last executing test programs: 9.770354176s ago: executing program 1 (id=800): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800) keyctl$update(0x2, 0x0, &(0x7f0000000300)="31a7", 0x2) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) r1 = dup(r0) unshare(0x2010000) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0000ef", @ANYRES16=r3, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d30000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x106000, 0x0, 0xa5c}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 9.433814182s ago: executing program 0 (id=803): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x3, 0xffff}) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012cbd7000fcdbdf252500000008000100706369001100707400000000302e300000000008008a000000000000", @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x20040004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r9, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, 0xffffffffffffffff, 0x0) splice(r11, 0x0, r12, 0x0, 0xf3a, 0x0) write$cgroup_pid(r12, &(0x7f0000000000), 0xffffff98) splice(r8, 0x0, r12, 0x0, 0x80, 0x6) write(r10, 0x0, 0x0) r13 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r13, &(0x7f00000005c0), &(0x7f00000003c0)=""/79}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r14}]}}}]}, 0x40}}, 0x44) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008001480040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 8.547369795s ago: executing program 0 (id=805): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r5, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) 7.229144666s ago: executing program 1 (id=809): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) getrandom(0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xb0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') poll(&(0x7f0000000180)=[{r2}, {r2}], 0x2, 0x7a0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 5.701163971s ago: executing program 3 (id=813): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1d, 0x0, 0x3, 0x80ffffff}, {}, {}, {}, {0x6}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r2, 0x0, 0x100000000}, 0x18) r3 = accept(r1, &(0x7f00000002c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000180)=0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x47}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) tee(r2, 0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180002000000eb75b6b94281661000006110b26a42eb1b0d336300efc2d05b03"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x4, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x0, 0x2e]}}, &(0x7f0000000680)=""/135, 0x29, 0x87, 0x1, 0x4}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r9, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r8}, 0x20) close(r9) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xe7, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r12, 0x0, 0x20000000}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000500)='syzkaller\x00', 0x1, 0xdf, &(0x7f0000000540)=""/223, 0x41000, 0x11, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000780)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xa, 0x2, 0x1ff}, 0x10, 0x209b3, 0xffffffffffffffff, 0x1, &(0x7f0000000900)=[0x1, r7, r9, 0x1, r10, r11, r12, 0x1], &(0x7f0000000940)=[{0x2, 0x5, 0x2, 0x2}], 0x10, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x403, 0x70bd26, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc) 4.838973285s ago: executing program 0 (id=814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xd}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.838091975s ago: executing program 3 (id=815): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x3, 0xffff}) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012cbd7000fcdbdf252500000008000100706369001100707400000000302e300000000008008a000000000000", @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x20040004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r9, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, 0xffffffffffffffff, 0x0) splice(r11, 0x0, r12, 0x0, 0xf3a, 0x0) write$cgroup_pid(r12, &(0x7f0000000000), 0xffffff98) splice(r8, 0x0, r12, 0x0, 0x80, 0x6) write(r10, 0x0, 0x0) r13 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r13, &(0x7f00000005c0), &(0x7f00000003c0)=""/79}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r14}]}}}]}, 0x40}}, 0x44) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008001480040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 4.818576015s ago: executing program 4 (id=816): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0x2, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota_file, 0x4}, {@acl}, {@data_journal}, {@usrjquota, 0x3d}]}, 0x2, 0x110f, &(0x7f0000001140)="$eJzs2LFqFEEYB/D/7B2Y7mTTL4IWFhISzs4qRYRrrW0kpDJVrooI4rv4OJLKPuQBLAKWwshusp5IIGAuhoPfD2Z3+OabmW/KmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCVV/1nu0naMdIkKUnXnS0uknRj/PHXSZOSN0eL5cHJ/PUyyWRIL33rZ/XT0u493Wrn7bzda19u7z9rl6cf3r87Pj46uV6mpMv55foPUq7rudHW+vcDAACATVHvbPb3ktP/uz8AAABwm7U+JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8gzpb9dskP2utaZKUpOvOFhdJuocsEAAAALizkiZvZzfFMzwDrLzIt1kZ4mP7Ufqc3XwZ5j9apR429184AAAAbJTprRnlj/v480xTa/00jj3JNDs7V/3+1w98308mpwfZ/X0n/zx8zy8/Ho6t1Mk9nQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAXO3BAAgAAACDo/+t2BAoAAAAAAAAAAAAAAAAAAAAAAB8FAAD//6zC3aE=") inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000cdd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r3, r3, &(0x7f0000000080)=0x5001, 0x7f03) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x2000, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, 0x0) 4.645359588s ago: executing program 0 (id=818): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d06"], 0x14}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x10, 0x117, 0x4, 0x1fd}], 0x10, 0x40}, 0x40008d0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) recvmmsg(r4, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 4.599951148s ago: executing program 2 (id=819): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800) keyctl$update(0x2, 0x0, &(0x7f0000000300)="31a7", 0x2) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) r1 = dup(r0) unshare(0x2010000) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0000ef", @ANYRES16=r3, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d30000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x106000, 0x0, 0xa5c}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x1) listen(r4, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 4.079351866s ago: executing program 3 (id=820): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x4000000) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x10002, &(0x7f0000002380)={0x77359400}) r5 = syz_genetlink_get_family_id$batadv(0x0, r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r3, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0) 4.010944808s ago: executing program 1 (id=821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 3.933719739s ago: executing program 0 (id=822): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) 3.892576629s ago: executing program 3 (id=823): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) accept4$packet(r6, 0x0, 0x0, 0x800) 3.826615331s ago: executing program 4 (id=824): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800) keyctl$update(0x2, 0x0, &(0x7f0000000300)="31a7", 0x2) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) r1 = dup(r0) unshare(0x2010000) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0000ef", @ANYRES16=r3, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d30000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x106000, 0x0, 0xa5c}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 3.639758913s ago: executing program 1 (id=825): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1d, 0x0, 0x3, 0x80ffffff}, {}, {}, {}, {0x6}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r2, 0x0, 0x100000000}, 0x18) r3 = accept(r1, &(0x7f00000002c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000180)=0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x47}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) tee(r2, 0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180002000000eb75b6b94281661000006110b26a42eb1b0d336300efc2d05b03"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x4, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x0, 0x2e]}}, &(0x7f0000000680)=""/135, 0x29, 0x87, 0x1, 0x4}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r9, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r8}, 0x20) close(r9) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xe7, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r12, 0x0, 0x20000000}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000500)='syzkaller\x00', 0x1, 0xdf, &(0x7f0000000540)=""/223, 0x41000, 0x11, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000780)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xa, 0x2, 0x1ff}, 0x10, 0x209b3, 0xffffffffffffffff, 0x1, &(0x7f0000000900)=[0x1, r7, r9, 0x1, r10, r11, r12, 0x1], &(0x7f0000000940)=[{0x2, 0x5, 0x2, 0x2}], 0x10, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x403, 0x70bd26, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc) 3.324744609s ago: executing program 2 (id=826): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r3, 0x0) listen(0xffffffffffffffff, 0x0) 2.646964538s ago: executing program 3 (id=827): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r3, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='\x00', 0xfdfe}]) dup3(r0, r1, 0x6700000000000000) 2.335194454s ago: executing program 1 (id=828): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800) keyctl$update(0x2, 0x0, &(0x7f0000000300)="31a7", 0x2) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) r1 = dup(r0) unshare(0x2010000) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0000ef", @ANYRES16=r3, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d30000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x106000, 0x0, 0xa5c}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x1) listen(r4, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.555073886s ago: executing program 2 (id=829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xd}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.486734647s ago: executing program 4 (id=830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 1.323761429s ago: executing program 4 (id=831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 1.323270669s ago: executing program 3 (id=832): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) getrandom(0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xb0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') poll(&(0x7f0000000180)=[{r2}, {r2}], 0x2, 0x7a0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 1.28672325s ago: executing program 2 (id=833): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x4000000) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0) recvmmsg$unix(r3, 0x0, 0x0, 0x10002, &(0x7f0000002380)={0x77359400}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, 0x0, 0x0) 1.198147361s ago: executing program 4 (id=834): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800) keyctl$update(0x2, 0x0, &(0x7f0000000300)="31a7", 0x2) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) r1 = dup(r0) unshare(0x2010000) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0000ef", @ANYRES16=r3, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d30000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x106000, 0x0, 0xa5c}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) listen(r4, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.161053891s ago: executing program 1 (id=835): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0x2, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota_file, 0x4}, {@acl}, {@data_journal}, {@usrjquota, 0x3d}]}, 0x2, 