last executing test programs: 5m58.512376325s ago: executing program 3 (id=51): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000840), 0x840000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 5m57.838811553s ago: executing program 3 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0xfffffffffffffcb8, 0x1, 0x0) fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) 5m55.983447605s ago: executing program 3 (id=56): r0 = eventfd2(0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x86b9b000) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{0x0}, {&(0x7f00000060c0)=""/37, 0x25}], 0x2, 0x8, 0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) r4 = syz_io_uring_setup(0x3e41, &(0x7f0000000080)={0x0, 0x2000d2e4, 0x10000, 0x6, 0x308}, &(0x7f0000000140), &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x12, 0x7, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x4, &(0x7f0000000400)=0x0) io_pgetevents(r7, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 5m39.517978467s ago: executing program 32 (id=56): r0 = eventfd2(0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x86b9b000) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{0x0}, {&(0x7f00000060c0)=""/37, 0x25}], 0x2, 0x8, 0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) r4 = syz_io_uring_setup(0x3e41, &(0x7f0000000080)={0x0, 0x2000d2e4, 0x10000, 0x6, 0x308}, &(0x7f0000000140), &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x12, 0x7, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x4, &(0x7f0000000400)=0x0) io_pgetevents(r7, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 3m31.391685499s ago: executing program 5 (id=403): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r2) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, r2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000040), 0x0) 3m23.697588622s ago: executing program 5 (id=421): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x3, 0x3, 0x0, 0x1}, {0x35, 0x39}, {0xfffffe00, 0xffffff80}, {0x800000, 0x800000}, {0xffff}, {0x1ff}, {0x1, 0x1000}, {}, {0x0, 0x5}, {}, {}, {0x0, 0xe48b}], 0xc}) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x48083) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x1, 0xfffffffffffffff7, 0x2, 0xfffffffffffffffe, 0x9, 0x3, 0xc193, 0x9}, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x4, 0x0, &(0x7f0000fd7ff0), 0x0, 0x0) 3m22.332323687s ago: executing program 5 (id=425): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xc5) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 3m20.458108927s ago: executing program 5 (id=429): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nobh}, {@nodiscard}]}, 0x3, 0x45c, &(0x7f0000000940)="$eJzs281vFGUYAPBnZtsCArYifvChVtHY+NFSQOXgQY0mHjAx0YMem7YQZKGG1kQIUTAGT8aYeDce/Rc86cUYTyZe9W5IiOECeFozuzN0d9ld6LLbLezvlwy873z0fZ6deXffmXc3gKE1mf2TRGyLiL8iYrxWbdxhsvbftSvn5q9fOTefRKXy3r9Jdb+rV87NF7sWx23NK1NpRPplEntatLt85uyJuXJ58XRen1k5+fHM8pmzLx4/OXds8djiqQOHDx86OPvKywde6kmeWUxXd3+2tHfX2x9++86Rr7N1aZF/Ux49Mtlp4zOVSo+bG6ztdeVkZICBsCaliMhO12i1/49HKVZP3ni89cVAgwP6qlKpVLa233y+AtzDkmis6/IwLIoP+uz+t1iaBwGv9W/4MXCXX6/dAGV5X8uX2paR6vOByO+Ntvep/cmI+OD8f99nS/TnOQQAQIOfs/HPC63Gf2k8XLff/fnc0EREPBAROyLiwYjYGREPRVT3fSQiHl1j+82TJDePf9JLXSV2m7Lx36v53Fbj+K8Y/cVEKa9tr+Y/mhw9Xl7cn78mUzG6KavPdmjjlzf//KbdtvrxX7Zk7RdjwTyOSyObGo9ZmFuZu5Oc612+ELF7pFX+yY2ZgCQidkXE7i7bOP7cj3vbbbt1/h30YJ6p8kPEs7Xzfz6a8i8knecnZzZHeXH/THFV3Oz3Py6+2679O8q/B7Lzf1/L6/9G/hNJ/Xzt8trbuPj3V23vabq9/seS96vlsXzdp3MrK6dnI8aSI7Wg69cfWD22qBf7Z/lP7Wvd/3fE6iuxJyKyi/ixiHg8Ip7IY38yIp6KiH0d8v/tjac/6j7//sryX1jT+V8tjEXzmtaF0olff2podOKm/K93Pv+HqqWpfM3tvP/dTlzdXc0AAABw90kjYlsk6fSNcppOT9e+L78zIi0vLa88f3Tpk1MLtd8ITESkxZOu8brnobP5bX2tfiEial8tKLYfzJ8bf1faUq1Pzy+VFwadPAy5rW36f+af0qCjA/rO77VgeOn/MLxu1f8/X6c4gPXn8x+GV4v+v2UQcQDrbVPLz39jfhgOTf3ftB8Mkab+v3lQcQDrr/vnf2M9jQNYf57/w1Ba3hK3/pF8x0Lxl7o8/J4txOiGCKNvhUg3RBgbtjB6l/eLwb0nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9NL/AQAA//8kV94B") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000002c0)='\x00', 0x1, 0x600}]) 3m17.600921346s ago: executing program 5 (id=434): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x35, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x22, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "9b5bb5c2"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m16.991606507s ago: executing program 5 (id=435): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) 3m16.333654305s ago: executing program 33 (id=435): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) 2m52.033897268s ago: executing program 4 (id=505): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x0, 0x6, 0x900066}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="12043600d3fc03fc01004788031c0910", 0x10, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m51.80842484s ago: executing program 4 (id=509): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000700000004000000000000130200000000002e2e2e5f00"], 0x0, 0x2b, 0x0, 0x100001, 0x8000}, 0x28) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x40010000) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x800) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, 0x0) 2m47.242841799s ago: executing program 4 (id=517): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup2(r0, r1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2m46.776788518s ago: executing program 4 (id=522): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x100) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000500)=0x1) sendfile(r0, r0, 0x0, 0xe0000000) 2m45.867361085s ago: executing program 4 (id=527): syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000001540)='./file0\x00', 0x2000c04c, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="eb36f7e7e39de8d6f7ea6e10662b4d973467c37027cd16259fd552e6f36bf4c3bada8bdc52d2cee2b34d986a0334e668c0d453c8b5fe08fd0e487d6e637487c43cd7ae851d431a05cbe1ecda83d8f39f2d9ba7bcaa51241682d33dbcfc1a2510735e451422220041e5990d32710df74dda5a5397118da6095e05", @ANYRES8], 0x1, 0x1512, &(0x7f0000003c40)="$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") rmdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000500)=0xffff, 0x9, 0x0) 2m45.539133312s ago: executing program 4 (id=530): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000700000004000000000000130200000000002e2e2e5f00"], 0x0, 0x2b, 0x0, 0x100001, 0x8000}, 0x28) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x40010000) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x800) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, 0x0) 2m29.258644541s ago: executing program 34 (id=530): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000700000004000000000000130200000000002e2e2e5f00"], 0x0, 0x2b, 0x0, 0x100001, 0x8000}, 0x28) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x40010000) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x800) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, 0x0) 2m3.96329219s ago: executing program 0 (id=643): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[], 0x1, 0x214, &(0x7f0000000840)="$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") openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) splice(r0, &(0x7f0000000040), r1, 0x0, 0x807, 0x0) 1m58.241526031s ago: executing program 0 (id=659): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000200)="3081a3", 0x3, r2) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, r2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000040), 0x0) 1m57.071132756s ago: executing program 0 (id=663): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x0, @remote}}, {{0xa, 0x0, 0x0, @private1}}]}, 0x190) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000197, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) exit(0x100000000000035) tkill(r4, 0x12) wait4(0x0, 0x0, 0x8, 0x0) 1m55.929419476s ago: executing program 0 (id=665): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, 0x0, 0x40450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff) close_range(r0, 0xffffffffffffffff, 0x0) 1m54.40526375s ago: executing program 0 (id=669): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) socket$packet(0x11, 0x3, 0x300) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = open(0x0, 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x1, 0x5000003a, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, 0x0, 0x2) 1m52.650696151s ago: executing program 0 (id=672): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e24, 0x2, @loopback, 0x8000}, {0xa, 0x4e20, 0x7f, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfff}, 0x0, {[0x10, 0x9, 0x8, 0x0, 0x8, 0x9, 0x1, 0x2]}}, 0x5c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 1m36.663965831s ago: executing program 35 (id=672): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e24, 0x2, @loopback, 0x8000}, {0xa, 0x4e20, 0x7f, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfff}, 0x0, {[0x10, 0x9, 0x8, 0x0, 0x8, 0x9, 0x1, 0x2]}}, 0x5c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 47.843844333s ago: executing program 7 (id=795): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a0000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 47.423395888s ago: executing program 7 (id=798): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) 47.062498144s ago: executing program 7 (id=799): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) socket(0x1, 0x1, 0x0) eventfd(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getgroups(0x0, 0x0) 46.711286093s ago: executing program 7 (id=803): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000412, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000000440)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x200008, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 45.458586827s ago: executing program 7 (id=808): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3080046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@prjquota}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002b40)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x9c8, 0xc8, 0x8, 0xfa04, 0x0, 0x6c02, 0x960, 0x194, 0x194, 0x960, 0x194, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x878, 0x898, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x9c}, {0x6, 0x3}, {0x2f9, 0x3}, {0x0, 0x3}, {}, {0x3, 0x3}, {0xc, 0x2}, {0x1, 0x2}, {0x8000, 0x2}, {0x8}, {0x7}], [{0x2, 0x401}, {0x8, 0x6}, {0x0, 0x2}, {0x7c9d2e67, 0x200}, {0x8, 0x3}, {0x2, 0x3c}, {0x4, 0x3}, {0x81, 0x9}, {0x5, 0x6a}, {0x3}, {0x80000f, 0x876c}], 0x11, 0xa}, {[{0x6, 0x3}, {0x4, 0x1}, {0x4, 0x3}, {0x7, 0x3}, {0x5}, {0x100}, {0x0, 0x1}, {0xe03, 0x1}, {0x8}, {0x6, 0x3}, {0x9, 0x1}], [{0xb, 0xa}, {0xfe7, 0x10000}, {0x1, 0x77656ee}, {0xfffffffb, 0x8}, {0x4, 0xfffffffc}, {0x3, 0x9}, {0x7, 0xcccb}, {0xe, 0x1}, {0x100, 0x4}, {0x9, 0x5}, {0x800, 0x7}], 0x4, 0x6}, {[{0x5, 0x2}, {0x3ff}, {0x0, 0x2}, {0x7, 0x3}, {0xff}, {0x1, 0x2}, {0x6, 0x3}, {0x8, 0x3}, {0x81, 0x2}, {0x60dc, 0x3}, {0x5, 0x3}], [{0x4, 0x43c}, {0xe229, 0xa2e9}, {0x8a0c, 0x8a5}, {0x9}, {0x7, 0x3}, {0x8, 0x9}, {0xffff, 0x80000000}, {0x7, 0x3}, {0xfffffff8, 0x40}, {0x9, 0x1}, {0x100, 0x80}], 0xb, 0x6}, {[{0x81, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x401}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x1}, {0x1}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x1}], [{0x8, 0x6}, {0x3, 0x4}, {0x4, 0x10000}, {0x30, 0xffffffbc}, {0x4800000, 0x2}, {0x7, 0x7fffffff}, {0x7, 0x1}, {0x7, 0x2}, {0x0, 0x6}, {0x80, 0x8}, {0x9, 0xffff}], 0x2, 0x1}, {[{0xcd9e, 0x3}, {0x1, 0x1}, {0xfff, 0x3}, {0x2000000, 0x2}, {0x4, 0x1}, {0x3c000000, 0x3}, {0x6, 0x3}, {0x3}, {0x7, 0x1}, {0x7f}, {0x4, 0x3}], [{0x63, 0x4}, {0xd20, 0xfdcb}, {0x47, 0x9}, {0xb, 0x2}, {0x0, 0x4}, {0x6, 0x1e}, {0x1, 0x7}, {}, {0x5, 0xba07ba8}, {0xfffffff8, 0x7fffffff}, {0xd, 0x4}], 0x6, 0x3}, {[{0x430558a8, 0x2}, {0x3743, 0x3}, {0x4, 0x4}, {0x3}, {0xffff7142, 0x2}, {0x8, 0x1}, {0x0, 0x3}, {0x5, 0x1}, {0x8}, {0x12, 0x2}, {0x80, 0x3}], [{0x80, 0x4}, {0xc71e, 0x7f}, {0x441, 0x1}, {0x6, 0xffffffff}, {0xa0e, 0x9}, {0x21c, 0x200}, {0x7, 0x8a}, {0x2, 0xfffffff9}, {0x1000, 0x40}, {0x4, 0x400}, {0x408b, 0x89a}], 0x4, 0x3}, {[{0x8000}, {0x1, 0x2}, {0x1ff, 0x3}, {0xffffffff, 0x2}, {0x7}, {0x0, 0x3}, {0x58d, 0x1}, {0x7}, {0xc6, 0x2}, {0x7}, {0x3}], [{0x7, 0xe}, {0x3, 0x7}, {0x0, 0x10000}, {0x5, 0x5}, {0xf, 0x9}, {0x5, 0x1ff}, {0x9, 0x1ff}, {0x4, 0x649}, {0x4, 0x9}, {0x6, 0x8}, {0x5, 0x7f}], 0x8}, {[{0x8}, {0x9, 0x3}, {0x5}, {0xb, 0x3}, {0x3, 0x2}, {0x1ff, 0x1}, {0x1000, 0x1}, {0x4, 0x1}, {0xc2, 0x1}, {0xc, 0x2}, {0x5, 0x2}], [{0xf0, 0x6}, {0xfffffffc, 0x1}, {0x7f, 0x9}, {0xfffffffe, 0x2}, {0x7f, 0x4}, {0x7, 0xfffffff8}, {0x1, 0x2}, {0x400, 0x401}, {0x9, 0xf15d}, {0x2, 0x7}, {0x6, 0x3}], 0xa, 0x6}, {[{0x3f, 0xcddfd284d7cd064b}, {0x4, 0x1}, {0x101, 0x2}, {0x5}, {0x9, 0x3}, {0x100, 0x2}, {0x80, 0x3}, {0x5, 0x1}, {0xb, 0x1}, {0x1590d48c, 0x2}, {0xea9a026b, 0x3}], [{0x2, 0x3b1}, {0x6, 0x700}, {0x1, 0x6}, {0x2, 0x8001}, {0x9, 0x9}, {0x5}, {0x8fe4, 0x31b2b08f}, {0x800, 0xb0e}, {0x8c9, 0x7}, {0x1, 0x9}, {0xfffffffd, 0x2}], 0x4, 0x4}, {[{0x5, 0x2}, {0x3, 0x2}, {0xc518, 0x1}, {0x8, 0x3}, {0x7, 0x1}, {0x2, 0x3}, {0xe7a, 0x1}, {0x0, 0x3}, {0x2000000}, {0x8, 0x2}, {0xfffffffd, 0x1}], [{0x3, 0xa4b}, {0x2, 0x568e2110}, {0x9, 0x5}, {0xfffffb66, 0x2}, {0xb8b, 0x9}, {0x2, 0x2}, {0xfffffff9, 0xffff0001}, {0x2, 0x8}, {0x3a, 0xbc}, {0xd, 0x1}, {0xc1, 0x4}], 0x8, 0x1}, {[{0x5, 0x3}, {0x10000}, {0x5, 0x2}, {0x4, 0x3}, {0xe}, {0x3ff, 0x1}, {0x1, 0x1}, {0x4}, {0x200008, 0x1}, {0x1, 0x2}, {0x7, 0x1}], [{0x6, 0x45}, {0xfffffffa, 0x6}, {0x81, 0x56}, {0x100, 0x1}, {0x5734, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x398, 0x2}, {0x2, 0x1}, {0x4, 0xb4}, {0x40, 0x603}], 0x9, 0x2}], 0x3}}, @common=@unspec=@connlabel={{0x28}, {0xffff}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa28) syz_emit_ethernet(0x0, 0x0, 0x0) pread64(r1, &(0x7f0000000a00)=""/126, 0x7e, 0x1e) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900}}) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x2, 0x0) r6 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0xb, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x4d, 0x4, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf0, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x2, 0xd8, 0xa, 0x10, 0x40}, 0x2d, &(0x7f00000001c0)={0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x7, 0x8000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x40, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "95d9a2eada6903f08b8382174477391e"}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(r6, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x0, 0x3, 0x2, {0x2, 0x21}}, &(0x7f00000005c0)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "21c6652c52ef36ae0d7578441817a70ad9972d0de986fecee165edd074ef0335804b38616915a8e1781697bb82ffeb3c08680a34465acaf6e7ae53904ea422bce2d7d069e3cb01b771c905aa0d9f0eb8dfed7631abfe367f427f9bebf6bbe10cf4717b3e56c7b0863d702a64e112e7a1463ccacdf08594cb3dd0"}}}, &(0x7f0000000840)={0x34, &(0x7f0000000680)={0x20, 0xd, 0x4d, "958a02e987c5773d38df53216636fa7b93fa6a5216c39c565941631b5180872a96620004213f0e7abdbc2b0c3a91d0d9de9fbe5f998bc8d6bba9fa8c7b2182b73a4ad34a2a03ef142d85a209ac"}, 0x0, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000740)={0x20, 0x0, 0x61, {0x5f, "2edcc62265b3555318655f310d4b779536bb3a90645349964f823328077f4d969b2e18cbd0aa626e117d8fe511b424e031756d8d9689a5fec2e88e2568bccb79d8468eabade74681914e2cdb81b8795e60f3c617f3b546e66062ce87fda29a"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000800)={0x20, 0x0, 0x1}}) 43.634157085s ago: executing program 7 (id=815): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) socket(0x1, 0x1, 0x0) eventfd(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getgroups(0x0, 0x0) 42.841820212s ago: executing program 36 (id=815): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) socket(0x1, 0x1, 0x0) eventfd(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getgroups(0x0, 0x0) 17.907086436s ago: executing program 8 (id=888): r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) write$char_usb(r1, &(0x7f0000000100)='_', 0x1) 13.691113469s ago: executing program 1 (id=899): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) creat(0x0, 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000000, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) shutdown(r2, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002219000000839e3ce039a3f07709731b"], 0x0}, 0x0) 13.588027953s ago: executing program 8 (id=901): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x82, &(0x7f0000000440)=ANY=[@ANYBLOB='test_dummy_encryption=v1,checkpoint=disable,noacl,fsync_mode=strict,jqfmt=vfsold,noquota,fsync_mode=posix,usrjquota=ext4\x00,resuid=', @ANYRESHEX, @ANYBLOB="2c71756f74612c64697361626c655f6578740800000000000000792c6572726f72733d636f6e74696eb0d9b4ee7f11856f40ede475652c6e6f696e6c696e655f78617474722c70726a71756f74613d215c"], 0x1, 0x1059a, &(0x7f0000020c40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', &(0x7f0000000680), 0x2000) 13.241747735s ago: executing program 9 (id=902): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, 0x0, &(0x7f0000000300)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x7, 0xa}, {0xfff3}}}, 0x59}}, 0x0) 12.817280325s ago: executing program 9 (id=903): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_regs={0x4, 0xad1, 0xa7, "088d447142b9f1cb8fc4dac1060c9f0e687340dc31044944e8fe3853108910f9d536b02b21e50447d1a88e721d900726bbdfa2222cd5e40f1427245b17b58592e6620046603352cfc69cfae511db193d37e79c528b7b18e707f3281958430c155b8d790c9a2fbb07f8123e8b6d1ed161e9a0a707da1b5bf796c528810bb7c1dd29d95d7976f0b5ccd0bdf6715ccd54152528e37d932b8acabf56c29fb07b8b3adbb55a0ea4f925"}}) 12.817012278s ago: executing program 1 (id=904): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010102}, 0xc) 12.42315545s ago: executing program 9 (id=906): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a0000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 12.113992476s ago: executing program 9 (id=908): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) r2 = epoll_create1(0x0) ioprio_set$pid(0x3, 0xffffffffffffffff, 0x4007) r3 = getpid() r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x20000) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) ioctl$EVIOCGBITSW(r4, 0x80404525, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000100)='stack\x00') r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002180)={0x50, 0x0, r7, {0x7, 0x27, 0x5, 0x1dd880, 0x1, 0x89, 0x0, 0x4, 0x0, 0x0, 0x80, 0x2404}}, 