last executing test programs: 27m28.631897674s ago: executing program 3 (id=42): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 27m26.979909755s ago: executing program 3 (id=46): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b"], 0x0) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 27m22.196898608s ago: executing program 3 (id=55): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 27m20.673170748s ago: executing program 3 (id=60): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$eJzs3U1oY1UbAOA3vWnSGfi+dicKQnQnaJnOTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0naaQerFJ9nkZy+57znnPtDcntJTp5bjPal6bh8/fq1mJmpRHXxkcW4UYm5yKKwG+NqE2IAwOlwI6X4PeWOmFI54SkBACes9/7/QkQ0Yi6PvP7lYe2Td38AOPX6//+fOazNzEEVr5zIlACAEzZ2///efdW1akQtqsWf1dKnAgCA0+qJp595dGkl4vFGYyZi7c3N5mYzHhrWL12Ol6ITq3EuZuNmRH6h0H2o9B4vXFxZPtdoNHbip7loRsRUP7GZXyksZb38eizEbMz187uXGqlXzi58srK80OiJiN2d3vixVtlsTsfZ/vjfn43V4YVH0UnvKeLiyvL5Rr+D5lqRvxOxN7xv0Z3/fMzGt88Pukmp+ATjyvKVhWLSw/zNZj0uDfbCgXdAAAAAAAAAAAAAAAAAAAAAAADgtsw3BuYG6+ek7nO+Us78/IT63vo4eX5/faC9fH2gVE+R0m+vPdB8K4t96wONrs+zaSFBAAAAAAAAAAAAAAAAAAAAGNjYqkWr01ld39jabpcLO+sbW1MR0Y28/PVHX5yJ8Ta3KFTzIeoRgyEa/WG3262UFY1TFjGennUHLyIffDqYcblNfbAVE6dRP7iq0/nfPT++O4zcnRU9/zlsk8XkDcxK03h4pOe1/+dTOs6OGhTOlyP18dGvppRKkTfK6VeeHe8wKhHV4x+47fZUHNwmdQtfXXvxzmLvtz5Pufvun33y6jvv/9JudbojR+8I1tY3bqZ2q1I0Pt5u6e7qIlKJvFApnwnVw9L39kda2Xe/PnXX298cbfRUjrzaPZ9H2mT55nw8ml7LC91pjlSdGaZP9zeiszo94eS/VeE2jukd7332YUo//HzkIYamxl42Kn/Pqw8AAAAAAAAAAAAAAAAAAFBW+q54X//LvtOHZT342MnPDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+OcPf/y8V9nZjJDIo7I5FBoU/diZk1VfXNyJq//ZmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwH/dXAAAA//+g5Vir") mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) 27m15.386052139s ago: executing program 3 (id=63): mkdir(&(0x7f0000000540)='./file0\x00', 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @struct={0x1, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x0, 0xfffffffb}, {0x10, 0x1, 0x80}]}, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x60, 0x0, 0x0, 0x40000}, 0x28) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f00000008c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8no}, {@shortname_win95}, {@uni_xlate}, {@fat=@uid}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) 27m12.428819747s ago: executing program 3 (id=72): mkdir(&(0x7f0000000540)='./file0\x00', 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @struct={0x1, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x0, 0xfffffffb}, {0x10, 0x1, 0x80}]}, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x60, 0x0, 0x0, 0x40000}, 0x28) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f00000008c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8no}, {@shortname_win95}, {@uni_xlate}, {@fat=@uid}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) 27m12.304707679s ago: executing program 32 (id=72): mkdir(&(0x7f0000000540)='./file0\x00', 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @struct={0x1, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x0, 0xfffffffb}, {0x10, 0x1, 0x80}]}, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x60, 0x0, 0x0, 0x40000}, 0x28) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f00000008c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8no}, {@shortname_win95}, {@uni_xlate}, {@fat=@uid}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) 27m6.948791033s ago: executing program 2 (id=88): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}], 0x30}, 0x58094) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) unshare(0x64000600) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="140000040000018da275aee844b047cb3bed51e0e27a49ae090000000000007ea411fe275854a814bcd2af3941882f755c0e", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4c0c5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0xc) 27m5.202582626s ago: executing program 2 (id=91): sched_setscheduler(0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e0ffac00142c00fe8000000000000000000000000000bbfe803b"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f00000001c0)={0x0, 0x8000000003ff, 0x5, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40383d0c, &(0x7f0000000040)) 27m3.630553517s ago: executing program 2 (id=97): mkdir(&(0x7f0000000540)='./file0\x00', 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @struct={0x1, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x0, 0xfffffffb}, {0x10, 0x1, 0x80}]}, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x60, 0x0, 0x0, 0x40000}, 0x28) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f00000008c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8no}, {@shortname_win95}, {@uni_xlate}, {@fat=@uid}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmmsg$inet(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d0", 0x2a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730107000100000095000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x10) 27m1.165939044s ago: executing program 2 (id=102): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000100000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00@', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "d2c4c6", 0x0, 0x2f, 0xff, @empty, @private1, [@fragment={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, @fragment={0x87, 0x0, 0x3, 0x0, 0x0, 0x6, 0x7}]}}}}}}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000580)=ANY=[], 0x1, 0x553e, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x322060, &(0x7f0000000dc0)=ANY=[], 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x58) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r7}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x9, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8000, 0x2, 0x7f}}) getpeername$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x7, 0x40, 0xfffffffc, 0xffff0001, {{0x28, 0x4, 0x3, 0x9, 0xa0, 0x66, 0x0, 0xd1, 0x4, 0x0, @broadcast, @local, {[@end, @noop, @timestamp_prespec={0x44, 0x3c, 0x97, 0x3, 0x3, [{@broadcast, 0x8}, {@private=0xa010100, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0xffffffff}, {@loopback, 0x7ac7}, {@rand_addr=0x64010101, 0x2}, {@loopback, 0x9}]}, @timestamp={0x44, 0x1c, 0x6c, 0x0, 0xb, [0x0, 0x5, 0xf7aa, 0x100, 0x1, 0xa7]}, @rr={0x7, 0x27, 0xd0, [@loopback, @multicast1, @multicast1, @broadcast, @multicast1, @private=0xa010100, @empty, @local, @private=0xa010101]}, @timestamp={0x44, 0x8, 0x6a, 0x0, 0x5, [0x1]}]}}}}}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000800)={@multicast1, @empty, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x6042) r13 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r13, 0x40305828, 0x0) readahead(r5, 0x0, 0x7) 26m57.570742173s ago: executing program 2 (id=109): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}], 0x30}, 0x58094) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) unshare(0x64000600) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4c0c5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) 26m54.519254803s ago: executing program 2 (id=116): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x20, 0xc, &(0x7f0000002040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x952, 0x0, &(0x7f0000000140), &(0x7f0000000080)) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r3, 0x0, 0x0) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0xff0b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 26m39.400983874s ago: executing program 33 (id=116): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x20, 0xc, &(0x7f0000002040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x952, 0x0, &(0x7f0000000140), &(0x7f0000000080)) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r3, 0x0, 0x0) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0xff0b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 10m27.131480409s ago: executing program 4 (id=3488): mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdir(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd66}}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000000c0)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 10m25.859966933s ago: executing program 4 (id=3496): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) fstatfs(r0, &(0x7f0000000240)=""/87) 10m25.788813214s ago: executing program 4 (id=3497): keyctl$set_reqkey_keyring(0xe, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000340)={r0}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000020c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x404}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) keyctl$set_reqkey_keyring(0xe, 0x1) 10m23.644594595s ago: executing program 4 (id=3502): r0 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x1) close_range(r0, r0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/warn_count', 0x280, 0x178) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020400) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x40894) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x206e) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000fedbdf2510000000", @ANYRES32=0x0, @ANYBLOB="24020000002005002c0012800b00010065727370616e00001c0002800400120004001200050016000200000005001700"], 0x4c}}, 0x8000) syz_clone(0x40000000, &(0x7f0000000080)="d754e4030c57bc1ba1", 0x9, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000002c0)="e3421856abd1557babc7d4d3a506ddfc27f332ccbce6ac985eb2ee295607c3bcafd5e6c9d3823b0aee07bb44783361ae6c607ec49ef15b3aa4c89bacfdc820a9dc978bab7989da3f8ac72539f802454504b7a7ee29e47d1d71b983c1d283d380369ae49d7e86d0ca137a1861aae22b4afdb4e610ad5fc68d63b848355619710d299c74cff5e03cd81d18e91a8932a2b2") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) unshare(0x24020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = epoll_create1(0x80000) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0xa0000015}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0xa0000001}) epoll_wait(r5, &(0x7f0000000280)=[{}], 0x1, 0x4000005) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) read(r6, &(0x7f0000000000)=""/70, 0x46) 10m23.361165431s ago: executing program 4 (id=3504): socket$pptp(0x18, 0x1, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r0, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000000)=0xffffffffffffffc0, 0x12) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0xc, 0x5, 0x8, 0x3, 0x4, @remote, @mcast1, 0x7800, 0x20, 0xb7b, 0x2}}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newtclass={0x38, 0x28, 0x10, 0x70bd26, 0x1, {0x0, 0x0, 0x0, r2, {0xffe0, 0xf}, {0xf, 0xd}, {0xfff0, 0xfff1}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4004085) 10m22.991194258s ago: executing program 4 (id=3509): mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdir(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000000c0)=0x13) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x0, 0x1e, 0x0, &(0x7f0000000540)="348b03151f8218e3c73797e488cabe29f2a3cb6614953d12af5ddf58050a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r6, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) 10m22.577463406s ago: executing program 34 (id=3509): mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdir(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000000c0)=0x13) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x0, 0x1e, 0x0, &(0x7f0000000540)="348b03151f8218e3c73797e488cabe29f2a3cb6614953d12af5ddf58050a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r6, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) 11.327542894s ago: executing program 6 (id=6501): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8fffff2850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f00000000c0)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x17, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x6}, 0x10}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000880)=ANY=[@ANYBLOB="636f6465706167653d3835302c6e66732c747a3d55544300006f6465706167653d38362d303030303030303030303030303030303030303030362c646f74732c6e6f646f74732c646f74732c6e6f646f7473266e665708f074ca01b875ea732c7379735f696d6d757461626c652c6e6f636173652c6e6f646f74732c646973636172642c6e07006f74737daf000000000000646f74732c63686563843d72656c617865642c6e6f646f74732c6e6f646f74732c646f7494e9f0f365ee"], 0x0, 0x1f4, &(0x7f0000000b00)="$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") r7 = syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302"], 0x0) syz_usb_control_io$printer(r7, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900090200000000000000ffdbdfcfbf429806b8bffb25104ad3edf7894bd7272328c9e174b8355353eeec4880b72b952c32c764282070bca2c9a156d73e89cfc178561f63af07a2d303b0c67d5ad3f05122b90595e517e74e683aa0892fe9cc30c5612f89e3d2e6b30efb68cbfcc0045beb09b6fc1a000022e7ff1fb936546003452dd7c95d51"], 0x10}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 8.089345305s ago: executing program 6 (id=6519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) close(0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="001fb500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff0500"/28], 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 7.389139359s ago: executing program 0 (id=6523): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f00000000c0)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x17, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x6}, 0x10}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000880)=ANY=[@ANYBLOB="636f6465706167653d3835302c6e66732c747a3d55544300006f6465706167653d38362d303030303030303030303030303030303030303030362c646f74732c6e6f646f74732c646f74732c6e6f646f7473266e665708f074ca01b875ea732c7379735f696d6d757461626c652c6e6f636173652c6e6f646f74732c646973636172642c6e07006f74737daf000000000000646f74732c63686563843d72656c617865642c6e6f646f74732c6e6f646f74732c646f7494e9f0f365ee"], 0x0, 0x1f4, &(0x7f0000000b00)="$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") r7 = syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302"], 0x0) syz_usb_control_io$printer(r7, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900090200000000000000ffdbdfcfbf429806b8bffb25104ad3edf7894bd7272328c9e174b8355353eeec4880b72b952c32c764282070bca2c9a156d73e89cfc178561f63af07a2d303b0c67d5ad3f05122b90595e517e74e683aa0892fe9cc30c5612f89e3d2e6b30efb68cbfcc0045beb09b6fc1a000022e7ff1fb936546003452dd7c95d51"], 0x10}}, 0x0) 6.906796578s ago: executing program 6 (id=6526): syz_btf_id_by_name$bpf_lsm(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000004ea3e440a4caed0900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x0, 0x363785ea128acc17, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x2c}}, 0x20040000) fcntl$lock(r6, 0x26, &(0x7f00000031c0)={0x1}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) 6.057268224s ago: executing program 6 (id=6534): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x60400) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r6, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000180)=""/1, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r8, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/dev/bus/usb/00#/00\\\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20000045, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x5, 0x1}, 0xec, 0xe2, &(0x7f0000000300)="a1047da3189b2d7846f6c9e402bf10394f2a73c6a17488c284d848abadf1109fe59ecb3082bb0143bc2bdfaa6b27d5f63028b848b23f5b999b34dc3085", 0x3d, 0x6, 0x6, 0x0, 0x9, 0x7ff, &(0x7f00000003c0)="c02a0c12c3a9b80c95ecdb5eb51c50e804d434d81fa185de596fe945353f78a259902bd913dda5ae051b4db8833587d6587c1ece5188220533829f73fcf8a0fe5277c841993beed0354832508fa7089de606bfd83a2db2f2a3d28579f3a28b18d975528215362243cf9a3f"}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{}, {0x77359400}}, 0x100) 5.150433261s ago: executing program 6 (id=6538): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$key(0xf, 0x3, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x184a62) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x40000, 0x2d) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d700330dc4b, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80000, 0x24) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 4.342684187s ago: executing program 5 (id=6540): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r5, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0xffffffff80800048, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x10, 0x74}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x40, 0x0) 4.337507197s ago: executing program 0 (id=6541): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x403, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0xfc, 0x70, 0x4, 0x4, 0x24ab}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x100000, 0x104000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x3, 0x400000000], 0x80ad003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.266897048s ago: executing program 0 (id=6542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x1018852, &(0x7f00000003c0)={[{@nodiscard}, {}, {@acl}, {@fsync_mode_strict}, {@inline_xattr}, {@disable_roll_forward}, {@checkpoint_diasble}, {@background_gc_on}, {@noinline_xattr}, {@discard_unit_block}, {@fsync_mode_strict}, {@age_extent_cache}, {@extent_cache}, {@fault_injection={'fault_injection', 0x3d, 0xffffffffffffffff}}], [{@subj_type={'subj_type', 0x3d, 'disable_roll_forward'}}, {@flag='dirsync'}]}, 0x1, 0x551c, &(0x7f00000079c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.266283908s ago: executing program 5 (id=6543): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x44, 0x7, 0x1, 0x40, @empty, @mcast1, 0x7, 0x40, 0xfff, 0x7ff}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="440f20c0350d000000440f22c03e3e660f38813d0c00000066b861008ec8b9870a00000f32b8010000000f01d9670f1b230f01cf360fc728260f74d6c7442400b5580000c7442402a1ba4716c7442406000000000f011c24", 0x58}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000000000000100000408000000000000000300000010000000000000000000000200000000030000000000000e"], 0x0, 0x4d}, 0x28) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000540)={0x1, 0x40, [0xc4e3, 0x8000000000000000, 0x2, 0x9], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="ab8ab600", @ANYRES16=r7, @ANYBLOB="010029bd7000fcdbdf250d00000018000180140002006261746164765f736c6176655f300000"], 0x2c}, 0x1, 0x0, 0x0, 0xc00}, 0x2de0d2a06d7aeea8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', r3, 0x8000, 0x1, 0x401, 0x0, {{0xe, 0x4, 0x1, 0x1, 0x38, 0x68, 0x0, 0x40, 0x2f, 0x0, @rand_addr=0x64010100, @remote, {[@lsrr={0x83, 0xf, 0x61, [@empty, @empty, @local]}, @timestamp={0x44, 0xc, 0xca, 0x0, 0x4, [0x400, 0x9]}, @ssrr={0x89, 0x7, 0xc0, [@remote]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000002e00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002e40)=ANY=[@ANYBLOB="1c270000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0100", @ANYRES32=r8, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="08000300000000007800018008000100", @ANYRES32=r3, @ANYBLOB="14000200697036746e6c3000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="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"], 0x271c}, 0x1, 0x0, 0x0, 0x14}, 0x20000005) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.141218481s ago: executing program 1 (id=6544): syz_btf_id_by_name$bpf_lsm(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x0, 