0x110f, &(0x7f0000001140)="$eJzs2LFqFEEYB/D/7B2Y7mTTL4IWFhISzs4qRYRrrW0kpDJVrooI4rv4OJLKPuQBLAKWwshusp5IIGAuhoPfD2Z3+OabmW/KmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCVV/1nu0naMdIkKUnXnS0uknRj/PHXSZOSN0eL5cHJ/PUyyWRIL33rZ/XT0u493Wrn7bzda19u7z9rl6cf3r87Pj46uV6mpMv55foPUq7rudHW+vcDAACATVHvbPb3ktP/uz8AAABwm7U+JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8gzpb9dskP2utaZKUpOvOFhdJuocsEAAAALizkiZvZzfFMzwDrLzIt1kZ4mP7Ufqc3XwZ5j9apR429184AAAAbJTprRnlj/v480xTa/00jj3JNDs7V/3+1w98308mpwfZ/X0n/zx8zy8/Ho6t1Mk9nQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAXO3BAAgAAACDo/+t2BAoAAAAAAAAAAAAAAAAAAAAAAB8FAAD//6zC3aE=") inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000cdd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r3, r3, &(0x7f0000000080)=0x5001, 0x7f03) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x2000, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, 0x0) 1.019285884s ago: executing program 2 (id=836): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r1 = syz_open_pts(r0, 0x42) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 872.858566ms ago: executing program 2 (id=837): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x182, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 58.895939ms ago: executing program 4 (id=838): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x182, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 0s ago: executing program 0 (id=839): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1d, 0x0, 0x3, 0x80ffffff}, {}, {}, {}, {0x6}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r2, 0x0, 0x100000000}, 0x18) r3 = accept(r1, &(0x7f00000002c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000180)=0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x47}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) tee(r2, 0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180002000000eb75b6b94281661000006110b26a42eb1b0d336300efc2d05b03"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x4, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x0, 0x2e]}}, &(0x7f0000000680)=""/135, 0x29, 0x87, 0x1, 0x4}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r9, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r8}, 0x20) close(r9) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xe7, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r12, 0x0, 0x20000000}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000500)='syzkaller\x00', 0x1, 0xdf, &(0x7f0000000540)=""/223, 0x41000, 0x11, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000780)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xa, 0x2, 0x1ff}, 0x10, 0x209b3, 0xffffffffffffffff, 0x1, &(0x7f0000000900)=[0x1, r7, r9, 0x1, r10, r11, r12, 0x1], &(0x7f0000000940)=[{0x2, 0x5, 0x2, 0x2}], 0x10, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x403, 0x70bd26, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc) kernel console output (not intermixed with test programs): 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 151.611795][ T5064] loop1: detected capacity change from 0 to 1024 [ 151.762911][ T5026] loop0: detected capacity change from 0 to 32768 [ 151.770346][ T5064] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.781580][ T5064] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.806181][ T5064] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 151.911559][ T5062] device hsr_slave_1 left promiscuous mode [ 152.148494][ T5070] loop3: detected capacity change from 0 to 8192 [ 152.322663][ T5072] loop0: detected capacity change from 0 to 4096 [ 153.835038][ T5094] usb usb1: usbfs: process 5094 (syz.1.213) did not claim interface 0 before use [ 154.586277][ T4191] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 154.592775][ T4191] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 154.600399][ T5094] ALSA: mixer_oss: invalid OSS volume '' [ 154.853349][ T4232] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 156.143257][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 156.306394][ T5108] loop0: detected capacity change from 0 to 512 [ 156.423645][ T4232] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 156.432017][ T4232] usb 4-1: config 0 has no interface number 0 [ 156.441808][ T4232] usb 4-1: config 0 interface 113 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 156.489345][ T5108] EXT4-fs (loop0): Ignoring removed nobh option [ 156.590407][ T4232] usb 4-1: config 0 interface 113 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 156.743667][ T5108] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 156.819447][ T4232] usb 4-1: config 0 interface 113 has no altsetting 0 [ 157.213236][ T4232] usb 4-1: string descriptor 0 read error: -71 [ 157.283515][ T4232] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 157.292275][ T5113] loop1: detected capacity change from 0 to 1024 [ 157.292677][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.414623][ T5113] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.439545][ T5113] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.444346][ T4232] usb 4-1: config 0 descriptor?? [ 157.471500][ T5113] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 157.482405][ T5115] loop3: detected capacity change from 0 to 8192 [ 157.576722][ T5115] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 157.603253][ T4232] usb 4-1: can't set config #0, error -71 [ 157.610515][ T4232] usb 4-1: USB disconnect, device number 6 [ 157.666749][ T5115] REISERFS (device loop3): using ordered data mode [ 157.695713][ T5108] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 157.738453][ T5115] reiserfs: using flush barriers [ 157.796367][ T5115] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.907967][ T5115] REISERFS (device loop3): checking transaction log (loop3) [ 157.967348][ T5115] REISERFS (device loop3): Using r5 hash to sort names [ 157.997843][ T5115] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 159.664122][ T5123] loop1: detected capacity change from 0 to 32768 [ 159.758182][ T5138] loop4: detected capacity change from 0 to 8 [ 159.912099][ T5138] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 159.969819][ T5142] loop2: detected capacity change from 0 to 512 [ 160.043352][ T5142] EXT4-fs (loop2): Ignoring removed nobh option [ 160.049720][ T5142] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 161.490457][ T4718] udevd[4718]: incorrect cramfs checksum on /dev/loop4 [ 161.534716][ T5138] overlayfs: failed to resolve './file1': -2 [ 161.708913][ T5142] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 161.847710][ T5147] loop3: detected capacity change from 0 to 8192 [ 161.894008][ T5147] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 161.933186][ T5147] REISERFS (device loop3): using ordered data mode [ 161.939750][ T5147] reiserfs: using flush barriers [ 162.048867][ T5147] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.220942][ T5147] REISERFS (device loop3): checking transaction log (loop3) [ 162.257221][ T5147] REISERFS (device loop3): Using r5 hash to sort names [ 162.273477][ T5147] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 163.993357][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 164.313190][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 164.583483][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 164.593729][ T7] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 164.602799][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.652610][ T7] usb 5-1: config 0 descriptor?? [ 165.619532][ T7] hso 5-1:0.0: Can't find BULK IN endpoint [ 165.692995][ T5178] device syzkaller0 entered promiscuous mode [ 165.984142][ T5180] loop0: detected capacity change from 0 to 8192 [ 166.155463][ T5180] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 166.180039][ T5180] REISERFS (device loop0): using journaled data mode [ 166.212363][ T5180] reiserfs: using flush barriers [ 166.228332][ T5180] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.374391][ T5180] REISERFS (device loop0): checking transaction log (loop0) [ 166.523964][ T5180] REISERFS (device loop0): Using r5 hash to sort names [ 167.142624][ T4232] usb 5-1: USB disconnect, device number 4 [ 167.150821][ T5180] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 167.169680][ T5180] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 168.623224][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 168.633295][ T4187] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.643881][ T5208] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 168.696989][ T5199] loop4: detected capacity change from 0 to 32768 [ 168.769425][ T4232] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 168.923135][ T4187] usb 3-1: Using ep0 maxpacket: 32 [ 168.928404][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 169.073440][ T7] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 169.081658][ T7] usb 2-1: config 0 has no interface number 0 [ 169.088137][ T4187] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 169.096769][ T4187] usb 3-1: config 0 has no interface number 0 [ 169.103001][ T7] usb 2-1: config 0 interface 113 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 169.113903][ T7] usb 2-1: config 0 interface 113 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 169.124233][ T7] usb 2-1: config 0 interface 113 has no altsetting 0 [ 169.273632][ T4187] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 169.288393][ T4187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.296988][ T7] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 169.306519][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.314900][ T4187] usb 3-1: Product: syz [ 169.319212][ T4187] usb 3-1: Manufacturer: syz [ 169.323902][ T7] usb 2-1: Product: syz [ 169.328138][ T4187] usb 3-1: SerialNumber: syz [ 169.331844][ T5212] loop0: detected capacity change from 0 to 8192 [ 169.332851][ T7] usb 2-1: Manufacturer: syz [ 169.345863][ T4187] usb 3-1: config 0 descriptor?? [ 169.350916][ T7] usb 2-1: SerialNumber: syz [ 169.355874][ T4232] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 169.366895][ T7] usb 2-1: config 0 descriptor?? [ 169.371988][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.381124][ T4232] usb 4-1: Product: syz [ 169.385824][ T5197] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 169.394452][ T4187] smsc95xx v2.0.0 [ 169.398462][ T4232] usb 4-1: Manufacturer: syz [ 169.403695][ T5197] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 169.410915][ T4232] usb 4-1: SerialNumber: syz [ 169.427266][ T5212] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 169.443525][ T5212] REISERFS (device loop0): using ordered data mode [ 169.446647][ T4232] usb 4-1: config 0 descriptor?? [ 169.455450][ C0] usb 2-1: NFC: Urb failure (status -71) [ 169.462824][ T5212] reiserfs: using flush barriers [ 169.472968][ T5212] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 169.489407][ C0] usb 2-1: NFC: Urb failure (status -71) [ 169.498733][ T7] usb 2-1: NFC: Unable to get FW version [ 169.511984][ T7] pn533_usb: probe of 2-1:0.113 failed with error -71 [ 169.598344][ T4232] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 169.640573][ T5091] usb 2-1: USB disconnect, device number 5 [ 169.665854][ T5212] REISERFS (device loop0): checking transaction log (loop0) [ 169.721663][ T5212] REISERFS (device loop0): Using r5 hash to sort names [ 169.730033][ T5212] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 170.573308][ T4232] gspca_sunplus: reg_r err -110 [ 170.646108][ T4187] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 170.666604][ T4187] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 171.109753][ T5228] device syzkaller0 entered promiscuous mode [ 171.210565][ T5229] usb usb1: usbfs: process 5229 (syz.4.246) did not claim interface 0 before use [ 171.864317][ T4187] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 171.875751][ T4187] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 171.892051][ T4187] usb 3-1: USB disconnect, device number 5 [ 172.151450][ T5091] usb 4-1: USB disconnect, device number 7 [ 172.340737][ T5237] loop1: detected capacity change from 0 to 4096 [ 172.615556][ T4181] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 172.648621][ T4181] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 172.862608][ T5246] loop3: detected capacity change from 0 to 512 [ 173.187689][ T5246] EXT4-fs (loop3): Ignoring removed nobh option [ 173.723151][ T5246] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 174.100991][ T5246] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 174.438121][ T5261] usb usb1: usbfs: process 5261 (syz.1.256) did not claim interface 0 before use [ 175.382812][ T5261] ALSA: mixer_oss: invalid OSS volume '' [ 175.832685][ T5269] netlink: 'syz.1.258': attribute type 12 has an invalid length. [ 175.840516][ T5269] netlink: 'syz.1.258': attribute type 29 has an invalid length. [ 175.848505][ T5269] netlink: 148 bytes leftover after parsing attributes in process `syz.1.258'. [ 175.858066][ T5269] netlink: 59 bytes leftover after parsing attributes in process `syz.1.258'. [ 176.193333][ T5091] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 176.778652][ T5091] usb 1-1: Using ep0 maxpacket: 8 [ 176.840161][ T5272] device syzkaller0 entered promiscuous mode [ 176.938842][ T5091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 176.958858][ T5091] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 176.993172][ T5091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.021646][ T5091] usb 1-1: config 0 descriptor?? [ 177.104188][ T5091] hso 1-1:0.0: Can't find BULK IN endpoint [ 177.723290][ T5091] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 178.003371][ T5091] usb 2-1: Using ep0 maxpacket: 8 [ 178.144079][ T5091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 178.160714][ T5091] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 178.212250][ T5091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.247802][ T5091] usb 2-1: config 0 descriptor?? [ 178.304529][ T5091] hso 2-1:0.0: Can't find BULK IN endpoint [ 178.445088][ T4252] usb 1-1: USB disconnect, device number 3 [ 178.578599][ T5286] loop2: detected capacity change from 0 to 8192 [ 178.750312][ T5286] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 179.064122][ T5286] REISERFS (device loop2): using ordered data mode [ 179.661693][ T5281] loop4: detected capacity change from 0 to 32768 [ 179.668974][ T5286] reiserfs: using flush barriers [ 179.810021][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 179.823205][ T5286] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.854532][ T5281] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.262 (5281) [ 179.936304][ T5298] loop3: detected capacity change from 0 to 64 [ 180.072112][ T5286] REISERFS (device loop2): checking transaction log (loop2) [ 180.118033][ T2303] usb 2-1: USB disconnect, device number 6 [ 180.122604][ T5281] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 180.133668][ T5286] REISERFS (device loop2): Using r5 hash to sort names [ 180.183617][ T5286] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 180.192565][ T5281] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 180.204587][ T5281] BTRFS info (device loop4): use zstd compression, level 3 [ 180.212069][ T5281] BTRFS info (device loop4): using free space tree [ 180.218748][ T5281] BTRFS info (device loop4): has skinny extents [ 182.443871][ T5322] netlink: 'syz.1.268': attribute type 12 has an invalid length. [ 182.452216][ T5322] netlink: 'syz.1.268': attribute type 29 has an invalid length. [ 182.460157][ T5322] netlink: 148 bytes leftover after parsing attributes in process `syz.1.268'. [ 182.469280][ T5322] netlink: 59 bytes leftover after parsing attributes in process `syz.1.268'. [ 183.173616][ T5281] BTRFS error (device loop4): open_ctree failed: -12 [ 183.251215][ T5310] loop0: detected capacity change from 0 to 8192 [ 183.320352][ T5331] device syzkaller0 entered promiscuous mode [ 183.555916][ T4199] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by udevd (4199) [ 185.189936][ T5361] netlink: 'syz.3.279': attribute type 12 has an invalid length. [ 185.197972][ T5361] netlink: 'syz.3.279': attribute type 29 has an invalid length. [ 185.205832][ T5361] netlink: 148 bytes leftover after parsing attributes in process `syz.3.279'. [ 185.214924][ T5361] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 185.222615][ T5361] netlink: 47 bytes leftover after parsing attributes in process `syz.3.279'. [ 185.250434][ T5340] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 185.543366][ T5340] usb 1-1: Using ep0 maxpacket: 32 [ 185.673764][ T5340] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 185.933169][ T5092] Bluetooth: hci0: command 0x0406 tx timeout [ 185.952210][ T5340] usb 1-1: config 0 has no interface number 0 [ 185.986918][ T4247] Bluetooth: hci2: command 0x0406 tx timeout [ 186.143506][ T5340] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 186.240477][ T5092] Bluetooth: hci4: command 0x0406 tx timeout [ 186.246587][ T5092] Bluetooth: hci1: command 0x0406 tx timeout [ 186.252615][ T5092] Bluetooth: hci3: command 0x0406 tx timeout [ 186.433134][ T5340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.452676][ T5340] usb 1-1: Product: syz [ 186.457087][ T5340] usb 1-1: Manufacturer: syz [ 186.463663][ T5340] usb 1-1: SerialNumber: syz [ 187.113527][ T5340] usb 1-1: config 0 descriptor?? [ 187.154305][ T5340] smsc95xx v2.0.0 [ 187.758538][ T5340] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 187.787794][ T5340] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 187.851668][ T5377] netlink: 'syz.2.284': attribute type 83 has an invalid length. [ 187.922331][ T5375] loop1: detected capacity change from 0 to 8192 [ 188.065549][ T5378] netlink: set zone limit has 8 unknown bytes [ 188.377913][ T5385] loop3: detected capacity change from 0 to 512 [ 189.263551][ T5340] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 189.341420][ T5340] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 189.559439][ T5385] EXT4-fs (loop3): Ignoring removed nobh option [ 189.565790][ T5385] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 189.601089][ T5340] usb 1-1: USB disconnect, device number 4 [ 189.831997][ T5385] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 189.867466][ T5398] device syzkaller0 entered promiscuous mode [ 190.919398][ T5092] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 191.201644][ T5416] netlink: 'syz.2.296': attribute type 83 has an invalid length. [ 191.415569][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 191.443189][ T5092] usb 1-1: Using ep0 maxpacket: 8 [ 192.343193][ T5092] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 192.447612][ T5092] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 192.456739][ T5092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.470723][ T5092] usb 1-1: config 0 descriptor?? [ 192.518133][ T5427] loop4: detected capacity change from 0 to 1024 [ 192.525631][ T5092] hso 1-1:0.0: Can't find BULK IN endpoint [ 192.562842][ T5429] loop2: detected capacity change from 0 to 64 [ 193.871994][ T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 193.940040][ T4187] usb 1-1: USB disconnect, device number 5 [ 194.028705][ T5427] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.073554][ T5427] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.158965][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.165406][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.264177][ T5427] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 194.433371][ T13] usb 2-1: device not accepting address 7, error -71 [ 195.583181][ T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 195.893285][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 196.014346][ T13] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 196.100424][ T13] usb 2-1: config 0 has no interface number 0 [ 196.408560][ T13] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 196.420989][ T5467] netlink: 'syz.2.308': attribute type 83 has an invalid length. [ 196.439154][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.463216][ T13] usb 2-1: Product: syz [ 196.479756][ T13] usb 2-1: Manufacturer: syz [ 196.499999][ T13] usb 2-1: SerialNumber: syz [ 196.541829][ T13] usb 2-1: config 0 descriptor?? [ 196.634155][ T13] smsc95xx v2.0.0 [ 197.665365][ T5478] loop2: detected capacity change from 0 to 64 [ 197.693760][ T13] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 197.758712][ T13] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 199.563272][ T13] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 199.633165][ T13] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 199.692828][ T13] usb 2-1: USB disconnect, device number 8 [ 199.895476][ T5490] netlink: set zone limit has 8 unknown bytes [ 199.911952][ T5493] loop3: detected capacity change from 0 to 1024 [ 199.981772][ T5493] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.060045][ T5493] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.152967][ T5493] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 200.555548][ T5503] loop0: detected capacity change from 0 to 64 [ 202.113599][ T5518] loop1: detected capacity change from 0 to 64 [ 202.463163][ T5340] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 202.595664][ T5524] loop4: detected capacity change from 0 to 64 [ 204.066134][ T4252] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 206.322665][ T5538] loop0: detected capacity change from 0 to 8192 [ 206.422752][ T5539] netlink: set zone limit has 8 unknown bytes [ 206.429684][ T5538] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 206.629822][ T5538] REISERFS (device loop0): using journaled data mode [ 208.453634][ T5538] reiserfs: using flush barriers [ 208.517763][ T5538] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 208.593636][ T5538] REISERFS (device loop0): checking transaction log (loop0) [ 208.623125][ T5551] loop4: detected capacity change from 0 to 1024 [ 208.697570][ T5538] REISERFS (device loop0): Using r5 hash to sort names [ 208.713394][ T5538] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 208.753515][ T5538] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 208.790196][ T5550] loop1: detected capacity change from 0 to 4096 [ 208.792410][ T5557] loop3: detected capacity change from 0 to 64 [ 208.804313][ T5551] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.817052][ T5551] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.830604][ T5551] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 209.105298][ T5562] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 209.127067][ T5562] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 209.157788][ T5562] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 209.180055][ T5562] overlayfs: upper fs needs to support d_type. [ 209.186387][ T5562] overlayfs: upper fs does not support tmpfile. [ 209.194265][ T5562] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 209.215717][ T5562] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 209.226539][ T5562] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 209.243631][ T5562] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 209.396863][ T5562] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 209.419903][ T5562] overlayfs: failed to set xattr on upper [ 209.425755][ T5562] overlayfs: ...falling back to index=off,metacopy=off. [ 209.550243][ T5566] loop2: detected capacity change from 0 to 64 [ 209.631215][ T4191] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 209.874126][ T4181] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 209.881012][ T4181] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 209.890830][ T4191] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 210.723619][ T4191] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 212.799003][ T5584] loop1: detected capacity change from 0 to 8192 [ 213.594563][ T5584] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 213.644919][ T5584] REISERFS (device loop1): using ordered data mode [ 213.751567][ T5584] reiserfs: using flush barriers [ 213.774488][ T5584] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 213.791448][ T5601] netlink: set zone limit has 8 unknown bytes [ 213.826948][ T5604] device syzkaller0 entered promiscuous mode [ 213.833591][ T5584] REISERFS (device loop1): checking transaction log (loop1) [ 213.851263][ T5584] REISERFS (device loop1): Using r5 hash to sort names [ 213.866688][ T5584] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 214.780968][ T5612] loop0: detected capacity change from 0 to 1024 [ 214.844699][ T5616] loop3: detected capacity change from 0 to 8192 [ 215.003597][ T5616] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 215.021503][ T5616] REISERFS (device loop3): using journaled data mode [ 215.024220][ T5612] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.043369][ T5612] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.073252][ T5616] reiserfs: using flush barriers [ 215.278158][ T5612] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 215.330984][ T5616] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 215.857820][ T5616] REISERFS (device loop3): checking transaction log (loop3) [ 215.944204][ T5616] REISERFS (device loop3): Using r5 hash to sort names [ 215.983877][ T5616] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 216.006735][ T5616] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 216.213318][ T5622] loop4: detected capacity change from 0 to 8192 [ 217.228963][ T5633] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 217.243666][ T5633] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 217.259308][ T5633] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 217.273986][ T5633] overlayfs: upper fs needs to support d_type. [ 217.280167][ T5633] overlayfs: upper fs does not support tmpfile. [ 217.286588][ T5633] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 217.301240][ T5633] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 217.308366][ T5633] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 217.324064][ T5633] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 217.339152][ T5633] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 217.498013][ T5633] overlayfs: failed to set xattr on upper [ 217.503926][ T5633] overlayfs: ...falling back to index=off,metacopy=off. [ 217.562470][ T5622] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 217.633005][ T5622] REISERFS (device loop4): using ordered data mode [ 217.680359][ T5622] reiserfs: using flush barriers [ 217.864521][ T4182] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 217.895047][ T5622] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 217.932736][ T4182] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 217.944398][ T5622] REISERFS (device loop4): checking transaction log (loop4) [ 217.994136][ T5622] REISERFS (device loop4): Using r5 hash to sort names [ 218.025955][ T5622] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 218.030269][ T4182] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 218.059350][ T5638] loop1: detected capacity change from 0 to 8192 [ 218.137848][ T5638] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 218.218575][ T5638] REISERFS (device loop1): using ordered data mode [ 218.226046][ T5638] reiserfs: using flush barriers [ 218.255528][ T5638] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 218.361562][ T5638] REISERFS (device loop1): checking transaction log (loop1) [ 218.615081][ T5638] REISERFS (device loop1): Using r5 hash to sort names [ 218.633534][ T5638] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 220.861382][ T5660] netlink: set zone limit has 8 unknown bytes [ 220.895965][ T5663] device syz_tun entered promiscuous mode [ 220.913517][ T5663] device batadv_slave_0 entered promiscuous mode [ 220.922724][ T5668] loop3: detected capacity change from 0 to 64 [ 220.944911][ T5663] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 221.081872][ T5663] Cannot create hsr debugfs directory [ 221.132160][ T5670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 221.153320][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 222.261357][ T5677] loop0: detected capacity change from 0 to 1024 [ 222.383992][ T5677] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.398646][ T5677] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.484850][ T5682] loop3: detected capacity change from 0 to 512 [ 222.697706][ T5677] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 222.725284][ T5667] loop2: detected capacity change from 0 to 32768 [ 222.768227][ T5667] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 222.803207][ T5667] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 222.824995][ T5682] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.362: casefold flag without casefold feature [ 222.853061][ T5667] BTRFS info (device loop2): use zstd compression, level 3 [ 222.862122][ T5667] BTRFS info (device loop2): using free space tree [ 222.869132][ T5667] BTRFS info (device loop2): has skinny extents [ 222.880183][ T5682] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.362: couldn't read orphan inode 15 (err -117) [ 222.916883][ T5682] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.645530][ T5705] loop0: detected capacity change from 0 to 64 [ 224.242142][ T5667] BTRFS error (device loop2): open_ctree failed: -12 [ 224.653204][ T5089] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 224.923148][ T5089] usb 4-1: Using ep0 maxpacket: 8 [ 225.043912][ T5089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 225.083971][ T4199] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by udevd (4199) [ 225.128333][ T5089] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 225.329392][ T5089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.381528][ T5089] usb 4-1: config 0 descriptor?? [ 225.440569][ T5089] hso 4-1:0.0: Can't find BULK IN endpoint [ 227.527011][ T4232] usb 4-1: USB disconnect, device number 9 [ 227.657097][ T5742] loop1: detected capacity change from 0 to 8192 [ 227.664542][ T5744] device syz_tun entered promiscuous mode [ 227.687290][ T5745] netlink: set zone limit has 8 unknown bytes [ 227.707855][ T5744] device batadv_slave_0 entered promiscuous mode [ 227.725295][ T5744] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 227.768612][ T5744] Cannot create hsr debugfs directory [ 227.780914][ T5742] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 227.793648][ T5742] REISERFS (device loop1): using journaled data mode [ 227.800368][ T5742] reiserfs: using flush barriers [ 227.809195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 227.915324][ T5742] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 227.948877][ T5742] REISERFS (device loop1): checking transaction log (loop1) [ 227.962460][ T5751] loop3: detected capacity change from 0 to 4096 [ 227.970358][ T5742] REISERFS (device loop1): Using r5 hash to sort names [ 227.983582][ T5742] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 228.053217][ T5742] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 228.393316][ T5756] loop4: detected capacity change from 0 to 40427 [ 228.438278][ T5758] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 228.457490][ T5758] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 228.482707][ T5758] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 228.500981][ T5758] overlayfs: upper fs needs to support d_type. [ 228.507270][ T5758] overlayfs: upper fs does not support tmpfile. [ 228.515638][ T5758] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 228.533949][ T5758] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 228.543144][ T5758] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 228.560256][ T5758] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 228.576162][ T5758] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 228.596131][ T5758] overlayfs: failed to set xattr on upper [ 228.601926][ T5758] overlayfs: ...falling back to index=off,metacopy=off. [ 228.954570][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 228.985276][ T4182] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 229.004294][ T5756] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 229.012332][ T5756] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 229.025316][ T5756] F2FS-fs (loop4): invalid crc value [ 229.033357][ T4182] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 229.130025][ T5756] F2FS-fs (loop4): Found nat_bits in checkpoint [ 229.221371][ T5756] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 229.228832][ T5756] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 229.417977][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 229.470671][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 229.646487][ T5768] attempt to access beyond end of device [ 229.646487][ T5768] loop4: rw=2049, want=78344, limit=40427 [ 231.449401][ T5776] usb usb1: usbfs: process 5776 (syz.0.378) did not claim interface 0 before use [ 231.854019][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 232.245729][ T5776] ALSA: mixer_oss: invalid OSS volume '' [ 232.307290][ T5794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.382'. [ 233.613220][ T4252] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 233.883265][ T4252] usb 4-1: Using ep0 maxpacket: 8 [ 234.004078][ T4252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 234.075536][ T4252] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 234.143144][ T4252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.190260][ T4252] usb 4-1: config 0 descriptor?? [ 234.244043][ T4252] hso 4-1:0.0: Can't find BULK IN endpoint [ 235.414397][ T5808] netlink: 32 bytes leftover after parsing attributes in process `syz.2.386'. [ 235.739880][ T5816] loop1: detected capacity change from 0 to 512 [ 235.747083][ T5811] loop4: detected capacity change from 0 to 40427 [ 235.801679][ T5811] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 235.809620][ T5811] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 235.829505][ T5811] F2FS-fs (loop4): invalid crc value [ 235.856119][ T5812] loop0: detected capacity change from 0 to 8192 [ 235.880433][ T5816] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.390: casefold flag without casefold feature [ 235.902669][ T5811] F2FS-fs (loop4): Found nat_bits in checkpoint [ 235.977926][ T5811] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 235.985343][ T5811] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 236.047561][ T4252] usb 4-1: USB disconnect, device number 10 [ 236.161181][ T5812] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 236.171661][ T5816] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.390: couldn't read orphan inode 15 (err -117) [ 236.226686][ T5812] REISERFS (device loop0): using journaled data mode [ 236.247574][ T5816] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 236.277326][ T5812] reiserfs: using flush barriers [ 236.316621][ T5829] device ip6gre1 entered promiscuous mode [ 236.386442][ T5830] attempt to access beyond end of device [ 236.386442][ T5830] loop4: rw=2049, want=78344, limit=40427 [ 237.076034][ T5812] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 237.183712][ T5812] REISERFS (device loop0): checking transaction log (loop0) [ 237.207172][ T5812] REISERFS (device loop0): Using r5 hash to sort names [ 237.279052][ T5812] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 237.293066][ T5812] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 237.710136][ T5835] loop3: detected capacity change from 0 to 40427 [ 237.897176][ T5835] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 237.905069][ T5835] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 237.943659][ T5835] F2FS-fs (loop3): invalid crc value [ 238.026618][ T5835] F2FS-fs (loop3): Found nat_bits in checkpoint [ 238.090563][ T5835] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 238.097846][ T5835] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 238.187891][ T5846] attempt to access beyond end of device [ 238.187891][ T5846] loop3: rw=2049, want=78344, limit=40427 [ 238.677858][ T5812] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 239.253812][ T5852] loop4: detected capacity change from 0 to 512 [ 239.322868][ T5837] loop2: detected capacity change from 0 to 32768 [ 239.400451][ T5852] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.392: casefold flag without casefold feature [ 239.443458][ T5852] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.392: couldn't read orphan inode 15 (err -117) [ 239.529755][ T5852] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.841518][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 240.944687][ T5870] netlink: 32 bytes leftover after parsing attributes in process `syz.4.400'. [ 241.281228][ T5880] loop3: detected capacity change from 0 to 512 [ 241.362115][ T5880] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.405: casefold flag without casefold feature [ 241.417030][ T5880] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.405: couldn't read orphan inode 15 (err -117) [ 241.441729][ T5880] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.743113][ T4232] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 242.143113][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 242.933221][ T4232] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 243.466617][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.411'. [ 243.752053][ T4232] usb 3-1: config 0 has no interface number 0 [ 243.758439][ T4232] usb 3-1: config 0 interface 113 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 243.768518][ T4232] usb 3-1: config 0 interface 113 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 243.778586][ T4232] usb 3-1: config 0 interface 113 has no altsetting 0 [ 243.936011][ T5916] device syzkaller0 entered promiscuous mode [ 243.963346][ T4232] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 243.978100][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.994468][ T4232] usb 3-1: Product: syz [ 243.998688][ T4232] usb 3-1: Manufacturer: syz [ 244.041959][ T4232] usb 3-1: SerialNumber: syz [ 244.053079][ T5092] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 244.114688][ T4232] usb 3-1: config 0 descriptor?? [ 244.213437][ T5885] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 244.220561][ T5885] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 244.293113][ C0] usb 3-1: NFC: Urb failure (status -71) [ 244.313102][ C0] usb 3-1: NFC: Urb failure (status -71) [ 244.322113][ T4232] usb 3-1: NFC: Unable to get FW version [ 244.331707][ T4232] pn533_usb: probe of 3-1:0.113 failed with error -71 [ 244.343260][ T5092] usb 5-1: Using ep0 maxpacket: 8 [ 244.372189][ T4232] usb 3-1: USB disconnect, device number 7 [ 244.483508][ T5092] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 244.510235][ T5092] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 244.528944][ T5092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.546888][ T5092] usb 5-1: config 0 descriptor?? [ 244.634051][ T5092] hso 5-1:0.0: Can't find BULK IN endpoint [ 244.683096][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 245.205386][ T5921] loop2: detected capacity change from 0 to 32768 [ 245.231441][ T5932] loop1: detected capacity change from 0 to 1024 [ 245.318998][ T5921] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 245.340430][ T5921] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 245.350999][ T5921] BTRFS info (device loop2): use zstd compression, level 3 [ 245.358950][ T5921] BTRFS info (device loop2): using free space tree [ 245.366034][ T5921] BTRFS info (device loop2): has skinny extents [ 245.429744][ T5932] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 245.444741][ T5932] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.480237][ T5932] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 245.820158][ T5921] BTRFS info (device loop2): enabling ssd optimizations [ 247.498267][ T5721] usb 5-1: USB disconnect, device number 5 [ 247.595875][ T5963] loop1: detected capacity change from 0 to 8192 [ 247.620770][ T5974] device syzkaller0 entered promiscuous mode [ 247.658394][ T5963] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 247.693976][ T5963] REISERFS (device loop1): using journaled data mode [ 247.700794][ T5963] reiserfs: using flush barriers [ 247.731564][ T5971] loop3: detected capacity change from 0 to 8192 [ 247.771414][ T5963] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 247.788788][ T5963] REISERFS (device loop1): checking transaction log (loop1) [ 247.802043][ T5963] REISERFS (device loop1): Using r5 hash to sort names [ 247.918745][ T5963] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 248.003219][ T5963] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 249.035954][ T5983] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 249.050391][ T5983] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 249.065909][ T5983] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 249.080378][ T5983] overlayfs: upper fs needs to support d_type. [ 249.086586][ T5983] overlayfs: upper fs does not support tmpfile. [ 249.092979][ T5983] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 249.107514][ T5983] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 249.114765][ T5983] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 249.129523][ T5983] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 249.144248][ T5983] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 249.198086][ T5983] overlayfs: failed to set xattr on upper [ 249.203882][ T5983] overlayfs: ...falling back to index=off,metacopy=off. [ 249.569513][ T5721] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 249.569868][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 249.624662][ T5994] loop2: detected capacity change from 0 to 4096 [ 249.695391][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 249.843354][ T5719] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 249.859961][ T5999] loop4: detected capacity change from 0 to 1024 [ 249.886761][ T4183] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 249.895615][ T4183] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 250.110807][ T5999] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.123508][ T5999] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.233246][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 250.253331][ T5721] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 250.262554][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.388085][ T5721] usb 1-1: Product: syz [ 250.392375][ T5721] usb 1-1: Manufacturer: syz [ 250.397586][ T5721] usb 1-1: SerialNumber: syz [ 250.405160][ T5721] usb 1-1: config 0 descriptor?? [ 250.560144][ T5721] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 250.566751][ T5719] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 250.575290][ T5719] usb 4-1: config 0 has no interface number 0 [ 250.581524][ T5719] usb 4-1: config 0 interface 113 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 250.591774][ T5719] usb 4-1: config 0 interface 113 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 250.622175][ T5719] usb 4-1: config 0 interface 113 has no altsetting 0 [ 250.978951][ T6021] netlink: 'syz.2.435': attribute type 83 has an invalid length. [ 251.535622][ T5719] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 251.549648][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.557757][ T5719] usb 4-1: Product: syz [ 251.562057][ T5719] usb 4-1: Manufacturer: syz [ 251.566757][ T5719] usb 4-1: SerialNumber: syz [ 251.573422][ T5719] usb 4-1: config 0 descriptor?? [ 251.659028][ T5995] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 251.683323][ T5995] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 251.713051][ C1] usb 4-1: NFC: Urb failure (status -71) [ 251.733143][ C1] usb 4-1: NFC: Urb failure (status -71) [ 251.740452][ T5719] usb 4-1: NFC: Unable to get FW version [ 251.750009][ T5719] pn533_usb: probe of 4-1:0.113 failed with error -71 [ 251.775878][ T6024] netlink: set zone limit has 8 unknown bytes [ 252.182411][ T5089] usb 1-1: USB disconnect, device number 6 [ 252.745752][ T5719] usb 4-1: USB disconnect, device number 11 [ 252.860039][ T6032] loop4: detected capacity change from 0 to 8192 [ 252.985807][ T6036] loop3: detected capacity change from 0 to 8192 [ 253.028325][ T6032] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 253.069122][ T6032] REISERFS (device loop4): using journaled data mode [ 253.158364][ T6032] reiserfs: using flush barriers [ 253.307826][ T6036] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 253.433688][ T6036] REISERFS (device loop3): using journaled data mode [ 253.589274][ T6036] reiserfs: using flush barriers [ 253.755129][ T6032] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 253.827952][ T6036] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 253.886139][ T6032] REISERFS (device loop4): checking transaction log (loop4) [ 253.903528][ T6036] REISERFS (device loop3): checking transaction log (loop3) [ 253.908839][ T6032] REISERFS (device loop4): Using r5 hash to sort names [ 253.929202][ T6036] REISERFS (device loop3): Using r5 hash to sort names [ 253.939595][ T6036] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 253.945089][ T6042] loop1: detected capacity change from 0 to 4096 [ 253.963267][ T6032] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 254.001019][ T6036] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 254.035527][ T6032] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 254.420353][ T4181] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 254.463116][ T4181] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 254.511007][ T6055] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 255.545987][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.585204][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.868924][ T6073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.449'. [ 255.913092][ T4255] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 256.183282][ T4255] usb 1-1: Using ep0 maxpacket: 8 [ 256.504080][ T4255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 256.551328][ T4255] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 256.591975][ T4255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.652382][ T4255] usb 1-1: config 0 descriptor?? [ 256.743859][ T4255] hso 1-1:0.0: Can't find BULK IN endpoint [ 256.935413][ T1107] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 257.201515][ T6084] loop1: detected capacity change from 0 to 40427 [ 257.236364][ T6084] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 257.244199][ T6084] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 257.280822][ T6084] F2FS-fs (loop1): invalid crc value [ 257.339974][ T6084] F2FS-fs (loop1): Found nat_bits in checkpoint [ 257.389474][ T6084] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 257.396790][ T6084] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 257.716638][ T6090] attempt to access beyond end of device [ 257.716638][ T6090] loop1: rw=2049, want=78344, limit=40427 [ 258.502907][ T1107] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 258.513144][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.521340][ T1107] usb 4-1: Product: syz [ 258.527197][ T1107] usb 4-1: Manufacturer: syz [ 258.532517][ T1107] usb 4-1: SerialNumber: syz [ 258.545954][ T1107] usb 4-1: config 0 descriptor?? [ 258.585348][ T1107] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 258.979902][ T4255] usb 