0x50) read$FUSE(r6, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000006340)="5fdc07381aa273c3fbf514e5dbc0627549a95fcfee348e04b97f96499229582d593e1605c134fedf6a0bf5c5a59b08c2777ea1cafc2e505c54b968c833766e02da52e4a4b589bcca982ce7a6a5a625c3bbce5783880dce13e6c31ba1a2231c8020c3fd46db46e32f49785767e847e22cae4cd17dc8e8d180310c523adb9fef4943ce0ad2bd9d64285889c4a8f02a3b43373eec7461227da71d04dd576c22b2c1aead6223c4f8d9ced780ff77f460d98047a29870910cc23a7b474ef86bab436ee476d9b884e98552cc3ee1e0e02a5fb97f702cae710582c5919e9bdc4c014e1f9eb1ae9d3dceb85785e4e042d3cca34c693bfb8f41197b95d839ae4bf4f1e3a57b4cbe0f0d845bedb6d85d8849c675f194a0211333c749cf7cd6f0fcc8c4e881970f606211a8a23b4b94b8d825b90995f9f4633b87a9e3b0987317a9c27a8111d5f765c0b625b5362eaf669288b09e136a7d213a5e6076d3ebcd80c30b4265a43f3b22cbebb919f45d6f8396b817e353a5c2fe3ee497723f6ecc5d5ed014dd401d8aeaa0dcb290619acf0242a6de68315d61ef253724c44780647057fb2ee96c64ebb9b9dc640dd623f3ea5237ce714b3948b30678223d711215fcb4c797f10c4c8767edcd169699699afece6807b2b67b013df5c86d684f5092761ea039e8bf628aaa78c8c4ae3489cc10450f62bcd0d895a0283dc3408de41463935150e9720911d79980e2f132d18587a876a5ec8cd3b4197f4f1f75e8506ca252c59bc3c05a6894875f700032b5d779fcac67c8dadb1c6ba2758e3fd6f525ec92828c2f6ff13a5e9aac27a90fe68cd3ff926023badce2ec4da72f27d1fe7ebb5c06b83cfdef71b53cdcd12471c900b35b846eb8af4d9f0b11ff79bed273f4b816c011443c92bcc7c072e277dd4a649203fad9d755bfbe54e7ce2d0ee41b029735b814e142844206a4aef3ef5d74670b15fe20f2a43bbc6f42c6aa77f49a3f948c75534f910f378f8e4d5c5286e9697de4fba9c4a0581e052fd69e96c7a5bbd4d96d5850f58485d4fb922d96c1d8143a6648db7c1ffd4fff0b9b466ccc3966247c68c1246a7d3ab864201792170ee48b58f42ad03014a28268a5421c6c7a207df254b913d002ac6c9e68d5724227324d837d255542308617058de23692d050b4c5fdfb86668c89baa8702de5c5bbd567bf5e25d898abedca9fb428bd824994d8c7f175069e079af2f9d1021ddda95c0705237ca9d19e1084e90426a0a047b9fc7b206cef4fbeae011db9a2b50a672cccded0caa73e31f5f74f6a55930f50620e547d7beaac4c247f0b0c84643d94819520e657284bbfa67c640524c7da2af52b175864c431e05d875afce09ed5631ed64da359a7f5530d767326bf9bc15347c84ef9d9eae12a43bee1e266003097a7fd7bb8d58aae5774ab0b2057751725486b35953147e10bb708db6fa91d8fc023b95b4bd90c5eb3314131875e88a42d0a9853efe5361db77c904f7e3cdc850678eee6f906708ed240a1350cd124c2d49e50edbc65e4b7cddaffe0c93b16bf5ee196c328b9cb5ffc2cb1f76cb0bacada1e69b8104898e2a982874a81a55b8e07d03d4e6ddd02d9522019411947eb6e4a4baecca0e63c033a3298e45905585578c0b5a9e2e847ca6c2a5077abf978aa2f54be4e6aff3998789090a4771365799c2362a0b5a036c68f3972263b335562bc50de9cd8235417bd75e25936299590dadd50af85101412d1ec6e87d4bab312c91c34975fe89639b11bcee8569d9ce625e54ac227d02ea9a07f2a8d0ff14b1b332eddb68f99180ef05d1859ff0fb4ea7e315e6a5587d6829d7af9cf86e79eb7cf55af2eaf9a6a1b9543bf8e8dd9e4720dabef93fdb4858f3bbcab66ee15038140db525c3f4afcf414a73b3363a392fdd70f0499c83984e206cce69b2636085026825efe854c23499ab491d20efec8c9ae66765de3e078ad852bea2c8d9e12d5af85c2910780ae0585bfbe82178c8913a097cf2cf2f5296d8a513725c68f9729a62d86b3a4694fd35426d3c0a591bf338097141d734397e586432f44cc3496ae0e74eb5316bb3f3e61813343285811febec355011982f4f328415ee77fd7cadd4ad759711c7560d3c1d30928298ac51a3e96fb04610626c72ea96a383ee9acec493339c83e127d7bce1f8b3711732ee09cc94fc30eb8e4d7b56dc11d7dc6eadfdfaa48b6ce1ab9b7e024d4f5b025bd02d5a6a35288568fbe290bb7e54d299a38bad5f9e96de796b0d3fa9e8dccee469b283e560b32caf85368bfb35b8ad9bab845424499cb101b8f990fa8564543c6c873dfdea9d791abd77adbe5183097a2f6d346b966431afd3029157b69696923184e9d6cbb98780f814627f5cb533c4e5eb1f0848c91d6adf7488a320161dd4ff60b3df1af6c6fc84b00051e3f71605c9952ea4f24650b2641670d8db1ea27c39d7e4bc358311994925e7ac34c8a13c65b4a6d90f6e855852e25c126b7edd82d429d00803b5a6340ccfd114ab522a134f46efde466039b9f9f57be4de24ca4634810abd4ef6975d90cb54045c66a67d6eb307b6527e662cfa14c98c6f8471356c5bd305acec7e22d8aa34faca9af6337871e0a3d023a1f8f40d9f8f40d83ea10c01d049821ba9b903630fe88ae7f18097ac906f5e6a54ad9e9b08118b26b3fc339e9a4ac9a21a193b90a93df2f3de3fb951d230e8d4341ad401a3a6a73f1150ab0a2c3dab71bc9aa39ecd57b697f6dea63f4a1faac06956c2328825a586ee639256db5894cc516b9b4c32e265837692e7679693b76fc90b9630091d82d3d3a290b00c8483304deb9ab6d523a1b4ffcfd722241ddcbd8e01f1a521dfcdad8142666f2199982ec11c210805ce6ed478402d37024b324a5a93795f3d0d1f047e1d5b58b821a58a99b8026e287031a16e25271bdfbffebaaa8b33a8de8836e1f7c6595ae867c7ea9db55f8e3aa7f46cf11f0a19d16a1764427b5ee5dad77d533747d761d190e9e0961e6bee9443133f72fd759f357ccd63437175e56bb359a21aef8a64318c9039e8a228e56729e9679561ea2e3325a7bb5da5873dedf888f54fbe5d13bc17697e4d3ffd74cd120b89c8c4dc4869cad479eb17a7d338b634858c50813a24bac2d76fee8d5e2dbdee531289e7f68b24f555ce1a652c36c846b9cfd32a25657131208a767333ee5a909c4e031fd52ba2f8b4e020ee2c1e8bba38473154b108ffd7643e861654247e850162773d75776a52b5899080b9ab25e48cb977b0d1161d31f946ef5379b11104350a37b289fdba68064d0dce7346f39ed42d980d1bd805431043f3b12b550340e81e5d7af033e7c64d42f097bb90a626c1efc548ea11d52fcda84f4b300a86299776869ec73027f1239a9003e7d37267ed75b78e705c846354b0e43cc9f9b82a001f8992921a940b0666e2c6e261c6ae6aad01cdcd23d00225de265fbc28a8838f28c8204dc78c3b1b67313d9cf41dfa3a2ad4c6ac81ebe67e32fe8aa7bbb39e261613fd219973152774fe79957fb8e4a25f5618823154c71f6ef9ab0e5a39bc24e989350c565e55754b5e8826da9589b1ecf90d3c12c714a54f83cfbb73d523b116fd60aed0a3b030bb00b8ae79da05636504ce08de1c36b41124dcc39c00a96b1f90ef4774cd8cfaf4dd1f5c9733f4d7d7aaf7bf1e70fab5f1d7b493a6e8b89ea3f4ba3129a4b2d11235a8d2fb12a0d23a84cc9c99dc06876973f89d8a0f8a9f121d0c4b25442f8a51219e783d298a97b4d1df56f8d5b29adbacfe2c680513d6029cd35e304b3f0deff49d0b42209a11c668d47af9e28e98bbb671019a66339f79b71b9f374b3444913d1c3a83a5fbcad70029f1eea17cd129d32fd1d0174d7d2790640c195f5f39efa8e3f66b1555b905a0883ebe39bd0dc99dd3d0bf69207a0449844ba7e90014b4f6378906e32f0bd3469ce113bfcc92a548c35538d61f5276c93166f6e7410fcce756f871b86aa00198379559938b101f386ee66c682d27fd4d0b592dd361f4ce7641138be2ca793e49b644c8a5fe077178010db727c032eae77013520735dae6d003d32f61210fcff8b5c3210108f1573899cd4180241349680a4406fc819017ea2da3c36e8c3416d2ee1268673d6669b4ab4f99415e94df675bdd1150ec0f98aa10352ff6e9316e1fb8ab63735b7301911fe21e9318b87f31590862b03fc199536211a7b1281354b2912d746708ec93ec6d16b0bd4d624175d75a29efd517712dbb034447f4b324b610b0807ca4101e2c72ddae951565329832a2c2b93013e0808035a76dc3dd7bc206a81baa0eee4b04b260219a6257c40384547d5edb33d3d2d5c76333003a274d65c342ed55840e579f12bc1fde70b40eb9d1186ecaf01e98cddeaf410a7c7e05cf4cadf4e2d0fe7984ab4d4807b3f273560ca31e1b4955f99eeb9340e9bd3be82382ea76bc855ea69b87a8431237fd20978666e131c3f20fd7139746f389281770d8504da092b4f4bdc9b47cc9abc4f61a62dff5623243890132839e29363fc7266a5e0c16ddd75d4dc72dd8858d262840e25026447db8aa641b04cf75534d4bdde2d47947994591f0ec1122504a20510dc661a3e16a1e3264aa404b55023420ccc03fdc7ab0b47f4a2308581e07500804410bcf8a9404ab37c50e48b6dbde17133c854151fbda61821a9bdb0d3d8487613df35feea01b574f46161d553957fe056305fa3ff506f3b4b5dea0b037da9b598f12a217453ce24e0a2811d8e4214c3d680ac56c849de2798d37dfbb1eb5f2517725be19a7c725f28b8e6c43eafa9f6469cc6fa0c082294ed7c1a29350766d4f2a7a3b86897cb59f1d3012e313c034c5e129f1f150fc50f6437bc46ee0d62360aebbc2427f19060849ac7ee607e57b4ad308cdfcd3aa4486b86a43d1042dbfea887193d6fdbdeb307d284ed84585dbeb71e369179ba64277b59b28d2bebb478fe4df66096f737345b45aad66771d1e63762d9f0a5b2eb9720deb9ed03469800dde211bdc135ad4a46a19e1998c1708a377b457429c25149d46581701361d372f75ecb512eb4f4c7339dbc3fe51f025a4e5950c4c828c887dfff3537f96af3f582f42eb01a112c1f6f8fdd363e4edfb4bea0bc6b22561afcffcaf4d771b7c53ef00114ad95d052e2820fafbad36e0ccaa6d11349c54bc89961415e0c417ee8ef3d1c8a79374a367f0a20ad1eccaadec309207cfbf84d10bc85b2d1e93a7228a05de5fe4e20ff9ca2f95847640ecf6a5701ea39e9330e89da15581b432e87b3b87edf1240752cd39301a0944010cec4142c4ff2e1935944962e8b03a86d5761d525253252d19ab8d561efc9eb20ad63c1fd0228008ce54313cfa2114592b7d3771436b9fd14dd42fec059c14c51ffb8ffa6bea37e9b370a89bd242af7ecfb467eb039e08c4fb46992fa205dd6a4e71fb19f3ef345e688d4038946c3c1e2eb2fdec168986665ab4f122be4b5855b3c77bff87fbcd9bc6106ce50f511bdab3ecf23c47a9966ab6d09974ce45561955229f9074417336a3be8748c3fbf83931ce420a9dcd0fe4b7bbfbcfac216b2a2c05e3f209dbf89caa78582ddf52cb09c765f77b53341f04ec672f15f06cf5f2b4e35fe20093cc698ff2635767754f8506df481c95ccbd366a66eb193fc1c5af2d77dfa5545d91e4998c0c00f1cc9ca4777a3b6bbcf075a785eb335692fba35e570a4c0e8c445486296a91c0d1d36b8f883e46dadba2650f11d46c7ad979172c4ea6b81a8a1158637b925ae846596d18f2dfe6086bffb125a79ea115c4212af4f4ab9fd9de6cb5a47b4dbe4ecadae89c2585f1dff969f893c1dbc2f48331c2a33b3d266419a593d1950436ff1e5d2b8ccf33d55a10a3d7e0f69ac4d70ef0ea97f1cc8079f0aeec228fdb7defcce5468c368c42157d39646e85f031c11497fa5a295763279faa0982714039ebc2ffa101d95b5e1344e4eda9bf6c7f412ba2c6aff7b2b1e17719e634769c272bb53de4017f18d260034b7d297eae2a844263228675c379b52dda6901e2e3fcff2f2085dd9dac7bb17dfbf11698017cbe1bc3a9674253aadd637cbffa8891a38e83a18f4a80d1001a6e6136647fe39a3755581448862dae657e6a35a5f7af85b1fc9dabff978a3ea60bae28ab20a4d264e19a5a6a053412bb078a18e6c9e0f189d60ea7f06b11fdf23cf389cf4008a3cd4b698ce36251a5d2028962c6e80308bd25a79afe1062be79cfa976e1a5b4f03c8b23223b885f2e3134489d8b619f369729ae6fba4c59a794180973e77928fb1fe5aa5f94fe21a645f4b187ccebc628c62d50b6291d273379a1261064376272f8371b5554c9454ae60f1270a3ba2c418ea2378d7a8cf9fef98b1d84ad151000f5611b5739240ea956b1868220e805e6fe803a9c5444b7ce17823dbf20cdeeb399209a5aa1e381ae758d66989b9ee02f5c00d6dd60cd49cefe0182819c61b7a7a3fb7994443dd0c310be2acab656e33b01bca4ed1b27ce4a44222ba0900cd2c8b583b23cd967672f9303ad92b2373cb5c4218e3ec1d430afcfbb8d319ec20d479485795d0f0ab7107a468179a339e1d975a0b6e91521b93c71746798749b547de2363cc3d9a4d87d388b281cf273f0ad4685f84c150b6e679a20e57e352a02b4fac844936455ec3375f0cdadff252767c5eace36752af001afaffd4559a8aecaac07eff3e156338b5d2f34f7a5786e51814552a824989eaf5b89e6f3674e8ef3407f8cdf7f471d63efa86740147882ffdddab7978db57614269015e5081119c70b868a84c5abb7ef6dc18bb02060f7ca7698d19c23fd3194e35a7b0047f81e314afec776c5237f2b4617f7c7082898d36cd1df8b136d1040d66c3b54396481778d64df2b52eea183681e9b3d938409d1f7e6099fca85d3189d9ef4c42ac3a3eac187daf581258f0e034c6b87ca20758bdb4614c3dde00ac17eeb7ce5f996c4292eddb50f6f32c01ebaebba0d802421166a8fe22c5b53d37e88e6a3c33da746659ed0e05241592e196f2439dc38262b9c8b0970350e7653ee60798a9cedf7d8f4b32f67b198d6c0d2042912c43d5cb16be05392de145414ad5b06a6169d6a68aadcb4678e2073c6dfd3a41762550685161ceeef371bc8fea17be92c4eb93d7392d5782a5c95bf5bcc18d817e2c0de49dfe45c4ca3a1ecef318083d1fff792d3fff191fe3665794817a3f5db2eca64399cd3827c4203cf1278b6639c94dc18398e44782908af120676f25cee6c3c3f5b7ff7b7f123600abcc905a5ddcc0b723792f28230bb834c2458a6042780531ae2fffba8654bc2daf48d1f85de07f971d8297744ea5901beb32b8fa9a6334cdcd1c5d5c3bad0273d8d0440e69c5a0a52fce69a2cbcbb93c2837672268965fa7a5d1a972d0fb23681f8fdc4ec55d8ae356db021f4667f3fb586de24e1f33dc6dfc15e956a187cd3421342466bb1876f81caa3921d176c72ecd14d387313a89a9e17af20d4f08c999edb5100b9124c8c67bb8fee6182439d07fc74a249871b73d0a5397da3aeaf7795b0fb6c062d719b7fa8f5d7c4503e09d5784c60c58b776855e46535543a12df0418a3a18ae9327d49678a0c6051eb991122f2211da3a11d6f080768fc1fb6ce25263d070841f68d45f65706824cb6df17ea1a8a91560e3d034cbe3bd42e64b8b4d107a311147f88614c3dfec32f2a6f42064a95174cd620825544fb56cffdc611ff8987bafdefa7ce445f3ab4ff0dbed8c0e522dc242fde1424e4cc93cc773176eb210576fab429ae552ea2621290d7c5800c4a3064200923c1490636b8345f4a8705b9a1d7ecc49af8f02c5a6987bfa350ce3e007941bb80983523844972c0566b6a33ec46514fe0f3a680112731d5c7a84a754a955a62a80436895e9690b9e0e66cee2cd675134cd55868e55537764867c5247eda5ade4cdb89497aa264821e82c34306ec18e1c0f0c129acd25a8695d3ec47b8fd4e38f26f8478eba76db487c2aeeb4d6c5cee80f1dd7f8348b56629e14f052efb12d4c725eab34325eea3ce597aae6c814d9110f34e502a0a83edf0dc84fd7e4feee3c20e1fb07b1522e971cabcae31ac28fe6a1099bd246f7f1fcc98f1e666173a2ef34e4c173bd86f186b91c69af0a82f9215a727670d4f4fc365cf81353d075dcf1cae50c707ade56bdc42af9218386da1d14d488de09fc9f3027606bf5fe514b99660dec3d72a90c53ca7a1a4ca5a83a4a8672261d03fdd4553dced80bd4240cb9d0b8ad39fc36db3ceb57d26db13339fd068362aefcdd65640bf0b4ed15a9d54d49b6ac281623889898abe30e60639dc98e07da660e72551636bcb3656af86a6f97021961a397be961f6e4a569f589b5f4824de5fb3f3465b0fc64e87268d03d83ca7f811e32c04b27255d45229086827dbcfdbf03712fc41c0aba4029e3e9a3857638928a3cd997f6947e0fe6b0bd284b4c0a700266ae441c73ebca41e2c987f6618995dceb3da43609900a386ca470255a44ce63f2b78702862c67e10ed532eed3d2fb85620804a46d62a249ac8fcf0b5aad13e6321d276216d7b6defe68eff72648af5dee55dbf29bfdc1bd4f8ce30df59b83b2e4d9698621ca7dc8ea3897d98d33c62e5771442074e2548b617bef20cbadece6209b2343caffad9b0b1c5761197e6ce3242d20dd5668bd26be2f385dd4b7b53c0921dbea57b8beaa27c1ba74de03f1efe3a78bbccd9fa77ca7ff77aa9ff032cd5c0f4391ac6c2f4ab46831ca2b0b9c8c9be9154c1dda81bef77c1d02ec2364e655a908b2fc59dc2f8d7ed35df706785178034e56df5dc13c42c5baa4469fd574e4c37f7be2ec36fd34f9af97dfb4f617701b2606bb6f39369ec14a89d3d11cde82515785750ecef54b316b96000d97f4429685d08d3488f93eafe6262d240d06194ff8e1296ae0e2289041cd2b0b1829192b8ee22eb5196307fcc30090d36d0edcfe2274e48263e8e76e80214a0cc76c11fd44fb5cbccb25f88c4e4f00f431156e1ae713b1aa1f5bd930989d7192b59adb8c6765f36d17e5f8acfda4b9a76f0cad273fa6e405c8923b77c5992c988eefccce5e838bfc83192ddc6a21a73fd431cd290b58aa5e5cf9bd639c73256380062b1fddf91ed347327e543899f055fb6a62e239c4575cbbec5c4c40a87daeb4c71edf3283712d3fd2596a17b3cbad675f86d966aa1215a470c2f9bf2ad5ecba0ef0de25665098463c86eaee21e5c5b0354be5cc226ba3d19206cc45150954ef4f9edd887ce2ca316f8bcdaf1893bf11192416a2808acd6e6ce2e2256c5ecfae49efa1469d6f295191af50eb8dc79b1d7ed75d3802ddf8f6fc2c9fe3248a26b0583c71342c04eebac08d6793da761860ba2398ffcb27b4add9fb2b7b2221fc89931d72bf447653f3cbeb983be33a9588e7b7f2fe7e4daa3c164ee8a413ed58f54d628929cb94b5b3082f2e75bb24b04b73b92654805e09c56d41c5a5f7556d5e2bb31149704afed9be65ac9458211259a0915e53a8f8cc6e425ed5b552186d492f8793cf802d04737a0b849a155032dabdf8fab99a4c3fd7679413dee5c7cd9d4b0702962449b9924c603a945f2b18aa061e346fc1d27fd30a94b8a5193d72524c2e6121da0cfd62c90e13df21386e4b44f8a79074c6bef9cede5f2ba61f0c10992c626d81de4c09a1229d966c0c3434930d5f1d39799626868b4ef8bb42cdb28d9a0d63f362072f85bd7719c70596f542a99406b93ad3e405f1f8fd93e81e0cb340a9797d0fa0adec79e14198462f0292e31653d8bf57462c5c2d5556fe42ce921336e52d33571d440311f934f75a57d23b94fe1e5df8aeaa76af5fcfb7fc2c6d610e21a14d292fcdf99004a6fb9682cc469a250b2a6a5ab2ef0e3a05ead6bd353d08c4470610a266ff5c7a6ef97769e646c73aa385e596bee1d12dc6bdef12a78c577e4596cf4905340e3576159c0f6a74026b307296a35fbffcbdb9b2bb1ed515fc3d8ea529b2515edd52a56f38ecb52e58258936b8e9cf154ebc5cdfed356a143b2b119206914328e612f743866b9762831c8f9782bccc9ae1c87c58b633356132c56dc1bfc2ad717970de80f2f30e73662fcfa743992652028c132bf4e694202200f9837c337fc3a1019152f93720c9f339f44a6e1d80de9f4da067f468e24429a3b30200f8e57d37bb2cf21bc195ef4b49b3162a5339d3f636835bb7a294537fb102fd18c92c020a79c5d828a6400660d94965faf32ae964b226a37529a03ef5eeab6f1e26364b2af174ab63ce65283b8701f14236f15f937057b7feb4dc7f6092df6948fdb5dd678c4286f962dbcdd0d7cc4f6c3c9acaea059ae373c7b27bcd82a63f5c55190c4444dedc1c5bb0237995364b036c0127042f6b02a8587458fdd8528dba32f543bf641c8fbaab2e54ddc57741797e3556f7cbdab4e0d172a9f8b7664939df1d073f30f384f2bc5169d10497dda4ba67562682be50d33f116fa5403ccd0a1c973a3123c4816739df4bb096d7a87d3b01ceef4720ad6392539337751840540f402e650b49d4ac87764161532d492887743475f2fdfaa4a96ba3434ebbba35b000b0fdcd3c2a50fa4c285a28fbd6e11ebb150fae61e3d4dbf6e97fedd8fa03d77d0c3b0d0855a6180cb682de9e02a53a8263a081ffc769f5d1ac0d58ba690e964a0348d877a21fc0f0617d7ee0d807e374652d27444ea366c3d9ff8224f56f2a362adf80f12176401e5ca0c8ad109a0f4417365a3fa5894198c8e7b0ab56fd7a5b6d917328d26c9e9f3b93916e48247924c66186120b92523775d3135c369a7ea2338c7de176b44b4575052939fcec898f19b4f8f3aea3c7d24da75fa9b18ff61934a8cbe1e73d986d69952e76f5a6c921e5f68e03b1c6c14e0a66d238ee39b053e7e1d69ab718faf4d6afc71c9afd10aa21e6d153f017d1f8a906cf24ed1bd608edb54473e0fdb31cc1d312f5ff436c12033d00e92100f51a7e3953ac680a50d26c2690f16b1b0595fa137438370794a61c49db750cbe986c366a35d09efb9ab7ca1edd840b990fe51ce5c06ed4bc486a4049cc242f54a4146012707bf99123e58eeef30f6ce4e37d34a348e81fe88a03aaecf634765b168f043b4c27bb46c05a6f18baf59373ee79c44ff9b1ed9deec9feedf93b1787491e0fce72faa745ea468c52b40d1b7e7e20085daf52b87335398c492761653e76c702f7bb6886420585d35e93c5000a53fb4be2dd9abd2d912d2d6403ce9a4fb1e15b41e7bc3128ac1ce15a131dbe6ce5262bdfee13a25c7f075bb3bc9b7b888ba4fd9e1600466a1a27d952ea6656bc693bc9adaeacc9a7733c2f70739547200f12b2120feff00bea9643370192406ad030db1510fc29a30c2fc1a3574e64fd6e98dd6f3bb48c3647b31b1793b0118434e9cd89978f09267fdf2dcd0cc828a4f4a3386b917aa494ccf9580d85e6851990cc7e991e575d085c48f52d40e6d438ebdced128c32ebf755964eb7f55bea9e67dd01d2c94edcf5c933faf108725f99458a872d0a62b073d7e212c755ab4ad887aa8b7ebf4b028aba4f73b396f2a08232581f8a7294c1d2a960091d4a48d7a54cc", 0x2000, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)={0x78, 0x0, 0x7, {0x1, 0x7, 0x0, {0x6, 0x0, 0xc, 0x5, 0x401, 0x0, 0x0, 0x10, 0x4, 0x6000, 0x1a8c, r8, r9, 0x4, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8082, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r9}}, {@cache_fscache}, {@cache_fscache}, {@cache_mmap}, {@uname={'uname', 0x3d, '/dev/input/event#\x00'}}, {@aname={'aname', 0x3d, '\x00'}}, {@cache_none}, {@access_any}], [{@subj_role={'subj_role', 0x3d, '/dev/input/event#\x00'}}, {@smackfsroot}, {@euid_lt}, {@smackfshat={'smackfshat', 0x3d, '/dev/input/event#\x00'}}]}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, 0x2, 0x3, 0xc4dee3c1c0a44695, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xe50dc9b30ee66d12}}]}, 0x2c}}, 0x8000) r11 = syz_clone(0x2511, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r11, 0x7, r2, &(0x7f0000000200)={r2, 0xffffffffffffffff, 0x4}) 10.321407724s ago: executing program 9 (id=911): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = open(0x0, 0x0, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x1, 0x5000003a, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, 0x0, 0x2) 8.140122435s ago: executing program 9 (id=912): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, &(0x7f0000001300)='7', 0x1) write$char_usb(r0, &(0x7f0000000080)="ce03b788", 0x4) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x5e, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000d80)=""/31) 7.817299907s ago: executing program 1 (id=913): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x4, 0x27a, &(0x7f0000000440)="$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") r0 = creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x2, 0x8000001, 0x7f}) syz_open_procfs(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r2 = getpid() sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) write$char_usb(r0, &(0x7f0000000240)="dc2fee57f7e730a29e932b1626699db9e0c885a0ac18712c6c5699f67fe855588b92e7f46f2432ac2261829499d3ced659f3f3e0e9daf6", 0x37) r6 = syz_pidfd_open(r2, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 7.701968595s ago: executing program 8 (id=914): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) 6.515478488s ago: executing program 1 (id=916): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, &(0x7f0000001300)='7', 0x1) write$char_usb(r0, &(0x7f0000000080)="ce03b788", 0x4) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x5e, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000d80)=""/31) 6.391337523s ago: executing program 8 (id=917): syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', 0x4002, &(0x7f0000000f80)=ANY=[@ANYRES16=0x0], 0x3, 0x218, &(0x7f00000009c0)="$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") bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 5.9423206s ago: executing program 8 (id=920): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x19e, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000280)="$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") symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000013c0)={0x0, 0x0, 0x8, 0x19, 0x200, &(0x7f0000001400)="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"}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x79}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000001300)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d54}}, {@data_ordered}, {@jqfmt_vfsv0}]}, 0x0, 0x470, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/U7/jVv8jjfvy59/yv7uKOZTBiLg7InZHxD0RsSci7o3I294fEQ+sMp7b+z/plVV+5LKy/t9zxdzW4v5f2fuLwZ6itjPPvy85Pl2vHSz+J8PRtyWrjy2zjm9e/PmTdsua+3/ZI1t/2Rcs4rjS2zJANzUxN5F3Sjvg6sWIfb1L5Z/cnAlIImJvROxb2UfvKgvTT3y5v12jO+e/jA7MMy18kaU3n+U/Hy35l5Lm+cnp2+YnR7dGvXZwtNwrbvfjT5dea7f+VeXfAVdrjeem7d/aZDBpnq+dXfk6Lv36Udt7mv+4/6f9yRv5PHN/8dp7E3NzZ8Yi+pOjeX3R6+O33lvWy/bZ/j98YOnjf3fxniz/ByMi24kfioiHI+KRIvZHI+KxiDiwTP7fv9B+WZl/pBVt/4sRU0ue/27u/y3bf+WFnpPffd1u/f9u+x/OS8PFK/n57w6WCic7XbQGuJr/HQAAAPxfpPl34JN05GY5TUdGGt/h3xN3pfWZ2bknj8+8c3qq8V35wehLy5GugWI8tD5dr40l88UnNsZHx4ux4nK89FAxbvxpz7a8PjI5U5+qOHfodtvbHP+Z33uqjg5YY9uWfHW8f90DASrQOo+eLq5eeDWcDGCz8ntt6F53OP7T9YoDWH+u/9C9ljr+L7TUzQXA5uT6D93L8Q9dKv226giACrn+Q1daze/617CwdWOEUU1ho26UvBBRFtINEY/CGhWqPjMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xj8BAAD//02e6R0=") 5.804380515s ago: executing program 6 (id=921): socket(0x11, 0xa, 0x5) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x8, 0xfff1}, {0xfff1, 0xc}, {0xb}}}, 0x24}}, 0x20000000) 5.689478737s ago: executing program 2 (id=922): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000300)={0x0, 0x0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) r2 = epoll_create1(0x0) ioprio_set$pid(0x3, 0xffffffffffffffff, 0x4007) r3 = getpid() r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x20000) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) ioctl$EVIOCGBITSW(r4, 0x80404525, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000100)='stack\x00') r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002180)={0x50, 0x0, r7, {0x7, 0x27, 0x5, 0x1dd880, 0x1, 0x89, 0x0, 0x4, 0x0, 0x0, 0x80, 0x2404}}, 0x50) read$FUSE(r6, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000006340)="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", 0x2000, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)={0x78, 0x0, 0x7, {0x1, 0x7, 0x0, {0x6, 0x0, 0xc, 0x5, 0x401, 0x0, 0x0, 0x10, 0x4, 0x6000, 0x1a8c, r8, r9, 0x4, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8082, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r9}}, {@cache_fscache}, {@cache_fscache}, {@cache_mmap}, {@uname={'uname', 0x3d, '/dev/input/event#\x00'}}, {@aname={'aname', 0x3d, '\x00'}}, {@cache_none}, {@access_any}], [{@subj_role={'subj_role', 0x3d, '/dev/input/event#\x00'}}, {@smackfsroot}, {@euid_lt}, {@smackfshat={'smackfshat', 0x3d, '/dev/input/event#\x00'}}]}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, 0x2, 0x3, 0xc4dee3c1c0a44695, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xe50dc9b30ee66d12}}]}, 0x2c}}, 0x8000) r11 = syz_clone(0x2511, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r11, 0x7, r2, &(0x7f0000000200)={r2, 0xffffffffffffffff, 0x4}) 4.807284126s ago: executing program 6 (id=923): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000180)={[{@discard}, {@nombcache}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000cc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x20000) 4.752460956s ago: executing program 3 (id=816): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x38, 0x3, [0x286, 0x3, 0x9]}}) unshare(0x64000600) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 4.635359345s ago: executing program 1 (id=924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, 0x0) 4.385010688s ago: executing program 2 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x6, 0x0) r1 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r1, 0x0, 0x0, 0x1, 0x3000) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x8, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$FUSE_DIRENT(r2, &(0x7f0000000400)={0xf0, 0x0, 0x0, [{0x4, 0xd, 0xf, 0x61, '/dev/cpu/#/msr\x00'}, {0x3, 0x3ff, 0x7, 0x9, '@@\'-%@-'}, {0x1, 0x100000001, 0x0, 0x7}, {0x6, 0x9, 0x5, 0x100, 'user\x00'}, {0x0, 0x9, 0x3, 0x7fffffff, '-#\''}, {0x3, 0x6, 0x5, 0x2, 'user\x00'}, {0x0, 0x9, 0x6, 0xf9, '@&#&%.'