0x363785ea128acc17, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x2c}}, 0x20040000) fcntl$lock(r6, 0x26, &(0x7f00000031c0)={0x1}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) 4.088970572s ago: executing program 5 (id=6545): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000780)={[{@dioread_lock}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@noinit_itable}, {@user_xattr}, {@bh}, {@jqfmt_vfsv0}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) umount2(&(0x7f0000000000)='./file0\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r8 = dup3(r7, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f00000001c0)) 3.616892501s ago: executing program 6 (id=6546): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000580)={0x40, 0x15, 0x6, "ff7092f55eb0"}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, &(0x7f0000000140)={0x20, 0x23, 0xa9, {0xa9, 0x1, "2ff5db7f39db85d5decf8c1de27b06fd00f794314bee8182e2ff69bd32bd0e6dedae946e5ef80f875d101fe101c233deb201aa27e9f993f651ab3bd3acb809030580053af6e421d3b35a32071df14e643f3b2c95acf53b9f8852605e52ff6b24db0864aa9eae3503f52765122ae5b901ae366c023bb41e530f2a1e3226802420459eb6aeeca916be8db38286c339f3992150d5d2138d0563f560e2d23b4b5ee7e5dfcb9b914c22"}}, 0x0, 0x0, 0x0}, &(0x7f0000000780)={0x2c, &(0x7f0000000400)={0x20, 0xf, 0x1f, "71036d7626f609eb540cab72017245e3ac5a569a6aa1a15050e8b807a062d2"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, 0x0}) 2.145118639s ago: executing program 1 (id=6547): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) io_setup(0x7, &(0x7f0000000280)) 2.08060859s ago: executing program 0 (id=6548): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000007d0000007d0000000c000000000000000000000d00000000010000000000001008000000020000000000001103000000ffffffff04c8000000000007000000000700000000000009010000000c0000000000000c040000000f0000000200000f01000000050000000000000002000000020000007f00000021000000670a000000000000040600000000000000305f613030305f5f5f6100"], &(0x7f0000000040)=""/61, 0xa4, 0x3d, 0x0, 0x4, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850200002d00000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$eJzs3c9rXFsdAPDvzCR5SZtn33uKvFfBFirUHzSTH0gTFcSVuiiIBTcKNSbTWDPphMykNqFgqrsuXIiiIC7c+xe4sStLQVwrbl1Ji9YIVSpcmTtz00kyk041mfHlfj4wnXvnTOd7ziTfkzPnnjs3gNy62PynEDEZEb+PiHOt3f1PuNi62312b6l5K0SSXP9rIX1ecz97avb/zkbETkSMR8RXvxjxrcLhuPWt7dXFarWy0d4vN9bWy/Wt7Su31hZXKiuV2zPzVxcW5qfnZheOra0PfvidB9d+/eWxXz3/wZNHP/rtb5rVmmyXdbbjOLWaPhpvdzw2EhGfO4lgQ1Bqt2di2BXhv9L8+X0wIi6l+X8uSulPsz8vTrRmwElLkiT5d/JGr+KdBDi1iukYuFCciojWdrE4NdUaw38ozhSrtXrjUzdrm7eXW2Plt2K0ePNWtTLd/qzwVowWmvsz6fbL/dkD+3MR6Rj4x6WJdH9qqVZdHmxXBxxw9kD+/6PUyn8gJ/r/yA+cNvIf8kv+Q37Jf8gv+Q/5Jf8hv+Q/5Jf8h/yS/5Bfnfmfncj15pDqAgzWUX//xwZYD2CgvnLtWvOWZOe/L9/Z2lyt3bmyXKmvTq1tLk0t1TbWp1ZqtZX0nJ21V71etVZbn/l0bN4tNyr1Rrm+tX1jrbZ5u3EjPa//RmV0IK0C+vH2hYd/LETEzmcm0lt0/MmXq3C6JUkhhn0OMjAcpWF3QMDQOPQH+fUan/F7fkkY8P7W5St694yf7Vn0+Vg/keoAA1A8qvDF48FVBBi4y+85/gd5Zf4f8sv8P+TXK8b4hgeQA0fN/0f7Wn5d9Tv///z16gOcvCPn/4FTbbLL9b+SJPnemx3X7pqOiA9ExB9Ko29k1/oCToPiXwrt8f/lcx+bPFg6VvhnOgcwFhHf/fn1n95dbDQ2ZpqP/23v8cbP2o/PDqP+QG/7Z/iyPM3yGADIr91n95ay2yDjPv1CaxHC4fgj7bnJ8XQEc2a3sG+tQuGY1i7s3I+Id7vFL7Svd9468nFmt3Qo/jvt+0LrJdL6jqTXTR9M/Pc64n+0I/75//ldgXx42Ox/prvlXzHN6djLv/39z+QxrY/O+r9szXVn/Kz/K/Xo/y70GePbv/h+t8O76WLvp/cjznftf7N442msg/GbdbvcZ/wn3/jah3uVJb9svU63+JnmVrmxtl6ub21fuZXVYv7qwsL89NzsQjmdoy5nM9WHffbd3z3qFb/Z/rYe7f/TofZPtOv0iT7b/6+PPP76xSPif/xS99+/d9L7A+9/kuzV4ZN9xv/77J+/2ausGX+5x/tf7BY/stKIuT7j13/yJecOA8D/kfrW9upitVrZ6LIx2rvIhg0bg94YiQEGfVXPsTOYDgo4MS+Tftg1AQAAAAAAAAAAAPrVa/Xvw2NcTjzsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnAb/CQAA//9AntRF") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000340)) setgroups(0x0, 0x0) getgroups(0x0, &(0x7f0000000380)) setregid(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100) setresuid(0xee01, 0xee01, 0x0) pipe2(&(0x7f00000003c0), 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={0xffffffffffffffff, 0x0, &(0x7f0000000680)=""/193}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001e01000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) exit(0x0) 2.038542541s ago: executing program 1 (id=6549): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 2.003963262s ago: executing program 1 (id=6550): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000580)={0x40, 0x15, 0x6, "ff7092f55eb0"}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.952966672s ago: executing program 5 (id=6551): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x403, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0xfc, 0x70, 0x4, 0x4, 0x24ab}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x100000, 0x104000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x3, 0x400000000], 0x80ad003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.880104554s ago: executing program 5 (id=6552): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 1.879602094s ago: executing program 5 (id=6553): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296aeca000905060200020d00060905820207"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x40, 0xe}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000000f40)={0x20, 0x1, 0xd, "c746946b747b1cbe130b96ef1d"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0x50}}) 1.790280086s ago: executing program 7 (id=6554): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$pppl2tp(0x18, 0x1, 0x1) 1.512411131s ago: executing program 7 (id=6555): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x44, 0x7, 0x1, 0x40, @empty, @mcast1, 0x7, 0x40, 0xfff, 0x7ff}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="440f20c0350d000000440f22c03e3e660f38813d0c00000066b861008ec8b9870a00000f32b8010000000f01d9670f1b230f01cf360fc728260f74d6c7442400b5580000c7442402a1ba4716c7442406000000000f011c24", 0x58}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000000000000100000408000000000000000300000010000000000000000000000200000000030000000000000e"], 0x0, 0x4d}, 0x28) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000540)={0x1, 0x40, [0xc4e3, 0x8000000000000000, 0x2, 0x9], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="ab8ab600", @ANYRES16=r7, @ANYBLOB="010029bd7000fcdbdf250d00000018000180140002006261746164765f736c6176655f300000"], 0x2c}, 0x1, 0x0, 0x0, 0xc00}, 0x2de0d2a06d7aeea8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', r3, 0x8000, 0x1, 0x401, 0x0, {{0xe, 0x4, 0x1, 0x1, 0x38, 0x68, 0x0, 0x40, 0x2f, 0x0, @rand_addr=0x64010100, @remote, {[@lsrr={0x83, 0xf, 0x61, [@empty, @empty, @local]}, @timestamp={0x44, 0xc, 0xca, 0x0, 0x4, [0x400, 0x9]}, @ssrr={0x89, 0x7, 0xc0, [@remote]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000002e00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002e40)=ANY=[@ANYBLOB="1c270000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0100", @ANYRES32=r8, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="08000300000000007800018008000100", @ANYRES32=r3, @ANYBLOB="14000200697036746e6c3000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="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"], 0x271c}, 0x1, 0x0, 0x0, 0x14}, 0x20000005) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.443003292s ago: executing program 1 (id=6556): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r1, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000340)) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x184a62) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x40000, 0x2d) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d700330dc4b, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x80000, 0x24) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r0], 0x0) 1.417886773s ago: executing program 7 (id=6557): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe4, 0x1}, 0x48) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = syz_open_pts(r0, 0x490800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000001b115d93b3d29877315e03dbaf2d822f1853265892b570a70ce94727ebb9fb6b4991efef819bcc890955366ca2ba80b769641ea7e60920e70b758404c87e246f2d3c2a943f6ce414f7bc24b7a7b2f29992e7e0daa015114f1ed92ee75051bec3d95127f0cf8e951c8ec7f6"], 0x48) recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/249, 0xf9, 0x12063, &(0x7f00000001c0)=@caif=@dbg={0x25, 0xf, 0x1}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2, 0x1}, 0xc) accept4$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000003c0)=0x10, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440)) ioctl$TIOCNXCL(r1, 0x540d) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x20044800) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x8008700b, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x9}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000040), 0x12) r8 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) 1.398286903s ago: executing program 7 (id=6558): syz_btf_id_by_name$bpf_lsm(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x0, 0x363785ea128acc17, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x2c}}, 0x20040000) fcntl$lock(r6, 0x26, &(0x7f00000031c0)={0x1}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) 1.06709879s ago: executing program 0 (id=6559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000"]) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) 1.05922473s ago: executing program 0 (id=6560): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) pselect6(0x40, &(0x7f0000000280)={0x7, 0x3, 0x800, 0x400, 0x1, 0xffffffffffffffff, 0x9, 0x800}, &(0x7f0000000500)={0x3, 0xfffffffffffffffd, 0x708, 0xe000000, 0x100000001, 0x7, 0x4, 0xc}, 0x0, &(0x7f0000000580), &(0x7f0000000640)={0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d63703836302c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c696f636861727365743d637039353046716e695f786c6174653d302c696f636861727365743d69736f384911f71ae4811ada6f6465706167653d3933362c696f636861727365743d6d616363656e746575726f2c6572726f72733d636f6e74696e75652c73686f72746e616d653d6c6f7765722c00"], 0x1, 0x362, &(0x7f0000000900)="$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") socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) 124.674038ms ago: executing program 7 (id=6561): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 91.192018ms ago: executing program 7 (id=6562): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x403, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0xfc, 0x70, 0x4, 0x4, 0x24ab}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x100000, 0x104000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x3, 0x400000000], 0x80ad003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=6563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000"]) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) kernel console output (not intermixed with test programs): comm="syz.5.6027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3a18ebe9 code=0x7ffc0000 [ 1584.775561][T11963] device bridge_slave_1 left promiscuous mode [ 1584.782243][T11963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.792479][T11963] device bridge_slave_0 left promiscuous mode [ 1584.799030][T11963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.807982][T11963] device veth1_macvtap left promiscuous mode [ 1584.814530][T20536] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1584.843988][T20536] usb 1-1: device descriptor read/8, error -71 [ 1585.054262][T20536] usb 1-1: device descriptor read/8, error -71 [ 1585.489897][T24205] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1585.753450][T11963] kworker/u4:148: attempt to access beyond end of device [ 1585.753450][T11963] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1585.774857][ T39] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 1585.819542][ T39] usb 6-1: No valid video chain found. [ 1585.831096][ T39] usb 6-1: USB disconnect, device number 86 [ 1585.939128][T24216] incfs: Can't find or create .index dir in ./file0 [ 1585.948970][T24216] incfs: mount failed -5 [ 1586.009509][T20536] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1587.177442][T20536] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1587.187908][T20536] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1587.223177][T20536] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.246659][T24239] loop6: detected capacity change from 0 to 256 [ 1587.282141][T20536] usb 1-1: config 220 has no interface number 2 [ 1587.920717][T24245] loop7: detected capacity change from 0 to 256 [ 1588.192000][ T39] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1588.207065][T20536] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1588.304810][T20536] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1588.312096][T20536] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1588.319342][T20536] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1588.331396][T20536] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1588.341591][T20536] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.350598][T20536] usb 1-1: Product: syz [ 1588.355673][T20536] usb 1-1: Manufacturer: syz [ 1588.360433][T20536] usb 1-1: SerialNumber: syz [ 1588.556896][ T39] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1588.599759][ T39] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1588.619656][ T39] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1588.645137][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.656033][ T39] usb 6-1: Product: syz [ 1588.660582][ T39] usb 6-1: Manufacturer: syz [ 1588.691478][T20536] usb 1-1: can't set config #220, error -71 [ 1588.733879][ T39] usb 6-1: SerialNumber: syz [ 1588.744987][T20536] usb 1-1: USB disconnect, device number 75 [ 1588.751844][ T39] usb 6-1: config 0 descriptor?? [ 1588.757564][T24223] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1588.762988][ T59] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1588.766215][T24223] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1589.352268][ T39] dm9601: probe of 6-1:0.0 failed with error -71 [ 1589.488668][ T39] usb 6-1: USB disconnect, device number 87 [ 1589.734194][ T59] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1589.847031][ T59] usb 8-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1589.858666][ T59] usb 8-1: config 0 has no interface number 0 [ 1589.872982][ T59] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1589.888403][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.903886][ T59] usb 8-1: Product: syz [ 1589.910216][ T59] usb 8-1: Manufacturer: syz [ 1589.917057][ T59] usb 8-1: SerialNumber: syz [ 1589.926017][ T59] usb 8-1: config 0 descriptor?? [ 1590.124207][T24278] loop6: detected capacity change from 0 to 256 [ 1590.423021][ T39] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1590.605851][ T39] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 1590.614584][ T39] usb 7-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1590.625488][ T39] usb 7-1: config 0 has no interface number 0 [ 1590.633694][ T39] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1590.643619][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.651852][ T39] usb 7-1: Product: syz [ 1590.656438][ T39] usb 7-1: Manufacturer: syz [ 1590.667417][ T39] usb 7-1: SerialNumber: syz [ 1590.677668][ T39] usb 7-1: config 0 descriptor?? [ 1590.953313][T24288] loop5: detected capacity change from 0 to 128 [ 1590.963958][T24288] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1590.973153][T13548] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1590.976316][T24288] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1590.990022][T24288] ext4 filesystem being mounted at /538/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1591.095498][ T28] audit: type=1326 audit(2000000479.089:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24259 comm="syz.6.6055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd3d8ebe9 code=0x7ffc0000 [ 1591.386302][ T28] audit: type=1326 audit(2000000479.089:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24259 comm="syz.6.6055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd3d8ebe9 code=0x7ffc0000 [ 1591.395273][ T59] usb 8-1: Found UVC 0.00 device syz (046d:0823) [ 1591.417271][ T59] usb 8-1: No valid video chain found. [ 1591.425606][ T59] usb 8-1: USB disconnect, device number 68 [ 1591.442794][T13548] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1591.453149][T13548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1591.463973][T13548] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1591.532972][T13548] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1591.542441][T13548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.556210][T13548] usb 1-1: Product: syz [ 1591.565029][T13548] usb 1-1: Manufacturer: syz [ 1591.574211][T13548] usb 1-1: SerialNumber: syz [ 1591.652511][T13548] usb 1-1: config 0 descriptor?? [ 1591.766929][T24286] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1591.776408][T13548] dm9601: probe of 1-1:0.0 failed with error -22 [ 1591.811012][T13636] EXT4-fs (loop5): unmounting filesystem. [ 1592.404986][ T39] usb 7-1: Found UVC 0.00 device syz (046d:0823) [ 1592.412041][ T39] usb 7-1: No valid video chain found. [ 1592.427541][ T39] usb 7-1: USB disconnect, device number 59 [ 1592.534112][T24313] kvm: pic: non byte write [ 1592.746733][T13548] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1593.126567][T13548] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1593.140502][T13548] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1593.150261][T13548] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.161275][T13548] usb 8-1: config 220 has no interface number 2 [ 1593.167919][T13548] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1593.181500][T13548] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1593.188484][T13548] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1593.195687][T13548] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1593.204417][T13548] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1593.214639][T13548] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.222940][T13548] usb 8-1: Product: syz [ 1593.227975][T13548] usb 8-1: Manufacturer: syz [ 1593.233004][T13548] usb 8-1: SerialNumber: syz [ 1593.470506][T13548] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 1593.493217][T13548] usb 8-1: No valid video chain found. [ 1593.499849][T13548] usb 8-1: selecting invalid altsetting 0 [ 1593.521291][T13548] usb 8-1: USB disconnect, device number 69 [ 1593.711170][ T59] usb 1-1: USB disconnect, device number 76 [ 1594.018962][T24353] loop0: detected capacity change from 0 to 256 [ 1594.374043][T24361] loop5: detected capacity change from 0 to 1024 [ 1594.381352][T24361] EXT4-fs: Ignoring removed orlov option [ 1594.387903][T24361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1594.405618][T24366] loop7: detected capacity change from 0 to 256 [ 1594.412609][T24361] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1594.813928][T13636] EXT4-fs (loop5): unmounting filesystem. [ 1594.912992][ T59] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1594.983003][T18718] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1595.094232][ T59] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1595.102690][ T59] usb 1-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1595.113194][ T533] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1595.120880][ T59] usb 1-1: config 0 has no interface number 0 [ 1595.129995][ T59] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1595.140359][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.149314][ T59] usb 1-1: Product: syz [ 1595.153940][ T59] usb 1-1: Manufacturer: syz [ 1595.159066][ T59] usb 1-1: SerialNumber: syz [ 1595.164661][ T59] usb 1-1: config 0 descriptor?? [ 1595.183001][T18718] usb 2-1: Using ep0 maxpacket: 16 [ 1595.189502][T18718] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.199956][T18718] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1595.210897][T18718] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1595.220350][T18718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.228684][T18718] usb 2-1: Product: syz [ 1595.233008][T18718] usb 2-1: Manufacturer: syz [ 1595.282087][T18718] usb 2-1: SerialNumber: syz [ 1595.322983][ T533] usb 7-1: Using ep0 maxpacket: 32 [ 1595.330096][ T533] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1595.339202][ T533] usb 7-1: config 0 has no interface number 0 [ 1595.345863][ T533] usb 7-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 7 [ 1595.361257][ T533] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1595.371130][ T533] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1595.381138][ T533] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.389661][ T533] usb 7-1: Product: syz [ 1595.393973][ T533] usb 7-1: Manufacturer: syz [ 1595.398832][ T533] usb 7-1: SerialNumber: syz [ 1595.405516][ T533] usb 7-1: config 0 descriptor?? [ 1595.410881][T24384] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1595.576243][ T28] audit: type=1326 audit(2000000483.569:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24348 comm="syz.0.