] usb 4-1: device reset changed ep0 maxpacket size! [ 282.065986][ T5913] usb 4-1: USB disconnect, device number 6 [ 282.288657][ T5913] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 282.481412][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short [ 282.496744][ T5913] usb 4-1: config 0 interface 0 has no altsetting 0 [ 282.540939][ T5913] usb 4-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 282.610075][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.340304][ T5913] usb 4-1: Product: syz [ 283.344505][ T5913] usb 4-1: Manufacturer: syz [ 283.358966][ T5913] usb 4-1: SerialNumber: syz [ 283.398893][ T5913] usb 4-1: config 0 descriptor?? [ 283.671262][ T5913] usb 4-1: can't set config #0, error -71 [ 283.684974][ T5913] usb 4-1: USB disconnect, device number 7 [ 284.111009][ T8675] loop0: detected capacity change from 0 to 512 [ 284.139144][ T8675] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 284.440667][ T8675] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 284.467005][ T8675] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 286.328731][ T5913] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 288.328804][ T8695] smc: net device bond0 applied user defined pnetid SYZ2 [ 288.430199][ T8696] netlink: 14 bytes leftover after parsing attributes in process `syz.8.770'. [ 289.412806][ T8696] smc: removing net device bond0 with user defined pnetid SYZ2 [ 289.442277][ T8696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.468169][ T8696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.481686][ T8696] bond0 (unregistering): Released all slaves [ 290.572084][ T8723] loop2: detected capacity change from 0 to 128 [ 290.603017][ T8723] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 290.666406][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 290.666430][ T30] audit: type=1326 audit(1762473073.302:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.8.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 290.709344][ T5913] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 290.725761][ T8723] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 290.791573][ T30] audit: type=1326 audit(1762473073.312:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.8.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 290.888853][ T5906] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 290.918709][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 290.936904][ T5913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.976985][ T30] audit: type=1326 audit(1762473073.332:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.8.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 291.004428][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 291.045852][ T8729] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.053660][ T8729] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.067054][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 291.083492][ T60] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 291.098684][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 291.111825][ T30] audit: type=1326 audit(1762473073.332:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.8.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 291.138992][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 291.164608][ T5913] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 291.178785][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.197971][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.214711][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.233208][ T30] audit: type=1326 audit(1762473073.332:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.8.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 291.277885][ T5906] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 291.299755][ T5913] hub 4-1:1.0: bad descriptor, ignoring hub [ 291.307002][ T5913] hub 4-1:1.0: probe with driver hub failed with error -5 [ 291.330300][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.344005][ T30] audit: type=1326 audit(1762473073.332:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.8.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 291.368355][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 291.379304][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 291.394265][ T5906] usb 1-1: config 0 descriptor?? [ 291.414802][ T5906] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 291.429204][ T5913] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 291.451714][ T30] audit: type=1326 audit(1762473073.332:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.8.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 291.512620][ T5913] cdc_wdm 4-1:1.0: Unknown control protocol [ 291.645168][ T30] audit: type=1326 audit(1762473073.332:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.8.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 291.668319][ T30] audit: type=1326 audit(1762473073.332:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.8.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 291.712409][ T30] audit: type=1326 audit(1762473073.332:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8727 comm="syz.8.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 291.893693][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 291.900445][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 291.906806][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 291.913409][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 291.920261][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 291.926861][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 291.933149][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 291.939750][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 291.946042][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 291.952653][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 291.958954][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 291.965554][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 291.971954][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 291.978553][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 291.984994][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 291.991597][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 291.998124][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 292.004725][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 292.011064][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 292.017663][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 292.025056][ T5934] usb 4-1: USB disconnect, device number 8 [ 292.030948][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 292.133466][ T8729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.179703][ T8729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.393962][ T8747] random: crng reseeded on system resumption [ 292.619740][ T5934] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 292.660331][ T13] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.691018][ T13] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.732089][ T13] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.762496][ T13] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.783065][ T5934] usb 4-1: unable to get BOS descriptor or descriptor too short [ 292.826834][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 292.857772][ T5934] usb 4-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 292.887860][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.919688][ T5934] usb 4-1: Product: syz [ 292.928339][ T5934] usb 4-1: Manufacturer: syz [ 292.938473][ T5934] usb 4-1: SerialNumber: syz [ 292.973847][ T5934] usb 4-1: config 0 descriptor?? [ 292.983265][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.8.785'. [ 293.415347][ T8764] loop2: detected capacity change from 0 to 1024 [ 293.446369][ T8764] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 293.512875][ T8764] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:482: comm syz.2.786: Invalid block bitmap block 0 in block_group 0 [ 293.535468][ T8764] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.786: Failed to acquire dquot type 0 [ 293.572338][ T8764] EXT4-fs error (device loop2): ext4_free_blocks:6705: comm syz.2.786: Freeing blocks not in datazone - block = 0, count = 4096 [ 293.609570][ T8764] EXT4-fs error (device loop2): ext4_read_inode_bitmap:138: comm syz.2.786: Invalid inode bitmap blk 0 in block_group 0 [ 293.624188][ T8764] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 293.637858][ T8764] EXT4-fs (loop2): 1 orphan inode deleted [ 293.661942][ T8764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.751473][ T13] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 293.941106][ T8718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.122250][ T8718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.200769][ T8718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.255109][ T8718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.307894][ T5906] usb 1-1: USB disconnect, device number 18 [ 294.342587][ T8718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.439177][ T8718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.828631][ T5906] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 294.889968][ T8774] netlink: 14 bytes leftover after parsing attributes in process `syz.1.789'. [ 295.030595][ T5906] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 295.065510][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 295.146932][ T5906] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.196107][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.239879][ T5906] usb 1-1: config 0 descriptor?? [ 295.280431][ T5906] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 295.321800][ T5934] snd_usb_podhd 4-1:0.0: Line 6 POD HDDESKTOP found [ 295.334677][ T5934] snd_usb_podhd 4-1:0.0: set_interface failed [ 295.341099][ T5934] snd_usb_podhd 4-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 295.349164][ T5934] snd_usb_podhd 4-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 295.360137][ T5934] usb 4-1: USB disconnect, device number 9 [ 295.990977][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.433339][ T5906] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 298.572618][ T43] usb 1-1: USB disconnect, device number 19 [ 298.580156][ T8813] loop1: detected capacity change from 0 to 512 [ 298.707879][ T8813] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.798: inode has both inline data and extents flags [ 298.759026][ T5906] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 298.787735][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 298.808564][ T5906] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 298.851618][ T8813] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.798: couldn't read orphan inode 15 (err -117) [ 298.863962][ T5906] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 298.868772][ T8821] loop2: detected capacity change from 0 to 512 [ 298.902047][ T8813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.918994][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.943228][ T8821] EXT4-fs: Mount option(s) incompatible with ext3 [ 299.009030][ T8807] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 299.025852][ T8807] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 299.638563][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 299.638591][ T30] audit: type=1326 audit(1762473082.032:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd7f8f6c9 code=0x7ffc0000 [ 300.093831][ T30] audit: type=1326 audit(1762473082.032:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cd7f8f6c9 code=0x7ffc0000 [ 301.037562][ T5906] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.065695][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.566316][ T5906] usb 4-1: USB disconnect, device number 10 [ 303.636237][ T8866] loop7: detected capacity change from 0 to 256 [ 303.661207][ T8866] exfat: Deprecated parameter 'utf8' [ 303.666592][ T8866] exfat: Deprecated parameter 'namecase' [ 303.728867][ T8866] exfat: Deprecated parameter 'utf8' [ 303.871341][ T8866] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 303.949772][ T5913] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 304.185830][ T5913] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 304.227292][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 304.896776][ T5913] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.081514][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.099410][ T5913] usb 3-1: config 0 descriptor?? [ 305.115885][ T5913] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 306.518886][ T5965] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 306.699776][ T5965] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 306.739425][ T5965] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 306.758752][ T5965] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 306.768167][ T5965] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.320877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 307.339336][ T8898] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 307.346562][ T8898] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 307.383354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 307.421816][ T5965] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 307.498306][ T5913] usb 3-1: USB disconnect, device number 7 [ 307.699641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 307.709700][ T5965] usb 8-1: USB disconnect, device number 9 [ 307.913042][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.368821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 308.468852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 309.088957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 309.289137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 309.350318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 309.429163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 309.632024][ T8933] loop0: detected capacity change from 0 to 4096 [ 309.741307][ T8933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.766150][ T8939] netlink: 14 bytes leftover after parsing attributes in process `syz.3.829'. [ 310.526916][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.896376][ T8959] wireguard0: entered promiscuous mode [ 310.937162][ T8959] wireguard0: entered allmulticast mode [ 311.996535][ T8971] loop3: detected capacity change from 0 to 1024 [ 312.013152][ T8971] EXT4-fs: Ignoring removed orlov option [ 312.035368][ T8971] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 313.336234][ T8990] netlink: 14 bytes leftover after parsing attributes in process `syz.1.844'. [ 313.923426][ T30] audit: type=1326 audit(1762473096.572:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x50000 [ 314.033382][ T30] audit: type=1326 audit(1762473096.582:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x50000 [ 314.056373][ T30] audit: type=1326 audit(1762473096.582:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x50000 [ 314.105058][ T30] audit: type=1326 audit(1762473096.582:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x50000 [ 314.156429][ T30] audit: type=1326 audit(1762473096.612:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x50000 [ 314.318364][ T30] audit: type=1326 audit(1762473096.612:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x50000 [ 314.395225][ T30] audit: type=1326 audit(1762473096.612:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x50000 [ 314.688393][ T30] audit: type=1326 audit(1762473096.612:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x50000 [ 314.713412][ T30] audit: type=1326 audit(1762473096.612:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x50000 [ 314.736145][ T30] audit: type=1326 audit(1762473096.612:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.0.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bf38f6c9 code=0x50000 [ 315.632451][ T9016] loop1: detected capacity change from 0 to 4096 [ 315.655370][ T9016] EXT4-fs: inline encryption not supported [ 315.711171][ T9016] EXT4-fs (loop1): Test dummy encryption mode enabled [ 315.738324][ T9016] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 315.769557][ T9016] System zones: 0-5 [ 315.791399][ T9016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.889015][ T9016] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 316.033853][ T9028] loop0: detected capacity change from 0 to 1024 [ 316.042310][ T9028] EXT4-fs: Ignoring removed orlov option [ 316.053001][ T9028] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 316.082450][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.395502][ T9030] loop2: detected capacity change from 0 to 512 [ 316.403557][ T9030] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 318.170910][ T9012] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 318.202127][ T9012] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 320.541405][ T9046] netlink: 14 bytes leftover after parsing attributes in process `syz.3.861'. [ 322.957151][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.7.871'. [ 323.050606][ T9082] ip6erspan0: entered allmulticast mode [ 325.586120][ T9101] loop7: detected capacity change from 0 to 512 [ 325.608725][ T9101] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 326.664879][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.671356][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.747765][ T9107] netlink: 14 bytes leftover after parsing attributes in process `syz.8.880'. [ 330.301208][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.883'. [ 330.779128][ T9138] tmpfs: Bad value for 'huge' [ 332.078724][ T975] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 332.213632][ T975] usb 8-1: device descriptor read/64, error -71 [ 332.488707][ T975] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 332.638685][ T975] usb 8-1: device descriptor read/64, error -71 [ 332.683606][ T9159] loop8: detected capacity change from 0 to 1024 [ 332.697241][ T9159] EXT4-fs: Ignoring removed orlov option [ 332.711793][ T9159] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 332.998329][ T975] usb usb8-port1: attempt power cycle [ 333.349133][ T975] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 333.805173][ T975] usb 8-1: device descriptor read/8, error -71 [ 334.059141][ T975] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 334.091287][ T9173] netlink: 14 bytes leftover after parsing attributes in process `syz.2.901'. [ 334.204166][ T975] usb 8-1: device descriptor read/8, error -71 [ 334.263072][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.8.902'. [ 334.323345][ T975] usb usb8-port1: unable to enumerate USB device [ 334.466368][ T9179] tmpfs: Bad value for 'huge' [ 336.056472][ T5965] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 336.250493][ T5965] usb 8-1: Using ep0 maxpacket: 32 [ 336.272837][ T5965] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 336.296855][ T5965] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 336.349624][ T5965] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 336.365955][ T5965] usb 8-1: Product: syz [ 336.372763][ T5965] usb 8-1: Manufacturer: syz [ 336.378014][ T5965] usb 8-1: SerialNumber: syz [ 336.429961][ T5965] usb 8-1: config 0 descriptor?? [ 336.439682][ T9192] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 336.573278][ T9200] netlink: 40 bytes leftover after parsing attributes in process `syz.0.911'. [ 336.631973][ T5965] hub 8-1:0.0: bad descriptor, ignoring hub [ 336.637923][ T5965] hub 8-1:0.0: probe with driver hub failed with error -5 [ 336.770865][ T9205] loop8: detected capacity change from 0 to 1024 [ 336.792589][ T9192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.814895][ T9205] EXT4-fs: Ignoring removed orlov option [ 336.836884][ T9205] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 336.855997][ T9192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.306603][ T9214] loop3: detected capacity change from 0 to 512 [ 337.333634][ T9214] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 337.902202][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.153546][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.344227][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.416709][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.725299][ T9221] loop1: detected capacity change from 0 to 256 [ 338.783496][ T9221] exfat: Deprecated parameter 'utf8' [ 338.858690][ T9221] exfat: Deprecated parameter 'namecase' [ 338.905939][ T9221] exfat: Deprecated parameter 'namecase' [ 338.972838][ T9221] exfat: Deprecated parameter 'utf8' [ 338.982952][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 339.226213][ T9221] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 340.431976][ T9228] loop8: detected capacity change from 0 to 256 [ 340.743903][ T5965] usb 8-1: USB disconnect, device number 14 [ 343.562507][ T9258] process 'syz.0.925' launched './file0' with NULL argv: empty string added [ 345.070188][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 345.070213][ T30] audit: type=1326 audit(1762473127.732:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.8.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 345.131801][ T30] audit: type=1326 audit(1762473127.762:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.8.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 345.218779][ T30] audit: type=1326 audit(1762473127.762:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.8.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 345.308653][ T30] audit: type=1326 audit(1762473127.762:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.8.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 345.476168][ T30] audit: type=1326 audit(1762473127.762:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.8.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 345.516924][ T30] audit: type=1326 audit(1762473127.762:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.8.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 345.597483][ T30] audit: type=1326 audit(1762473127.762:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.8.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 345.684457][ T30] audit: type=1326 audit(1762473127.772:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.8.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 345.769865][ T30] audit: type=1326 audit(1762473127.772:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.8.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 345.814295][ T9253] loop7: detected capacity change from 0 to 40427 [ 345.841420][ T9253] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 345.861449][ T9253] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 345.867424][ T30] audit: type=1326 audit(1762473127.772:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.8.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d618f6c9 code=0x7ffc0000 [ 346.211422][ T9253] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 346.305103][ T9253] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 346.358997][ T9253] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 346.671272][ T9298] loop2: detected capacity change from 0 to 256 [ 346.699624][ T9298] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 346.710703][ T9298] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 346.791060][ T9298] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 346.818508][ T9298] exFAT-fs (loop2): failed to load alloc-bitmap [ 346.824853][ T9298] exFAT-fs (loop2): failed to recognize exfat type [ 346.988323][ T9298] loop2: detected capacity change from 0 to 512 [ 347.013236][ T9298] ext4: Unknown parameter 'smackfsroot' [ 347.100158][ T9298] input: syz0 as /devices/virtual/input/input11 [ 347.795633][ T9302] loop1: detected capacity change from 0 to 1024 [ 347.855568][ T9302] EXT4-fs: Ignoring removed orlov option [ 348.423670][ T9302] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 349.946260][ T9305] loop8: detected capacity change from 0 to 1024 [ 350.887839][ T975] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 351.100764][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.150876][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.191047][ T975] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.258583][ T975] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 351.267646][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.322034][ T975] usb 4-1: config 0 descriptor?? [ 351.567247][ T9338] loop0: detected capacity change from 0 to 512 [ 351.581789][ T9338] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 351.619284][ T9338] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 351.642761][ T9338] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 351.699080][ T9338] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 351.709858][ T9343] tmpfs: Unknown parameter 'n' [ 351.732855][ T9338] EXT4-fs (loop0): 1 truncate cleaned up [ 351.753910][ T9338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.788657][ T978] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 351.792200][ T975] sony 0003:054C:0268.0005: unknown main item tag 0x0 [ 351.828901][ T975] sony 0003:054C:0268.0005: unknown main item tag 0x0 [ 351.838708][ T975] sony 0003:054C:0268.0005: unknown main item tag 0x0 [ 351.849238][ T975] sony 0003:054C:0268.0005: unknown main item tag 0x0 [ 351.856501][ T975] sony 0003:054C:0268.0005: unknown main item tag 0x0 [ 352.139170][ T9348] loop1: detected capacity change from 0 to 512 [ 352.156106][ T9348] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 352.225110][ T978] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 352.782892][ T978] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 352.836649][ T978] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.867157][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.906740][ T978] usb 3-1: config 0 descriptor?? [ 352.925928][ T975] sony 0003:054C:0268.0005: hiddev0,hidraw0: USB HID v88.07 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 352.946643][ T975] sony 0003:054C:0268.0005: failed to claim input [ 352.960186][ T978] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 352.967940][ T9348] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 353.008242][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.012972][ T975] usb 4-1: USB disconnect, device number 11 [ 353.062618][ T9348] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 353.156907][ T9352] fido_id[9352]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 354.173642][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.961'. [ 355.228499][ T9397] tmpfs: Unknown parameter 'nr_blo' [ 355.356840][ T9399] capability: warning: `syz.7.958' uses deprecated v2 capabilities in a way that may be insecure [ 355.552624][ T5965] usb 3-1: USB disconnect, device number 8 [ 357.334345][ T9420] netlink: 20 bytes leftover after parsing attributes in process `syz.8.978'. [ 358.097483][ T9420] syz.8.978 (9420) used greatest stack depth: 18424 bytes left [ 358.717340][ T9427] netlink: 96 bytes leftover after parsing attributes in process `syz.8.980'. [ 360.499032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 360.951039][ T9445] loop8: detected capacity change from 0 to 512 [ 361.298991][ T5965] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 361.829708][ T9445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.842337][ T9445] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.247689][ T8065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.455314][ T5965] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 363.466637][ T5965] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 363.480375][ T5965] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.489589][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.208153][ T9460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.989'. [ 364.259659][ T5965] usb 4-1: config 0 descriptor?? [ 364.267491][ T9462] tmpfs: Unknown parameter 'nr_blo' [ 364.296616][ T5965] usb 4-1: can't set config #0, error -71 [ 364.329628][ T9461] loop8: detected capacity change from 0 to 1024 [ 364.360106][ T5965] usb 4-1: USB disconnect, device number 12 [ 364.370903][ T9461] EXT4-fs: Ignoring removed orlov option [ 364.399442][ T9461] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 366.414210][ T9482] netlink: 14 bytes leftover after parsing attributes in process `syz.8.995'. [ 366.910587][ T9492] loop3: detected capacity change from 0 to 512 [ 366.925970][ T9492] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 368.038238][ T9497] loop8: detected capacity change from 0 to 512 [ 368.046302][ T9497] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 369.656665][ T9497] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 369.869739][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 371.038953][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 371.038977][ T30] audit: type=1326 audit(1762473153.672:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.7.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c958f6c9 code=0x7ffc0000 [ 371.126615][ T30] audit: type=1326 audit(1762473153.672:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.7.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c958f6c9 code=0x7ffc0000 [ 372.007535][ T30] audit: type=1326 audit(1762473153.682:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.7.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c958f6c9 code=0x7ffc0000 [ 372.057700][ T30] audit: type=1326 audit(1762473153.682:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.7.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c958f6c9 code=0x7ffc0000 [ 372.081757][ T30] audit: type=1326 audit(1762473153.682:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.7.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c958f6c9 code=0x7ffc0000 [ 372.163562][ T9503] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.171476][ T9503] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.190295][ T30] audit: type=1326 audit(1762473153.682:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.7.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c958f6c9 code=0x7ffc0000 [ 372.289705][ T30] audit: type=1326 audit(1762473153.682:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.7.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c958f6c9 code=0x7ffc0000 [ 372.460615][ T30] audit: type=1326 audit(1762473153.682:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.7.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c958f6c9 code=0x7ffc0000 [ 372.540672][ T30] audit: type=1326 audit(1762473153.682:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.7.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f29c958f6c9 code=0x7ffc0000 [ 372.614098][ T30] audit: type=1326 audit(1762473153.682:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.7.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c958f6c9 code=0x7ffc0000 [ 372.884847][ T9503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.942515][ T9503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.497918][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 374.046955][ T9528] loop7: detected capacity change from 0 to 16 [ 374.064581][ T9528] ======================================================= [ 374.064581][ T9528] WARNING: The mand mount option has been deprecated and [ 374.064581][ T9528] and is ignored by this kernel. Remove the mand [ 374.064581][ T9528] option from the mount to silence this warning. [ 374.064581][ T9528] ======================================================= [ 374.251849][ T9528] erofs (device loop7): mounted with root inode @ nid 36. [ 374.306550][ T9528] erofs (device loop7): readahead error at folio 2 @ nid 89 [ 374.326116][ T5852] erofs (device loop7): failed to decompress -5 in[4096, 0] out[4868] [ 374.386924][ T9528] erofs (device loop7): failed to decompress -5 in[4096, 0] out[4096] [ 374.395375][ T9528] erofs (device loop7): read error -117 @ 0 of nid 89 [ 376.611543][ T9538] loop0: detected capacity change from 0 to 256 [ 377.798601][ T188] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.807540][ T188] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.180332][ T9540] loop1: detected capacity change from 0 to 512 [ 378.234195][ T9540] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 378.355247][ T9540] EXT4-fs (loop1): 1 truncate cleaned up [ 378.383332][ T9540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.819136][ T188] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.943175][ T188] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.193440][ T9552] tipc: Started in network mode [ 379.221911][ T9552] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 379.241454][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 379.241476][ T30] audit: type=1326 audit(1762473161.842:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8118f6c9 code=0x7ffc0000 [ 379.285230][ T9555] loop7: detected capacity change from 0 to 1024 [ 379.308716][ T9552] tipc: Enabling of bearer rejected, failed to enable media [ 379.530667][ T9555] EXT4-fs: Ignoring removed orlov option [ 379.949923][ T9555] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 380.108005][ T30] audit: type=1326 audit(1762473161.862:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fad8118f6c9 code=0x7ffc0000 [ 380.148724][ T30] audit: type=1326 audit(1762473161.862:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8118f6c9 code=0x7ffc0000 [ 380.273833][ T30] audit: type=1326 audit(1762473161.862:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8118f6c9 code=0x7ffc0000 [ 380.678926][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1011'. [ 380.720008][ T9560] sit0: entered promiscuous mode [ 380.725540][ T9560] netlink: 'syz.2.1017': attribute type 1 has an invalid length. [ 380.745656][ T9560] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1017'. [ 380.990052][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 381.148790][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 381.161220][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.181226][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.221995][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 381.235969][ T43] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 381.245260][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.264525][ T43] usb 4-1: config 0 descriptor?? [ 382.205185][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 382.580366][ T9565] random: crng