}]}, 0xf0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 3.326312897s ago: executing program 1 (id=926): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000004c0)={r5, 0xfffffffc, 0x80000000, 0x0, 0x3, [0x0], [0xfffffffc, 0x7, 0x4], [], [0x0, 0x0, 0x8001]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c64d2, &(0x7f0000000000)={r6, 0x80000}) 3.11795362s ago: executing program 6 (id=927): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x4, 0x27a, &(0x7f0000000440)="$eJzs289OE10Yx/EfhfdFQZgqioIxPtGNbiZQr6AhkBibaJAa/0STQabadGhJp8HUGGHn1jtwT1y6MzHeABuvwIU7Ni5ZGMcwrdBCibqQEfr9bOZpTn/tmTxnmrPo2bj7erFUCN2CV1Oqx9QnrWpTSiulXjX0NK+puP5frVZ1dST3+cLte/dvZHO56VmzmezctYyZDV/88OzF20sfa4N33g2/79d6+tHG18yX9dH1sY3vc0+LoRVDK1dq5tl8pVLz5gPfFophyTW7Ffhe6FuxHPrVtvFCUFlaqptXXhgaWKr6YWheuW4lv261itWqdfOeeMWyua5rQwPCr+TXZme9bNKzwN9VrWa9KUnje0bya4lMCAAAJIr9fzdj/98Ntvb/D5rPbzv2/wAAAAAAAAAAAAAAAAAAAAAAHAabUeREUeT8vP4nxSd8oubr45IGJA1KOiFpSNKwJEdSWtJJSackjUg6LemMpFFJZyWdkzTW8llJ3yv22q//vfS/K/D8dzf6391aDu4ekxZfLeeX841rYzxbUFGBfE3I0be4l02NeuZ6bnrCYmmdX1xp5leW873t+Uk5WwumU36ykbf2fH+87rbzGTlbC6xTPtOe3z7meOVyS96Vo0+PVVGghXhN7uRfTppN3czt+v7x+H1HnWvbOvbPdfcbb+R/Y31EEx3726fxvmTvHVL45qEUBH41rD8veYe6SP0b06CgOApF0r9MOAg7TU96JgAAAAAAAAAAAAAAAACAP3EQfydM+h4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjtRwAAAP//7+5czA==") r0 = creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x2, 0x8000001, 0x7f}) syz_open_procfs(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) write$char_usb(r0, &(0x7f0000000240)="dc2fee57f7e730a29e932b1626699db9e0c885a0ac18712c6c5699f67fe855588b92e7f46f2432ac2261829499d3ced659f3f3e0e9daf6", 0x37) r7 = syz_pidfd_open(r2, 0x0) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 3.070967295s ago: executing program 2 (id=928): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}, @TCA_RATE={0x6, 0x5, {0x1, 0xa3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) 1.792494831s ago: executing program 6 (id=929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) 1.48898595s ago: executing program 2 (id=930): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) 964.224269ms ago: executing program 2 (id=931): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x80000000}}, 0x4) 890.380951ms ago: executing program 6 (id=932): open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1c10, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) 698.109015ms ago: executing program 3 (id=933): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a0000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 431.219754ms ago: executing program 2 (id=934): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_lower}, {@utf8}, {@utf8}, {@fat=@check_strict}, {@numtail}, {@rodir}, {@shortname_winnt}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7f84}}, {@shortname_win95}, {@numtail}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}]}, 0x91, 0x369, &(0x7f0000001ac0)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x65) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 288.765096ms ago: executing program 3 (id=935): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}}, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r3, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000640)=[{0x11, '\x00', @buffer={"994ac804080000000000000000cc0086f000800000000000faff00", 0x20}, 0xffff16c8}, {0x40, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {}, {0x0, @svalue=0x8}, {0x3, @uvalue=0x5}]}, 0x7f}, {0x20, '\x00', @data=0xd8f, 0x3}]}) sendmsg$SEG6_CMD_SET_TUNSRC(r1, 0x0, 0x20000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 258.974276ms ago: executing program 8 (id=936): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, &(0x7f0000001300)='7', 0x1) write$char_usb(r0, &(0x7f0000000080)="ce03b788", 0x4) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x5e, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000d80)=""/31) 0s ago: executing program 6 (id=937): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ec, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0xc4, 0x5, [{{@in=@broadcast, 0x4cf, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x5, 0x9}, {{@in6=@loopback, 0x4d5, 0x33}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}, {{@in=@broadcast, 0x4d4, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3506, 0x0, 0x3, 0x2, 0x9, 0x101, 0x8}]}]}, 0x1ec}}, 0x0) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) kernel console output (not intermixed with test programs): change from 0 to 1024 [ 145.406948][ T6196] loop1: detected capacity change from 0 to 1024 [ 146.213901][ T6196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.458469][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.713244][ T6220] loop1: detected capacity change from 0 to 1024 [ 150.793948][ T6220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.941504][ T5827] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 150.948809][ T5827] Bluetooth: Wrong link type (-22) [ 150.954885][ T5827] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 150.962194][ T5827] Bluetooth: Wrong link type (-22) [ 150.967474][ T5827] Bluetooth: hci5: link tx timeout [ 150.973088][ T5827] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.973745][ T6220] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 151.141889][ T6220] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.88: missing EA_INODE flag [ 151.198691][ T6220] EXT4-fs (loop1): Remounting filesystem read-only [ 151.225606][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.235516][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.262369][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.301515][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.331590][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.522002][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.813634][ T6233] overlayfs: failed to clone upperpath [ 152.081503][ T30] audit: type=1326 audit(1770889382.642:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb27d9bf79 code=0x7ffc0000 [ 152.091257][ T5986] kernel read not supported for file 29/task/29/stack (pid: 5986 comm: kworker/1:7) [ 152.139112][ T30] audit: type=1326 audit(1770889382.642:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb27d9bf79 code=0x7ffc0000 [ 152.231059][ T30] audit: type=1326 audit(1770889382.702:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb27d9bf79 code=0x7ffc0000 [ 152.463088][ T30] audit: type=1326 audit(1770889382.702:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb27d9bf79 code=0x7ffc0000 [ 152.521448][ T30] audit: type=1326 audit(1770889382.702:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb27d9bf79 code=0x7ffc0000 [ 153.034088][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 153.286194][ T30] audit: type=1326 audit(1770889382.702:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fcb27d9bf79 code=0x7ffc0000 [ 153.402185][ T30] audit: type=1326 audit(1770889382.702:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb27d9bf79 code=0x7ffc0000 [ 153.431502][ T5827] Bluetooth: hci6: command tx timeout [ 155.511758][ T5827] Bluetooth: hci6: command tx timeout [ 155.605665][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.456655][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.717272][ T5827] Bluetooth: hci6: command tx timeout [ 157.927999][ T6225] chnl_net:caif_netlink_parms(): no params data found [ 158.335597][ T6271] loop1: detected capacity change from 0 to 128 [ 158.422233][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.455136][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 158.661354][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 158.716797][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 158.787528][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 158.805933][ T9] usb 1-1: can't read configurations, error -71 [ 158.862138][ T6278] evm: overlay not supported [ 158.939151][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.481559][ T5807] kernel read not supported for file /cpu/0/msr (pid: 5807 comm: kworker/0:3) [ 159.594297][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.651502][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.658759][ T6225] bridge_slave_0: entered allmulticast mode [ 159.723527][ T6225] bridge_slave_0: entered promiscuous mode [ 159.751533][ T5827] Bluetooth: hci6: command tx timeout [ 159.777578][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.791467][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.812941][ T6225] bridge_slave_1: entered allmulticast mode [ 159.838922][ T6225] bridge_slave_1: entered promiscuous mode [ 159.854892][ T6285] loop1: detected capacity change from 0 to 8 [ 159.905218][ T6285] SQUASHFS error: Failed to read block 0x2d7: -5 [ 159.958938][ T6285] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 160.094914][ T6286] loop0: detected capacity change from 0 to 16 [ 160.134401][ T6225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.276218][ T6286] erofs (device loop0): mounted with root inode @ nid 36. [ 160.287318][ T6225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.832900][ T6225] team0: Port device team_slave_0 added [ 160.875743][ T6225] team0: Port device team_slave_1 added [ 160.960690][ T6299] loop5: detected capacity change from 0 to 512 [ 160.999692][ T6299] EXT4-fs: inline encryption not supported [ 161.065765][ T6299] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 161.105032][ T12] bridge_slave_1: left allmulticast mode [ 161.131154][ T12] bridge_slave_1: left promiscuous mode [ 161.162616][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.254101][ T12] bridge_slave_0: left allmulticast mode [ 161.259764][ T12] bridge_slave_0: left promiscuous mode [ 161.268378][ T6299] EXT4-fs (loop5): 1 orphan inode deleted [ 161.497110][ T13] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 161.528836][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.592025][ T13] EXT4-fs error (device loop5): ext4_release_dquot:7032: comm kworker/u8:1: Failed to release dquot type 1 [ 161.634393][ T6299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.662831][ T13] loop5: lost filesystem error report for type 5 error -117 [ 161.719392][ T6299] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.885279][ T6299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.999996][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.047862][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.077590][ T12] bond0 (unregistering): Released all slaves [ 166.214642][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.334657][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.361543][ T6225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.378832][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.400729][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.439708][ T6341] binder: 6339:6341 ioctl 4018620d 0 returned -22 [ 166.468161][ T6225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.382614][ T6355] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.132' sets config #0 [ 167.400130][ T6359] loop0: detected capacity change from 0 to 2048 [ 167.401201][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 167.438519][ T6359] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.679296][ T6363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.687254][ T6363] IPv6: NLM_F_CREATE should be set when creating new route [ 167.690574][ T6366] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 167.734987][ T6363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.948333][ T12] hsr_slave_0: left promiscuous mode [ 169.002327][ T12] hsr_slave_1: left promiscuous mode [ 169.021415][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.030235][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.068148][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.081578][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.141449][ T12] veth1_macvtap: left promiscuous mode [ 169.157341][ T12] veth0_macvtap: left promiscuous mode [ 169.169916][ T12] veth1_vlan: left promiscuous mode [ 169.181938][ T12] veth0_vlan: left promiscuous mode [ 169.351422][ T5916] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 169.522306][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 169.534017][ T5916] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 169.546168][ T5916] usb 1-1: config 0 has no interface number 0 [ 169.558491][ T5916] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 169.577925][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.594182][ T5916] usb 1-1: Product: syz [ 169.601629][ T5916] usb 1-1: Manufacturer: syz [ 169.606239][ T5916] usb 1-1: SerialNumber: syz [ 169.643401][ T5916] usb 1-1: config 0 descriptor?? [ 169.855001][ T5916] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 169.875829][ T5916] uvcvideo 1-1:0.31: Failed to initialize entity for entity 32774 [ 169.902047][ T5916] uvcvideo 1-1:0.31: Failed to register entities (-22). [ 173.132626][ T6414] loop5: detected capacity change from 0 to 164 [ 173.972716][ T6414] ISOFS: unable to read i-node block [ 173.978191][ T6414] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 174.312230][ T5916] usb 1-1: USB disconnect, device number 5 [ 174.457896][ T12] team0 (unregistering): Port device team_slave_1 removed [ 174.515946][ T12] team0 (unregistering): Port device team_slave_0 removed [ 175.224153][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 175.907339][ T6225] hsr_slave_0: entered promiscuous mode [ 175.932639][ T6225] hsr_slave_1: entered promiscuous mode [ 175.952802][ T6225] debugfs: 'hsr0' already exists in 'hsr' [ 175.972581][ T6225] Cannot create hsr debugfs directory [ 176.634518][ T6431] loop5: detected capacity change from 0 to 1024 [ 176.642015][ T6431] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.648475][ T6431] EXT4-fs: Ignoring removed orlov option [ 176.887916][ T6431] EXT4-fs (loop5): Test dummy encryption mode enabled [ 176.916151][ T6431] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 176.927098][ T6431] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 176.936954][ T6431] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 177.047757][ T6390] team0: Port device team_slave_0 removed [ 178.449211][ T6443] capability: warning: `syz.2.162' uses 32-bit capabilities (legacy support in use) [ 178.521382][ T29] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 178.699524][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.740985][ T29] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 178.782592][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.834860][ T29] usb 1-1: config 0 descriptor?? [ 178.854732][ T6451] loop2: detected capacity change from 0 to 16 [ 178.921760][ T6451] erofs (device loop2): mounted with root inode @ nid 36. [ 178.974861][ T30] audit: type=1800 audit(1770889409.542:30): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.164" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 179.188569][ T6225] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 179.256197][ T6225] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 179.307383][ T29] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 179.340400][ T6225] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 181.227252][ T29] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input5 [ 181.304611][ T6225] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 181.523136][ T29] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 181.642329][ T29] usb 1-1: USB disconnect, device number 6 [ 181.902503][ T6476] 9pnet_virtio: no channels available for device syz [ 181.927743][ T6477] fido_id[6477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 181.953119][ T6472] loop1: detected capacity change from 0 to 2048 [ 182.081889][ T6472] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.117514][ T6225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.252615][ T6485] loop5: detected capacity change from 0 to 256 [ 182.358308][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 182.825535][ T6225] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.886289][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.893523][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.987724][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.994933][ T6031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.467042][ T30] audit: type=1326 audit(1770889414.032:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfd19bf79 code=0x7ffc0000 [ 183.671013][ T30] audit: type=1326 audit(1770889414.032:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfd19bf79 code=0x7ffc0000 [ 184.226427][ T30] audit: type=1326 audit(1770889414.092:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1dfd19bf79 code=0x7ffc0000 [ 184.461458][ T30] audit: type=1326 audit(1770889414.092:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfd19bf79 code=0x7ffc0000 [ 184.593762][ T30] audit: type=1326 audit(1770889414.092:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfd19bf79 code=0x7ffc0000 [ 184.700275][ T30] audit: type=1326 audit(1770889414.092:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f1dfd19bf79 code=0x7ffc0000 [ 184.809454][ T30] audit: type=1326 audit(1770889414.092:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfd19bf79 code=0x7ffc0000 [ 184.911353][ T30] audit: type=1326 audit(1770889414.092:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f1dfd19bf79 code=0x7ffc0000 [ 184.948520][ T6523] loop1: detected capacity change from 0 to 2048 [ 185.003412][ T30] audit: type=1326 audit(1770889414.092:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfd19bf79 