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5098ebe9 code=0x7ffc0000 [ 1595.620954][T18718] usb 2-1: 0:2 : does not exist [ 1595.630706][ T28] audit: type=1326 audit(2000000483.569:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24348 comm="syz.0.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5098ebe9 code=0x7ffc0000 [ 1595.632170][ T533] smsc75xx v1.0.0 [ 1595.660335][T24384] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1595.662604][T18718] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1595.690350][T18718] usb 2-1: USB disconnect, device number 71 [ 1595.817179][T24399] kvm: pic: non byte write [ 1595.876044][ T533] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1595.892585][ T533] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1595.902822][ T533] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1595.913629][ T533] smsc75xx: probe of 7-1:0.184 failed with error -32 [ 1595.914206][T17345] udevd[17345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1596.435190][T24418] kvm: pic: non byte write [ 1596.529250][T24426] kvm: pic: non byte write [ 1596.659590][T24434] kvm: pic: non byte write [ 1596.734200][ T59] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 1596.740991][ T59] usb 1-1: No valid video chain found. [ 1596.748406][ T59] usb 1-1: USB disconnect, device number 77 [ 1597.243021][T18718] usb 8-1: new full-speed USB device number 70 using dummy_hcd [ 1597.287844][T24453] kvm: pic: non byte write [ 1597.323002][ T59] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1597.434465][T18718] usb 8-1: config 0 has an invalid interface number: 16 but max is 0 [ 1597.442799][T18718] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.453155][T18718] usb 8-1: config 0 has no interface number 0 [ 1597.459601][T18718] usb 8-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1597.537165][T24458] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1597.647507][T18718] usb 8-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1597.656976][T18718] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.665485][T18718] usb 8-1: Product: syz [ 1597.669806][T18718] usb 8-1: Manufacturer: syz [ 1597.674808][ T59] usb 1-1: Using ep0 maxpacket: 16 [ 1597.680042][T18718] usb 8-1: SerialNumber: syz [ 1597.685813][ T59] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.696525][T18718] usb 8-1: config 0 descriptor?? [ 1597.701632][ T59] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1597.711761][T18718] usb-storage 8-1:0.16: USB Mass Storage device detected [ 1597.720838][T18718] usb-storage 8-1:0.16: Quirks match for vid 04e6 pid 000b: 4 [ 1597.729072][ T59] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1597.738718][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.747187][ T59] usb 1-1: Product: syz [ 1597.751709][ T59] usb 1-1: Manufacturer: syz [ 1597.779287][ T59] usb 1-1: SerialNumber: syz [ 1597.816847][T24462] kvm: pic: non byte write [ 1597.846389][ T39] usb 7-1: USB disconnect, device number 60 [ 1597.924371][T18718] usb 8-1: USB disconnect, device number 70 [ 1598.064661][T24471] loop6: detected capacity change from 0 to 256 [ 1598.210194][ T59] usb 1-1: 0:2 : does not exist [ 1598.224955][ T59] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1598.247433][ T59] usb 1-1: USB disconnect, device number 78 [ 1598.413076][ T39] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1598.483016][T24479] loop5: detected capacity change from 0 to 256 [ 1598.697930][ T39] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 1598.707260][ T39] usb 7-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1598.718134][ T39] usb 7-1: config 0 has no interface number 0 [ 1598.726143][ T39] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1598.735731][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.744566][ T39] usb 7-1: Product: syz [ 1598.748891][ T39] usb 7-1: Manufacturer: syz [ 1598.753689][ T39] usb 7-1: SerialNumber: syz [ 1598.781603][T24485] loop7: detected capacity change from 0 to 1024 [ 1598.781631][ T39] usb 7-1: config 0 descriptor?? [ 1598.788522][T24485] EXT4-fs: Ignoring removed orlov option [ 1598.795911][T13548] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1598.798929][T24485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1598.860957][T24485] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1598.994609][T13548] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1599.003850][T13548] usb 6-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1599.014499][T13548] usb 6-1: config 0 has no interface number 0 [ 1599.023672][T13548] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1599.033610][T13548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.041900][T13548] usb 6-1: Product: syz [ 1599.046376][T13548] usb 6-1: Manufacturer: syz [ 1599.051184][T13548] usb 6-1: SerialNumber: syz [ 1599.057496][T13548] usb 6-1: config 0 descriptor?? [ 1599.069033][T24494] loop0: detected capacity change from 0 to 128 [ 1599.076602][T24494] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1599.085175][T24494] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1599.094261][T24494] ext4 filesystem being mounted at /563/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1599.517230][T15097] EXT4-fs (loop7): unmounting filesystem. [ 1599.538947][ T28] audit: type=1326 audit(2000000487.529:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24476 comm="syz.5.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3a18ebe9 code=0x7ffc0000 [ 1599.564506][ T28] audit: type=1326 audit(2000000487.529:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24476 comm="syz.5.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3a18ebe9 code=0x7ffc0000 [ 1599.931460][T13765] EXT4-fs (loop0): unmounting filesystem. [ 1599.932980][ T59] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 1600.122941][ T59] usb 8-1: Using ep0 maxpacket: 32 [ 1600.129513][ T59] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1600.139045][ T59] usb 8-1: config 0 has no interface number 0 [ 1600.145749][ T59] usb 8-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 7 [ 1600.156716][ T59] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1600.166049][ T59] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1600.175824][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.184219][ T59] usb 8-1: Product: syz [ 1600.188746][ T59] usb 8-1: Manufacturer: syz [ 1600.193789][ T59] usb 8-1: SerialNumber: syz [ 1600.200100][ T59] usb 8-1: config 0 descriptor?? [ 1600.205883][T24499] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1600.214877][ T59] smsc75xx v1.0.0 [ 1600.420776][T24499] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1600.629059][ T59] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1600.640071][ T59] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1600.650148][ T59] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1600.660672][ T59] smsc75xx: probe of 8-1:0.184 failed with error -61 [ 1600.772974][T20536] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1600.897464][ T39] usb 7-1: Found UVC 0.00 device syz (046d:0823) [ 1600.912785][ T39] usb 7-1: No valid video chain found. [ 1600.921508][ T39] usb 7-1: USB disconnect, device number 61 [ 1600.941771][T24519] loop6: detected capacity change from 0 to 256 [ 1600.953058][T20536] usb 2-1: Using ep0 maxpacket: 16 [ 1600.959496][T20536] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.980282][T20536] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1601.061894][T20536] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1601.072109][T20536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.081415][T20536] usb 2-1: Product: syz [ 1601.087105][T20536] usb 2-1: Manufacturer: syz [ 1601.092072][T20536] usb 2-1: SerialNumber: syz [ 1601.320296][T13548] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 1601.344188][T20536] usb 2-1: 0:2 : does not exist [ 1601.349633][T13548] usb 6-1: No valid video chain found. [ 1601.358379][T20536] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1601.410205][T13548] usb 6-1: USB disconnect, device number 88 [ 1601.420992][T20536] usb 2-1: USB disconnect, device number 72 [ 1601.503088][T13983] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1601.637187][ T9243] udevd[9243]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1601.693081][T13983] usb 1-1: Using ep0 maxpacket: 32 [ 1601.700023][T13983] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1601.708529][T13983] usb 1-1: config 0 has no interface number 0 [ 1601.715254][T13983] usb 1-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 7 [ 1601.725609][T13983] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1601.734548][T13983] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1601.743799][T13983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.752180][T13983] usb 1-1: Product: syz [ 1601.756409][T13983] usb 1-1: Manufacturer: syz [ 1601.761497][T13983] usb 1-1: SerialNumber: syz [ 1601.767206][T13983] usb 1-1: config 0 descriptor?? [ 1601.772605][T24524] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1601.799187][T13983] smsc75xx v1.0.0 [ 1601.985237][T24524] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1602.542768][T18718] usb 8-1: USB disconnect, device number 71 [ 1602.561462][T24551] loop5: detected capacity change from 0 to 1024 [ 1602.569759][T24551] EXT4-fs: Ignoring removed orlov option [ 1602.575773][T24551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1602.598772][T24551] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1602.677641][T13983] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1602.700503][T13983] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1603.130416][T24558] loop7: detected capacity change from 0 to 256 [ 1603.160783][T13983] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1603.202428][T13983] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1603.242742][T13983] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1603.272967][T13983] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1603.303369][T13983] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 1603.323453][T13983] usb 1-1: USB disconnect, device number 79 [ 1604.403035][T18718] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 1604.667792][T24577] loop0: detected capacity change from 0 to 40427 [ 1604.675300][T24577] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 1604.703063][T24577] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1604.723102][T24577] F2FS-fs (loop0): fault_injection options not supported [ 1604.736764][T18718] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1604.747014][T18718] usb 8-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1604.772707][T24577] F2FS-fs (loop0): invalid crc value [ 1604.779801][T18718] usb 8-1: config 0 has no interface number 0 [ 1604.794183][T18718] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1604.812989][T18718] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.829924][T18718] usb 8-1: Product: syz [ 1604.834595][T18718] usb 8-1: Manufacturer: syz [ 1604.839472][T18718] usb 8-1: SerialNumber: syz [ 1604.854321][T18718] usb 8-1: config 0 descriptor?? [ 1604.870608][T24577] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1605.089224][T24577] F2FS-fs (loop0): Start checkpoint disabled! [ 1605.167928][T24577] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1605.177030][T24577] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1605.503343][T13636] EXT4-fs (loop5): unmounting filesystem. [ 1605.555534][T24596] kvm: pic: non byte write [ 1605.732969][ T59] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1606.143030][ T59] usb 2-1: Using ep0 maxpacket: 32 [ 1606.150481][ T59] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1606.168682][ T59] usb 2-1: config 0 has no interface number 0 [ 1606.182482][ T59] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 7 [ 1606.193005][ T59] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1606.208356][ T59] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1606.228121][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.236628][ T59] usb 2-1: Product: syz [ 1606.250489][ T59] usb 2-1: Manufacturer: syz [ 1606.258769][ T59] usb 2-1: SerialNumber: syz [ 1606.269362][ T59] usb 2-1: config 0 descriptor?? [ 1606.310937][T18718] usb 8-1: Found UVC 0.00 device syz (046d:0823) [ 1606.318551][T18718] usb 8-1: No valid video chain found. [ 1606.327437][T24593] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1606.346332][ T59] smsc75xx v1.0.0 [ 1606.352553][T18718] usb 8-1: USB disconnect, device number 72 [ 1606.489936][T20535] kworker/u4:1: attempt to access beyond end of device [ 1606.489936][T20535] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1606.513373][T20536] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1606.551860][T24593] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1606.634245][T24622] kvm: pic: non byte write [ 1606.703036][T20536] usb 6-1: Using ep0 maxpacket: 16 [ 1606.709900][T20536] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1606.719905][T20536] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.731425][T20536] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1606.753835][T20536] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1606.769430][ T59] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1606.771552][T20536] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.782036][ T59] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1606.801064][ T59] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1606.812433][ T59] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 1606.817229][T20536] usb 6-1: Product: syz [ 1606.832997][T20536] usb 6-1: Manufacturer: syz [ 1606.838059][T20536] usb 6-1: SerialNumber: syz [ 1607.273527][T20536] usb 6-1: 0:2 : does not exist [ 1607.913251][T24641] loop6: detected capacity change from 0 to 1024 [ 1607.922701][T24641] EXT4-fs: Ignoring removed orlov option [ 1607.929036][T24641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1607.980203][T24641] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1608.860483][ T59] usb 2-1: USB disconnect, device number 73 [ 1608.903318][T24652] incfs: Can't find or create .index dir in ./file0 [ 1608.913512][T24652] incfs: mount failed -5 [ 1610.097028][T24163] EXT4-fs (loop6): unmounting filesystem. [ 1610.097789][T20536] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 1610.120227][T20536] usb 6-1: USB disconnect, device number 89 [ 1610.201767][T24671] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1610.254427][T24670] loop6: detected capacity change from 0 to 256 [ 1610.366451][T16585] udevd[16585]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1610.432980][ T59] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1610.854008][ T59] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1610.864944][ T59] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1610.917111][ T59] usb 2-1: config 0 has no interface number 0 [ 1610.931646][ T59] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1610.950826][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.968855][ T59] usb 2-1: Product: syz [ 1611.013072][ T59] usb 2-1: Manufacturer: syz [ 1611.018284][ T59] usb 2-1: SerialNumber: syz [ 1611.104822][T24685] loop0: detected capacity change from 0 to 256 [ 1611.245335][T24685] FAT-fs (loop0): Directory bread(block 64) failed [ 1611.252978][T24685] FAT-fs (loop0): Directory bread(block 65) failed [ 1611.261892][T24685] FAT-fs (loop0): Directory bread(block 66) failed [ 1611.269265][T24685] FAT-fs (loop0): Directory bread(block 67) failed [ 1611.276330][T24685] FAT-fs (loop0): Directory bread(block 68) failed [ 1611.283660][T24685] FAT-fs (loop0): Directory bread(block 69) failed [ 1611.290868][T24685] FAT-fs (loop0): Directory bread(block 70) failed [ 1611.297790][T24685] FAT-fs (loop0): Directory bread(block 71) failed [ 1611.304938][T24685] FAT-fs (loop0): Directory bread(block 72) failed [ 1611.311981][T24685] FAT-fs (loop0): Directory bread(block 73) failed [ 1611.653027][T13548] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1611.885214][ T59] usb 2-1: config 0 descriptor?? [ 1611.893800][T13548] usb 1-1: Using ep0 maxpacket: 32 [ 1611.901602][T13548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1611.924394][ T59] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 1611.931224][ T59] usb 2-1: No valid video chain found. [ 1611.943678][ T59] usb 2-1: USB disconnect, device number 74 [ 1611.985209][T13548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1612.018641][T13548] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1612.049449][T13548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.081851][T13548] usb 1-1: config 0 descriptor?? [ 1612.163007][T18718] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 1612.352956][T18718] usb 8-1: Using ep0 maxpacket: 32 [ 1612.359656][T18718] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1612.379238][T18718] usb 8-1: config 0 has no interface number 0 [ 1612.392796][T18718] usb 8-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 7 [ 1612.407076][T18718] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1612.424912][T18718] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1612.440771][T18718] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.450976][T18718] usb 8-1: Product: syz [ 1612.455472][T18718] usb 8-1: Manufacturer: syz [ 