reseeded on system resumption [ 382.766878][ T9587] loop0: detected capacity change from 0 to 512 [ 383.025459][ T9587] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.1022: bg 0: block 393: padding at end of block bitmap is not set [ 383.049514][ T9587] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 383.069333][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.089205][ T9587] EXT4-fs (loop0): 2 truncates cleaned up [ 383.158299][ T9587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.097362][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 386.086030][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 386.111541][ T43] usb 4-1: USB disconnect, device number 13 [ 386.319715][ T9595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 387.412007][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.439473][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.446265][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.264282][ T9616] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1035'. [ 389.306101][ T9618] loop1: detected capacity change from 0 to 1024 [ 389.348010][ T9618] EXT4-fs: Ignoring removed orlov option [ 389.389814][ T9618] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 391.030651][ T9627] netlink: 9 bytes leftover after parsing attributes in process `syz.8.1037'. [ 391.916023][ T9627] gretap0: entered promiscuous mode [ 392.340357][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'. [ 393.998483][ T5913] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 395.245903][ T188] bridge_slave_1: left allmulticast mode [ 395.290373][ T188] bridge_slave_1: left promiscuous mode [ 395.333785][ T188] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.642006][ T188] bridge_slave_0: left allmulticast mode [ 396.339674][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 396.348487][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.359790][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.617643][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 396.628668][ T188] bridge_slave_0: left promiscuous mode [ 396.639860][ T188] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.700771][ T5913] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 396.796328][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.860349][ T9657] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 396.960188][ T5913] usb 2-1: config 0 descriptor?? [ 397.008433][ T5913] usb 2-1: can't set config #0, error -71 [ 397.201015][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.210213][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.218076][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.226787][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.261671][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.297303][ T5913] usb 2-1: USB disconnect, device number 13 [ 397.499964][ T9658] loop8: detected capacity change from 0 to 512 [ 397.541174][ T9658] vfat: Bad value for 'shortname' [ 397.615695][ T9672] loop7: detected capacity change from 0 to 4096 [ 397.661460][ T9672] EXT4-fs: Ignoring removed mblk_io_submit option [ 398.023553][ T9672] EXT4-fs (loop7): Test dummy encryption mode enabled [ 398.359565][ T9672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.812226][ T7529] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.360067][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'. [ 399.409670][ T5852] Bluetooth: hci5: command tx timeout [ 399.446572][ T9687] syzkaller0: entered promiscuous mode [ 399.616832][ T9694] loop7: detected capacity change from 0 to 1024 [ 399.664462][ T9687] syzkaller0: entered allmulticast mode [ 399.874716][ T9698] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1055'. [ 399.903379][ T9694] EXT4-fs: Ignoring removed orlov option [ 399.949168][ T9694] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 401.469977][ T5852] Bluetooth: hci5: command tx timeout [ 403.069265][ T9721] loop2: detected capacity change from 0 to 8192 [ 403.545360][ T5852] Bluetooth: hci5: command tx timeout [ 403.568086][ T7541] loop2: p1 p2 p4 < > [ 403.589523][ T7541] loop2: partition table partially beyond EOD, truncated [ 403.607442][ T7541] loop2: p1 start 16777216 is beyond EOD, truncated [ 403.634441][ T7541] loop2: p2 size 515840 extends beyond EOD, truncated [ 403.667528][ T7541] loop2: p4 start 16777216 is beyond EOD, truncated [ 404.977507][ T9730] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1061'. [ 405.501783][ T7541] udevd[7541]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 405.618615][ T5852] Bluetooth: hci5: command tx timeout [ 406.185312][ T9730] gretap0: entered promiscuous mode [ 406.525933][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 406.567020][ T188] hsr_slave_0: left promiscuous mode [ 406.599540][ T188] hsr_slave_1: left promiscuous mode [ 406.607917][ T188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.626038][ T188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.182841][ T9742] loop8: detected capacity change from 0 to 40427 [ 407.206540][ T9742] F2FS-fs (loop8): Image doesn't support compression [ 407.221686][ T9742] F2FS-fs (loop8): build fault injection rate: 684 [ 407.243124][ T9742] F2FS-fs (loop8): build fault injection type: 0x35f7 [ 407.259554][ T188] team0 (unregistering): Port device team_slave_1 removed [ 407.282551][ T9742] F2FS-fs (loop8): invalid crc value [ 407.335385][ T188] team0 (unregistering): Port device team_slave_0 removed [ 407.403158][ T9742] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 407.417233][ T9742] F2FS-fs (loop8): Start checkpoint disabled! [ 407.433697][ T9742] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 407.441633][ T9742] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 411.371914][ T9777] loop2: detected capacity change from 0 to 512 [ 411.379915][ T9777] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 411.862692][ T9777] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 411.883469][ T9777] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 412.411509][ T9785] netlink: 'syz.3.1073': attribute type 27 has an invalid length. [ 412.619265][ T9786] loop8: detected capacity change from 0 to 4096 [ 412.652494][ T9786] EXT4-fs (loop8): Test dummy encryption mode enabled [ 412.730481][ T9786] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 412.753064][ T9785] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.769088][ T9786] System zones: 0-5 [ 412.786966][ T9786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.255031][ T9785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.416168][ T8065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.436161][ T9660] chnl_net:caif_netlink_parms(): no params data found [ 414.838042][ T9806] serio: Serial port ptm1 [ 414.895789][ T9802] netlink: 'syz.2.1076': attribute type 12 has an invalid length. [ 415.183594][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.198012][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.205489][ T9660] bridge_slave_0: entered allmulticast mode [ 415.214887][ T9660] bridge_slave_0: entered promiscuous mode [ 415.238634][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.254078][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.261789][ T9660] bridge_slave_1: entered allmulticast mode [ 415.270464][ T9660] bridge_slave_1: entered promiscuous mode [ 415.472299][ T9660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.487593][ T9660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.581195][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 416.464471][ T9660] team0: Port device team_slave_0 added [ 416.477519][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'. [ 416.593472][ T9660] team0: Port device team_slave_1 added [ 416.781351][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.890433][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.412550][ T9660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.564217][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.571293][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.597752][ T9660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.035447][ T9660] hsr_slave_0: entered promiscuous mode [ 418.073147][ T9660] hsr_slave_1: entered promiscuous mode [ 418.083016][ T9660] debugfs: 'hsr0' already exists in 'hsr' [ 418.088819][ T9660] Cannot create hsr debugfs directory [ 418.616943][ T9865] loop3: detected capacity change from 0 to 512 [ 418.641926][ T9865] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 419.026386][ T9865] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 420.658097][ T9871] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.926011][ T9871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.951807][ T9879] random: crng reseeded on system resumption [ 420.974099][ T9879] Unrecognized hibernate image header format! [ 421.028714][ T5965] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 421.378704][ T5965] usb 4-1: Using ep0 maxpacket: 32 [ 421.950673][ T5965] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 421.973683][ T9879] PM: hibernation: Image mismatch: architecture specific data [ 422.984860][ T5965] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 423.008205][ T9881] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1093'. [ 423.243510][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 423.264230][ T5965] usb 4-1: Product: syz [ 423.268403][ T5965] usb 4-1: Manufacturer: syz [ 423.275222][ T5965] usb 4-1: SerialNumber: syz [ 423.296474][ T5965] usb 4-1: config 0 descriptor?? [ 423.309882][ T9875] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 423.352298][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'. [ 423.415976][ T9660] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 423.430233][ T9660] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 423.597126][ T5965] hub 4-1:0.0: bad descriptor, ignoring hub [ 423.603312][ T5965] hub 4-1:0.0: probe with driver hub failed with error -5 [ 423.641397][ T9875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.706013][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 424.404655][ T9875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.442525][ T9660] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 425.134041][ T9875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.343538][ T9875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.381515][ T9875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.424338][ T9875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.548303][ T9660] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 425.631139][ T978] usb 4-1: USB disconnect, device number 14 [ 425.642101][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1099'. [ 426.254730][ T9923] loop1: detected capacity change from 0 to 1024 [ 429.797008][ T9660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.818513][ T9660] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.046251][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.053430][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.136967][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.144141][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.036463][ T9948] loop2: detected capacity change from 0 to 512 [ 431.044073][ T9948] EXT4-fs: Ignoring removed mblk_io_submit option [ 431.098777][ T9948] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 431.108375][ T9948] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 434.721648][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 435.699814][ T30] audit: type=1326 audit(1762473218.332:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8118f6c9 code=0x7ffc0000 [ 435.768877][ T30] audit: type=1326 audit(1762473218.332:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8118f6c9 code=0x7ffc0000 [ 435.862863][ T30] audit: type=1326 audit(1762473218.342:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad8118f6c9 code=0x7ffc0000 [ 435.971585][ T9660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.995952][ T30] audit: type=1326 audit(1762473218.342:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8118f6c9 code=0x7ffc0000 [ 436.048113][ T30] audit: type=1326 audit(1762473218.342:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8118f6c9 code=0x7ffc0000 [ 436.415747][ T9979] block device autoloading is deprecated and will be removed. [ 436.802253][ T30] audit: type=1326 audit(1762473218.342:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad8118f6c9 code=0x7ffc0000 [ 436.895776][ T30] audit: type=1326 audit(1762473218.342:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8118f6c9 code=0x7ffc0000 [ 437.012120][ T30] audit: type=1326 audit(1762473218.342:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8118f6c9 code=0x7ffc0000 [ 437.096455][ T30] audit: type=1326 audit(1762473218.352:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad8118f6c9 code=0x7ffc0000 [ 437.179138][ T30] audit: type=1326 audit(1762473218.352:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8118f6c9 code=0x7ffc0000 [ 437.673017][ T9994] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1116'. [ 437.972362][ T9660] veth0_vlan: entered promiscuous mode [ 438.039714][ T9660] veth1_vlan: entered promiscuous mode [ 438.190256][ T9660] veth0_macvtap: entered promiscuous mode [ 438.227985][ T9660] veth1_macvtap: entered promiscuous mode [ 438.351330][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 439.066150][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.078888][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.139167][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.147927][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.209308][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.228757][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.468796][ T6108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.477358][ T6108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.567191][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.600755][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.256464][T10015] tipc: Started in network mode [ 440.266630][T10015] tipc: Node identity ac14140f, cluster identity 4711 [ 440.428814][T10015] tipc: New replicast peer: 255.255.255.32 [ 440.449105][T10015] tipc: Enabled bearer , priority 10 [ 440.649472][T10018] loop9: detected capacity change from 0 to 1024 [ 440.665431][T10018] EXT4-fs: inline encryption not supported [ 440.672425][T10018] EXT4-fs: Ignoring removed bh option [ 440.895467][T10018] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.912260][T10018] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.960993][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'. [ 441.139322][T10025] netlink: 'syz.3.1123': attribute type 27 has an invalid length. [ 441.351601][T10027] loop8: detected capacity change from 0 to 512 [ 441.495776][T10027] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.1124: inode has both inline data and extents flags [ 441.527458][T10027] EXT4-fs error (device loop8): ext4_orphan_get:1395: comm syz.8.1124: couldn't read orphan inode 15 (err -117) [ 441.567004][ T9997] tipc: Node number set to 2886997007 [ 441.877582][T10027] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.551468][T10049] loop9: detected capacity change from 0 to 1024 [ 445.576698][T10054] loop7: detected capacity change from 0 to 16 [ 445.588607][T10054] erofs: Unknown parameter '' [ 445.640391][T10054] x_tables: duplicate underflow at hook 3 [ 445.662861][ T5945] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 445.951868][ T5945] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 445.980460][ T5945] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 445.991864][ T5945] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 446.010721][ T5945] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.058178][ T5945] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 446.069927][T10030] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.076910][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.096763][T10050] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 446.115286][T10030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 446.141446][ T5945] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 446.153047][ T5945] usb 2-1: invalid MIDI out EP 0 [ 446.173049][T10054] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 446.177511][ T8065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.182581][T10054] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 446.201235][T10054] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 447.284337][T10079] loop9: detected capacity change from 0 to 512 [ 447.312696][T10079] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 448.069350][T10079] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 448.332937][ T5945] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 448.447153][ T5945] usb 2-1: USB disconnect, device number 14 [ 450.014566][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.028642][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.085691][ T6273] udevd[6273]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.906458][T10101] loop9: detected capacity change from 0 to 16 [ 450.920557][T10101] erofs: Unknown parameter '4' [ 451.725328][T10105] loop3: detected capacity