code=0x7ffc0000 [ 185.046741][ T6225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.113719][ T30] audit: type=1326 audit(1770889415.422:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934679bf79 code=0x7ffc0000 [ 185.221501][ T30] audit: type=1326 audit(1770889415.422:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934679bf79 code=0x7ffc0000 [ 185.245427][ T6527] loop5: detected capacity change from 0 to 1024 [ 185.340728][ T30] audit: type=1326 audit(1770889415.422:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934679bf79 code=0x7ffc0000 [ 186.111746][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 186.161519][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 186.177552][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 186.197299][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 186.208942][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 186.702444][ T6546] fuse: Bad value for 'fd' [ 186.712256][ T6546] 9p: Bad value for 'rfdno' [ 186.988985][ T6556] loop2: detected capacity change from 0 to 8 [ 187.067732][ T6555] loop0: detected capacity change from 0 to 256 [ 188.684657][ T6225] veth0_vlan: entered promiscuous mode [ 188.786700][ T6225] veth1_vlan: entered promiscuous mode [ 189.780048][ T6225] veth0_macvtap: entered promiscuous mode [ 190.130739][ T6575] team0: Port device team_slave_0 removed [ 190.355156][ T6225] veth1_macvtap: entered promiscuous mode [ 190.444620][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.498326][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.556986][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.599440][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.639736][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.687862][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.700695][ T6604] loop0: detected capacity change from 0 to 512 [ 190.709807][ T6603] loop2: detected capacity change from 0 to 512 [ 190.718112][ T6603] EXT4-fs (loop2): Test dummy encryption mode enabled [ 191.648491][ T6603] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.926967][ T6604] EXT4-fs (loop0): 1 truncate cleaned up [ 191.937547][ T6603] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.203: bad orphan inode 131083 [ 191.966088][ T6604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.990152][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.991432][ T6603] loop2: lost filesystem error report for type 5 error -117 [ 192.031370][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.053591][ T6603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.305481][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.337339][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.356735][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 192.380475][ T30] audit: type=1800 audit(1770889422.902:100): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.202" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 192.404959][ T6603] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 194.119773][ T6603] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 194.164796][ T30] audit: type=1800 audit(1770889424.732:101): pid=6603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.203" name="file1" dev="loop2" ino=19 res=0 errno=0 [ 195.266246][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.833355][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.216144][ T6667] 9pnet_virtio: no channels available for device syz [ 198.906379][ T6654] team0: Port device team_slave_0 removed [ 199.077700][ T6677] loop5: detected capacity change from 0 to 8 [ 199.241523][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 199.879202][ T6673] syzkaller0: entered promiscuous mode [ 199.915695][ T6673] syzkaller0: entered allmulticast mode [ 199.960308][ T6688] loop6: detected capacity change from 0 to 256 [ 204.063807][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.079363][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.121383][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 204.637254][ T6731] 9pnet_virtio: no channels available for device syz [ 204.725888][ T6735] loop6: detected capacity change from 0 to 512 [ 204.795867][ T6735] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 205.176428][ T6735] EXT4-fs (loop6): 1 truncate cleaned up [ 205.508330][ T6735] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.896388][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 205.958525][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 205.984120][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 206.012998][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 206.031296][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 206.433216][ T29] kernel write not supported for file /input/event2 (pid: 29 comm: kworker/1:1) [ 206.533636][ T6225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.764041][ T6753] loop1: detected capacity change from 0 to 128 [ 206.969073][ T6753] netlink: 300 bytes leftover after parsing attributes in process `syz.1.237'. [ 206.992481][ T6759] loop6: detected capacity change from 0 to 512 [ 207.033101][ T6759] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 209.127453][ T6759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 209.161513][ T6759] System zones: 1-12 [ 209.193627][ T6759] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.236: bg 0: block 258: padding at end of block bitmap is not set [ 209.256726][ T6759] loop6: lost filesystem error report for type 5 error -117 [ 209.263715][ T6759] EXT4-fs (loop6): 1 truncate cleaned up [ 209.316623][ T6771] loop2: detected capacity change from 0 to 128 [ 209.323096][ T6759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.391807][ T6771] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 209.489730][ T6771] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 209.553506][ T6771] FAT-fs (loop2): Filesystem has been set read-only [ 209.621700][ T6771] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 209.621725][ T6776] 9pnet_fd: Insufficient options for proto=fd [ 209.664197][ T6225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.934106][ T6784] loop1: detected capacity change from 0 to 128 [ 210.002495][ T6786] loop2: detected capacity change from 0 to 2048 [ 210.511246][ T6791] 9pnet_virtio: no channels available for device syz [ 211.118740][ T6786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.131089][ T6786] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.150791][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.250'. [ 211.267086][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.250'. [ 211.281557][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.250'. [ 211.307182][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.250'. [ 211.844239][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.055210][ T6817] 9pnet_fd: Insufficient options for proto=fd [ 215.434838][ T6821] loop1: detected capacity change from 0 to 4096 [ 215.632058][ T6838] loop5: detected capacity change from 0 to 128 [ 215.942603][ T6841] netlink: 'syz.6.263': attribute type 10 has an invalid length. [ 216.001468][ T6841] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 216.383094][ T6821] EXT4-fs: error -4 creating inode table initialization thread [ 216.469469][ T6821] EXT4-fs (loop1): mount failed [ 216.825960][ T6851] overlayfs: missing 'lowerdir' [ 217.224564][ T6862] loop5: detected capacity change from 0 to 512 [ 217.267307][ T6862] EXT4-fs (loop5): Test dummy encryption mode enabled [ 217.295438][ T6865] fuse: Bad value for 'fd' [ 217.320129][ T6862] EXT4-fs error (device loop5): __ext4_iget:5426: inode #11: block 1: comm syz.5.270: invalid block [ 217.362716][ T6865] 9p: Bad value for 'rfdno' [ 217.371961][ T6862] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 217.375322][ T6862] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.270: couldn't read orphan inode 11 (err -117) [ 217.497072][ T6862] loop5: lost filesystem error report for type 5 error -117 [ 217.528809][ T6862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.659681][ T6862] EXT4-fs error (device loop5): ext4_add_entry:2415: inode #2: comm syz.5.270: Directory hole found for htree leaf block 0 [ 218.844986][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.913102][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.6.275'. [ 219.333341][ T788] kernel read not supported for file /cpu/0/msr (pid: 788 comm: kworker/0:2) [ 220.343857][ T6905] netlink: 'syz.2.277': attribute type 10 has an invalid length. [ 220.392267][ T6905] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 221.107732][ T6911] loop5: detected capacity change from 0 to 512 [ 221.143006][ T6912] overlayfs: missing 'lowerdir' [ 221.220172][ T6916] loop2: detected capacity change from 0 to 8 [ 221.396993][ T6911] EXT4-fs (loop5): Test dummy encryption mode enabled [ 221.449072][ T6911] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 226.431445][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 226.440320][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 226.446480][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 226.452594][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 226.458612][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 226.915208][ T6953] loop0: detected capacity change from 0 to 1024 [ 226.928504][ T6953] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.039253][ T6957] loop1: detected capacity change from 0 to 128 [ 227.056036][ T6957] EXT4-fs (loop1): Test dummy encryption mode enabled [ 227.084746][ T6953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.103775][ T6957] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.231496][ T6957] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.333722][ T6963] loop2: detected capacity change from 0 to 512 [ 227.462338][ T6963] EXT4-fs warning (device loop2): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 227.576215][ T6968] netlink: 'syz.6.295': attribute type 10 has an invalid length. [ 227.669624][ T6963] EXT4-fs warning (device loop2): dx_probe:848: Enable large directory feature to access it [ 228.076568][ T6963] EXT4-fs warning (device loop2): dx_probe:933: inode #2: comm syz.2.293: Corrupt directory, running e2fsck is recommended [ 228.117055][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.220111][ T6963] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 228.319437][ T6963] EXT4-fs error (device loop2): ext4_iget_extra_inode:5072: inode #15: comm syz.2.293: corrupted in-inode xattr: e_name out of bounds [ 228.402021][ T6963] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 228.403128][ T6963] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.293: couldn't read orphan inode 15 (err -117) [ 228.479421][ T5824] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.556894][ T6963] loop2: lost filesystem error report for type 5 error -117 [ 228.599601][ T6963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.708883][ T6984] loop1: detected capacity change from 0 to 8 [ 229.070596][ T6991] capability: warning: `syz.0.301' uses deprecated v2 capabilities in a way that may be insecure [ 231.407748][ T6995] infiniband syz2: set down [ 231.412450][ T6995] infiniband syz2: added ipvlan0 [ 231.421227][ T6995] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 231.424492][ T6995] infiniband syz2: Couldn't open port 1 [ 231.431513][ T6958] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1303: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 231.458253][ T6995] RDS/IB: syz2: added [ 231.462609][ T6995] smc: adding ib device syz2 with port count 1 [ 231.468847][ T6995] smc: ib device syz2 port 1 has no pnetid [ 232.873561][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.091738][ T7008] loop0: detected capacity change from 0 to 512 [ 233.187998][ T7008] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.623301][ T7008] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #17: comm syz.0.305: inode has both inline data and extents flags [ 233.781404][ T7008] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 233.881483][ T7008] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.305: couldn't read orphan inode 17 (err -117) [ 234.239404][ T7008] loop0: lost filesystem error report for type 5 error -117 [ 234.979010][ T7037] netlink: 'syz.1.310': attribute type 10 has an invalid length. [ 235.214121][ T7035] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 235.395900][ T7037] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 235.531975][ T5986] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 235.572286][ T7008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.773452][ T5986] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12592, setting to 64 [ 235.805219][ T5986] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 235.834713][ T5986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.061339][ T7023] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 236.475676][ T7049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.305'. [ 237.180569][ T7047] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.305: bg 0: block 65: padding at end of block bitmap is not set [ 237.222869][ T7047] Quota error (device loop0): write_blk: dquota write failed [ 237.234603][ T7047] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 237.248237][ T7048] Quota error (device loop0): do_check_range: Getting block 144 out of range 0-5 [ 237.259304][ T7047] EXT4-fs error (device loop0): ext4_acquire_dquot:6996: comm syz.0.305: Failed to acquire dquot type 0 [ 238.463841][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.061658][ T5986] usb 6-1: string descriptor 0 read error: -71 [ 239.309000][ T7061] loop6: detected capacity change from 0 to 512 [ 239.344964][ T7061] EXT4-fs: Ignoring removed orlov option [ 239.393273][ T7061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.445741][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 239.498697][ T7061] EXT4-fs (loop6): orphan cleanup on readonly fs [ 239.562645][ T7061] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.316: bg 0: block 248: padding at end of block bitmap is not set [ 239.641480][ T7061] loop6: lost filesystem error report for type 5 error -117 [ 239.643769][ T7061] Quota error (device loop6): write_blk: dquota write failed [ 239.704446][ T7061] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 239.745442][ T7061] EXT4-fs error (device loop6): ext4_acquire_dquot:6996: comm syz.6.316: Failed to acquire dquot type 1 [ 239.844303][ T7061] loop6: lost filesystem error report for type 5 error -117 [ 239.869659][ T7061] EXT4-fs (loop6): 1 truncate cleaned up [ 239.983978][ T5986] usb 6-1: USB disconnect, device number 4 [ 240.035059][ T7061] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.706852][ T7105] loop1: detected capacity change from 0 to 512 [ 242.731816][ T7105] EXT4-fs: Ignoring removed oldalloc option [ 242.780040][ T7105] EXT4-fs (loop1): 1 truncate cleaned up [ 242.780726][ T6225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.789253][ T7105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.004786][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 243.027224][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 243.036617][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 243.045957][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 243.228135][ T7121] loop6: detected capacity change from 0 to 512 [ 243.277261][ T7121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 243.344430][ T7121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.408475][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 243.475144][ T7121] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.636051][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.586746][ T6225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.489129][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 247.509870][ T7162] fuse: Bad value for 'fd' [ 247.549572][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 247.571385][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 247.591978][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 247.597295][ T5986] kernel read not supported for file 159/task/159/stack (pid: 5986 comm: kworker/1:7) [ 248.001013][ T7168] loop6: detected capacity change from 0 to 1024 [ 248.418618][ T7171] netlink: 'syz.0.324': attribute type 10 has an invalid length. [ 248.469401][ T7171] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 254.724378][ T7198] loop0: detected capacity change from 0 to 128 [ 255.389884][ T7202] loop0: detected capacity change from 0 to 8192 [ 256.256794][ T7213] netlink: 'syz.0.359': attribute type 10 has an invalid length. [ 256.700213][ T7211] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 258.508171][ T7224] loop0: detected capacity change from 0 to 256 [ 258.577392][ T7224] vfat: Bad value for 'time_offset' [ 259.300871][ T10] kernel read not supported for file /cpu/0/msr (pid: 10 comm: kworker/0:1) [ 259.309679][ T788] kernel write not supported for file /input/event2 (pid: 788 comm: kworker/0:2) [ 259.416310][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.6.353'. [ 259.484180][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.365'. [ 259.531343][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.365'. [ 259.551353][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.365'. [ 259.566630][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.365'. [ 259.906108][ T7240] fuse: Bad value for 'fd' [ 259.923079][ T5987] kernel read not supported for file 202/task/202/stack (pid: 5987 comm: kworker/1:8) [ 261.999238][ T7256] loop5: detected capacity change from 0 to 128 [ 264.352651][ T7278] loop1: detected capacity change from 0 to 8 [ 265.544116][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.682377][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.869826][ T7292] loop6: detected capacity change from 0 to 256 [ 266.928588][ T7292] exfat: Deprecated parameter 'namecase' [ 266.975087][ T7292] exfat: Deprecated parameter 'namecase' [ 267.051362][ T7292] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 267.171871][ T7296] 9p: Bad value for 'rfdno' [ 269.261912][ T5987] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 269.601222][ T7312] loop6: detected capacity change from 0 to 128 [ 269.671990][ T5987] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 269.681374][ T5987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.692426][ T5987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.703573][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 269.712341][ T5987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.721985][ T5987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.733689][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 269.743050][ T5987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.752509][ T5987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.781525][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 269.810662][ T5987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.834385][ T5987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.864211][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 269.888207][ T5987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.927227][ T5987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.980681][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 270.009485][ T5987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.847907][ T5987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.961616][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 271.021496][ T5987] usb 3-1: unable to read config index 6 descriptor/start: -71 [ 271.029110][ T5987] usb 3-1: can't read configurations, error -71 [ 271.284787][ T7328] loop5: detected capacity change from 0 to 512 [ 271.391728][ T7328] EXT4-fs warning (device