1612.460690][T18718] usb 8-1: SerialNumber: syz [ 1612.473681][T18718] usb 8-1: config 0 descriptor?? [ 1612.479539][T24692] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1612.508622][T18718] smsc75xx v1.0.0 [ 1612.573081][ T59] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1612.648161][T24711] kvm: pic: non byte write [ 1612.714940][T24692] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1613.014951][ T59] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1613.025651][ T59] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1613.039089][ T59] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1613.050411][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.060267][ T59] usb 2-1: Product: syz [ 1613.064564][ T59] usb 2-1: Manufacturer: syz [ 1613.069847][T18718] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1613.081043][ T59] usb 2-1: SerialNumber: syz [ 1613.086364][T18718] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1613.152953][ T59] usb 2-1: config 0 descriptor?? [ 1613.158333][T18718] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1613.168949][T18718] smsc75xx: probe of 8-1:0.184 failed with error -61 [ 1613.169242][T24702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1613.183172][T24702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1613.401393][T24702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1613.408916][T24702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1613.819042][ T59] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1613.829117][T24717] loop5: detected capacity change from 0 to 40427 [ 1613.836578][T24717] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 1613.844690][T24717] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1613.853493][T24717] F2FS-fs (loop5): fault_injection options not supported [ 1613.861852][T24717] F2FS-fs (loop5): invalid crc value [ 1613.868564][T24717] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1613.898542][T24717] F2FS-fs (loop5): Start checkpoint disabled! [ 1613.907071][T24717] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1613.914670][T24717] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1613.953334][T13548] usbhid 1-1:0.0: can't add hid device: -71 [ 1613.959719][T13548] usbhid: probe of 1-1:0.0 failed with error -71 [ 1613.967595][T13548] usb 1-1: USB disconnect, device number 80 [ 1613.972957][T18718] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1614.202941][T18718] usb 7-1: Using ep0 maxpacket: 16 [ 1614.210442][T18718] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1614.219925][T18718] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.231104][T18718] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1614.247817][T18718] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1614.258425][T18718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.267109][T18718] usb 7-1: Product: syz [ 1614.271435][T18718] usb 7-1: Manufacturer: syz [ 1614.276888][T18718] usb 7-1: SerialNumber: syz [ 1614.645407][ T59] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1614.657236][ T59] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 02:45:8d:6c:48:96 [ 1614.681552][ T59] usb 2-1: USB disconnect, device number 75 [ 1614.698375][ T59] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 1614.751917][T18718] usb 7-1: 0:2 : does not exist [ 1614.867668][T11871] kworker/u4:51: attempt to access beyond end of device [ 1614.867668][T11871] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1614.893435][T13548] usb 8-1: USB disconnect, device number 73 [ 1614.971378][T24752] loop0: detected capacity change from 0 to 128 [ 1614.995779][T24752] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1615.032631][T24752] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1615.053663][T24752] ext4 filesystem being mounted at /579/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1615.156642][T13765] EXT4-fs (loop0): unmounting filesystem. [ 1615.190997][T24773] loop0: detected capacity change from 0 to 256 [ 1615.333059][T13983] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1615.523037][T13983] usb 6-1: Using ep0 maxpacket: 16 [ 1615.529878][T13983] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.540299][T13983] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1615.551471][T13983] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1615.563532][T13983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.571970][T13983] usb 6-1: Product: syz [ 1615.576288][T13983] usb 6-1: Manufacturer: syz [ 1615.581166][T13983] usb 6-1: SerialNumber: syz [ 1615.620266][T18718] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 1615.635256][T18718] usb 7-1: USB disconnect, device number 62 [ 1615.643103][ T59] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1615.791924][T13983] usb 6-1: 0:2 : does not exist [ 1615.799719][T13983] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1615.814720][T13983] usb 6-1: USB disconnect, device number 90 [ 1615.834253][ T59] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1615.844942][ T59] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1615.858829][ T59] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1615.868368][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.876757][ T59] usb 2-1: Product: syz [ 1615.881332][ T59] usb 2-1: Manufacturer: syz [ 1615.886384][ T59] usb 2-1: SerialNumber: syz [ 1615.893588][ T59] usb 2-1: config 0 descriptor?? [ 1615.898927][T24775] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1615.907252][T24775] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1615.937767][T24779] kvm: pic: non byte write [ 1616.064233][T16585] udevd[16585]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1616.116232][T24775] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1616.145382][T24775] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1616.170479][T24789] loop6: detected capacity change from 0 to 512 [ 1616.218949][T24789] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1616.233092][T24789] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1616.314746][T24786] loop0: detected capacity change from 0 to 40427 [ 1616.337190][T24786] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 1616.370720][T24786] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1616.387189][T24786] F2FS-fs (loop0): fault_injection options not supported [ 1616.396438][T24786] F2FS-fs (loop0): invalid crc value [ 1616.406609][T24786] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1616.464308][T24786] F2FS-fs (loop0): Start checkpoint disabled! [ 1616.590303][T24786] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1616.605261][T24786] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1616.645964][ T59] Error reading MAC address [ 1617.069495][T24163] EXT4-fs (loop6): unmounting filesystem. [ 1617.421094][T11871] kworker/u4:51: attempt to access beyond end of device [ 1617.421094][T11871] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1617.703005][ T59] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 1617.883013][T18718] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1617.903036][ T59] usb 8-1: Using ep0 maxpacket: 32 [ 1617.910027][ T59] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1617.918952][ T59] usb 8-1: config 0 has no interface number 0 [ 1617.925395][ T59] usb 8-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 7 [ 1617.939266][ T59] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1617.948653][ T59] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1617.958108][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.966619][ T59] usb 8-1: Product: syz [ 1617.971062][ T59] usb 8-1: Manufacturer: syz [ 1617.975961][ T59] usb 8-1: SerialNumber: syz [ 1617.988428][ T59] usb 8-1: config 0 descriptor?? [ 1617.994211][T24804] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1618.002677][ T59] smsc75xx v1.0.0 [ 1618.066517][T18718] usb 1-1: Using ep0 maxpacket: 32 [ 1618.073563][T18718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1618.085278][T18718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1618.095913][T18718] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1618.105847][T18718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.115371][T18718] usb 1-1: config 0 descriptor?? [ 1618.204017][T24804] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1618.221330][ T533] usb 2-1: USB disconnect, device number 76 [ 1618.525245][T18718] usbhid 1-1:0.0: can't add hid device: -71 [ 1618.534532][T18718] usbhid: probe of 1-1:0.0 failed with error -71 [ 1618.543964][T18718] usb 1-1: USB disconnect, device number 81 [ 1618.812977][ T533] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1618.821479][ T59] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1618.835266][ T59] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1618.845349][ T59] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1618.856773][ T59] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1618.866833][ T59] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1618.877622][ T59] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1618.888754][ T59] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 1618.897821][ T59] usb 8-1: USB disconnect, device number 74 [ 1618.920089][T24827] loop5: detected capacity change from 0 to 256 [ 1619.014232][ T533] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1619.025300][ T533] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1619.314103][ T533] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1619.332591][ T533] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.341414][ T533] usb 7-1: Product: syz [ 1619.346622][ T533] usb 7-1: Manufacturer: syz [ 1619.351875][ T533] usb 7-1: SerialNumber: syz [ 1619.358064][ T533] usb 7-1: config 0 descriptor?? [ 1619.364386][T24822] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1619.373231][T24822] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1619.586508][T24822] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1619.594272][T24822] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1619.972034][T24845] loop7: detected capacity change from 0 to 512 [ 1619.995159][T24845] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1620.004808][T24845] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1620.165331][ T533] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1620.569920][T24855] loop5: detected capacity change from 0 to 40427 [ 1620.582040][T24855] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 1620.590214][T24855] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1620.599208][T24855] F2FS-fs (loop5): fault_injection options not supported [ 1620.609064][T24855] F2FS-fs (loop5): invalid crc value [ 1620.616373][T24855] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1620.645204][T24855] F2FS-fs (loop5): Start checkpoint disabled! [ 1620.653444][T24855] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1620.660773][T24855] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1620.806302][T15097] EXT4-fs (loop7): unmounting filesystem. [ 1621.354516][ T533] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1621.441724][ T533] dm9601 7-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, e6:f4:44:1d:cb:79 [ 1621.460650][ T533] usb 7-1: USB disconnect, device number 63 [ 1621.467666][ T533] dm9601 7-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet [ 1621.797606][T11836] kworker/u4:17: attempt to access beyond end of device [ 1621.797606][T11836] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1621.813642][T24879] loop0: detected capacity change from 0 to 1024 [ 1621.843422][T24879] EXT4-fs: Ignoring removed orlov option [ 1622.060344][T24879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1622.122819][T24885] loop6: detected capacity change from 0 to 256 [ 1622.134846][T24879] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1622.872991][T13983] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1622.948334][T24897] incfs: Can't find or create .index dir in ./file0 [ 1622.963655][T24897] incfs: mount failed -5 [ 1623.062981][T13983] usb 2-1: Using ep0 maxpacket: 16 [ 1623.069744][T13983] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1623.095540][T13983] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1623.098045][T24901] loop7: detected capacity change from 0 to 512 [ 1623.118809][T13983] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1623.141031][T13983] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1623.162156][T13983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.180456][T13983] usb 2-1: Product: syz [ 1623.190668][T13983] usb 2-1: Manufacturer: syz [ 1623.216553][T13983] usb 2-1: SerialNumber: syz [ 1623.225561][T24901] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1623.262713][T24901] ext4 filesystem being mounted at /551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1623.300881][T13765] EXT4-fs (loop0): unmounting filesystem. [ 1623.650399][T13983] usb 2-1: 0:2 : does not exist [ 1623.930650][T15097] EXT4-fs (loop7): unmounting filesystem. [ 1625.267121][T24933] loop0: detected capacity change from 0 to 256 [ 1625.615026][T18718] usb 2-1: USB disconnect, device number 77 [ 1625.742949][T13983] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1625.924318][T13983] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1625.932546][T13983] usb 1-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1625.962292][T13983] usb 1-1: config 0 has no interface number 0 [ 1625.987133][T13983] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1626.006109][T13983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.027126][T13983] usb 1-1: Product: syz [ 1626.036763][T13983] usb 1-1: Manufacturer: syz [ 1626.046445][T13983] usb 1-1: SerialNumber: syz [ 1626.052715][T13983] usb 1-1: config 0 descriptor?? [ 1626.679527][T24967] loop6: detected capacity change from 0 to 1024 [ 1626.723452][T24967] EXT4-fs: Ignoring removed orlov option [ 1626.740463][T24967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1626.777628][T24967] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1627.132951][ T533] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 1627.324038][ T533] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1627.338730][ T533] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1627.363290][ T533] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1627.383011][ T533] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.391759][ T533] usb 8-1: Product: syz [ 1627.413154][ T533] usb 8-1: Manufacturer: syz [ 1627.418165][ T533] usb 8-1: SerialNumber: syz [ 1627.432554][ T533] usb 8-1: config 0 descriptor?? [ 1627.443392][T24973] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1627.450827][T24973] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1627.675662][T24973] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1627.686274][T24973] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1627.964880][T24163] EXT4-fs (loop6): unmounting filesystem. [ 1628.061173][T13983] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 1628.195361][T13983] usb 1-1: No valid video chain found. [ 1628.201348][ T533] Error reading MAC address [ 1628.202862][T13983] usb 1-1: USB disconnect, device number 82 [ 1628.538389][T24994] loop6: detected capacity change from 0 to 1024 [ 1628.545743][T24994] EXT4-fs: Ignoring removed orlov option [ 1628.551642][T24994] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1628.695824][T24994] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1628.852534][T24998] incfs: Can't find or create .index dir in ./file0 [ 1628.896161][T24998] incfs: mount failed -5 [ 1630.419164][T24163] EXT4-fs (loop6): unmounting filesystem. [ 1630.432212][ T533] usb 8-1: USB disconnect, device number 75 [ 1630.561861][T25018] loop6: detected capacity change from 0 to 512 [ 1630.641626][T25019] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1630.826357][T25018] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1630.838917][T25018] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1630.953045][T18718] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1631.087704][T25031] loop5: detected capacity change from 0 to 1024 [ 1631.110693][T25031] EXT4-fs: Ignoring removed orlov option [ 1631.125125][T25031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1631.143108][T18718] usb 2-1: Using ep0 maxpacket: 16 [ 1631.151377][T18718] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.166506][T25031] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1631.178564][T18718] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1631.211297][T18718] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1631.229251][T18718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.244010][T18718] usb 2-1: Product: syz [ 1631.251528][T18718] usb 2-1: Manufacturer: syz [ 1631.260691][T18718] usb 2-1: SerialNumber: syz [ 1631.399978][T24163] EXT4-fs (loop6): unmounting filesystem. [ 1631.477201][T18718] usb 2-1: 0:2 : does not exist [ 1631.486728][T18718] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1631.519295][T18718] usb 2-1: USB disconnect, device number 78 [ 1631.717525][T25041] loop6: detected capacity change from 0 to 1024 [ 1631.724575][T25041] EXT4-fs: Ignoring removed orlov option [ 1631.730454][T25041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1631.763978][T25041] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1631.783490][T16585] udevd[16585]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1632.023820][T25057] incfs: Can't find or create .index dir in ./file0 [ 1632.047824][T25057] incfs: mount failed -5 [ 1632.383672][T24163] EXT4-fs (loop6): unmounting filesystem. [ 1632.743310][T13636] EXT4-fs (loop5): unmounting filesystem. [ 1632.768822][T25071] kvm: pic: non byte write [ 1632.779065][T25074] loop5: detected capacity change from 0 to 512 [ 1632.848417][T25074] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1632.863990][T25074] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1633.020795][T25085] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1633.439054][T25100] incfs: Can't find or create .index dir in ./file0 [ 1633.446069][T25100] incfs: mount failed -5 [ 1634.210959][T25110] loop7: detected capacity change from 0 to 256 [ 1634.265636][T13983] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1634.497394][T13636] EXT4-fs (loop5): unmounting filesystem. [ 1634.600374][T25113] loop0: detected capacity change from 0 to 1024 [ 1634.607264][T25113] EXT4-fs: Ignoring removed orlov option [ 1634.613286][T25113] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1634.625300][T25117] kvm: pic: non byte write [ 1634.647776][T25113] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1634.684172][T13765] EXT4-fs (loop0): unmounting filesystem. [ 1634.699227][T25124] loop0: detected capacity change from 0 to 128 [ 1634.706633][T25124] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1634.716417][T25124] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1634.725758][T25124] ext4 filesystem being mounted at /595/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1634.743443][T13983] usb 2-1: Using ep0 maxpacket: 16 [ 