1-1: USB disconnect, device number 7 [ 259.390950][ T6096] loop0: detected capacity change from 0 to 4096 [ 259.417229][ T6098] netlink: 'syz.2.457': attribute type 83 has an invalid length. [ 259.600007][ T4191] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 259.623615][ T4191] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 259.703092][ T6103] loop1: detected capacity change from 0 to 8192 [ 259.845319][ T6103] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 259.863959][ T6103] REISERFS (device loop1): using journaled data mode [ 259.876356][ T6103] reiserfs: using flush barriers [ 259.953172][ T4255] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 259.979799][ T6103] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 260.040489][ T6103] REISERFS (device loop1): checking transaction log (loop1) [ 260.094295][ T6103] REISERFS (device loop1): Using r5 hash to sort names [ 260.101523][ T6103] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 260.121001][ T6103] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 261.170737][ T5089] usb 4-1: USB disconnect, device number 12 [ 261.263064][ T4255] usb 1-1: Using ep0 maxpacket: 32 [ 261.383278][ T4255] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 261.403308][ T4255] usb 1-1: config 0 has no interface number 0 [ 261.601801][ T6126] loop2: detected capacity change from 0 to 8192 [ 261.611045][ T4255] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 261.620567][ T4187] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 261.653188][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.676811][ T4255] usb 1-1: Product: syz [ 261.681033][ T4255] usb 1-1: Manufacturer: syz [ 261.708651][ T4255] usb 1-1: SerialNumber: syz [ 261.723273][ T6126] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 261.752653][ T6126] REISERFS (device loop2): using journaled data mode [ 261.769428][ T4255] usb 1-1: config 0 descriptor?? [ 261.786531][ T6126] reiserfs: using flush barriers [ 261.798948][ T6126] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 261.816041][ T6126] REISERFS (device loop2): checking transaction log (loop2) [ 261.827021][ T4255] smsc95xx v2.0.0 [ 261.827155][ T6126] REISERFS (device loop2): Using r5 hash to sort names [ 261.837928][ T6126] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 261.851866][ T6126] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 261.883090][ T4187] usb 5-1: Using ep0 maxpacket: 32 [ 261.965446][ T6131] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 262.005755][ T4187] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 262.019321][ T4187] usb 5-1: config 0 has no interface number 0 [ 262.166838][ T6134] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 262.207793][ T4187] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 262.227428][ T4187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.254918][ T4187] usb 5-1: Product: syz [ 262.263438][ T4255] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 262.279934][ T4187] usb 5-1: Manufacturer: syz [ 262.293105][ T4187] usb 5-1: SerialNumber: syz [ 262.297894][ T4255] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 262.317595][ T4187] usb 5-1: config 0 descriptor?? [ 262.419613][ T4187] smsc95xx v2.0.0 [ 262.761354][ T6137] loop3: detected capacity change from 0 to 40427 [ 262.815207][ T6137] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 262.823083][ T6137] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 262.841092][ T6137] F2FS-fs (loop3): invalid crc value [ 262.843228][ T4187] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 262.885831][ T6137] F2FS-fs (loop3): Found nat_bits in checkpoint [ 262.898632][ T4187] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 262.949109][ T6137] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 262.956297][ T6137] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 263.003239][ T4255] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 263.043454][ T4255] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 263.101614][ T4255] usb 1-1: USB disconnect, device number 8 [ 263.351044][ T6144] attempt to access beyond end of device [ 263.351044][ T6144] loop3: rw=2049, want=78344, limit=40427 [ 264.115259][ T4187] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 264.131088][ T4187] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 264.141272][ T4187] usb 5-1: USB disconnect, device number 6 [ 264.508834][ T6148] loop0: detected capacity change from 0 to 4096 [ 264.550377][ T6150] loop2: detected capacity change from 0 to 8192 [ 265.036251][ T4191] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 265.107323][ T4191] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 265.381118][ T6160] netlink: 'syz.3.470': attribute type 83 has an invalid length. [ 265.555729][ T6165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.474'. [ 266.699118][ T6172] loop1: detected capacity change from 0 to 8192 [ 266.830271][ T6179] loop3: detected capacity change from 0 to 8192 [ 266.908381][ T6172] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 266.930622][ T6179] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 266.960794][ T6179] REISERFS (device loop3): using journaled data mode [ 266.968644][ T6172] REISERFS (device loop1): using journaled data mode [ 266.983193][ T6179] reiserfs: using flush barriers [ 266.988286][ T6172] reiserfs: using flush barriers [ 267.013154][ T6172] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 267.020050][ T6179] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 267.046321][ T6179] REISERFS (device loop3): checking transaction log (loop3) [ 267.053840][ T4187] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 267.062660][ T6172] REISERFS (device loop1): checking transaction log (loop1) [ 267.072510][ T6179] REISERFS (device loop3): Using r5 hash to sort names [ 267.080125][ T6179] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 267.094897][ T6179] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 267.104656][ T6172] REISERFS (device loop1): Using r5 hash to sort names [ 267.111819][ T6172] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 267.132517][ T6172] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 267.293095][ T4187] usb 5-1: Using ep0 maxpacket: 32 [ 267.309234][ T6179] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 267.323706][ T6179] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 267.338969][ T6179] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 267.353879][ T6179] overlayfs: upper fs needs to support d_type. [ 267.360057][ T6179] overlayfs: upper fs does not support tmpfile. [ 267.366531][ T6179] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 267.381104][ T6179] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 267.388199][ T6179] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 267.403443][ T6179] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 267.413272][ T4187] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 267.417968][ T6179] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 267.440344][ T6179] overlayfs: failed to set xattr on upper [ 267.446151][ T6179] overlayfs: ...falling back to index=off,metacopy=off. [ 267.583097][ T4187] usb 5-1: config 0 has no interface number 0 [ 267.586476][ T4182] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 267.706778][ T6195] loop2: detected capacity change from 0 to 4096 [ 267.721127][ T4182] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 267.758659][ T4187] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 267.791832][ T4187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.832868][ T4187] usb 5-1: Product: syz [ 267.847530][ T4187] usb 5-1: Manufacturer: syz [ 267.852305][ T4187] usb 5-1: SerialNumber: syz [ 267.894474][ T4187] usb 5-1: config 0 descriptor?? [ 267.910517][ T6197] loop0: detected capacity change from 0 to 8192 [ 267.931467][ T4183] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 267.938935][ T4187] smsc95xx v2.0.0 [ 267.991763][ T4183] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 268.741005][ T6203] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 268.756292][ T6203] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 268.771673][ T6203] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 268.787160][ T6203] overlayfs: upper fs needs to support d_type. [ 268.793358][ T6203] overlayfs: upper fs does not support tmpfile. [ 268.799784][ T6203] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 268.814623][ T6203] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 268.821731][ T6203] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 268.836912][ T6203] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 268.851941][ T6203] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 268.865690][ T4187] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 268.866759][ T6203] overlayfs: failed to set xattr on upper [ 268.882386][ T6203] overlayfs: ...falling back to index=off,metacopy=off. [ 268.902408][ T4187] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 268.949233][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'. [ 269.044518][ T6205] device ip6gre1 entered promiscuous mode [ 269.134723][ T6213] netlink: 'syz.0.489': attribute type 83 has an invalid length. [ 269.223287][ T4187] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 269.243233][ T4187] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 269.277344][ T4187] usb 5-1: USB disconnect, device number 7 [ 269.690242][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 270.447609][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 270.495319][ T6226] netlink: 'syz.3.493': attribute type 83 has an invalid length. [ 270.511590][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 270.600685][ T6231] loop0: detected capacity change from 0 to 4096 [ 270.736378][ T6233] netlink: set zone limit has 8 unknown bytes [ 270.789305][ T6228] loop2: detected capacity change from 0 to 40427 [ 270.843160][ T6228] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 270.851072][ T6228] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 270.884553][ T6228] F2FS-fs (loop2): invalid crc value [ 270.925097][ T6228] F2FS-fs (loop2): Found nat_bits in checkpoint [ 270.980202][ T6228] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 270.987963][ T6228] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 271.035938][ T6232] loop4: detected capacity change from 0 to 8192 [ 271.161927][ T6232] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 271.181551][ T4191] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 271.204719][ T4191] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 271.212323][ T6232] REISERFS (device loop4): using journaled data mode [ 271.395881][ T6245] attempt to access beyond end of device [ 271.395881][ T6245] loop2: rw=2049, want=78344, limit=40427 [ 271.424753][ T6232] reiserfs: using flush barriers [ 272.691797][ T6232] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 272.871449][ T6232] REISERFS (device loop4): checking transaction log (loop4) [ 272.891365][ T6232] REISERFS (device loop4): Using r5 hash to sort names [ 272.953441][ T6232] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 272.991004][ T6255] netlink: 'syz.1.502': attribute type 83 has an invalid length. [ 273.173269][ T6232] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 273.999230][ T6263] loop1: detected capacity change from 0 to 8192 [ 274.050015][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 274.141934][ T6263] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 274.158712][ T6263] REISERFS (device loop1): using journaled data mode [ 274.169240][ T6263] reiserfs: using flush barriers [ 274.193066][ T6263] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 274.349248][ T6263] REISERFS (device loop1): checking transaction log (loop1) [ 274.407894][ T6263] REISERFS (device loop1): Using