loop5): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 271.558716][ T7328] EXT4-fs warning (device loop5): dx_probe:848: Enable large directory feature to access it [ 272.122128][ T7328] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.393: Corrupt directory, running e2fsck is recommended [ 272.231793][ T7328] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 272.313527][ T7328] EXT4-fs error (device loop5): ext4_iget_extra_inode:5072: inode #15: comm syz.5.393: corrupted in-inode xattr: e_name out of bounds [ 272.357172][ T7328] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 272.361388][ T7328] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.393: couldn't read orphan inode 15 (err -117) [ 272.429898][ T7328] loop5: lost filesystem error report for type 5 error -117 [ 272.466715][ T7328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.674453][ T7328] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 272.884936][ T7348] 9p: Bad value for 'rfdno' [ 273.155507][ T7352] loop0: detected capacity change from 0 to 1024 [ 274.357423][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.704095][ T5987] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 276.875004][ T7373] fuse: Bad value for 'fd' [ 276.880659][ T7373] 9p: Bad value for 'rfdno' [ 276.923436][ T5987] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 276.952576][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 276.981414][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.137979][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 277.146302][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.155584][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.168450][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 277.177341][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.186580][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.248107][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 277.257332][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.274883][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.296116][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 277.309568][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.355605][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.379511][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 277.410215][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.447227][ T7378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.406'. [ 277.456185][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.456243][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 277.491702][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.521830][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.534856][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 277.543017][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.564692][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.594654][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 277.619660][ T5987] usb 2-1: string descriptor 0 read error: -71 [ 277.646079][ T5987] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 277.917381][ T5987] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 277.930876][ T5987] usb 2-1: config 0 descriptor?? [ 277.936688][ T5987] usb 2-1: can't set config #0, error -71 [ 277.945599][ T5987] usb 2-1: USB disconnect, device number 3 [ 278.690415][ T7384] 9p: Could not find request transport: fd0x0000000000000003 [ 278.721967][ T5140] Bluetooth: hci6: command 0x0406 tx timeout [ 278.762980][ T7392] loop2: detected capacity change from 0 to 8 [ 279.898775][ T5916] kernel read not supported for file /cpu/0/msr (pid: 5916 comm: kworker/0:6) [ 281.445801][ T7394] loop0: detected capacity change from 0 to 4096 [ 282.387650][ T7394] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 282.387778][ T7394] EXT4-fs: failed to create workqueue [ 282.421637][ T7394] EXT4-fs (loop0): mount failed [ 282.865146][ T7427] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 282.877951][ T7426] loop2: detected capacity change from 0 to 1024 [ 286.688288][ T7453] loop5: detected capacity change from 0 to 512 [ 286.857646][ T7453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.051364][ T7453] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.235342][ T7453] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.425: corrupted inode contents [ 287.292070][ T7453] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #2: comm syz.5.425: mark_inode_dirty error [ 287.346133][ T7453] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.425: corrupted inode contents [ 287.378956][ T7453] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.425: mark_inode_dirty error [ 287.600774][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.977113][ T7471] loop5: detected capacity change from 0 to 512 [ 287.992733][ T7471] EXT4-fs: Ignoring removed nobh option [ 288.006086][ T7471] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 288.050687][ T7471] EXT4-fs (loop5): 1 truncate cleaned up [ 288.104327][ T7471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.119393][ T7474] loop2: detected capacity change from 0 to 1024 [ 290.418085][ T5838] EXT4-fs error (device loop5): htree_dirblock_to_tree:1077: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 290.822585][ T7484] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 290.962715][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.071873][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.104413][ T5916] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 291.277629][ T5916] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 291.313922][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.352086][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.375124][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.391348][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0 [ 291.417901][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.431359][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.442673][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0 [ 291.450832][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.460795][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.472810][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0 [ 291.480967][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.500500][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.522513][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.533068][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0 [ 291.553263][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.567240][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.602537][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0 [ 291.621932][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.630848][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.651285][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0 [ 291.673084][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.693223][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.720766][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.743506][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0 [ 291.772251][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.781195][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.838162][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0 [ 291.863920][ T5916] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 291.874070][ T5916] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 291.891394][ T5916] usb 7-1: Product: syz [ 291.895655][ T5916] usb 7-1: Manufacturer: syz [ 291.914521][ T5916] usb 7-1: SerialNumber: syz [ 291.942478][ T5916] usb 7-1: config 0 descriptor?? [ 292.018798][ T5916] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 292.255924][ T5140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.266060][ T5140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.275320][ T5140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.286447][ T5140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.294713][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.330459][ T7499] loop2: detected capacity change from 0 to 1024 [ 292.384045][ T49] bridge_slave_1: left allmulticast mode [ 292.400506][ T49] bridge_slave_1: left promiscuous mode [ 292.413505][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.445699][ T49] bridge_slave_0: left allmulticast mode [ 292.461335][ T49] bridge_slave_0: left promiscuous mode [ 292.472505][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.311054][ T1540] usb 7-1: USB disconnect, device number 3 [ 293.556436][ T1540] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 295.056970][ T5140] Bluetooth: hci2: command tx timeout [ 296.402592][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.664002][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.753396][ T49] bond0 (unregistering): Released all slaves [ 297.099714][ T7541] loop2: detected capacity change from 0 to 512 [ 297.111358][ T5140] Bluetooth: hci2: command tx timeout [ 297.241926][ T7543] loop1: detected capacity change from 0 to 1024 [ 297.271074][ T7541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.331475][ T7541] ext4 filesystem being mounted at /83/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.358823][ T7541] ext4: Unknown parameter '01777777777777777777777ÿÿÿÿ01777777777777777777777ñ¼ÊíXc¥vÌ:ýQºòœÞ' [ 297.483814][ T788] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 297.552364][ T788] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 297.629945][ T7552] loop6: detected capacity change from 0 to 4096 [ 297.711137][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.853297][ T7552] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.922031][ T7552] EXT4-fs: Ignoring removed orlov option [ 298.001127][ T7552] EXT4-fs (loop6): Test dummy encryption mode enabled [ 298.113326][ T7552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.428708][ T7555] fido_id[7555]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 298.959982][ T6225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.191985][ T5140] Bluetooth: hci2: command tx timeout [ 299.364121][ T5916] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 299.498749][ T7590] 9p: Bad value for 'rfdno' [ 299.547842][ T5916] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 299.574713][ T5916] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.611448][ T5916] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.652566][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 299.686113][ T5916] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.763045][ T5916] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.789687][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 299.975845][ T5916] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.489594][ T5916] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.500592][ T49] hsr_slave_0: left promiscuous mode [ 300.501930][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 300.518706][ T5916] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.568959][ T5916] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.590344][ T7604] xt_hashlimit: size too large, truncated to 1048576 [ 300.607685][ T49] hsr_slave_1: left promiscuous mode [ 300.623157][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 300.642477][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.656452][ T5916] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.676196][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 300.685030][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.693766][ T5916] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.708111][ T7607] loop1: detected capacity change from 0 to 1024 [ 300.721520][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 300.724904][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.749504][ T5916] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.784065][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.913239][ T49] veth1_macvtap: left promiscuous mode [ 300.950057][ T49] veth0_macvtap: left promiscuous mode [ 300.976794][ T49] veth1_vlan: left promiscuous mode [ 300.996437][ T49] veth0_vlan: left promiscuous mode [ 301.011333][ T5916] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.030400][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 301.046295][ T5916] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.061383][ T5916] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.281635][ T5140] Bluetooth: hci2: command tx timeout [ 301.799886][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 301.825650][ T5916] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.877379][ T5916] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.930077][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 301.949075][ T5916] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 301.969519][ T5916] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 301.998095][ T5916] usb 1-1: Product: syz [ 302.010547][ T5916] usb 1-1: Manufacturer: syz [ 302.023424][ T5916] usb 1-1: SerialNumber: syz [ 302.052715][ T5916] usb 1-1: config 0 descriptor?? [ 302.077668][ T5916] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 302.153766][ T1540] usb 1-1: USB disconnect, device number 7 [ 302.228341][ T1540] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 302.795012][ T7634] 9p: Bad value for 'wfdno' [ 302.931680][ T5916] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 303.105073][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.129187][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.150253][ T5916] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 303.181649][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.204267][ T5916] usb 1-1: config 0 descriptor?? [ 303.367518][ T49] team0 (unregistering): Port device team_slave_1 removed [ 303.661105][ T5916] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x3 [ 303.706176][ T5916] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 303.917723][ T7640] loop6: detected capacity change from 0 to 8 [ 304.023068][ T7642] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 304.557261][ T5916] usb 1-1: USB disconnect, device number 8 [ 305.257848][ T7656] loop1: detected capacity change from 0 to 256 [ 305.265176][ T5900] kernel read not supported for file 152/task/152/stack (pid: 5900 comm: kworker/1:5) [ 305.431764][ T7656] FAT-fs (loop1): Directory bread(block 64) failed [ 305.438336][ T7656] FAT-fs (loop1): Directory bread(block 65) failed [ 305.501392][ T7656] FAT-fs (loop1): Directory bread(block 66) failed [ 305.512608][ T7656] FAT-fs (loop1): Directory bread(block 67) failed [ 305.519781][ T7656] FAT-fs (loop1): Directory bread(block 68) failed [ 305.601460][ T7656] FAT-fs (loop1): Directory bread(block 69) failed [ 305.642038][ T7656] FAT-fs (loop1): Directory bread(block 70) failed [ 305.648876][ T7656] FAT-fs (loop1): Directory bread(block 71) failed [ 305.675107][ T7656] FAT-fs (loop1): Directory bread(block 72) failed [ 305.695283][ T7656] FAT-fs (loop1): Directory bread(block 73) failed [ 305.704882][ T7498] chnl_net:caif_netlink_parms(): no params data found [ 306.003270][ T5900] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 306.193722][ T5900] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 306.215630][ T5900] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.248057][ T7498] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.288036][ T5900] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.304332][ T7498] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.324651][ T5900] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.327607][ T7498] bridge_slave_0: entered allmulticast mode [ 306.339543][ T5900] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.371018][ T5900] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.371449][ T7498] bridge_slave_0: entered promiscuous mode [ 306.404588][ T5900] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.417821][ T7498] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.428436][ T5900] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.444657][ T5900] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.449619][ T7498] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.494842][ T7498] bridge_slave_1: entered allmulticast mode [ 306.506947][ T5900] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.520420][ T7498] bridge_slave_1: entered promiscuous mode [ 306.538765][ T5900] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.568667][ T5900] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.600955][ T5900] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.622639][ T5900] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.654046][ T5900] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.685341][ T5900] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.712707][ T7498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.721450][ T5900] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.765298][ T5900] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.792545][ T7498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.806708][ T5900] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.821047][ T7692] loop2: detected capacity change from 0 to 512 [ 306.830353][ T5900] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.849613][ T5900] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.853623][ T7692] EXT4-fs: Ignoring removed mblk_io_submit option [ 306.907558][ T7692] EXT4-fs (loop2): Test dummy encryption mode enabled [ 306.911292][ T5900] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.934754][ T7692] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 306.987046][ T7498] team0: Port device team_slave_0 added [ 306.991722][ T5900] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 307.050477][ T5900] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 307.098715][ T7692] EXT4-fs (loop2): 1 truncate cleaned up [ 307.113639][ T7692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.132165][ T5900] usb 1-1: config 0 interface 0 has no altsetting 0 [ 307.134851][ T7498] team0: Port device team_slave_1 added [ 307.182324][ T5900] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 307.194465][ T5900] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 307.241358][ T5900] usb 1-1: Product: syz [ 307.295017][ T5900] usb 1-1: Manufacturer: syz [ 307.312420][ T5900] usb 1-1: SerialNumber: syz [ 307.354729][ T5900] usb 1-1: config 0 descriptor?? [ 307.378219][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.404202][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.494048][ T5900] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 307.501270][ T7498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.509942][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.604024][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.734241][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.753627][ T7498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.800753][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.862760][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.132078][ T7498] hsr_slave_0: entered promiscuous mode [ 308.160077][ T7498] hsr_slave_1: entered promiscuous mode [ 308.200411][ T7498] debugfs: 'hsr0' already exists in 'hsr' [ 308.240007][ T7498] Cannot create hsr debugfs directory [ 308.493434][ T5986] usb 1-1: USB disconnect, device number 9 [ 308.512726][ T5986] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 309.076313][ T7498] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 309.132960][ T7498] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 309.218392][ T7498] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 309.283345][ T7498] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 309.306870][ T7719] loop0: detected capacity change from 0 to 512 [ 309.597128][ T7728] loop2: detected capacity change from 0 to 1024 [ 309.903636][ T7498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.099455][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'. [ 310.692888][ T7742] overlayfs: failed to clone upperpath [ 310.744888][ T7498] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.799016][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.806242][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.887521][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.894751][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.468289][ T7761] netlink: 'syz.1.494': attribute type 3 has an invalid length. [ 311.651385][ T5900] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 311.746374][ T7498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.812430][ T5900] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 311.877222][ T5900] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.919242][ T5900] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 311.961848][ T5900] usb 7-1: config 0 interface 0 has no altsetting 0 [ 311.986448][ T5900] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.012586][ T5900] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.034153][ T5900] usb 7-1: config 0 interface 0 has no altsetting 0 [ 312.052047][ T5900] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.064164][ T5900] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.092012][ T5900] usb 7-1: config 0 interface 0 has no altsetting 0 [ 312.107562][ T5900] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.120900][ T5900] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.143571][ T5900] usb 7-1: config 0 interface 0 has no altsetting 0 [ 312.160455][ T5900] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.173707][ T5900] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.201368][ T5900] usb 7-1: config 0 interface 0 has no altsetting 0 [ 312.217055][ T5900] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.232683][ T5900] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.258199][ T5900] usb 7-1: config 0 interface 0 has no altsetting 0 [ 312.274959][ T5900] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.298705][ T5900] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.298854][ T7745] loop0: detected capacity change from 0 to 40427 [ 312.332044][ T5900] usb 7-1: config 0 interface 0 has no altsetting 0 [ 312.346586][ T7745] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 312.358107][ T5900] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.368561][ T7745] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 312.393515][ T5900] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 312.404500][ T7745] F2FS-fs (loop0): invalid crc value [ 312.426540][ T5900] usb 7-1: config 0 interface 0 has no altsetting 0 [ 312.445743][ T5900] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 312.461380][ T5900] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 312.481308][ T5900] usb 7-1: Product: syz [ 312.492270][ T5900] usb 7-1: Manufacturer: syz [ 312.501729][ T5900] usb 7-1: SerialNumber: syz [ 312.529071][ T5900] usb 7-1: config 0 descriptor?? [ 312.563537][ T5900] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 312.788768][ T7782] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 313.066088][ T7745] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 313.770141][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.816930][ T7745] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 313.834168][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.860561][ T7498] veth0_vlan: entered promiscuous mode [ 314.110978][ T7745] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 314.199285][ T7498] veth1_vlan: entered promiscuous mode [ 314.322663][ T7498] veth0_macvtap: entered promiscuous mode [ 314.353116][ T7793] loop1: detected capacity change from 0 to 1024 [ 314.363811][ T7498] veth1_macvtap: entered promiscuous mode [ 314.409142][ T7498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.447039][ T7795] loop2: detected capacity change from 0 to 1024 [ 314.713228][ T7795] ext4: Bad value for 'barrier' [ 314.756937][ T7498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.772756][ T3486] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.948107][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.350807][ C1] usb 7-1: yurex_control_callback - control failed: -2 [ 315.380821][ T788] usb 7-1: USB disconnect, device number 4 [ 315.408428][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.470387][ T788] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 315.574565][ T33] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.861528][ T30] audit: type=1326 audit(1770889546.422:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.4.504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dfd19bf79 code=0x0 [ 315.885420][ T7620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.892658][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 315.927249][ T7620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.020933][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.050627][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.536029][ T7818] loop1: detected capacity change from 0 to 4096 [ 316.607162][ T7818] EXT4-fs (loop1): Test dummy encryption mode enabled [ 316.706577][ T7818] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 317.544801][ T7818] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c11c, mo2=0002] [ 317.611572][ T7818] System zones: 0-5 [ 317.677098][ T7818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.826036][ T7837] loop0: detected capacity change from 0 to 128 [ 317.837699][ T7818] Quota error (device loop1): do_check_range: Getting block 16777221 out of range 1-5 [ 317.881376][ T7818] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 317.920932][ T7839] loop2: detected capacity change from 0 to 256 [ 317.929688][ T7818] EXT4-fs error (device loop1): ext4_acquire_dquot:6996: comm syz.1.507: Failed to acquire dquot type 1 [ 318.046962][ T7839] FAT-fs (loop2): Directory bread(block 64) failed [ 318.084168][ T7839] FAT-fs (loop2): Directory bread(block 65) failed [ 318.099929][ T7839] FAT-fs (loop2): Directory bread(block 66) failed [ 318.137432][ T7839] FAT-fs (loop2): Directory bread(block 67) failed [ 318.171609][ T7839] FAT-fs (loop2): Directory bread(block 68) failed [ 318.210507][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.219639][ T7839] FAT-fs (loop2): Directory bread(block 69) failed [ 318.304044][ T7839] FAT-fs (loop2): Directory bread(block 70) failed [ 318.310626][ T7839] FAT-fs (loop2): Directory bread(block 71) failed [ 318.361854][ T7839] FAT-fs (loop2): Directory bread(block 72) failed [ 318.421867][ T7847] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 318.481375][ T7839] FAT-fs (loop2): Directory bread(block 73) failed [ 318.572708][ T7846] loop0: detected capacity change from 0 to 1024 [ 318.626642][ T7849] overlayfs: failed lookup in lower (newroot/2, name='file0', err=-40): overlapping layers [ 321.110143][ T7867] 9p: Bad value for 'rfdno' [ 321.322077][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 321.333271][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 321.513933][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 321.563308][ T7881] loop7: detected capacity change from 0 to 512 [ 321.572373][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.582347][ T7881] EXT4-fs: Ignoring removed i_version option [ 321.613405][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 321.666275][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 321.686429][ T7881] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.715831][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.801471][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 321.871361][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 321.900805][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.925348][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 321.966779][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 322.007545][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.041304][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.080301][ T7881] syz.7.523 (pid 7881) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 322.090743][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 322.136930][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.168755][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.206220][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 322.227412][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.257831][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.291495][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 322.317662][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.341297][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.364323][ T7498] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.377087][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 322.403145][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.449067][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.519040][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 322.550466][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 322.610594][ T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 322.652266][ T9] usb 2-1: Product: syz [ 322.656472][ T9] usb 2-1: Manufacturer: syz [ 322.695465][ T9] usb 2-1: SerialNumber: syz [ 322.703479][ T9] usb 2-1: config 0 descriptor?? [ 322.721679][ T7908] loop7: detected capacity change from 0 to 16 [ 322.743902][ T9] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 322.761397][ T7908] erofs (device loop7): invalid ishare xattr prefix id 0 [ 323.094440][ T7913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.120244][ T7913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.182765][ T7919] loop7: detected capacity change from 0 to 8 [ 323.253063][ T7918] loop6: detected capacity change from 0 to 1024 [ 325.036868][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 325.081713][ T9] usb 2-1: USB disconnect, device number 4 [ 325.103553][ T9] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 325.541866][ T7938] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 325.861647][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 325.893344][ T7946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.538'. [ 325.940654][ T7951] loop1: detected capacity change from 0 to 128 [ 326.413003][ T7957] loop2: detected capacity change from 0 to 256 [ 326.505823][ T7957] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 326.556845][ T5986] kernel read not supported for file 191/task/191/stack (pid: 5986 comm: kworker/1:7) [ 326.715875][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.734044][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.621380][ T1540] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 327.682330][ T7983] loop6: detected capacity change from 0 to 8 [ 328.677107][ T1540] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 328.755845][ T1540] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.093690][ T1540] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 329.160311][ T1540] usb 3-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 329.211338][ T1540] usb 3-1: config 0 interface 0 has no altsetting 0 [ 329.260009][ T1540] usb 3-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 329.295541][ T1540] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.334511][ T1540] usb 3-1: config 0 descriptor?? [ 329.340377][ T7976] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 329.454470][ T5987] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 330.682163][ T5987] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 330.721012][ T5987] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.741336][ T5987] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.782000][ T5987] usb 1-1: config 0 interface 0 has no altsetting 0 [ 330.992025][ T8011] loop2: detected capacity change from 0 to 128 [ 331.027973][ T1540] usb 3-1: string descriptor 0 read error: -71 [ 331.042976][ T5987] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.061395][ T5987] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.081434][ T5987] usb 1-1: config 0 interface 0 has no altsetting 0 [ 331.092037][ T1540] usbhid 3-1:0.0: can't add hid device: -71 [ 331.098048][ T1540] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 331.127409][ T5987] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.236485][ T5987] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 332.045479][ T1540] usb 3-1: USB disconnect, device number 4 [ 332.104758][ T5987] usb 1-1: config 0 interface 0 has no altsetting 0 [ 333.372832][ T5987] usb 1-1: unable to read config index 3 descriptor/start: -71 [ 333.451291][ T5987] usb 1-1: can't read configurations, error -71 [ 333.568067][ T8024] loop7: detected capacity change from 0 to 512 [ 333.723070][ T8024] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 333.830936][ T10] kernel read not supported for file /cpu/0/msr (pid: 10 comm: kworker/0:1) [ 334.906646][ T8048] loop0: detected capacity change from 0 to 1024 [ 336.760116][ T8075] loop6: detected capacity change from 0 to 128 [ 338.322518][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.574'. [ 339.146691][ T1540] kernel read not supported for file /293/stack (pid: 1540 comm: kworker/1:2) [ 340.299531][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.309236][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.321362][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.339425][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.352914][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.391471][ T8119] loop7: detected capacity change from 0 to 128 [ 340.467332][ T8119] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.573812][ T8119] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.578401][ T5140] Bluetooth: hci3: command tx timeout [ 342.694635][ T2933] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.718546][ T7498] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.052286][ T8147] loop0: detected capacity change from 0 to 4096 [ 343.071874][ T8136] team0: Port device team_slave_0 removed [ 343.096529][ T8147] EXT4-fs (loop0): Test dummy encryption mode enabled [ 343.128209][ T8147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.168963][ T8147] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 343.322195][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.415974][ T2933] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.652289][ T8166] loop7: detected capacity change from 0 to 512 [ 343.702390][ T8166] EXT4-fs: Ignoring removed nobh option [ 343.769753][ T8166] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 343.828796][ T5987] kernel read not supported for file /cpu/0/msr (pid: 5987 comm: kworker/1:8) [ 344.511921][ T8166] EXT4-fs (loop7): 1 truncate cleaned up [ 344.525749][ T8166] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.531732][ T8175] fuse: Bad value for 'fd' [ 344.673716][ T5140] Bluetooth: hci3: command tx timeout [ 344.682480][ T8175] 9p: Bad value for 'rfdno' [ 344.723838][ T2933] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.954053][ T7498] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.036749][ T2933] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.188900][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 345.437489][ T8197] loop0: detected capacity change from 0 to 128 [ 346.267469][ T8197] FAT-fs (loop0): Directory bread(block 414) failed [ 346.289854][ T8197] FAT-fs (loop0): Directory bread(block 415) failed [ 346.319711][ T8197] FAT-fs (loop0): Directory bread(block 416) failed [ 346.339990][ T8197] FAT-fs (loop0): Directory bread(block 417) failed [ 346.361414][ T8197] FAT-fs (loop0): Directory bread(block 418) failed [ 346.368064][ T8197] FAT-fs (loop0): Directory bread(block 419) failed [ 346.378385][ T8197] FAT-fs (loop0): Directory bread(block 420) failed [ 346.387588][ T8197] FAT-fs (loop0): Directory bread(block 421) failed [ 346.721288][ T5140] Bluetooth: hci3: command tx timeout [ 347.421614][ T2933] bridge_slave_1: left allmulticast mode [ 347.427378][ T2933] bridge_slave_1: left promiscuous mode [ 347.480232][ T2933] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.566159][ T2933] bridge_slave_0: left allmulticast mode [ 347.585089][ T2933] bridge_slave_0: left promiscuous mode [ 347.599878][ T2933] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.990296][ T8230] netlink: 'syz.6.610': attribute type 10 has an invalid length. [ 348.792114][ T5140] Bluetooth: hci3: command tx timeout [ 348.993525][ T2933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.005861][ T2933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.018459][ T2933] bond0 (unregistering): Released all slaves [ 349.059903][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 349.573312][ T8242] 9p: Bad value for 'rfdno' [ 349.601819][ T8244] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 351.137403][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 351.324669][ T8111] chnl_net:caif_netlink_parms(): no params data found [ 351.435253][ T2933] hsr_slave_0: left promiscuous mode [ 351.462555][ T2933] hsr_slave_1: left promiscuous mode [ 351.468733][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.501306][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.552791][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.560219][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.617096][ T8272] process 'syz.1.620' launched '/dev/fd/3' with NULL argv: empty string added [ 351.624227][ T2933] veth1_macvtap: left promiscuous mode [ 351.645955][ T2933] veth0_macvtap: left promiscuous mode [ 351.657362][ T2933] veth1_vlan: left promiscuous mode [ 351.678706][ T2933] veth0_vlan: left promiscuous mode [ 353.625630][ T8288] 9pnet_virtio: no channels available for device syz [ 356.310919][ T8300] 9p: Bad value for 'rfdno' [ 356.669998][ T2933] team0 (unregistering): Port device team_slave_1 removed [ 356.670680][ T8305] fuse: Bad value for 'fd' [ 356.718030][ T8305] 9p: Bad value for 'rfdno' [ 358.303603][ T8274] team0: Port device team_slave_0 removed [ 358.365051][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 358.640532][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 358.828231][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.837482][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.844738][ T8111] bridge_slave_0: entered allmulticast mode [ 358.853248][ T8111] bridge_slave_0: entered promiscuous mode [ 358.862944][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.870476][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.887813][ T8111] bridge_slave_1: entered allmulticast mode [ 358.896340][ T8111] bridge_slave_1: entered promiscuous mode [ 358.972026][ T8111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.999642][ T8111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.176352][ T8111] team0: Port device team_slave_0 added [ 359.225230][ T8111] team0: Port device team_slave_1 added [ 361.681426][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.787687][ T8350] netlink: 'syz.1.638': attribute type 10 has an invalid length. [ 361.796439][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.849857][ T8111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.342018][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.349004][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.489691][ T8111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.603926][ T8352] 9p: Bad value for 'rfdno' [ 363.874463][ T8111] hsr_slave_0: entered promiscuous mode [ 363.881269][ T8111] hsr_slave_1: entered promiscuous mode [ 365.017885][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 365.295216][ T8111] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 365.435681][ T8111] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 