1634.756307][T13983] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.824393][T13983] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1634.842489][T13983] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1634.854533][T13765] EXT4-fs (loop0): unmounting filesystem. [ 1634.875794][T13983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.885987][ T1201] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 1634.893981][T13983] usb 2-1: Product: syz [ 1634.898528][T13983] usb 2-1: Manufacturer: syz [ 1634.905649][T13983] usb 2-1: SerialNumber: syz [ 1635.039208][T25142] incfs: Can't find or create .index dir in ./file0 [ 1635.046952][T25142] incfs: mount failed -5 [ 1635.114053][ T1201] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1635.186115][ T1201] usb 8-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1635.196860][ T1201] usb 8-1: config 0 has no interface number 0 [ 1635.206936][T13983] usb 2-1: 0:2 : does not exist [ 1635.217038][T13983] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1635.472087][T25150] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1635.502741][ T1201] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1635.522095][ T1201] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.531036][ T1201] usb 8-1: Product: syz [ 1635.536273][ T1201] usb 8-1: Manufacturer: syz [ 1635.541147][ T1201] usb 8-1: SerialNumber: syz [ 1635.545333][T13983] usb 2-1: USB disconnect, device number 79 [ 1635.560951][ T1201] usb 8-1: config 0 descriptor?? [ 1636.741475][ T28] audit: type=1326 audit(2000000524.269:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25105 comm="syz.7.6291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29bb8ebe9 code=0x7ffc0000 [ 1636.766203][ T28] audit: type=1326 audit(2000000524.269:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25105 comm="syz.7.6291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29bb8ebe9 code=0x7ffc0000 [ 1636.818949][T25166] kvm: pic: non byte write [ 1637.033652][T25181] incfs: Can't find or create .index dir in ./file0 [ 1637.035099][T25172] loop5: detected capacity change from 0 to 1024 [ 1637.040770][T25181] incfs: mount failed -5 [ 1637.047908][T25172] EXT4-fs: Ignoring removed orlov option [ 1637.057905][T25172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1637.093896][T25172] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1637.208707][T13636] EXT4-fs (loop5): unmounting filesystem. [ 1637.543533][T20536] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1637.733025][T20536] usb 6-1: Using ep0 maxpacket: 16 [ 1637.801365][ T1201] usb 8-1: Found UVC 0.00 device syz (046d:0823) [ 1637.878653][T20536] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.890196][ T1201] usb 8-1: No valid video chain found. [ 1637.901767][ T1201] usb 8-1: USB disconnect, device number 76 [ 1637.909468][T20536] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1637.931486][T20536] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1637.940847][T20536] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.959950][T20536] usb 6-1: Product: syz [ 1637.967818][T20536] usb 6-1: Manufacturer: syz [ 1637.976838][T20536] usb 6-1: SerialNumber: syz [ 1638.206472][T20536] usb 6-1: 0:2 : does not exist [ 1638.253894][T20536] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1638.428890][T20536] usb 6-1: USB disconnect, device number 91 [ 1638.501672][T25206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.509453][T25206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.517269][T25206] device bridge_slave_0 entered promiscuous mode [ 1638.526146][T25206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.534188][T25206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.541870][T25206] device bridge_slave_1 entered promiscuous mode [ 1638.634970][T25206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.642187][T25206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.649642][T25206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.656870][T25206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1638.664970][T16585] udevd[16585]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1638.699893][T11979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1638.708713][T11979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.718319][T11979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.730705][T11979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1638.754575][T11979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.761906][T11979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1638.795257][T11979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1638.814304][T11979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.821532][T11979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.910538][T25206] device veth0_vlan entered promiscuous mode [ 1638.936515][T11979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1638.957579][T11979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1638.974771][T11979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1639.013590][T11979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1639.033731][T11979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1639.043632][T11979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1639.069191][T25206] device veth1_macvtap entered promiscuous mode [ 1639.170959][T11963] device bridge_slave_1 left promiscuous mode [ 1639.180370][T11963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.189414][T11963] device bridge_slave_0 left promiscuous mode [ 1639.203643][T11963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.208811][T25231] kvm: pic: non byte write [ 1639.220002][T11963] device veth1_macvtap left promiscuous mode [ 1639.226759][T11963] device veth0_vlan left promiscuous mode [ 1639.336732][T11979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1639.351715][T11979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1639.360910][T11979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1639.371937][T11979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1639.381317][T11979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1639.403744][T20536] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1639.469443][T25245] loop5: detected capacity change from 0 to 256 [ 1640.270059][T25253] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1640.323065][T20536] usb 2-1: Using ep0 maxpacket: 16 [ 1640.612633][T20536] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1640.622100][T20536] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1640.643008][T20536] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1640.670788][T20536] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1640.683703][T20536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.692199][T20536] usb 2-1: Product: syz [ 1640.704498][T20536] usb 2-1: Manufacturer: syz [ 1640.709334][T20536] usb 2-1: SerialNumber: syz [ 1640.882471][T11110] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1641.074276][T11110] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1641.082562][T11110] usb 6-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1641.093015][T11110] usb 6-1: config 0 has no interface number 0 [ 1641.101385][T11110] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1641.110551][T11110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.119549][T11110] usb 6-1: Product: syz [ 1641.125017][T11110] usb 6-1: Manufacturer: syz [ 1641.130223][T11110] usb 6-1: SerialNumber: syz [ 1641.136803][T11110] usb 6-1: config 0 descriptor?? [ 1641.197017][T20536] usb 2-1: 0:2 : does not exist [ 1641.243163][T13548] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1641.492765][T13548] usb 1-1: Using ep0 maxpacket: 16 [ 1641.514325][T13548] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.532122][T13548] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1641.544828][ T28] audit: type=1326 audit(2000000529.539:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25242 comm="syz.5.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3a18ebe9 code=0x7ffc0000 [ 1641.546622][T25273] loop6: detected capacity change from 0 to 128 [ 1641.569744][ T28] audit: type=1326 audit(2000000529.539:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25242 comm="syz.5.6326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3a18ebe9 code=0x7ffc0000 [ 1641.618738][T13548] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1641.662662][T13548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.672563][T13548] usb 1-1: Product: syz [ 1641.678226][T13548] usb 1-1: Manufacturer: syz [ 1641.684651][T13548] usb 1-1: SerialNumber: syz [ 1641.706210][T25273] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1641.778332][T25273] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1641.787659][T25273] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1641.887951][T24163] EXT4-fs (loop6): unmounting filesystem. [ 1641.895041][T20536] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1641.924696][T20536] usb 2-1: USB disconnect, device number 80 [ 1641.957261][T13548] usb 1-1: 0:2 : does not exist [ 1641.965737][T13548] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1641.999324][T13548] usb 1-1: USB disconnect, device number 83 [ 1642.090501][T25284] kvm: pic: non byte write [ 1642.244460][T17345] udevd[17345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1642.724708][T11110] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 1642.731496][T11110] usb 6-1: No valid video chain found. [ 1642.738976][T11110] usb 6-1: USB disconnect, device number 92 [ 1643.071307][T25297] loop7: detected capacity change from 0 to 256 [ 1643.413157][T20536] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 1643.466799][T25309] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1643.774909][T20536] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1643.809914][T20536] usb 8-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1643.882042][T20536] usb 8-1: config 0 has no interface number 0 [ 1643.897276][T20536] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1643.908570][T20536] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.916894][T20536] usb 8-1: Product: syz [ 1643.939449][T20536] usb 8-1: Manufacturer: syz [ 1643.944727][T20536] usb 8-1: SerialNumber: syz [ 1643.952495][T20536] usb 8-1: config 0 descriptor?? [ 1643.953626][T25317] loop6: detected capacity change from 0 to 128 [ 1643.965150][T25317] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1643.975838][T25317] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1643.985161][T25317] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1644.013978][T24163] EXT4-fs (loop6): unmounting filesystem. [ 1644.244500][T25326] kvm: pic: non byte write [ 1644.725749][T25336] loop0: detected capacity change from 0 to 256 [ 1644.734301][T13983] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 1644.926206][T13983] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 1644.943352][T13983] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.957253][T13983] usb 7-1: config 0 has no interface number 0 [ 1644.965568][T13983] usb 7-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1644.981695][T13983] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1645.002446][T13983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.020063][T13983] usb 7-1: Product: syz [ 1645.029570][T13983] usb 7-1: Manufacturer: syz [ 1645.034736][T13983] usb 7-1: SerialNumber: syz [ 1645.041331][T13983] usb 7-1: config 0 descriptor?? [ 1645.058442][T13983] usb-storage 7-1:0.16: USB Mass Storage device detected [ 1645.080000][T13983] usb-storage 7-1:0.16: Quirks match for vid 04e6 pid 000b: 4 [ 1645.202985][T18718] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1645.263960][T25342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.271377][T25342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.279418][T25342] device bridge_slave_0 entered promiscuous mode [ 1645.289398][T25342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.298402][T25342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.306608][T25342] device bridge_slave_1 entered promiscuous mode [ 1645.383067][T11963] tipc: Left network mode [ 1645.390250][T11110] usb 7-1: USB disconnect, device number 64 [ 1645.404073][T18718] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1645.420872][T18718] usb 1-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1645.444104][T18718] usb 1-1: config 0 has no interface number 0 [ 1645.460764][T18718] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1645.470974][T18718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.480143][T18718] usb 1-1: Product: syz [ 1645.484966][T18718] usb 1-1: Manufacturer: syz [ 1645.489815][T18718] usb 1-1: SerialNumber: syz [ 1645.500343][T18718] usb 1-1: config 0 descriptor?? [ 1645.547522][T25342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.554849][T25342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1645.562177][T25342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.569572][T25342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1645.601718][T11860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.611855][T11860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.620025][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1645.629385][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1645.717370][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1645.726688][T11860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.734082][T11860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1645.744557][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1645.753109][T11860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.760369][T11860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1645.777646][T20536] usb 8-1: Found UVC 0.00 device syz (046d:0823) [ 1645.784516][T20536] usb 8-1: No valid video chain found. [ 1645.791626][T20536] usb 8-1: USB disconnect, device number 77 [ 1645.804066][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1645.833523][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1645.852159][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1645.865972][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1645.874743][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1645.882749][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1645.892185][T25342] device veth0_vlan entered promiscuous mode [ 1645.906907][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1645.915939][ T28] audit: type=1326 audit(2000000533.919:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25330 comm="syz.0.6350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14718ebe9 code=0x7ffc0000 [ 1645.941203][ T28] audit: type=1326 audit(2000000533.919:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25330 comm="syz.0.6350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14718ebe9 code=0x7ffc0000 [ 1645.943426][T25342] device veth1_macvtap entered promiscuous mode [ 1646.012321][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1646.052010][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1646.438410][T25368] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1646.513072][T20536] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 1646.646766][T25371] loop5: detected capacity change from 0 to 128 [ 1646.659028][T25371] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1646.668173][T25371] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1646.676998][T25371] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1646.700922][T25342] EXT4-fs (loop5): unmounting filesystem. [ 1646.709170][T11963] device bridge_slave_1 left promiscuous mode [ 1646.716490][T11963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.724604][T11963] device bridge_slave_0 left promiscuous mode [ 1646.731149][T11963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.741364][T11963] device veth1_macvtap left promiscuous mode [ 1646.743086][T20536] usb 8-1: Using ep0 maxpacket: 16 [ 1646.760699][T20536] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.781279][T20536] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1646.802045][T20536] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1646.818984][T20536] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.834269][T20536] usb 8-1: Product: syz [ 1646.844208][T20536] usb 8-1: Manufacturer: syz [ 1646.853206][T20536] usb 8-1: SerialNumber: syz [ 1647.739321][T18718] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 1647.756692][T20536] usb 8-1: 0:2 : does not exist [ 1647.763385][T18718] usb 1-1: No valid video chain found. [ 1647.898579][T20536] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1647.928249][T18718] usb 1-1: USB disconnect, device number 84 [ 1647.981533][T25382] kvm: pic: non byte write [ 1648.134877][T20536] usb 8-1: USB disconnect, device number 78 [ 1648.606693][T25412] loop7: detected capacity change from 0 to 128 [ 1648.689965][ T59] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1648.698537][T25412] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1648.707003][T25412] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1648.716382][T25412] ext4 filesystem being mounted at /569/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1649.002821][T15097] EXT4-fs (loop7): unmounting filesystem. [ 1649.113081][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 1649.120800][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.132978][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1649.143767][ T59] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1649.371780][T25425] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1649.602558][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.620393][ T59] usb 6-1: config 0 descriptor?? [ 1649.889574][T11110] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1649.962674][T20536] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1650.153014][T20536] usb 7-1: Using ep0 maxpacket: 32 [ 1650.160903][T20536] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1650.229359][T20536] usb 7-1: config 0 has no interface number 0 [ 1650.271636][T20536] usb 7-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 7 [ 1650.279670][ T59] usbhid 6-1:0.0: can't add hid device: -71 [ 1650.283318][T20536] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1650.297375][ T59] usbhid: probe of 6-1:0.0 failed with error -71 [ 1650.305773][T11110] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1650.308872][T20536] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1650.315755][ T59] usb 6-1: USB disconnect, device number 93 [ 1650.331204][T11110] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1650.344119][T11110] usb 2-1: config 0 has no interface number 0 [ 1650.351370][T20536] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.360667][T11110] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1650.361486][T20536] usb 7-1: Product: syz [ 1650.376630][T20536] usb 7-1: Manufacturer: syz [ 1650.378797][T11110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.382121][T20536] usb 7-1: SerialNumber: syz [ 1650.383603][T20536] usb 7-1: config 0 descriptor?? [ 1650.401537][T11110] usb 2-1: Product: syz [ 1650.405881][T25433] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1650.413367][T11110] usb 2-1: Manufacturer: syz [ 1650.418864][T11110] usb 2-1: SerialNumber: syz [ 1650.421027][T20536] smsc75xx v1.0.0 [ 1650.436595][T11110] usb 2-1: config 0 descriptor?? [ 1650.596760][T25439] kvm: pic: non byte write [ 1650.628177][T25433] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1650.716544][T25442] kvm: pic: non byte write [ 1650.849049][ T28] audit: type=1326 audit(2000000538.839:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25423 comm="syz.1.6371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eadb8ebe9 code=0x7ffc0000 [ 1651.031365][ T28] audit: type=1326 audit(2000000538.839:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25423 comm="syz.1.6371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eadb8ebe9 code=0x7ffc0000 [ 1651.066157][T20536] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1651.131412][T20536] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1651.142820][T20536] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1651.155373][T20536] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1651.165513][T20536] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1651.176033][T20536] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1651.185765][T20536] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 1651.204021][T20536] usb 7-1: USB disconnect, device number 65 [ 1651.253032][ T59] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1651.432968][ T59] usb 8-1: Using ep0 maxpacket: 16 [ 1651.439926][ T59] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.450417][ T59] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1651.461388][ T59] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1651.471131][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.479520][ T59] usb 8-1: Product: syz [ 1651.483915][ T59] usb 8-1: Manufacturer: syz [ 1651.488629][ T59] usb 8-1: SerialNumber: syz [ 1651.656460][T25456] loop6: detected capacity change from 0 to 256 [ 1651.699746][ T59] usb 8-1: 0:2 : does not exist [ 1651.725890][ T59] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1651.846637][T25459] loop0: detected capacity change from 0 to 128 [ 1652.690519][T25459] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1652.710941][T11110] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 1652.717823][T11110] usb 2-1: No valid video chain found. [ 1652.725381][T11110] usb 2-1: USB disconnect, device number 81 [ 1652.741936][ T59] usb 8-1: USB disconnect, device number 79 [ 1652.752683][T25459] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1652.771021][T25459] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1653.041965][T25475] loop5: detected capacity change from 0 to 256 [ 1653.695903][T25480] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1653.760288][T25206] EXT4-fs (loop0): unmounting filesystem. [ 1653.847169][T25490] kvm: pic: non byte write [ 1654.104302][T25499] loop7: detected capacity change from 0 to 256 [ 1654.181130][T25498] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1655.505508][T25511] loop0: detected capacity change from 0 to 512 [ 1655.515872][T25513] loop7: detected capacity change from 0 to 256 [ 1655.568084][T25511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1655.584942][T25511] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1655.683885][T25518] loop5: detected capacity change from 0 to 256 [ 1655.982964][T13548] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1656.214854][T13548] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1656.231245][T13548] usb 6-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1656.259304][T13548] usb 6-1: config 0 has no interface number 0 [ 1656.279093][T13548] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1656.289029][T13548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.300482][T13548] usb 6-1: Product: syz [ 1656.305627][T13548] usb 6-1: Manufacturer: syz [ 1656.314207][T13548] usb 6-1: SerialNumber: syz [ 1656.325804][T25206] EXT4-fs (loop0): unmounting filesystem. [ 1656.326586][T13548] usb 6-1: config 0 descriptor?? [ 1656.746570][ T28] audit: type=1326 audit(2000000544.739:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25508 comm="syz.5.6395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173278ebe9 code=0x7ffc0000 [ 1656.795521][T25535] kvm: pic: non byte write [ 1656.800414][ T28] audit: type=1326 audit(2000000544.739:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25508 comm="syz.5.6395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173278ebe9 code=0x7ffc0000 [ 1656.932978][T20536] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1657.467355][T20536] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1657.496533][T20536] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1657.566365][T20536] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1657.577840][T20536] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.586676][T20536] usb 8-1: Product: syz [ 1657.591242][T20536] usb 8-1: Manufacturer: syz [ 1657.596918][T20536] usb 8-1: SerialNumber: syz [ 1657.603233][T20536] usb 8-1: config 0 descriptor?? [ 1657.608647][T25536] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1657.616369][T25536] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1657.829085][T25536] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1657.839249][T25536] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1657.983007][ T39] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1658.053584][T25559] loop0: detected capacity change from 0 to 256 [ 1658.242972][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 1658.249426][ T39] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1658.258495][ T39] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.268793][ T39] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1658.279810][ T39] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1658.289414][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.298776][ T39] usb 7-1: Product: syz [ 1658.303154][ T39] usb 7-1: Manufacturer: syz [ 1658.308041][ T39] usb 7-1: SerialNumber: syz [ 1658.352041][T20536] Error reading MAC address [ 1658.422993][ T1201] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1658.478345][T13548] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 1658.485027][T13548] usb 6-1: No valid video chain found. [ 1658.492809][T13548] usb 6-1: USB disconnect, device number 94 [ 1658.614640][ T1201] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1658.624237][ T1201] usb 1-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1658.636511][ T1201] usb 1-1: config 0 has no interface number 0 [ 1658.646847][ T1201] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1658.863288][T25565] loop5: detected capacity change from 0 to 1024 [ 1658.872261][T25565] EXT4-fs: Ignoring removed orlov option [ 1658.878094][T25565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1658.887545][ T1201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.895906][ T1201] usb 1-1: Product: syz [ 1658.900241][ T1201] usb 1-1: Manufacturer: syz [ 1658.906008][ T1201] usb 1-1: SerialNumber: syz [ 1658.915124][ T1201] usb 1-1: config 0 descriptor?? [ 1659.056611][ T39] usb 7-1: 0:2 : does not exist [ 1659.119631][T25565] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1659.445967][T25342] EXT4-fs (loop5): unmounting filesystem. [ 1659.728792][T25577] loop5: detected capacity change from 0 to 256 [ 1659.810687][T13983] usb 8-1: USB disconnect, device number 80 [ 1659.915688][ T39] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 1659.936535][ T39] usb 7-1: USB disconnect, device number 66 [ 1660.063104][T13548] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1660.264299][T13548] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1660.273498][T13548] usb 6-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1660.296317][T13548] usb 6-1: config 0 has no interface number 0 [ 1660.309230][T13548] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1660.325753][T13548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.342203][T13548] usb 6-1: Product: syz [ 1660.350928][T13548] usb 6-1: Manufacturer: syz [ 1660.359376][T13548] usb 6-1: SerialNumber: syz [ 1660.370154][T13548] usb 6-1: config 0 descriptor?? [ 1660.979348][ T1201] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 1660.986332][ T1201] usb 1-1: No valid video chain found. [ 1661.038285][ T1201] usb 1-1: USB disconnect, device number 85 [ 1661.579955][ T361] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1661.712989][T11110] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1661.804227][ T361] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1661.812467][ T361] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1661.823028][ T361] usb 2-1: config 0 has no interface number 0 [ 1661.830575][ T361] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1661.840027][ T361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.862989][ T361] usb 2-1: Product: syz [ 1661.867388][ T361] usb 2-1: Manufacturer: syz [ 1661.872174][ T361] usb 2-1: SerialNumber: syz [ 1661.889366][ T361] usb 2-1: config 0 descriptor?? [ 1661.895429][T25616] loop7: detected capacity change from 0 to 256 [ 1661.912971][T11110] usb 7-1: Using ep0 maxpacket: 32 [ 1661.919811][T11110] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.932323][T11110] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1661.942674][T11110] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1661.952219][T11110] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.962344][T11110] usb 7-1: config 0 descriptor?? [ 1661.995682][T25618] incfs: Can't find or create .index dir in ./file0 [ 1662.003321][T25618] incfs: mount failed -5 [ 1662.303614][ T28] audit: type=1326 audit(2000000550.299:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25600 comm="syz.1.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eadb8ebe9 code=0x7ffc0000 [ 1662.337968][ T28] audit: type=1326 audit(2000000550.299:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25600 comm="syz.1.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eadb8ebe9 code=0x7ffc0000 [ 1662.374393][T11110] usbhid 7-1:0.0: can't add hid device: -71 [ 1662.382726][T11110] usbhid: probe of 7-1:0.0 failed with error -71 [ 1662.396381][T11110] usb 7-1: USB disconnect, device number 67 [ 1662.481723][T13548] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 1662.489754][T13548] usb 6-1: No valid video chain found. [ 1662.496875][T13548] usb 6-1: USB disconnect, device number 95 [ 1662.690225][T25629] loop5: detected capacity change from 0 to 40427 [ 1662.708175][T25629] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 1662.716281][T25629] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1662.725325][T25629] F2FS-fs (loop5): fault_injection options not supported [ 1662.747705][T25629] F2FS-fs (loop5): invalid crc value [ 1662.760304][T25629] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1662.804605][T25629] F2FS-fs (loop5): Start checkpoint disabled! [ 1662.812013][T25629] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1662.819366][T25629] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1662.899075][T25638] loop6: detected capacity change from 0 to 128 [ 1663.062210][T25639] loop7: detected capacity change from 0 to 256 [ 1663.273697][T25638] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1663.501941][T25638] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1663.511750][T25638] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1664.200334][ T361] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 1664.212852][T24163] EXT4-fs (loop6): unmounting filesystem. [ 1664.273268][T18718] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1664.278343][ T361] usb 2-1: No valid video chain found. [ 1664.288260][ T361] usb 2-1: USB disconnect, device number 82 [ 1664.309828][T11871] kworker/u4:51: attempt to access beyond end of device [ 1664.309828][T11871] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1664.704659][T18718] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1664.713419][T18718] usb 8-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1664.722196][T13983] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1664.732989][T18718] usb 8-1: config 0 has no interface number 0 [ 1664.747618][T18718] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1664.757255][T18718] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.765527][T18718] usb 8-1: Product: syz [ 1664.769945][T18718] usb 8-1: Manufacturer: syz [ 1664.774782][T18718] usb 8-1: SerialNumber: syz [ 1664.780647][T18718] usb 8-1: config 0 descriptor?? [ 1664.913010][T13983] usb 7-1: Using ep0 maxpacket: 16 [ 1664.920785][T13983] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1664.964492][T13983] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.015223][T13983] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1665.051929][T13983] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1665.142597][T25667] loop5: detected capacity change from 0 to 1024 [ 1665.222422][T13983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.250846][T13983] usb 7-1: Product: syz [ 1665.270772][T13983] usb 7-1: Manufacturer: syz [ 1667.609951][T25667] EXT4-fs: Ignoring removed orlov option [ 1667.617948][T13983] usb 7-1: SerialNumber: syz [ 1667.665884][T13983] usb 7-1: can't set config #1, error -71 [ 1667.700960][T13983] usb 7-1: USB disconnect, device number 68 [ 1667.747330][T25667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1667.755016][T18718] usb 8-1: Found UVC 0.00 device syz (046d:0823) [ 1667.761402][T18718] usb 8-1: No valid video chain found. [ 1667.814135][T18718] usb 8-1: USB disconnect, device number 81 [ 1667.816024][T25667] EXT4-fs warning (device loop5): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop5. [ 1667.955319][T25683] loop7: detected capacity change from 0 to 1024 [ 1667.963011][T25683] EXT4-fs: Ignoring removed orlov option [ 1667.969307][T25683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1668.003433][T25683] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1668.382951][T13548] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1668.462986][ T1201] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1668.562720][T15097] EXT4-fs (loop7): unmounting filesystem. [ 1668.573182][T13548] usb 2-1: Using ep0 maxpacket: 32 [ 1668.582803][T13548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.594670][T13548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.893488][T25695] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1669.007573][T25697] loop7: detected capacity change from 0 to 256 [ 1669.033457][T13548] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1669.043647][ T1201] usb 1-1: Using ep0 maxpacket: 32 [ 1669.054896][ T1201] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1669.191136][T13548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.210567][ T1201] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1669.231050][T13548] usb 2-1: config 0 descriptor?? [ 1669.237160][ T1201] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1669.247480][ T1201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.265808][ T1201] usb 1-1: config 0 descriptor?? [ 1669.349575][T25699] loop6: detected capacity change from 0 to 40427 [ 1669.367745][T25699] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 1669.391338][T25699] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1669.399344][T25701] loop5: detected capacity change from 0 to 128 [ 1669.406614][T25699] F2FS-fs (loop6): fault_injection options not supported [ 1669.415686][T25699] F2FS-fs (loop6): invalid crc value [ 1669.415933][T25701] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1669.422563][T25699] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1669.466269][T25699] F2FS-fs (loop6): Start checkpoint disabled! [ 1669.474011][T13548] usbhid 2-1:0.0: can't add hid device: -71 [ 1669.484111][T13548] usbhid: probe of 2-1:0.0 failed with error -71 [ 1669.489145][T25699] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1669.493488][T13548] usb 2-1: USB disconnect, device number 83 [ 1669.504516][T25699] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1669.512588][T25701] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1669.525986][T25701] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1669.592680][T13983] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1670.042335][ T1201] usbhid 1-1:0.0: can't add hid device: -71 [ 1670.052015][ T1201] usbhid: probe of 1-1:0.0 failed with error -71 [ 1670.064223][ T1201] usb 1-1: USB disconnect, device number 86 [ 1670.204671][T13983] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1670.213768][T13983] usb 8-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1670.226749][T13983] usb 8-1: config 0 has no interface number 0 [ 1670.277548][T25342] EXT4-fs (loop5): unmounting filesystem. [ 1671.103583][T13983] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1671.113221][T13983] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.122496][T13983] usb 8-1: Product: syz [ 1671.125012][T20535] kworker/u4:1: attempt to access beyond end of device [ 1671.125012][T20535] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1671.126915][T13983] usb 8-1: Manufacturer: syz [ 1671.147361][T13983] usb 8-1: SerialNumber: syz [ 1671.153143][T13983] usb 8-1: config 0 descriptor?? [ 1671.322942][T18719] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1671.343890][T25726] loop5: detected capacity change from 0 to 1024 [ 1671.353096][T18718] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1671.495976][T25728] loop6: detected capacity change from 0 to 256 [ 1671.563597][T25726] EXT4-fs: Ignoring removed orlov option [ 1671.590753][T25726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1671.630621][T25726] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1671.669822][ T28] audit: type=1326 audit(2000000559.659:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.7.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29bb8ebe9 code=0x7ffc0000 [ 1671.684064][T18719] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1671.694300][ T28] audit: type=1326 audit(2000000559.659:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.7.