r5 hash to sort names [ 274.532045][ T6263] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 274.574449][ T6263] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 274.883076][ T6271] loop2: detected capacity change from 0 to 8192 [ 275.001847][ T4247] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 275.223212][ T4247] usb 5-1: device descriptor read/64, error -71 [ 275.543642][ T4247] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 275.953171][ T4247] usb 5-1: device descriptor read/64, error -71 [ 276.084576][ T4247] usb usb5-port1: attempt power cycle [ 276.151655][ T6288] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 276.166620][ T6288] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 276.182445][ T6288] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 276.197103][ T6288] overlayfs: upper fs needs to support d_type. [ 276.203329][ T6288] overlayfs: upper fs does not support tmpfile. [ 276.209815][ T6288] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 276.224471][ T6288] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 276.231637][ T6288] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 276.246006][ T6288] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 276.260484][ T6288] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 276.275116][ T6288] overlayfs: failed to set xattr on upper [ 276.280852][ T6288] overlayfs: ...falling back to index=off,metacopy=off. [ 276.294021][ T6288] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 276.398555][ T6282] loop3: detected capacity change from 0 to 4096 [ 276.940031][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 277.027091][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 277.062123][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 277.144324][ T4182] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 277.170982][ T4182] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 277.203203][ T4247] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 277.316433][ T6298] netlink: 'syz.3.515': attribute type 83 has an invalid length. [ 277.452671][ T6302] device ip6gre1 entered promiscuous mode [ 277.470269][ T4247] usb 5-1: device not accepting address 10, error -71 [ 277.489554][ T6294] loop2: detected capacity change from 0 to 8192 [ 277.513539][ T6305] netlink: set zone limit has 8 unknown bytes [ 277.559763][ T6294] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 277.611291][ T6294] REISERFS (device loop2): using journaled data mode [ 277.678467][ T6294] reiserfs: using flush barriers [ 277.688703][ T6294] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 277.711043][ T6294] REISERFS (device loop2): checking transaction log (loop2) [ 277.720017][ T6294] REISERFS (device loop2): Using r5 hash to sort names [ 277.727591][ T6294] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 277.741469][ T6294] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 279.005760][ T6329] loop0: detected capacity change from 0 to 8192 [ 279.069278][ T6331] loop1: detected capacity change from 0 to 8192 [ 279.299577][ T6294] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 279.323420][ T6294] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 279.370040][ T6294] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 279.405644][ T6294] overlayfs: upper fs needs to support d_type. [ 279.412218][ T6294] overlayfs: upper fs does not support tmpfile. [ 279.423233][ T6294] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 279.459874][ T6294] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 279.473183][ T6294] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 279.497324][ T6294] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 279.513319][ T6294] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 279.553032][ T6294] overlayfs: failed to set xattr on upper [ 279.559058][ T6294] overlayfs: ...falling back to index=off,metacopy=off. [ 279.852784][ T4247] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 279.987588][ T6331] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 280.000448][ T6331] REISERFS (device loop1): using journaled data mode [ 280.007365][ T6331] reiserfs: using flush barriers [ 280.022693][ T6331] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 280.068723][ T6331] REISERFS (device loop1): checking transaction log (loop1) [ 280.077677][ T6331] REISERFS (device loop1): Using r5 hash to sort names [ 280.090838][ T4247] usb 5-1: device descriptor read/64, error -71 [ 280.121577][ T6331] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 280.141259][ T4183] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 280.151155][ T6331] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 280.175565][ T6327] loop3: detected capacity change from 0 to 40427 [ 280.202543][ T6327] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 280.223214][ T6327] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 280.234189][ T4183] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 280.258711][ T6327] F2FS-fs (loop3): invalid crc value [ 280.300445][ T6327] F2FS-fs (loop3): Found nat_bits in checkpoint [ 280.372063][ T6327] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 280.379537][ T6327] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 280.443210][ T1107] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 280.450800][ T4247] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 280.643049][ T1107] usb 1-1: device descriptor read/64, error -71 [ 280.655599][ T6349] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 280.670767][ T6349] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 280.686115][ T6349] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 280.698993][ T4247] usb 5-1: device descriptor read/64, error -71 [ 280.700758][ T6349] overlayfs: upper fs needs to support d_type. [ 280.712693][ T6349] overlayfs: upper fs does not support tmpfile. [ 280.719268][ T6349] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 280.734293][ T6349] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 280.741378][ T6349] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 280.755845][ T6349] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 280.770404][ T6349] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 280.785074][ T6349] overlayfs: failed to set xattr on upper [ 280.790936][ T6349] overlayfs: ...falling back to index=off,metacopy=off. [ 280.828830][ T4247] usb usb5-port1: attempt power cycle [ 280.933138][ T1107] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 280.943062][ T5091] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 281.168463][ T1107] usb 1-1: device descriptor read/64, error -71 [ 281.183094][ T5091] usb 3-1: Using ep0 maxpacket: 32 [ 281.248430][ T4247] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 281.303334][ T1107] usb usb1-port1: attempt power cycle [ 281.309229][ T5091] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 281.323150][ T5091] usb 3-1: config 0 has no interface number 0 [ 281.368742][ T4247] usb 5-1: device descriptor read/8, error -71 [ 281.449508][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 281.486336][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 281.503400][ T5091] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 281.512676][ T5091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.520775][ T5091] usb 3-1: Product: syz [ 281.525408][ T5091] usb 3-1: Manufacturer: syz [ 281.530152][ T5091] usb 3-1: SerialNumber: syz [ 281.546482][ T5091] usb 3-1: config 0 descriptor?? [ 281.587782][ T5091] smsc95xx v2.0.0 [ 281.653312][ T4247] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 281.729006][ T1107] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 281.753504][ T4247] usb 5-1: device descriptor read/8, error -71 [ 281.846922][ T6360] netlink: 'syz.3.533': attribute type 83 has an invalid length. [ 281.856593][ T1107] usb 1-1: device descriptor read/8, error -71 [ 281.883443][ T4247] usb usb5-port1: unable to enumerate USB device [ 281.915588][ T6357] netlink: set zone limit has 8 unknown bytes [ 282.024204][ T5091] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 282.059750][ T5091] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 282.254498][ T6371] loop1: detected capacity change from 0 to 8192 [ 282.293400][ T1107] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 282.475909][ T1107] usb 1-1: device descriptor read/8, error -71 [ 282.724485][ T1107] usb usb1-port1: unable to enumerate USB device [ 283.103170][ T5091] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 283.173167][ T5091] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 283.232165][ T5091] usb 3-1: USB disconnect, device number 8 [ 283.292851][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 283.853333][ T4252] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 284.334709][ T6385] loop3: detected capacity change from 0 to 8192 [ 284.409558][ T6385] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 284.428102][ T6385] REISERFS (device loop3): using journaled data mode [ 284.448979][ T6385] reiserfs: using flush barriers [ 284.463120][ T4252] usb 1-1: Using ep0 maxpacket: 8 [ 284.472635][ T6385] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 284.519262][ T6385] REISERFS (device loop3): checking transaction log (loop3) [ 284.544660][ T6385] REISERFS (device loop3): Using r5 hash to sort names [ 284.577319][ T6385] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 284.591664][ T4252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 284.621074][ T4252] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 284.638663][ T4252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.648043][ T6385] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 284.678248][ T4252] usb 1-1: config 0 descriptor?? [ 284.829607][ T4252] hso 1-1:0.0: Can't find BULK IN endpoint [ 284.967005][ T6403] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 284.981931][ T6403] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 284.997538][ T6403] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 285.012368][ T6403] overlayfs: upper fs needs to support d_type. [ 285.020530][ T6403] overlayfs: upper fs does not support tmpfile. [ 285.027121][ T6403] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 285.041872][ T6403] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 285.049328][ T6403] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 285.064429][ T6403] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 285.079777][ T6403] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 285.146826][ T6403] overlayfs: failed to set xattr on upper [ 285.152893][ T6403] overlayfs: ...falling back to index=off,metacopy=off. [ 285.420215][ T4182] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 285.475424][ T4182] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 286.112347][ T6413] netlink: set zone limit has 8 unknown bytes [ 286.213197][ T5990] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 286.292864][ T4252] usb 1-1: USB disconnect, device number 13 [ 286.557482][ T5990] usb 5-1: device descriptor read/64, error -71 [ 286.698268][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.550'. [ 287.533172][ T5990] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 287.733126][ T5990] usb 5-1: device descriptor read/64, error -71 [ 287.802196][ T6431] loop3: detected capacity change from 0 to 40427 [ 287.810750][ T4252] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 287.860976][ T6431] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 287.869082][ T6431] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 287.890052][ T6431] F2FS-fs (loop3): invalid crc value [ 287.924803][ T6431] F2FS-fs (loop3): Found nat_bits in checkpoint [ 287.961639][ T5990] usb usb5-port1: attempt power cycle [ 287.975310][ T6431] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 287.983145][ T6431] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 