365.480347][ T8111] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 365.555051][ T8111] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 366.878727][ T8400] loop7: detected capacity change from 0 to 1024 [ 366.982768][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.034959][ T8111] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.113530][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.120747][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.643796][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.650993][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.037945][ T8418] loop0: detected capacity change from 0 to 128 [ 369.055058][ T8111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.355195][ T8434] 9pnet_virtio: no channels available for device syz [ 370.531776][ T8111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.946669][ T8445] loop7: detected capacity change from 0 to 512 [ 371.144873][ T8445] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.231489][ T8445] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.648494][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.6.654'. [ 372.254288][ T8111] veth0_vlan: entered promiscuous mode [ 372.326526][ T8111] veth1_vlan: entered promiscuous mode [ 372.563171][ T8111] veth0_macvtap: entered promiscuous mode [ 373.456196][ T8111] veth1_macvtap: entered promiscuous mode [ 373.584868][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.664085][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.706232][ T3010] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.737388][ T3010] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.788512][ T3010] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.854844][ T3010] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.653406][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.884966][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.951072][ T8511] 9pnet_virtio: no channels available for device syz [ 376.040442][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.055221][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.107626][ T7498] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.968380][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.7.675'. [ 382.974088][ T8565] loop7: detected capacity change from 0 to 1024 [ 389.167865][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.174209][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.449911][ T8590] loop7: detected capacity change from 0 to 8 [ 392.512539][ T8618] loop7: detected capacity change from 0 to 512 [ 392.642841][ T8618] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.772238][ T8618] EXT4-fs (loop7): shut down requested (2) [ 392.825434][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.837376][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 392.845598][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 392.854210][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 392.862809][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 393.246706][ T7498] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.534489][ T5900] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 394.973015][ T5900] usb 9-1: Using ep0 maxpacket: 8 [ 395.165067][ T5140] Bluetooth: hci4: command tx timeout [ 396.102699][ T5900] usb 9-1: config 3 has an invalid interface number: 209 but max is 0 [ 396.136202][ T5900] usb 9-1: config 3 has no interface number 0 [ 396.151804][ T5900] usb 9-1: config 3 interface 209 altsetting 8 bulk endpoint 0x4 has invalid maxpacket 1023 [ 396.706169][ T5900] usb 9-1: config 3 interface 209 has no altsetting 0 [ 396.868693][ T5900] usb 9-1: string descriptor 0 read error: -71 [ 396.911127][ T5900] usb 9-1: New USB device found, idVendor=10c4, idProduct=8414, bcdDevice=d4.5e [ 396.959570][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.042049][ T8657] loop7: detected capacity change from 0 to 1024 [ 397.056276][ T5900] usb 9-1: can't set config #3, error -71 [ 397.109009][ T5900] usb 9-1: USB disconnect, device number 2 [ 397.378000][ T5140] Bluetooth: hci4: command tx timeout [ 398.852765][ T8669] netlink: 'syz.2.705': attribute type 10 has an invalid length. [ 399.590931][ T5140] Bluetooth: hci4: command tx timeout [ 400.212949][ T8623] chnl_net:caif_netlink_parms(): no params data found [ 400.599705][ T8689] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 401.910823][ T5140] Bluetooth: hci4: command tx timeout [ 402.769360][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.787530][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.794747][ T8623] bridge_slave_0: entered allmulticast mode [ 402.810065][ T8623] bridge_slave_0: entered promiscuous mode [ 403.113875][ T8706] loop7: detected capacity change from 0 to 512 [ 403.169777][ T8706] EXT4-fs (loop7): blocks per group (71) and clusters per group (20800) inconsistent [ 403.250365][ T8623] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.257587][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.536299][ T8623] bridge_slave_1: entered allmulticast mode [ 404.291534][ T8623] bridge_slave_1: entered promiscuous mode [ 404.899672][ T8719] loop7: detected capacity change from 0 to 1024 [ 404.987118][ T7370] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.069697][ T8725] loop8: detected capacity change from 0 to 1024 [ 406.221941][ T8623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.520162][ T8623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.918210][ T7370] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.367020][ T8748] loop7: detected capacity change from 0 to 512 [ 408.380782][ T8748] EXT4-fs: Ignoring removed orlov option [ 409.276132][ T8748] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 409.457903][ T8750] netlink: 'syz.7.724': attribute type 4 has an invalid length. [ 411.273617][ T7370] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.392049][ T8623] team0: Port device team_slave_0 added [ 411.458727][ T8623] team0: Port device team_slave_1 added [ 412.650205][ T7370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.975615][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.992686][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.056295][ T29] kernel read not supported for file 144/task/144/stack (pid: 29 comm: kworker/1:1) [ 413.073197][ T8623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.168263][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.210736][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.317704][ T8623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.706104][ T8623] hsr_slave_0: entered promiscuous mode [ 413.738557][ T8623] hsr_slave_1: entered promiscuous mode [ 413.766122][ T8623] debugfs: 'hsr0' already exists in 'hsr' [ 413.792166][ T8623] Cannot create hsr debugfs directory [ 414.302839][ T8803] netlink: 'syz.6.730': attribute type 10 has an invalid length. [ 414.679760][ T7370] bridge_slave_1: left allmulticast mode [ 414.715456][ T7370] bridge_slave_1: left promiscuous mode [ 414.772024][ T7370] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.861083][ T7370] bridge_slave_0: left allmulticast mode [ 414.866778][ T7370] bridge_slave_0: left promiscuous mode [ 414.910702][ T7370] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.115025][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 415.266608][ T8814] loop7: detected capacity change from 0 to 8 [ 416.201688][ T8818] Invalid ELF header len 16 [ 417.157115][ T7370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.179205][ T7370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.228681][ T7370] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 417.288065][ T7370] bond0 (unregistering): Released all slaves [ 417.700513][ T8838] loop8: detected capacity change from 0 to 512 [ 417.717617][ T8838] EXT4-fs: Ignoring removed orlov option [ 417.816318][ T8838] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 417.984920][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 418.727946][ T8842] netlink: 'syz.8.744': attribute type 4 has an invalid length. [ 420.057109][ T8849] netlink: 27 bytes leftover after parsing attributes in process `syz.6.747'. [ 420.271859][ T8830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.935095][ T8867] loop8: detected capacity change from 0 to 1024 [ 422.590756][ T8623] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 422.648176][ T8623] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 422.802831][ T8623] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 423.077230][ T8623] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 423.401682][ T7370] hsr_slave_0: left promiscuous mode [ 423.422744][ T7370] hsr_slave_1: left promiscuous mode [ 423.443601][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.477383][ T7370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.522329][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.546905][ T7370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.691693][ T7370] veth1_macvtap: left promiscuous mode [ 423.719360][ T7370] veth0_macvtap: left promiscuous mode [ 423.748836][ T7370] veth1_vlan: left promiscuous mode [ 423.771755][ T7370] veth0_vlan: left promiscuous mode [ 423.896706][ T8898] loop7: detected capacity change from 0 to 256 [ 423.943468][ T8898] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 424.003828][ T8898] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 424.069323][ T8898] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 424.120946][ T8898] exFAT-fs (loop7): failed to load alloc-bitmap [ 424.286266][ T8898] exFAT-fs (loop7): failed to recognize exfat type [ 425.054674][ T8911] loop8: detected capacity change from 0 to 1024 [ 425.096181][ T8911] EXT4-fs: Ignoring removed bh option [ 425.168636][ T8911] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.543828][ T8911] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4214: comm syz.8.761: Allocating blocks 497-513 which overlap fs metadata [ 425.613529][ T8924] fuse: Bad value for 'fd' [ 425.700314][ T8923] 9p: Bad value for 'rfdno' [ 425.816862][ T8910] EXT4-fs (loop8): pa ffff888079e5acb0: logic 48, phys. 193, len 20 [ 425.825246][ T8910] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5464: group 0, free 0, pa_free 1 [ 426.168265][ T8933] netlink: 'syz.7.764': attribute type 4 has an invalid length. [ 426.957404][ T8111] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.800869][ T8940] loop8: detected capacity change from 0 to 512 [ 427.816392][ T8940] EXT4-fs: Ignoring removed bh option [ 427.851656][ T8940] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 427.915927][ T8940] EXT4-fs (loop8): 1 truncate cleaned up [ 427.925121][ T8940] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.146341][ T7370] team0 (unregistering): Port device team_slave_1 removed [ 429.786486][ T8623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.859949][ T8623] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.906407][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.913601][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.982200][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.989407][ T8528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.905051][ T8623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.725070][ T8623] veth0_vlan: entered promiscuous mode [ 433.791742][ T8623] veth1_vlan: entered promiscuous mode [ 434.013112][ T8623] veth0_macvtap: entered promiscuous mode [ 434.039466][ T8623] veth1_macvtap: entered promiscuous mode [ 434.127487][ T9000] netlink: 28 bytes leftover after parsing attributes in process `syz.7.776'. [ 434.139245][ T8623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.194176][ T8623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.293497][ T8843] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.302287][ T8843] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.347346][ T8843] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.473122][ T9006] loop7: detected capacity change from 0 to 1024 [ 434.485176][ T8843] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.334892][ T7370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.348325][ T7370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.881419][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.688352][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.615956][ T8111] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.797674][ T9058] loop9: detected capacity change from 0 to 256 [ 439.901267][ T9058] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 439.980136][ T9058] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 440.083725][ T9058] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 440.152133][ T9058] exFAT-fs (loop9): failed to load alloc-bitmap [ 440.191409][ T9058] exFAT-fs (loop9): failed to recognize exfat type [ 441.280345][ T9093] netlink: 'syz.1.790': attribute type 10 has an invalid length. [ 441.509755][ T9095] loop9: detected capacity change from 0 to 1024 [ 441.598375][ T9101] loop7: detected capacity change from 0 to 1024 [ 441.652852][ T9101] EXT4-fs: Ignoring removed bh option [ 441.923886][ T9095] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 441.949305][ T9101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.060430][ T9095] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.249774][ T9095] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.801: lblock 0 mapped to illegal pblock 0 (length 6) [ 442.409297][ T9095] EXT4-fs error (device loop9): ext4_validate_block_bitmap:440: comm syz.9.801: bg 0: block 112: padding at end of block bitmap is not set [ 442.456402][ T9095] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.801: lblock 0 mapped to illegal pblock 0 (length 1) [ 442.533412][ T9095] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 442.548935][ T9095] EXT4-fs (loop9): This should not happen!! Data will be lost [ 442.548935][ T9095] [ 442.591778][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 442.672947][ T8623] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 442.679140][ T7498] EXT4-fs error (device loop7): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 442.751379][ T7498] EXT4-fs error (device loop7): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 442.789582][ T10] usb 9-1: device descriptor read/64, error -71 [ 443.084752][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 443.272898][ T10] usb 9-1: device descriptor read/64, error -71 [ 443.390833][ T10] usb usb9-port1: attempt power cycle [ 444.301130][ T7498] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.603487][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 444.683139][ T10] usb 9-1: device descriptor read/8, error -71 [ 445.023802][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 445.048509][ T33] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.069903][ T10] usb 9-1: device descriptor read/8, error -71 [ 445.218619][ T10] usb usb9-port1: unable to enumerate USB device [ 445.254622][ T33] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.950602][ T33] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.002278][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 446.012037][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 446.019734][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 446.028778][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 446.037306][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.050196][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 446.392126][ T33] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.558945][ T9184] netlink: 32 bytes leftover after parsing attributes in process `syz.8.825'. [ 447.207220][ T33] bridge_slave_1: left allmulticast mode [ 447.212904][ T33] bridge_slave_1: left promiscuous mode [ 447.281976][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.362577][ T33] bridge_slave_0: left allmulticast mode [ 447.376752][ T33] bridge_slave_0: left promiscuous mode [ 447.417096][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.881659][ T9200] loop8: detected capacity change from 0 to 512 [ 447.933915][ T9200] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 448.022811][ T9200] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 448.129396][ T9200] System zones: 1-12 [ 448.173421][ T9200] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.830: bad orphan inode 15 [ 448.194258][ T9200] loop8: lost filesystem error report for type 5 error -117 [ 448.195968][ T9200] ext4_test_bit(bit=14, block=4) = 1 [ 448.214154][ T9200] is_bad_inode(inode)=0 [ 448.218317][ T9200] NEXT_ORPHAN(inode)=327680 [ 448.223232][ T9200] max_ino=32 [ 448.226562][ T9200] i_nlink=1 [ 448.231817][ T9200] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.268595][ T5140] Bluetooth: hci1: command tx timeout [ 448.297320][ T30] audit: type=1800 audit(1770889674.757:103): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.830" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 448.339846][ T9200] EXT4-fs warning (device loop8): ext4_resize_begin:81: There are errors in the filesystem, so online resizing is not allowed [ 448.583594][ T8111] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.683581][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.742135][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.776575][ T33] bond0 (unregistering): Released all slaves [ 449.969882][ T9223] tipc: Enabling of bearer rejected, failed to enable media [ 450.478690][ T5140] Bluetooth: hci1: command tx timeout [ 450.509991][ T9231] fuse: Bad value for 'fd' [ 450.657149][ T1540] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 450.912882][ T1540] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 450.937884][ T1540] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.954847][ T1540] usb 9-1: Product: syz [ 450.995931][ T1540] usb 9-1: Manufacturer: syz [ 451.011457][ T1540] usb 9-1: SerialNumber: syz [ 451.964281][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 451.996819][ T9176] chnl_net:caif_netlink_parms(): no params data found [ 452.152888][ T1540] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 452.175728][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.187386][ T1540] cdc_ncm 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 452.198461][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.223126][ T1540] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 452.273472][ T10] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 452.312834][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 452.347698][ T10] usb 10-1: SerialNumber: syz [ 452.353701][ T33] hsr_slave_0: left promiscuous mode [ 452.367544][ T1540] cdc_ncm 9-1:1.0: setting tx_max = 184 [ 452.387345][ T33] hsr_slave_1: left promiscuous mode [ 452.404804][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.423194][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.438078][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.479746][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.556197][ T33] veth1_macvtap: left promiscuous mode [ 452.571060][ T33] veth0_macvtap: left promiscuous mode [ 452.590022][ T33] veth1_vlan: left promiscuous mode [ 452.601649][ T33] veth0_vlan: left promiscuous mode [ 452.636557][ T10] usb 10-1: 0:2 : does not exist [ 452.712906][ T5140] Bluetooth: hci1: command tx timeout [ 452.871372][ T10] usb 10-1: USB disconnect, device number 2 [ 454.076558][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 454.084764][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.574844][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.852'. [ 455.450098][ T5140] Bluetooth: hci1: command tx timeout [ 456.087448][ T9295] loop9: detected capacity change from 0 to 512 [ 456.108714][ T9295] EXT4-fs: Ignoring removed orlov option [ 456.192955][ T9295] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 456.224717][ T9295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 