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29bb8ebe9 code=0x7ffc0000 [ 1671.706903][T18719] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1671.736729][T18719] usb 2-1: config 0 has no interface number 0 [ 1671.747764][T18719] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1671.757154][T18719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.765497][T18719] usb 2-1: Product: syz [ 1671.769798][T18719] usb 2-1: Manufacturer: syz [ 1671.774609][T18718] usb 1-1: Using ep0 maxpacket: 16 [ 1671.780123][T18719] usb 2-1: SerialNumber: syz [ 1671.786147][T18718] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1671.796082][T18719] usb 2-1: config 0 descriptor?? [ 1671.801188][T18718] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.812989][T18718] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1671.823831][T18718] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1671.833469][T18718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.841668][T18718] usb 1-1: Product: syz [ 1671.846579][T18718] usb 1-1: Manufacturer: syz [ 1671.851503][T18718] usb 1-1: SerialNumber: syz [ 1671.882978][ T1201] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1672.064153][ T1201] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 1672.072581][ T1201] usb 7-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1672.084205][ T1201] usb 7-1: config 0 has no interface number 0 [ 1672.105143][ T1201] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1672.115356][ T1201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.124946][ T1201] usb 7-1: Product: syz [ 1672.125679][T25342] EXT4-fs (loop5): unmounting filesystem. [ 1672.130164][ T1201] usb 7-1: Manufacturer: syz [ 1672.140712][ T1201] usb 7-1: SerialNumber: syz [ 1672.154259][ T1201] usb 7-1: config 0 descriptor?? [ 1672.285638][T18718] usb 1-1: 0:2 : does not exist [ 1672.732189][T13983] usb 8-1: Found UVC 0.00 device syz (046d:0823) [ 1672.739086][T13983] usb 8-1: No valid video chain found. [ 1672.748404][T13983] usb 8-1: USB disconnect, device number 82 [ 1673.132985][T13983] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 1673.406153][T18719] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 1673.423007][T18719] usb 2-1: No valid video chain found. [ 1673.463352][T18719] usb 2-1: USB disconnect, device number 84 [ 1673.534264][T13983] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1673.544915][T13983] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1673.554669][T13983] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1673.564032][T13983] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1673.573288][T13983] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.581385][T13983] usb 8-1: Product: syz [ 1673.585587][T13983] usb 8-1: Manufacturer: syz [ 1673.590390][T13983] usb 8-1: SerialNumber: syz [ 1673.890219][T13983] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 1673.896745][T13983] usb 8-1: No valid video chain found. [ 1673.904205][T13983] usb 8-1: USB disconnect, device number 83 [ 1674.089841][T18719] usb 1-1: USB disconnect, device number 87 [ 1674.258251][ T1201] usb 7-1: Found UVC 0.00 device syz (046d:0823) [ 1674.265145][ T1201] usb 7-1: No valid video chain found. [ 1674.273537][ T1201] usb 7-1: USB disconnect, device number 69 [ 1674.376201][T25755] loop0: detected capacity change from 0 to 1024 [ 1674.383354][T25755] EXT4-fs: Ignoring removed orlov option [ 1674.389137][T25755] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1674.622471][T25755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1675.257876][T25766] loop7: detected capacity change from 0 to 1024 [ 1675.264992][T25766] EXT4-fs: Ignoring removed orlov option [ 1675.270769][T25766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1675.279385][ T1201] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1675.293137][T25206] EXT4-fs (loop0): unmounting filesystem. [ 1675.301661][T25766] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1675.366099][T15097] EXT4-fs (loop7): unmounting filesystem. [ 1675.495176][ T1201] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1675.528670][T25778] loop0: detected capacity change from 0 to 256 [ 1675.558516][ T1201] usb 7-1: config 220 has an invalid descriptor of length 161, skipping remainder of the config [ 1675.667337][ T1201] usb 7-1: config 220 has no interface number 2 [ 1675.674323][ T1201] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1675.688161][ T1201] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1675.695770][ T1201] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1675.704086][ T1201] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1675.712688][ T1201] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1675.722446][ T1201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.742421][ T1201] usb 7-1: Product: syz [ 1675.746826][ T1201] usb 7-1: Manufacturer: syz [ 1675.751737][ T1201] usb 7-1: SerialNumber: syz [ 1675.812952][T18719] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1675.845388][T25780] loop5: detected capacity change from 0 to 1024 [ 1675.865962][T25780] EXT4-fs: Ignoring removed orlov option [ 1675.872223][T25780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1675.924241][T25780] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1675.963701][ T1201] usb 7-1: selecting invalid altsetting 0 [ 1675.969647][ T1201] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 1675.976369][T13983] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1675.984831][ T1201] usb 7-1: No valid video chain found. [ 1675.994778][ T1201] usb 7-1: USB disconnect, device number 70 [ 1676.004348][T18719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1676.017853][T18719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1676.048370][T18719] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1676.061126][T18719] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.071149][T18719] usb 8-1: Product: syz [ 1676.075683][T18719] usb 8-1: Manufacturer: syz [ 1676.080605][T18719] usb 8-1: SerialNumber: syz [ 1676.102254][T18719] usb 8-1: config 0 descriptor?? [ 1676.111233][T25775] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1676.123054][T25775] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1676.164127][T13983] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1676.173336][T13983] usb 1-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1676.183937][T13983] usb 1-1: config 0 has no interface number 0 [ 1676.191637][T13983] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1676.201147][T13983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.209923][T13983] usb 1-1: Product: syz [ 1676.217802][T13983] usb 1-1: Manufacturer: syz [ 1676.222796][T13983] usb 1-1: SerialNumber: syz [ 1676.239298][T13983] usb 1-1: config 0 descriptor?? [ 1676.351083][T25775] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1676.361893][T25775] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1676.561345][T25793] kvm: pic: non byte write [ 1676.613029][T25342] EXT4-fs (loop5): unmounting filesystem. [ 1676.636408][T25796] loop5: detected capacity change from 0 to 256 [ 1676.673084][ T28] audit: type=1326 audit(2000000564.639:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25772 comm="syz.0.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14718ebe9 code=0x7ffc0000 [ 1676.768986][ T28] audit: type=1326 audit(2000000564.639:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25772 comm="syz.0.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14718ebe9 code=0x7ffc0000 [ 1676.793583][T18719] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1677.582563][T18719] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 1677.594197][T18719] usb 8-1: USB disconnect, device number 84 [ 1678.214241][T25827] kvm: pic: non byte write [ 1678.316856][T13983] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 1678.323963][T13983] usb 1-1: No valid video chain found. [ 1678.332697][T13983] usb 1-1: USB disconnect, device number 88 [ 1678.353844][T18719] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 1678.549906][T25836] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1678.763011][T18719] usb 8-1: Using ep0 maxpacket: 32 [ 1678.769544][T18719] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1678.778082][T18719] usb 8-1: config 0 has no interface number 0 [ 1678.784963][T18719] usb 8-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 7 [ 1678.795449][T18719] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1678.807817][T11110] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1678.819425][T18719] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1678.834485][T18719] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.842856][T18719] usb 8-1: Product: syz [ 1678.847224][T18719] usb 8-1: Manufacturer: syz [ 1678.852036][T18719] usb 8-1: SerialNumber: syz [ 1678.857975][T18719] usb 8-1: config 0 descriptor?? [ 1678.863647][T25823] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1678.871342][T18719] smsc75xx v1.0.0 [ 1679.002965][T11110] usb 2-1: Using ep0 maxpacket: 16 [ 1679.015240][T11110] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.025645][T11110] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1679.046598][T11110] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1679.056100][T11110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.056296][T25847] loop6: detected capacity change from 0 to 256 [ 1679.064731][T11110] usb 2-1: Product: syz [ 1679.078077][T25823] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1679.085818][T11110] usb 2-1: Manufacturer: syz [ 1679.091198][T11110] usb 2-1: SerialNumber: syz [ 1679.133427][T13548] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1679.397791][T13548] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1679.451465][T13548] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1679.468911][T13548] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1679.478703][T13548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.487729][T13548] usb 6-1: Product: syz [ 1679.492275][T13548] usb 6-1: Manufacturer: syz [ 1679.496367][T11110] usb 2-1: 0:2 : does not exist [ 1679.497469][T13548] usb 6-1: SerialNumber: syz [ 1679.504838][T11110] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1679.517312][T13548] usb 6-1: config 0 descriptor?? [ 1679.522704][T25841] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1679.530829][T18719] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1679.530990][T25841] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1679.544593][T11110] usb 2-1: USB disconnect, device number 85 [ 1679.555970][T18719] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1679.567568][T18719] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1679.579952][T18719] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1679.589921][T18719] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1679.600903][T18719] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1679.610740][T18719] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 1679.619643][T18719] usb 8-1: USB disconnect, device number 85 [ 1679.732954][T13983] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1679.764136][T25841] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1679.771372][T25841] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1679.960379][T25855] loop6: detected capacity change from 0 to 128 [ 1679.971630][T25855] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1679.979387][T13983] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1679.983705][T25855] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1679.990408][T13983] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1679.999194][T25855] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1680.010939][T13983] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1680.029511][T13983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.038159][T13983] usb 1-1: Product: syz [ 1680.042725][T13983] usb 1-1: Manufacturer: syz [ 1680.047553][T13983] usb 1-1: SerialNumber: syz [ 1680.192016][T13548] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1680.267387][T13983] usb 1-1: config 0 descriptor?? [ 1680.296204][T25851] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1680.366217][T25851] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1680.379394][T25861] loop7: detected capacity change from 0 to 256 [ 1680.580872][T25851] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1680.589344][T25851] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1680.794295][T25865] kvm: pic: non byte write [ 1680.820888][T24163] EXT4-fs (loop6): unmounting filesystem. [ 1680.821314][T13548] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1680.845670][T13548] dm9601 6-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 12:40:76:82:61:ff [ 1680.847807][T25868] incfs: Can't find or create .index dir in ./file0 [ 1680.865190][T25868] incfs: mount failed -5 [ 1680.878317][T13548] usb 6-1: USB disconnect, device number 96 [ 1680.885761][T13548] dm9601 6-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 1680.999661][T13983] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1681.956401][T13983] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 1681.993606][T13983] usb 1-1: USB disconnect, device number 89 [ 1682.770846][T25927] loop6: detected capacity change from 0 to 256 [ 1682.947430][T18719] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1683.136308][T25937] incfs: Can't find or create .index dir in ./file0 [ 1683.146206][T25937] incfs: mount failed -5 [ 1683.191533][T25942] kvm: pic: non byte write [ 1683.192993][T18719] usb 2-1: Using ep0 maxpacket: 32 [ 1683.196318][T13983] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1683.211832][T18719] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1683.220521][T18719] usb 2-1: config 0 has no interface number 0 [ 1683.227124][T18719] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 7 [ 1683.237674][T18719] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1683.245895][T25944] kvm: pic: non byte write [ 1683.252398][T18719] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1683.261888][T18719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.270189][T18719] usb 2-1: Product: syz [ 1683.274603][T18719] usb 2-1: Manufacturer: syz [ 1683.279386][T18719] usb 2-1: SerialNumber: syz [ 1683.294196][T18719] usb 2-1: config 0 descriptor?? [ 1683.299680][T25921] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1683.301108][T25946] loop7: detected capacity change from 0 to 512 [ 1683.315569][T18719] smsc75xx v1.0.0 [ 1683.332934][T25946] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1683.342472][T25946] ext4 filesystem being mounted at /595/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1683.421635][T13983] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 1683.430626][T13983] usb 7-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1683.441155][T13983] usb 7-1: config 0 has no interface number 0 [ 1683.448908][T13983] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1683.458296][T13983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.466511][T13983] usb 7-1: Product: syz [ 1683.470829][T13983] usb 7-1: Manufacturer: syz [ 1683.475497][T13983] usb 7-1: SerialNumber: syz [ 1683.481812][T13983] usb 7-1: config 0 descriptor?? [ 1683.522403][T25921] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1683.810243][T25953] loop0: detected capacity change from 0 to 1024 [ 1683.820281][T25953] EXT4-fs: Ignoring removed orlov option [ 1683.826739][T25953] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1684.025464][T25953] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1684.089326][ T28] audit: type=1326 audit(2000000572.029:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25923 comm="syz.6.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd3d8ebe9 code=0x7ffc0000 [ 1684.245126][ T28] audit: type=1326 audit(2000000572.029:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25923 comm="syz.6.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd3d8ebe9 code=0x7ffc0000 [ 1684.274548][T15097] EXT4-fs (loop7): unmounting filesystem. [ 1684.323546][T18719] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1684.337201][T25206] EXT4-fs (loop0): unmounting filesystem. [ 1684.350490][T18719] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1684.473581][T18719] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1684.492134][T18719] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1684.502549][T18719] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1684.513511][T18719] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1684.523655][T18719] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 1684.532553][T18719] usb 2-1: USB disconnect, device number 86 [ 1684.966085][T25980] incfs: Can't find or create .index dir in ./file0 [ 1684.973033][T25980] incfs: mount failed -5 [ 1685.357453][T13983] usb 7-1: Found UVC 0.00 device syz (046d:0823) [ 1685.369881][T13983] usb 7-1: No valid video chain found. [ 1685.391193][T13983] usb 7-1: USB disconnect, device number 71 [ 1685.440363][T25994] loop7: detected capacity change from 0 to 512 [ 1685.471412][T25994] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1685.480900][T25994] ext4 filesystem being mounted at /597/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1685.508605][T25982] kvm: pic: non byte write [ 1686.286812][T26014] loop0: detected capacity change from 0 to 256 [ 1686.429003][T15097] EXT4-fs (loop7): unmounting filesystem. [ 1686.624805][T26024] incfs: Can't find or create .index dir in ./file0 [ 1686.631812][T26024] incfs: mount failed -5 [ 1686.674054][T13983] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1686.999970][T26033] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1687.046651][T13983] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1687.119182][T13983] usb 1-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1687.135067][T13983] usb 1-1: config 0 has no interface number 0 [ 1687.145640][T13983] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1687.155487][T13983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.164159][T13983] usb 1-1: Product: syz [ 1687.168595][T13983] usb 1-1: Manufacturer: syz [ 1687.173992][T13983] usb 1-1: SerialNumber: syz [ 1687.183075][T13983] usb 1-1: config 0 descriptor?? [ 1687.198753][T26036] kvm: pic: non byte write [ 1688.216079][T26052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.223919][T26052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.231990][T26052] device bridge_slave_0 entered promiscuous mode [ 1688.239956][T26052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.247562][T26052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.302698][T26052] device bridge_slave_1 entered promiscuous mode [ 1688.578555][T26052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.585691][T26052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1688.593143][T26052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.600283][T26052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1688.610311][ T7948] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1688.642923][T20535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1688.651402][T20535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.661152][T20535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.680863][T20535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1688.689865][T20535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.697243][T20535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1688.705648][T20535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1688.714286][T20535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.721508][T20535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1688.735982][T20535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1688.746214][T20535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1688.763271][T20535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1688.777820][T20535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1688.786770][T20535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1688.796368][T20535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1688.803181][ T7948] usb 7-1: Using