change from 0 to 512 [ 451.789848][T10105] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1143: inode has both inline data and extents flags [ 451.875280][T10105] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.1143: couldn't read orphan inode 15 (err -117) [ 451.925361][T10111] loop9: detected capacity change from 0 to 7 [ 451.961682][T10105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.999873][T10111] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.043831][T10111] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.085428][T10111] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.158968][T10111] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.184127][T10112] syz.3.1143 (pid 10112) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 452.203800][T10111] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.244969][T10111] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.267507][T10112] overlayfs: failed to resolve './file0/file1': -2 [ 452.297348][T10111] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.355730][T10111] ldm_validate_partition_table(): Disk read failed. [ 452.362819][T10111] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.396019][T10111] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.436822][T10111] Buffer I/O error on dev loop9, logical block 0, async page read [ 453.315456][T10111] Dev loop9: unable to read RDB block 0 [ 453.450678][T10111] loop9: unable to read partition table [ 453.559591][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.579141][T10111] loop9: partition table beyond EOD, truncated [ 453.614957][T10111] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 453.614957][T10111] ) failed (rc=-5) [ 454.298161][T10123] loop1: detected capacity change from 0 to 1024 [ 454.978903][ T9997] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 455.088429][ T5965] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 455.156265][ T9997] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.188481][ T9997] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.213810][ T9997] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 455.260618][ T9997] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.296627][ T5965] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 455.328152][ T9997] usb 10-1: config 0 descriptor?? [ 455.343711][ T5965] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 455.425415][ T5965] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 455.517470][ T5965] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.578474][ T5965] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 455.631731][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.712253][T10129] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 455.755012][ T5965] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.801181][ T9997] usbhid 10-1:0.0: can't add hid device: -71 [ 455.849736][ T9997] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 455.863478][ T5965] usb 3-1: invalid MIDI out EP 0 [ 455.980115][ T9997] usb 10-1: USB disconnect, device number 2 [ 456.647399][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.690476][ T5965] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 457.180299][ T5965] usb 3-1: USB disconnect, device number 9 [ 458.054779][T10174] loop2: detected capacity change from 0 to 256 [ 458.937859][T10178] tmpfs: Bad value for 'nr_blocks' [ 462.068701][ T9997] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 462.089188][T10202] loop7: detected capacity change from 0 to 1024 [ 462.105267][T10202] EXT4-fs: Ignoring removed orlov option [ 462.164672][T10202] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 462.258877][ T9997] usb 4-1: Using ep0 maxpacket: 32 [ 462.271353][ T9997] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 462.343080][ T9997] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 462.391803][ T9997] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 462.468590][ T9997] usb 4-1: Product: syz [ 462.472776][ T9997] usb 4-1: Manufacturer: syz [ 462.553216][ T9997] usb 4-1: SerialNumber: syz [ 462.818764][ T975] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 463.020571][T10214] loop2: detected capacity change from 0 to 512 [ 463.135501][T10214] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1170: iget: bad i_size value: 38620345925642 [ 463.160237][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.192055][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.208860][T10214] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.1170: couldn't read orphan inode 15 (err -117) [ 463.230179][ T975] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 463.257629][T10214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.279764][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.332411][ T9997] usb 4-1: config 0 descriptor?? [ 463.349115][T10193] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 463.355548][ T975] usb 2-1: config 0 descriptor?? [ 463.357792][ T9997] hub 4-1:0.0: bad descriptor, ignoring hub [ 463.383205][ T9997] hub 4-1:0.0: probe with driver hub failed with error -5 [ 463.591129][T10193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.710422][T10193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.552459][ T975] usbhid 2-1:0.0: can't add hid device: -71 [ 464.584831][ T975] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 464.595263][T10229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.611081][T10229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.671739][ T975] usb 2-1: USB disconnect, device number 15 [ 464.708762][T10229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.756969][T10229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.899441][ C0] ------------[ cut here ]------------ [ 464.905167][ C0] ODEBUG: free active (active state 0) object: ffff888052a80090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 464.919145][ C0] WARNING: CPU: 0 PID: 5193 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 464.928661][ C0] Modules linked in: [ 464.932708][ C0] CPU: 0 UID: 0 PID: 5193 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 464.941601][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 464.951691][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 464.957521][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 87 f0 8b 4c 89 e6 48 c7 c7 a0 7b f0 8b e8 6f a9 d0 fc 90 <0f> 0b 90 90 58 83 05 56 f0 d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 464.977172][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010282 [ 464.983289][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b2ee8 [ 464.991327][ C0] RDX: ffff88807d1d8000 RSI: ffffffff817b2ef5 RDI: 0000000000000001 [ 464.999341][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 465.007412][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf08240 [ 465.015423][ C0] R13: ffffffff8b9021a0 R14: ffffffff8a4bba80 R15: ffffc90000007b18 [ 465.023431][ C0] FS: 00007faca6f85880(0000) GS:ffff888124a07000(0000) knlGS:0000000000000000 [ 465.032400][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.039019][ C0] CR2: 00007f747bdb6358 CR3: 000000002f8ec000 CR4: 0000000000350ef0 [ 465.047001][ C0] Call Trace: [ 465.050304][ C0] [ 465.053155][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 465.058862][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 465.064701][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.065550][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.070383][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 465.070464][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 465.070544][ C0] kfree+0x291/0x6d0 [ 465.070589][ C0] ? rose_timer_expiry+0x53f/0x630 [ 465.100123][ C0] ? rose_timer_expiry+0x53f/0x630 [ 465.105251][ C0] rose_timer_expiry+0x53f/0x630 [ 465.110255][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 465.115737][ C0] call_timer_fn+0x19a/0x620 [ 465.120398][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 465.125550][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.131249][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.136917][ C0] ? mark_held_locks+0x49/0x80 [ 465.142290][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 465.147778][ C0] __run_timers+0x6ef/0x960 [ 465.152365][ C0] ? __pfx___run_timers+0x10/0x10 [ 465.157445][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.163158][ C0] run_timer_base+0x114/0x190 [ 465.167854][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 465.173125][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.178838][ C0] run_timer_softirq+0x1a/0x40 [ 465.183623][ C0] handle_softirqs+0x219/0x8e0 [ 465.188429][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 