456.288500][ T9295] EXT4-fs error (device loop9): ext4_iget_extra_inode:5072: inode #15: comm syz.9.855: corrupted in-inode xattr: e_value size too large [ 456.358108][ T9295] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 456.360083][ T9295] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.855: couldn't read orphan inode 15 (err -117) [ 456.457200][ T9295] loop9: lost filesystem error report for type 5 error -117 [ 456.527974][ T9295] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.883000][ T8623] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.310252][ T33] team0 (unregistering): Port device team_slave_1 removed [ 457.650047][ T33] team0 (unregistering): Port device team_slave_0 removed [ 458.304161][ T9308] 9pnet_fd: p9_fd_create_unix (9308): problem connecting socket: ./file0: -111 [ 458.955126][ T9316] 9p: Bad value for 'wfdno' [ 459.116751][ T1540] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 459.186612][ T1540] usb 9-1: USB disconnect, device number 7 [ 459.216967][ T1540] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 462.480903][ T9176] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.516535][ T9176] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.533805][ T9176] bridge_slave_0: entered allmulticast mode [ 462.550184][ T9176] bridge_slave_0: entered promiscuous mode [ 462.559021][ T9176] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.566209][ T9176] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.573463][ T9176] bridge_slave_1: entered allmulticast mode [ 462.581682][ T9176] bridge_slave_1: entered promiscuous mode [ 462.834510][ T9176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.041026][ T9176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.213957][ T9343] netlink: 'syz.6.869': attribute type 10 has an invalid length. [ 463.332289][ T9176] team0: Port device team_slave_0 added [ 463.381789][ T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 463.820113][ T10] usb 9-1: device descriptor read/64, error -71 [ 463.908264][ T9176] team0: Port device team_slave_1 added [ 464.172886][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 464.397384][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.408088][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.451062][ T10] usb 9-1: device descriptor read/64, error -71 [ 464.492516][ T9355] loop9: detected capacity change from 0 to 512 [ 464.502186][ T9176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.526103][ T9355] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 464.559388][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.566424][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.607810][ T10] usb usb9-port1: attempt power cycle [ 464.633576][ T9355] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 464.641639][ T9355] System zones: 1-12 [ 464.666135][ T9176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.878799][ T9355] EXT4-fs (loop9): orphan cleanup on readonly fs [ 464.887005][ T9355] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #11: comm syz.9.872: invalid indirect mapped block 2 (level 2) [ 464.921731][ T9355] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 464.924793][ T9355] EXT4-fs (loop9): Remounting filesystem read-only [ 465.005490][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 465.073730][ T10] usb 9-1: device descriptor read/8, error -71 [ 465.082155][ T9355] EXT4-fs (loop9): 1 truncate cleaned up [ 465.089863][ T9355] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 465.259681][ T8623] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 465.391665][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 465.511470][ T10] usb 9-1: device descriptor read/8, error -71 [ 465.569325][ T9176] hsr_slave_0: entered promiscuous mode [ 465.641242][ T10] usb usb9-port1: unable to enumerate USB device [ 465.673172][ T9176] hsr_slave_1: entered promiscuous mode [ 465.716298][ T9176] debugfs: 'hsr0' already exists in 'hsr' [ 465.732891][ T9176] Cannot create hsr debugfs directory [ 465.864917][ T29] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 466.071338][ T29] usb 10-1: Using ep0 maxpacket: 16 [ 466.088897][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 466.117874][ T29] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 466.171177][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.197678][ T29] usb 10-1: Product: syz [ 466.201945][ T29] usb 10-1: Manufacturer: syz [ 466.245410][ T29] usb 10-1: SerialNumber: syz [ 466.299126][ T29] usb 10-1: config 0 descriptor?? [ 466.334311][ T29] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 466.392356][ T29] usb 10-1: Detected FT232R [ 466.577070][ T29] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 466.874677][ T29] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 467.819826][ T29] usb 10-1: USB disconnect, device number 3 [ 467.890534][ T29] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 468.030662][ T29] ftdi_sio 10-1:0.0: device disconnected [ 470.673016][ T29] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 470.727071][ T1540] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 470.862060][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 470.904313][ T29] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 470.914497][ T1540] usb 10-1: device descriptor read/64, error -71 [ 470.954498][ T29] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 471.015327][ T29] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.063757][ T29] usb 9-1: config 1 interface 0 has no altsetting 0 [ 471.129505][ T29] usb 9-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 471.151088][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.171007][ T29] usb 9-1: Product: syz [ 471.186081][ T1540] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 471.204522][ T29] usb 9-1: Manufacturer: syz [ 471.212308][ T9176] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 471.236581][ T29] usb 9-1: SerialNumber: syz [ 471.496341][ T1540] usb 10-1: device descriptor read/64, error -71 [ 472.196444][ T9176] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 472.266910][ T29] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 472.308233][ T9176] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 472.420002][ T1540] usb usb10-port1: attempt power cycle [ 472.482851][ T29] usb 9-1: USB disconnect, device number 12 [ 472.509438][ T9176] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 472.532328][ T29] usblp0: removed [ 472.717132][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 472.789554][ T1540] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 472.833043][ T1540] usb 10-1: device descriptor read/8, error -71 [ 472.879701][ T9176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.350811][ T1540] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 474.365928][ T9176] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.469709][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.476881][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.568429][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.575677][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.597976][ T1540] usb 10-1: device not accepting address 7, error -71 [ 474.617916][ T1540] usb usb10-port1: unable to enumerate USB device [ 474.765544][ T9176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 474.847781][ T9176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 474.918232][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.9.902'. [ 475.765560][ T9469] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.773256][ T9469] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.263509][ T9469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.542702][ T5986] kernel read not supported for file 77/task/77/stack (pid: 5986 comm: kworker/1:7) [ 477.058959][ T9469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.295343][ T9495] raw_sendmsg: syz.6.909 forgot to set AF_INET. Fix it! [ 480.096084][ T1008] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.139251][ T1008] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.176726][ T1008] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.209070][ T5993] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.250855][ T9176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.464224][ T9176] veth0_vlan: entered promiscuous mode [ 480.525810][ T9176] veth1_vlan: entered promiscuous mode [ 480.606920][ T9176] veth0_macvtap: entered promiscuous mode [ 480.645996][ T9176] veth1_macvtap: entered promiscuous mode [ 481.536906][ T9176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.563830][ T9176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.838216][ T9528] loop8: detected capacity change from 0 to 16 [ 481.860409][ T1008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.873814][ T9528] erofs (device loop8): invalid ishare xattr prefix id 0 [ 481.901683][ T1008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.975036][ T1008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.998825][ T1008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.300049][ T8843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.315106][ T9535] loop8: detected capacity change from 0 to 1024 [ 482.321314][ T8843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.466134][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.486127][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.732317][ T9542] fuse: Bad value for 'fd' [ 482.773248][ T9542] 9p: Bad value for 'rfdno' [ 486.224123][ T788] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 486.389440][ T788] usb 10-1: device descriptor read/64, error -71 [ 486.669463][ T788] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 486.847760][ T788] usb 10-1: device descriptor read/64, error -71 [ 486.988762][ T788] usb usb10-port1: attempt power cycle [ 487.400583][ T788] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 487.473367][ T788] usb 10-1: device descriptor read/8, error -71 [ 487.777840][ T788] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 487.839037][ T788] usb 10-1: device descriptor read/8, error -71 [ 488.019517][ T788] usb usb10-port1: unable to enumerate USB device [ 488.220912][ T9606] ================================================================== [ 488.229013][ T9606] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 [ 488.236394][ T9606] Write of size 4 at addr ffff88802b57a708 by task syz.3.935/9606 [ 488.244203][ T9606] [ 488.246527][ T9606] CPU: 1 UID: 0 PID: 9606 Comm: syz.3.935 Not tainted syzkaller #0 PREEMPT(full) [ 488.246566][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 488.246587][ T9606] Call Trace: [ 488.246598][ T9606] [ 488.246611][ T9606] dump_stack_lvl+0x100/0x190 [ 488.246660][ T9606] print_report+0x156/0x4c9 [ 488.246707][ T9606] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.246748][ T9606] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.246788][ T9606] ? __phys_addr+0xe8/0x180 [ 488.246829][ T9606] ? try_module_get+0x4c/0xd0 [ 488.246858][ T9606] kasan_report+0xdf/0x1a0 [ 488.246911][ T9606] ? try_module_get+0x4c/0xd0 [ 488.246947][ T9606] kasan_check_range+0x10f/0x1e0 [ 488.246981][ T9606] try_module_get+0x4c/0xd0 [ 488.247011][ T9606] dvb_device_open+0x124/0x3b0 [ 488.247045][ T9606] ? __pfx_dvb_device_open+0x10/0x10 [ 488.247076][ T9606] chrdev_open+0x234/0x6a0 [ 488.247127][ T9606] ? __pfx_apparmor_file_open+0x10/0x10 [ 488.247179][ T9606] ? __pfx_chrdev_open+0x10/0x10 [ 488.247231][ T9606] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.247271][ T9606] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 488.247310][ T9606] do_dentry_open+0x6d8/0x1660 [ 488.247356][ T9606] ? __pfx_chrdev_open+0x10/0x10 [ 488.247413][ T9606] vfs_open+0x82/0x3f0 [ 488.247449][ T9606] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.247493][ T9606] path_openat+0x208c/0x31a0 [ 488.247552][ T9606] ? __pfx_path_openat+0x10/0x10 [ 488.247613][ T9606] do_file_open+0x20e/0x430 [ 488.247667][ T9606] ? __pfx_do_file_open+0x10/0x10 [ 488.247735][ T9606] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.247776][ T9606] ? alloc_fd+0x476/0x790 [ 488.247829][ T9606] ? do_getname+0x191/0x390 [ 488.247867][ T9606] do_sys_openat2+0x10d/0x1e0 [ 488.247901][ T9606] ? __pfx_do_sys_openat2+0x10/0x10 [ 488.247938][ T9606] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.247978][ T9606] ? __sys_sendmsg+0x18f/0x220 [ 488.248026][ T9606] __x64_sys_openat+0x12d/0x210 [ 488.248064][ T9606] ? __pfx___x64_sys_openat+0x10/0x10 [ 488.248102][ T9606] ? xfd_validate_state+0x129/0x190 [ 488.248155][ T9606] do_syscall_64+0x106/0xf80 [ 488.248189][ T9606] ? irqentry_exit+0x138/0x670 [ 488.248225][ T9606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.248260][ T9606] RIP: 0033:0x7fa9ddf5c84e [ 488.248286][ T9606] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 488.248319][ T9606] RSP: 002b:00007fa9dee1bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 488.248351][ T9606] RAX: ffffffffffffffda RBX: 00007fa9dee1c6c0 RCX: 00007fa9ddf5c84e [ 488.248374][ T9606] RDX: 0000000000040402 RSI: 00007fa9dee1bc00 RDI: ffffffffffffff9c [ 488.248397][ T9606] RBP: 00007fa9dee1bc00 R08: 0000000000000000 R09: 0000000000000000 [ 488.248418][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 488.248448][ T9606] R13: 00007fa9de216038 R14: 00007fa9de215fa0 R15: 00007ffdb963e0f8 [ 488.248483][ T9606] [ 488.248494][ T9606] [ 488.538967][ T9606] Allocated by task 1: [ 488.543028][ T9606] kasan_save_stack+0x30/0x50 [ 488.547726][ T9606] kasan_save_track+0x14/0x30 [ 488.552446][ T9606] __kasan_kmalloc+0xaa/0xb0 [ 488.557052][ T9606] bus_add_driver+0x92/0x5b0 [ 488.561655][ T9606] driver_register+0x1e2/0x360 [ 488.566448][ T9606] i2c_register_driver+0xd9/0x1f0 [ 488.571490][ T9606] do_one_initcall+0x11d/0x690 [ 488.576256][ T9606] kernel_init_freeable+0x6e5/0x790 [ 488.581479][ T9606] kernel_init+0x1f/0x1e0 [ 488.585822][ T9606] ret_from_fork+0x754/0xd80 [ 488.590434][ T9606] ret_from_fork_asm+0x1a/0x30 [ 488.595200][ T9606] [ 488.597514][ T9606] The buggy address belongs to the object at ffff88802b57a600 [ 488.597514][ T9606] which belongs to the cache kmalloc-256 of size 256 [ 488.611564][ T9606] The buggy address is located 56 bytes to the right of [ 488.611564][ T9606] allocated 208-byte region [ffff88802b57a600, ffff88802b57a6d0) [ 488.626146][ T9606] [ 488.628460][ T9606] The buggy address belongs to the physical page: [ 488.634856][ T9606] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b57a [ 488.643615][ T9606] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 488.652113][ T9606] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 488.659664][ T9606] page_type: f5(slab) [ 488.663647][ T9606] raw: 00fff00000000040 ffff88813ff30b40 dead000000000100 dead000000000122 [ 488.672232][ T9606] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 488.680819][ T9606] head: 00fff00000000040 ffff88813ff30b40 dead000000000100 dead000000000122 [ 488.689492][ T9606] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 488.698167][ T9606] head: 00fff00000000001 ffffea0000ad5e81 00000000ffffffff 00000000ffffffff [ 488.706840][ T9606] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 488.715502][ T9606] page dumped because: kasan: bad access detected [ 488.721906][ T9606] page_owner tracks the page as allocated [ 488.727609][ T9606] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 27370667612, free_ts 0 [ 488.747342][ T9606] post_alloc_hook+0x1e1/0x250 [ 488.752124][ T9606] get_page_from_freelist+0x111d/0x3140 [ 488.757684][ T9606] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 488.763591][ T9606] new_slab+0xa6/0x6e0 [ 488.767665][ T9606] refill_objects+0x26b/0x400 [ 488.772356][ T9606] __pcs_replace_empty_main+0x19f/0x600 [ 488.777917][ T9606] __kmalloc_cache_noprof+0x493/0x6f0 [ 488.783293][ T9606] bus_add_driver+0x92/0x5b0 [ 488.787893][ T9606] driver_register+0x1e2/0x360 [ 488.792681][ T9606] usb_register_driver+0x21c/0x3e0 [ 488.797795][ T9606] do_one_initcall+0x11d/0x690 [ 488.802562][ T9606] kernel_init_freeable+0x6e5/0x790 [ 488.807775][ T9606] kernel_init+0x1f/0x1e0 [ 488.812119][ T9606] ret_from_fork+0x754/0xd80 [ 488.816722][ T9606] ret_from_fork_asm+0x1a/0x30 [ 488.821488][ T9606] page_owner free stack trace missing [ 488.826843][ T9606] [ 488.829156][ T9606] Memory state around the buggy address: [ 488.834775][ T9606] ffff88802b57a600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.842832][ T9606] ffff88802b57a680: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 488.850890][ T9606] >ffff88802b57a700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 488.858942][ T9606] ^ [ 488.863258][ T9606] ffff88802b57a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 488.871313][ T9606] ffff88802b57a800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.879365][ T9606] ================================================================== [ 488.888936][ T9606] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 488.896649][ T9606] CPU: 1 UID: 0 PID: 9606 Comm: syz.3.935 Not tainted syzkaller #0 PREEMPT(full) [ 488.905843][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 488.915889][ T9606] Call Trace: [ 488.919151][ T9606] [ 488.922069][ T9606] dump_stack_lvl+0x100/0x190 [ 488.926756][ T9606] vpanic+0x20d/0x630 [ 488.930732][ T9606] panic+0xd1/0xd1 [ 488.934445][ T9606] ? __pfx_panic+0x10/0x10 [ 488.938870][ T9606] end_report.part.0+0x68/0x90 [ 488.943650][ T9606] kasan_report.cold+0xe/0x18 [ 488.948338][ T9606] ? try_module_get+0x4c/0xd0 [ 488.953012][ T9606] kasan_check_range+0x10f/0x1e0 [ 488.957948][ T9606] try_module_get+0x4c/0xd0 [ 488.962448][ T9606] dvb_device_open+0x124/0x3b0 [ 488.967205][ T9606] ? __pfx_dvb_device_open+0x10/0x10 [ 488.972483][ T9606] chrdev_open+0x234/0x6a0 [ 488.976911][ T9606] ? __pfx_apparmor_file_open+0x10/0x10 [ 488.982468][ T9606] ? __pfx_chrdev_open+0x10/0x10 [ 488.987413][ T9606] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.993045][ T9606] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 488.999372][ T9606] do_dentry_open+0x6d8/0x1660 [ 489.004150][ T9606] ? __pfx_chrdev_open+0x10/0x10 [ 489.009127][ T9606] vfs_open+0x82/0x3f0 [ 489.013188][ T9606] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.018827][ T9606] path_openat+0x208c/0x31a0 [ 489.023434][ T9606] ? __pfx_path_openat+0x10/0x10 [ 489.028389][ T9606] do_file_open+0x20e/0x430 [ 489.032908][ T9606] ? __pfx_do_file_open+0x10/0x10 [ 489.037958][ T9606] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.043593][ T9606] ? alloc_fd+0x476/0x790 [ 489.047934][ T9606] ? do_getname+0x191/0x390 [ 489.052434][ T9606] do_sys_openat2+0x10d/0x1e0 [ 489.057108][ T9606] ? __pfx_do_sys_openat2+0x10/0x10 [ 489.062300][ T9606] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.067933][ T9606] ? __sys_sendmsg+0x18f/0x220 [ 489.072705][ T9606] __x64_sys_openat+0x12d/0x210 [ 489.077552][ T9606] ? __pfx___x64_sys_openat+0x10/0x10 [ 489.082918][ T9606] ? xfd_validate_state+0x129/0x190 [ 489.088127][ T9606] do_syscall_64+0x106/0xf80 [ 489.092712][ T9606] ? irqentry_exit+0x138/0x670 [ 489.097481][ T9606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.103373][ T9606] RIP: 0033:0x7fa9ddf5c84e [ 489.107788][ T9606] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 489.127390][ T9606] RSP: 002b:00007fa9dee1bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 489.135800][ T9606] RAX: ffffffffffffffda RBX: 00007fa9dee1c6c0 RCX: 00007fa9ddf5c84e [ 489.143761][ T9606] RDX: 0000000000040402 RSI: 00007fa9dee1bc00 RDI: ffffffffffffff9c [ 489.151721][ T9606] RBP: 00007fa9dee1bc00 R08: 0000000000000000 R09: 0000000000000000 [ 489.159687][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 489.167650][ T9606] R13: 00007fa9de216038 R14: 00007fa9de215fa0 R15: 00007ffdb963e0f8 [ 489.175625][ T9606] [ 489.178965][ T9606] Kernel Offset: disabled [ 489.183281][ T9606] Rebooting in 86400 seconds..