ep0 maxpacket: 16 [ 1688.805420][T26052] device veth0_vlan entered promiscuous mode [ 1688.813305][ T7948] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.837131][T20535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1688.845485][ T7948] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1688.847986][T26052] device veth1_macvtap entered promiscuous mode [ 1688.864113][T11963] device bridge_slave_1 left promiscuous mode [ 1688.864383][ T7948] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1688.870682][T11963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.887852][T11963] device bridge_slave_0 left promiscuous mode [ 1688.894186][ T7948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.894754][T11963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.911295][T11963] device veth1_macvtap left promiscuous mode [ 1688.914102][ T7948] usb 7-1: Product: syz [ 1688.917911][T11963] device veth0_vlan left promiscuous mode [ 1688.926543][ T7948] usb 7-1: Manufacturer: syz [ 1688.933376][ T7948] usb 7-1: SerialNumber: syz [ 1689.072840][T20535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1689.102972][T13983] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 1689.117987][T13983] usb 1-1: No valid video chain found. [ 1689.141908][T20535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1689.147826][ T7948] usb 7-1: 0:2 : does not exist [ 1689.155039][T26075] incfs: Can't find or create .index dir in ./file0 [ 1689.168523][ T7948] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1689.171316][T26075] incfs: mount failed -5 [ 1689.183414][T13983] usb 1-1: USB disconnect, device number 90 [ 1689.285797][ T7948] usb 7-1: USB disconnect, device number 72 [ 1689.401620][T26089] loop5: detected capacity change from 0 to 1024 [ 1689.431699][T26089] EXT4-fs: Ignoring removed bh option [ 1689.445323][T26089] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1689.453803][T26077] loop0: detected capacity change from 0 to 40427 [ 1689.464757][T26077] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 1689.474169][T26077] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1689.483398][T26077] F2FS-fs (loop0): fault_injection options not supported [ 1689.492025][T26077] F2FS-fs (loop0): invalid crc value [ 1689.499890][T26077] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1689.543813][T26077] F2FS-fs (loop0): Start checkpoint disabled! [ 1689.551301][T26077] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1689.559066][T26077] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1691.302990][T13548] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1691.404066][T11963] kworker/u4:148: attempt to access beyond end of device [ 1691.404066][T11963] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1691.500907][T13548] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1691.521200][T25342] EXT4-fs (loop5): unmounting filesystem. [ 1691.522438][T13548] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1691.537955][T26109] loop0: detected capacity change from 0 to 512 [ 1691.550010][T13548] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1691.561761][T13548] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.570558][T13548] usb 7-1: Product: syz [ 1691.575520][T13548] usb 7-1: Manufacturer: syz [ 1691.580419][T13548] usb 7-1: SerialNumber: syz [ 1691.594337][T26109] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1691.598915][T13548] usb 7-1: config 0 descriptor?? [ 1691.605029][T26109] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1691.609394][T26101] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1691.626866][T26101] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1691.859135][T26101] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1691.866575][T26101] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1691.892954][ T7948] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1691.989537][T26124] kvm: pic: non byte write [ 1692.092979][ T7948] usb 6-1: Using ep0 maxpacket: 32 [ 1692.100088][ T7948] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1692.110173][ T7948] usb 6-1: config 0 has no interface number 0 [ 1692.116941][ T7948] usb 6-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 7 [ 1692.128821][ T7948] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1692.138196][ T7948] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1692.148393][ T7948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.156950][ T7948] usb 6-1: Product: syz [ 1692.161187][ T7948] usb 6-1: Manufacturer: syz [ 1692.166476][ T7948] usb 6-1: SerialNumber: syz [ 1692.172187][ T7948] usb 6-1: config 0 descriptor?? [ 1692.177998][T26118] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1692.186788][ T7948] smsc75xx v1.0.0 [ 1692.253241][ T5608] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1692.284914][T13548] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1692.359328][T25206] EXT4-fs (loop0): unmounting filesystem. [ 1692.387784][T26118] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1692.433029][ T5608] usb 2-1: Using ep0 maxpacket: 16 [ 1692.440334][ T5608] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1692.451076][ T5608] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1692.462632][ T5608] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1692.502810][ T5608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.511245][ T5608] usb 2-1: Product: syz [ 1692.515730][ T5608] usb 2-1: Manufacturer: syz [ 1692.520339][ T5608] usb 2-1: SerialNumber: syz [ 1692.632465][T26139] loop0: detected capacity change from 0 to 256 [ 1692.800830][ T7948] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 1692.834095][T26139] FAT-fs (loop0): Directory bread(block 64) failed [ 1692.840853][T26139] FAT-fs (loop0): Directory bread(block 65) failed [ 1692.848012][T26139] FAT-fs (loop0): Directory bread(block 66) failed [ 1692.854684][T26139] FAT-fs (loop0): Directory bread(block 67) failed [ 1692.861611][T26139] FAT-fs (loop0): Directory bread(block 68) failed [ 1692.868274][T26139] FAT-fs (loop0): Directory bread(block 69) failed [ 1692.875362][T26139] FAT-fs (loop0): Directory bread(block 70) failed [ 1692.882197][T26139] FAT-fs (loop0): Directory bread(block 71) failed [ 1692.889450][T26139] FAT-fs (loop0): Directory bread(block 72) failed [ 1692.896268][T26139] FAT-fs (loop0): Directory bread(block 73) failed [ 1692.930945][T13548] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1693.222018][ T7948] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1693.240844][T13548] dm9601 7-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, b6:cb:c0:3f:b0:93 [ 1693.325205][ T7948] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1693.348060][ T5608] usb 2-1: 0:2 : does not exist [ 1693.357318][T13548] usb 7-1: USB disconnect, device number 73 [ 1693.365451][ T7948] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1693.372968][ T5608] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1693.378095][T13548] dm9601 7-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet [ 1693.398938][ T7948] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1693.405667][ T5608] usb 2-1: USB disconnect, device number 87 [ 1693.445864][ T7948] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1693.479972][ T7948] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 1693.491936][ T7948] usb 6-1: USB disconnect, device number 97 [ 1693.517757][T13983] ================================================================== [ 1693.526210][T13983] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 1693.534131][T13983] Read of size 8 at addr ffff8881205f2cf0 by task kworker/1:6/13983 [ 1693.542949][T13983] [ 1693.545382][T13983] CPU: 1 PID: 13983 Comm: kworker/1:6 Not tainted syzkaller #0 [ 1693.553287][T13983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1693.563548][T13983] Workqueue: events free_work [ 1693.568354][T13983] Call Trace: [ 1693.571824][T13983] [ 1693.574788][T13983] __dump_stack+0x21/0x24 [ 1693.579233][T13983] dump_stack_lvl+0xee/0x150 [ 1693.584027][T13983] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1693.589105][T13983] ? kasan_quarantine_put+0x34/0x190 [ 1693.594504][T13983] ? __list_del_entry_valid+0xa6/0x130 [ 1693.600140][T13983] print_address_description+0x71/0x1e0 [ 1693.605898][T13983] print_report+0x4a/0x60 [ 1693.610275][T13983] kasan_report+0x122/0x150 [ 1693.615431][T13983] ? __list_del_entry_valid+0xa6/0x130 [ 1693.621028][T13983] __asan_report_load8_noabort+0x14/0x20 [ 1693.627001][T13983] __list_del_entry_valid+0xa6/0x130 [ 1693.632504][T13983] process_one_work+0x4b9/0xc40 [ 1693.637482][T13983] worker_thread+0xa29/0x11f0 [ 1693.642193][T13983] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 1693.647779][T13983] kthread+0x281/0x320 [ 1693.651884][T13983] ? __cfi_worker_thread+0x10/0x10 [ 1693.657285][T13983] ? __cfi_kthread+0x10/0x10 [ 1693.662153][T13983] ret_from_fork+0x1f/0x30 [ 1693.666645][T13983] [ 1693.669695][T13983] [ 1693.672132][T13983] Allocated by task 13548: [ 1693.676637][T13983] kasan_set_track+0x4b/0x70 [ 1693.681461][T13983] kasan_save_alloc_info+0x25/0x30 [ 1693.686717][T13983] __kasan_kmalloc+0x95/0xb0 [ 1693.691428][T13983] __kmalloc_node+0xb2/0x1e0 [ 1693.696056][T13983] kvmalloc_node+0x294/0x480 [ 1693.700777][T13983] alloc_netdev_mqs+0x8d/0xf90 [ 1693.705657][T13983] alloc_etherdev_mqs+0x37/0x40 [ 1693.710534][T13983] usbnet_probe+0x20c/0x2780 [ 1693.715138][T13983] usb_probe_interface+0x610/0xaf0 [ 1693.720300][T13983] really_probe+0x2cb/0x960 [ 1693.725708][T13983] __driver_probe_device+0x198/0x280 [ 1693.731270][T13983] driver_probe_device+0x54/0x3e0 [ 1693.736528][T13983] __device_attach_driver+0x2e9/0x4a0 [ 1693.741926][T13983] bus_for_each_drv+0x183/0x210 [ 1693.746855][T13983] __device_attach+0x2a2/0x400 [ 1693.751976][T13983] device_initial_probe+0x1a/0x20 [ 1693.757096][T13983] bus_probe_device+0xc0/0x1f0 [ 1693.762037][T13983] device_add+0xb4d/0xef0 [ 1693.766388][T13983] usb_set_configuration+0x19c2/0x1f10 [ 1693.772068][T13983] usb_generic_driver_probe+0x91/0x150 [ 1693.777637][T13983] usb_probe_device+0x159/0x270 [ 1693.782496][T13983] really_probe+0x2cb/0x960 [ 1693.787091][T13983] __driver_probe_device+0x198/0x280 [ 1693.792377][T13983] driver_probe_device+0x54/0x3e0 [ 1693.797480][T13983] __device_attach_driver+0x2e9/0x4a0 [ 1693.803035][T13983] bus_for_each_drv+0x183/0x210 [ 1693.807987][T13983] __device_attach+0x2a2/0x400 [ 1693.812856][T13983] device_initial_probe+0x1a/0x20 [ 1693.818075][T13983] bus_probe_device+0xc0/0x1f0 [ 1693.823049][T13983] device_add+0xb4d/0xef0 [ 1693.827494][T13983] usb_new_device+0xa70/0x1520 [ 1693.832600][T13983] hub_event+0x2850/0x4350 [ 1693.837177][T13983] process_one_work+0x71f/0xc40 [ 1693.842289][T13983] worker_thread+0xa29/0x11f0 [ 1693.847132][T13983] kthread+0x281/0x320 [ 1693.851191][T13983] ret_from_fork+0x1f/0x30 [ 1693.855704][T13983] [ 1693.858280][T13983] Freed by task 13548: [ 1693.862336][T13983] kasan_set_track+0x4b/0x70 [ 1693.866937][T13983] kasan_save_free_info+0x31/0x50 [ 1693.872008][T13983] ____kasan_slab_free+0x132/0x180 [ 1693.877215][T13983] __kasan_slab_free+0x11/0x20 [ 1693.881984][T13983] slab_free_freelist_hook+0xc2/0x190 [ 1693.888156][T13983] __kmem_cache_free+0xb7/0x1b0 [ 1693.893358][T13983] kfree+0x6f/0xf0 [ 1693.897294][T13983] kvfree+0x35/0x40 [ 1693.901194][T13983] netdev_freemem+0x3f/0x60 [ 1693.905935][T13983] netdev_release+0x7f/0xb0 [ 1693.910446][T13983] device_release+0xa4/0x1d0 [ 1693.915227][T13983] kobject_put+0x19d/0x280 [ 1693.919828][T13983] put_device+0x1f/0x30 [ 1693.924431][T13983] free_netdev+0x392/0x490 [ 1693.929035][T13983] usbnet_disconnect+0x25a/0x3b0 [ 1693.934266][T13983] usb_unbind_interface+0x223/0x8d0 [ 1693.939751][T13983] device_release_driver_internal+0x508/0x820 [ 1693.945916][T13983] device_release_driver+0x19/0x20 [ 1693.951197][T13983] bus_remove_device+0x2ee/0x350 [ 1693.956205][T13983] device_del+0x6a4/0xeb0 [ 1693.960699][T13983] usb_disable_device+0x3a8/0x750 [ 1693.965771][T13983] usb_disconnect+0x31e/0x860 [ 1693.970443][T13983] hub_event+0x1a78/0x4350 [ 1693.974940][T13983] process_one_work+0x71f/0xc40 [ 1693.979965][T13983] worker_thread+0xd2e/0x11f0 [ 1693.984748][T13983] kthread+0x281/0x320 [ 1693.989001][T13983] ret_from_fork+0x1f/0x30 [ 1693.993534][T13983] [ 1693.996052][T13983] Last potentially related work creation: [ 1694.001873][T13983] kasan_save_stack+0x3a/0x60 [ 1694.006549][T13983] __kasan_record_aux_stack+0xb6/0xc0 [ 1694.013241][T13983] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1694.019141][T13983] insert_work+0x51/0x300 [ 1694.023660][T13983] __queue_work+0x9b1/0xd30 [ 1694.028304][T13983] queue_work_on+0xd2/0x140 [ 1694.032925][T13983] usbnet_link_change+0x176/0x1a0 [ 1694.038151][T13983] usbnet_probe+0x1d55/0x2780 [ 1694.043006][T13983] usb_probe_interface+0x610/0xaf0 [ 1694.048231][T13983] really_probe+0x2cb/0x960 [ 1694.052855][T13983] __driver_probe_device+0x198/0x280 [ 1694.058164][T13983] driver_probe_device+0x54/0x3e0 [ 1694.063379][T13983] __device_attach_driver+0x2e9/0x4a0 [ 1694.068878][T13983] bus_for_each_drv+0x183/0x210 [ 1694.073759][T13983] __device_attach+0x2a2/0x400 [ 1694.078562][T13983] device_initial_probe+0x1a/0x20 [ 1694.084018][T13983] bus_probe_device+0xc0/0x1f0 [ 1694.089051][T13983] device_add+0xb4d/0xef0 [ 1694.093655][T13983] usb_set_configuration+0x19c2/0x1f10 [ 1694.099402][T13983] usb_generic_driver_probe+0x91/0x150 [ 1694.105455][T13983] usb_probe_device+0x159/0x270 [ 1694.110496][T13983] really_probe+0x2cb/0x960 [ 1694.115802][T13983] __driver_probe_device+0x198/0x280 [ 1694.121365][T13983] driver_probe_device+0x54/0x3e0 [ 1694.126408][T13983] __device_attach_driver+0x2e9/0x4a0 [ 1694.132388][T13983] bus_for_each_drv+0x183/0x210 [ 1694.137445][T13983] __device_attach+0x2a2/0x400 [ 1694.142302][T13983] device_initial_probe+0x1a/0x20 [ 1694.147500][T13983] bus_probe_device+0xc0/0x1f0 [ 1694.152562][T13983] device_add+0xb4d/0xef0 [ 1694.157046][T13983] usb_new_device+0xa70/0x1520 [ 1694.162074][T13983] hub_event+0x2850/0x4350 [ 1694.166696][T13983] process_one_work+0x71f/0xc40 [ 1694.171579][T13983] worker_thread+0xa29/0x11f0 [ 1694.176279][T13983] kthread+0x281/0x320 [ 1694.180357][T13983] ret_from_fork+0x1f/0x30 [ 1694.184791][T13983] [ 1694.187111][T13983] The buggy address belongs to the object at ffff8881205f2000 [ 1694.187111][T13983] which belongs to the cache kmalloc-4k of size 4096 [ 1694.201240][T13983] The buggy address is located 3312 bytes inside of [ 1694.201240][T13983] 4096-byte region [ffff8881205f2000, ffff8881205f3000) [ 1694.214775][T13983] [ 1694.217089][T13983] The buggy address belongs to the physical page: [ 1694.223687][T13983] page:ffffea0004817c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1205f0 [ 1694.234030][T13983] head:ffffea0004817c00 order:3 compound_mapcount:0 compound_pincount:0 [ 1694.242894][T13983] flags: 0x4000000000010200(slab|head|zone=1) [ 1694.249155][T13983] raw: 4000000000010200 ffffea00046a2000 dead000000000002 ffff888100043380 [ 1694.258066][T13983] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1694.266923][T13983] page dumped because: kasan: bad access detected [ 1694.273610][T13983] page_owner tracks the page as allocated [ 1694.279702][T13983] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13324, tgid 13324 (syz-executor), ts 962886381075, free_ts 959876651310 [ 1694.302632][T13983] post_alloc_hook+0x1f5/0x210 [ 1694.307782][T13983] prep_new_page+0x1c/0x110 [ 1694.312323][T13983] get_page_from_freelist+0x2c7b/0x2cf0 [ 1694.317978][T13983] __alloc_pages+0x1c3/0x450 [ 1694.322768][T13983] alloc_slab_page+0x6e/0xf0 [ 1694.327675][T13983] new_slab+0x98/0x3d0 [ 1694.331749][T13983] ___slab_alloc+0x6f6/0xb50 [ 1694.336499][T13983] __slab_alloc+0x5e/0xa0 [ 1694.340926][T13983] __kmem_cache_alloc_node+0x203/0x2c0 [ 1694.346939][T13983] __kmalloc_node_track_caller+0xa0/0x1e0 [ 1694.352675][T13983] __alloc_skb+0x236/0x4b0 [ 1694.357183][T13983] rtmsg_ifinfo_build_skb+0x7c/0x190 [ 1694.362644][T13983] rtmsg_ifinfo+0x7a/0x130 [ 1694.367769][T13983] __dev_notify_flags+0xdb/0x500 [ 1694.372789][T13983] rtnl_newlink+0x1a1c/0x2030 [ 1694.377625][T13983] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 1694.382852][T13983] page last free stack trace: [ 1694.387965][T13983] free_unref_page_prepare+0x742/0x750 [ 1694.393704][T13983] free_unref_page+0x8f/0x530 [ 1694.398644][T13983] __free_pages+0x67/0x100 [ 1694.403125][T13983] __free_slab+0xca/0x1a0 [ 1694.407610][T13983] __unfreeze_partials+0x160/0x190 [ 1694.412785][T13983] put_cpu_partial+0xa9/0x100 [ 1694.417438][T13983] __slab_free+0x1c4/0x280 [ 1694.421835][T13983] ___cache_free+0xbf/0xd0 [ 1694.426229][T13983] qlist_free_all+0xc6/0x140 [ 1694.430915][T13983] kasan_quarantine_reduce+0x14a/0x170 [ 1694.436465][T13983] __kasan_slab_alloc+0x24/0x80 [ 1694.441487][T13983] slab_post_alloc_hook+0x4f/0x2d0 [ 1694.446741][T13983] kmem_cache_alloc_node+0x181/0x340 [ 1694.452034][T13983] __alloc_skb+0xea/0x4b0 [ 1694.456351][T13983] inet_netconf_notify_devconf+0x169/0x220 [ 1694.462333][T13983] inetdev_event+0x831/0x10e0 [ 1694.467103][T13983] [ 1694.469514][T13983] Memory state around the buggy address: [ 1694.475396][T13983] ffff8881205f2b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1694.483663][T13983] ffff8881205f2c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1694.491736][T13983] >ffff8881205f2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1694.500003][T13983] ^ [ 1694.507915][T13983] ffff8881205f2d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1694.516916][T13983] ffff8881205f2d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1694.525328][T13983] ================================================================== [ 1694.533673][T13983] Disabling lock debugging due to kernel taint [ 1694.552195][ T28] audit: type=1400 audit(2000000582.539:730): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1694.579075][ T28] audit: type=1400 audit(2000000582.569:731): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1694.601435][ T28] audit: type=1400 audit(2000000582.569:732): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1694.623167][ T28] audit: type=1400 audit(2000000582.569:733): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1694.647273][ T28] audit: type=1400 audit(2000000582.569:734): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1694.668340][ T28] audit: type=1400 audit(2000000582.569:735): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1694.692146][ T28] audit: type=1400 audit(2000000582.569:736): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1694.813024][T25711] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1694.993020][T25711] usb 1-1: Using ep0 maxpacket: 32 [ 1695.000225][T25711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.011489][T25711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1695.021379][T25711] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1695.030695][T25711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.039557][T25711] usb 1-1: config 0 descriptor?? [ 1696.296395][T25711] usbhid 1-1:0.0: can't add hid device: -71 [ 1696.302949][T25711] usbhid: probe of 1-1:0.0 failed with error -71 [ 1696.317120][T25711] usb 1-1: USB disconnect, device number 91