465.193771][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.199464][ C0] __irq_exit_rcu+0x109/0x170 [ 465.204174][ C0] irq_exit_rcu+0x9/0x30 [ 465.208444][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 465.214134][ C0] [ 465.217068][ C0] [ 465.220028][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 465.226039][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 465.231286][ C0] Code: b4 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 12 68 e9 0e 0f 82 74 02 00 00 8b 35 6a 98 e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 b4 08 12 0f 85 c7 02 00 00 48 83 c4 [ 465.250948][ C0] RSP: 0018:ffffc90003fafb00 EFLAGS: 00000206 [ 465.257035][ C0] RAX: 0000000000000046 RBX: ffff888148e900d0 RCX: ffffffff93a874a0 [ 465.265044][ C0] RDX: 0000000000000000 RSI: ffffffff8da04a53 RDI: ffffffff8bf07640 [ 465.273055][ C0] RBP: 0000000000000000 R08: 2aa30fc714a0b5f6 R09: 0000000000000000 [ 465.281060][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 465.289067][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.297082][ C0] ? __pfx___might_resched+0x10/0x10 [ 465.302429][ C0] _raw_spin_lock+0x2e/0x40 [ 465.306955][ C0] ? dput.part.0+0x766/0x9b0 [ 465.311597][ C0] dput.part.0+0x766/0x9b0 [ 465.316039][ C0] dput+0x1f/0x30 [ 465.319717][ C0] terminate_walk+0x489/0x680 [ 465.324431][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.330124][ C0] path_lookupat+0x18b/0x6d0 [ 465.334764][ C0] filename_lookup+0x224/0x5f0 [ 465.339603][ C0] ? __pfx_filename_lookup+0x10/0x10 [ 465.344975][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.350660][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 465.356073][ C0] do_readlinkat+0xce/0x3a0 [ 465.360628][ C0] ? __pfx_do_readlinkat+0x10/0x10 [ 465.365763][ C0] ? __pfx_ksys_read+0x10/0x10 [ 465.370601][ C0] __x64_sys_readlink+0x78/0xc0 [ 465.375485][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.380743][ C0] do_syscall_64+0xcd/0xfa0 [ 465.385287][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.391228][ C0] RIP: 0033:0x7faca69153a7 [ 465.395660][ C0] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 465.415318][ C0] RSP: 002b:00007ffdfead2ed8 EFLAGS: 00000202 ORIG_RAX: 0000000000000059 [ 465.423799][ C0] RAX: ffffffffffffffda RBX: 00007ffdfead3720 RCX: 00007faca69153a7 [ 465.431812][ C0] RDX: 0000000000000400 RSI: 00007ffdfead32e0 RDI: 00007ffdfead2ee0 [ 465.439829][ C0] RBP: 0000000000000200 R08: 000055ae74a0ac29 R09: 0000000000000000 [ 465.447811][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdfead2ee0 [ 465.455833][ C0] R13: 00007ffdfead32e0 R14: 0000000000000001 R15: 00007ffdfead3b50 [ 465.463871][ C0] [ 465.466913][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 465.474198][ C0] CPU: 0 UID: 0 PID: 5193 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 465.483067][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 465.493133][ C0] Call Trace: [ 465.496416][ C0] [ 465.499263][ C0] dump_stack_lvl+0x3d/0x1f0 [ 465.503885][ C0] vpanic+0x640/0x6f0 [ 465.507922][ C0] ? debug_print_object+0x1a2/0x2b0 [ 465.513144][ C0] panic+0xca/0xd0 [ 465.516917][ C0] ? __pfx_panic+0x10/0x10 [ 465.521389][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 465.526546][ C0] check_panic_on_warn+0xab/0xb0 [ 465.531533][ C0] __warn+0xf6/0x3c0 [ 465.535443][ C0] ? debug_print_object+0x1a2/0x2b0 [ 465.540669][ C0] report_bug+0x3c3/0x580 [ 465.545026][ C0] ? debug_print_object+0x1a2/0x2b0 [ 465.550257][ C0] handle_bug+0x184/0x210 [ 465.554626][ C0] exc_invalid_op+0x17/0x50 [ 465.559175][ C0] asm_exc_invalid_op+0x1a/0x20 [ 465.564051][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 465.569883][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 87 f0 8b 4c 89 e6 48 c7 c7 a0 7b f0 8b e8 6f a9 d0 fc 90 <0f> 0b 90 90 58 83 05 56 f0 d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 465.589514][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010282 [ 465.595592][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b2ee8 [ 465.603556][ C0] RDX: ffff88807d1d8000 RSI: ffffffff817b2ef5 RDI: 0000000000000001 [ 465.611520][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 465.619488][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf08240 [ 465.627464][ C0] R13: ffffffff8b9021a0 R14: ffffffff8a4bba80 R15: ffffc90000007b18 [ 465.635440][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 465.641092][ C0] ? __warn_printk+0x198/0x350 [ 465.645869][ C0] ? __warn_printk+0x1a5/0x350 [ 465.650656][ C0] ? debug_print_object+0x1a1/0x2b0 [ 465.655878][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 465.661531][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 465.667363][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.673016][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 465.678592][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 465.684708][ C0] kfree+0x291/0x6d0 [ 465.688614][ C0] ? rose_timer_expiry+0x53f/0x630 [ 465.693738][ C0] ? rose_timer_expiry+0x53f/0x630 [ 465.698860][ C0] rose_timer_expiry+0x53f/0x630 [ 465.703817][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 465.709284][ C0] call_timer_fn+0x19a/0x620 [ 465.713909][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 465.719044][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.724700][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.730343][ C0] ? mark_held_locks+0x49/0x80 [ 465.735134][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 465.740601][ C0] __run_timers+0x6ef/0x960 [ 465.745146][ C0] ? __pfx___run_timers+0x10/0x10 [ 465.750202][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.755867][ C0] run_timer_base+0x114/0x190 [ 465.760550][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 465.765777][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.771430][ C0] run_timer_softirq+0x1a/0x40 [ 465.776196][ C0] handle_softirqs+0x219/0x8e0 [ 465.780982][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 465.786286][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.791935][ C0] __irq_exit_rcu+0x109/0x170 [ 465.796636][ C0] irq_exit_rcu+0x9/0x30 [ 465.800891][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 465.806542][ C0] [ 465.809465][ C0] [ 465.812388][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 465.818372][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 465.823575][ C0] Code: b4 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 12 68 e9 0e 0f 82 74 02 00 00 8b 35 6a 98 e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 b4 08 12 0f 85 c7 02 00 00 48 83 c4 [ 465.843186][ C0] RSP: 0018:ffffc90003fafb00 EFLAGS: 00000206 [ 465.849342][ C0] RAX: 0000000000000046 RBX: ffff888148e900d0 RCX: ffffffff93a874a0 [ 465.857313][ C0] RDX: 0000000000000000 RSI: ffffffff8da04a53 RDI: ffffffff8bf07640 [ 465.865280][ C0] RBP: 0000000000000000 R08: 2aa30fc714a0b5f6 R09: 0000000000000000 [ 465.873429][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 465.881397][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.889391][ C0] ? __pfx___might_resched+0x10/0x10 [ 465.894698][ C0] _raw_spin_lock+0x2e/0x40 [ 465.899206][ C0] ? dput.part.0+0x766/0x9b0 [ 465.903814][ C0] dput.part.0+0x766/0x9b0 [ 465.908241][ C0] dput+0x1f/0x30 [ 465.911884][ C0] terminate_walk+0x489/0x680 [ 465.916581][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.922229][ C0] path_lookupat+0x18b/0x6d0 [ 465.926847][ C0] filename_lookup+0x224/0x5f0 [ 465.931639][ C0] ? __pfx_filename_lookup+0x10/0x10 [ 465.936987][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.942628][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 465.948022][ C0] do_readlinkat+0xce/0x3a0 [ 465.952534][ C0] ? __pfx_do_readlinkat+0x10/0x10 [ 465.957650][ C0] ? __pfx_ksys_read+0x10/0x10 [ 465.962443][ C0] __x64_sys_readlink+0x78/0xc0 [ 465.967305][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.972514][ C0] do_syscall_64+0xcd/0xfa0 [ 465.977033][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.982929][ C0] RIP: 0033:0x7faca69153a7 [ 465.987343][ C0] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 466.006954][ C0] RSP: 002b:00007ffdfead2ed8 EFLAGS: 00000202 ORIG_RAX: 0000000000000059 [ 466.015374][ C0] RAX: ffffffffffffffda RBX: 00007ffdfead3720 RCX: 00007faca69153a7 [ 466.023347][ C0] RDX: 0000000000000400 RSI: 00007ffdfead32e0 RDI: 00007ffdfead2ee0 [ 466.031317][ C0] RBP: 0000000000000200 R08: 000055ae74a0ac29 R09: 0000000000000000 [ 466.039290][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdfead2ee0 [ 466.047259][ C0] R13: 00007ffdfead32e0 R14: 0000000000000001 R15: 00007ffdfead3b50 [ 466.055253][ C0] [ 466.058502][ C0] Kernel Offset: disabled [ 466.062856][ C0] Rebooting in 86400 seconds..