288.004217][ T6433] loop1: detected capacity change from 0 to 8192 [ 288.130539][ T6433] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 288.178845][ T6433] REISERFS (device loop1): using journaled data mode [ 288.183918][ T4252] usb 1-1: device descriptor read/64, error -71 [ 288.213766][ T6433] reiserfs: using flush barriers [ 288.243257][ T6433] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 288.265813][ T6433] REISERFS (device loop1): checking transaction log (loop1) [ 288.384590][ T6443] attempt to access beyond end of device [ 288.384590][ T6443] loop3: rw=2049, want=78344, limit=40427 [ 288.573756][ T4252] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 289.043461][ T6433] REISERFS (device loop1): Using r5 hash to sort names [ 289.076856][ T6433] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 289.143392][ T6433] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 289.474217][ T6445] loop4: detected capacity change from 0 to 40427 [ 289.482658][ T6447] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 289.497185][ T6447] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 289.512726][ T6447] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 289.527955][ T6447] overlayfs: upper fs needs to support d_type. [ 289.534288][ T6447] overlayfs: upper fs does not support tmpfile. [ 289.541072][ T6447] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 289.555788][ T6447] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 289.563311][ T6447] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 289.578181][ T6447] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 289.593501][ T6447] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 289.646967][ T6447] overlayfs: failed to set xattr on upper [ 289.652739][ T6447] overlayfs: ...falling back to index=off,metacopy=off. [ 289.660773][ T4252] usb 1-1: device descriptor read/64, error -71 [ 289.712208][ T6445] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 289.720048][ T6445] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 289.737673][ T6445] F2FS-fs (loop4): invalid crc value [ 289.783310][ T4252] usb usb1-port1: attempt power cycle [ 289.792362][ T6445] F2FS-fs (loop4): Found nat_bits in checkpoint [ 289.848001][ T6445] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 289.855221][ T6445] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 290.054454][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 290.088970][ T6452] tipc: Enabling of bearer rejected, failed to enable media [ 290.142166][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 290.743633][ T4252] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 291.008395][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 291.053350][ T4252] usb 1-1: device not accepting address 16, error -71 [ 291.055082][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.088307][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.507394][ T6478] netlink: set zone limit has 8 unknown bytes [ 291.722076][ T6482] loop0: detected capacity change from 0 to 40427 [ 291.975928][ T6482] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 291.983787][ T6482] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 291.995042][ T6482] F2FS-fs (loop0): invalid crc value [ 292.009011][ T6482] F2FS-fs (loop0): Found nat_bits in checkpoint [ 292.052405][ T6482] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 292.060202][ T6482] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 292.318877][ T6497] attempt to access beyond end of device [ 292.318877][ T6497] loop0: rw=2049, want=78344, limit=40427 [ 292.714494][ T5990] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 292.866333][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 292.933157][ T5990] usb 2-1: device descriptor read/64, error -71 [ 292.936275][ T6510] tipc: Enabling of bearer rejected, failed to enable media [ 292.990097][ T6511] device syzkaller0 entered promiscuous mode [ 293.223208][ T5990] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 293.323325][ T5087] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 293.443377][ T5990] usb 2-1: device descriptor read/64, error -71 [ 293.523296][ T5087] usb 4-1: device descriptor read/64, error -71 [ 293.563661][ T5990] usb usb2-port1: attempt power cycle [ 293.793191][ T5087] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 293.973212][ T5990] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 293.993270][ T5087] usb 4-1: device descriptor read/64, error -71 [ 294.073293][ T5990] usb 2-1: device descriptor read/8, error -71 [ 294.113240][ T5087] usb usb4-port1: attempt power cycle [ 294.158485][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.168291][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.176265][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.344396][ T5990] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 294.476484][ T6529] netlink: set zone limit has 8 unknown bytes [ 294.565986][ T5990] usb 2-1: device descriptor read/8, error -71 [ 294.633105][ T5087] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 295.229130][ T5990] usb usb2-port1: unable to enumerate USB device [ 295.406009][ T5087] usb 4-1: device descriptor read/8, error -71 [ 295.546693][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.583'. [ 296.323189][ T5087] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 297.477060][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 297.489445][ T5087] usb 4-1: device not accepting address 16, error -71 [ 297.772191][ T5087] usb usb4-port1: unable to enumerate USB device [ 298.925497][ T6578] netlink: set zone limit has 8 unknown bytes [ 299.272585][ T5990] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 299.406956][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.596'. [ 300.113899][ T5990] usb 1-1: device descriptor read/64, error -71 [ 300.192406][ T6610] tipc: Enabling of bearer rejected, failed to enable media [ 300.366084][ T6610] device syzkaller0 entered promiscuous mode [ 300.383275][ T5990] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 301.489833][ T5990] usb 1-1: device descriptor read/64, error -71 [ 301.639890][ T5990] usb usb1-port1: attempt power cycle [ 302.775384][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'. [ 303.735345][ T6639] netlink: set zone limit has 8 unknown bytes [ 304.424309][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'. [ 306.591269][ T6666] tipc: Enabling of bearer rejected, failed to enable media [ 306.603727][ T6666] device syzkaller0 entered promiscuous mode [ 307.071143][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.619'. [ 307.838409][ T6678] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.877696][ T6678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.895755][ T6678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.053480][ T6683] netlink: set zone limit has 8 unknown bytes [ 310.737240][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.630'. [ 311.053533][ T5719] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 311.815264][ T6719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.634'. [ 311.853177][ C0] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 312.223221][ T5719] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 312.256401][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.279143][ T5719] usb 3-1: Product: syz [ 312.411672][ T5719] usb 3-1: Manufacturer: syz [ 312.416955][ T5719] usb 3-1: SerialNumber: syz [ 312.453622][ T6735] netlink: set zone limit has 8 unknown bytes [ 312.472350][ T5719] usb 3-1: config 0 descriptor?? [ 312.551601][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.639'. [ 313.117779][ T5719] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 313.421255][ T6740] loop3: detected capacity change from 0 to 8192 [ 314.205325][ T6740] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 314.234225][ T6740] REISERFS (device loop3): using journaled data mode [ 314.255748][ T6740] reiserfs: using flush barriers [ 314.285013][ T6740] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 314.303591][ T6740] REISERFS (device loop3): checking transaction log (loop3) [ 314.324328][ T6740] REISERFS (device loop3): Using r5 hash to sort names [ 314.399390][ T6740] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 314.461509][ T6740] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 314.634535][ T6740] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 314.649341][ T6740] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 314.664373][ T6740] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 314.678753][ T6740] overlayfs: upper fs needs to support d_type. [ 314.684997][ T6740] overlayfs: upper fs does not support tmpfile. [ 314.691372][ T6740] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 314.705949][ T6740] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 314.713447][ T6740] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 314.727893][ T6740] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 314.742224][ T6740] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 314.756715][ T6740] overlayfs: failed to set xattr on upper [ 314.762448][ T6740] overlayfs: ...falling back to index=off,metacopy=off. [ 314.841653][ T4182] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 314.909758][ T5987] usb 3-1: USB disconnect, device number 9 [ 314.943091][ T4182] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 315.032049][ T4182] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 315.494346][ T6768] loop2: detected capacity change from 0 to 8192 [ 316.535221][ T6764] loop4: detected capacity change from 0 to 32768 [ 316.694945][ T6780] netlink: set zone limit has 8 unknown bytes [ 316.943069][ T5987] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 316.977048][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.985445][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.003369][ T5087] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 317.285257][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'. [ 319.953291][ T1107] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 320.120204][ T6817] netlink: set zone limit has 8 unknown bytes [ 320.203156][ T1107] usb 5-1: Using ep0 maxpacket: 32 [ 320.323244][ T1107] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 320.338901][ T1107] usb 5-1: config 0 has no interface number 0 [ 320.363871][ T6816] loop3: detected capacity change from 0 to 32768 [ 320.503297][ T1107] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 320.512602][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.527071][ T1107] usb 5-1: Product: syz [ 320.531573][ T1107] usb 5-1: Manufacturer: syz [ 320.538244][ T1107] usb 5-1: SerialNumber: syz [ 320.551091][ T1107] usb 5-1: config 0 descriptor?? [ 320.594160][ T1107] smsc95xx v2.0.0 [ 321.293745][ T1107] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 321.529251][ T1107] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 322.113338][ T1107] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 322.143476][ T1107] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 322.202399][ T1107] usb 5-1: USB disconnect, device number 19 [ 322.981210][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 323.046275][ T6869] loop5: detected capacity change from 0 to 11711 [ 323.060014][ T6869] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 323.153038][ T6868] netlink: set zone limit has 8 unknown bytes [ 323.287434][ T6876] device syzkaller0 entered promiscuous mode [ 323.553090][ T5987] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 323.644605][ T6885] loop0: detected capacity change from 0 to 4096 [ 323.679460][ T6884] loop1: detected capacity change from 0 to 8192 [ 323.736639][ T6884] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 323.748294][ T6884] REISERFS (device loop1): using journaled data mode [ 323.755449][ T6884] reiserfs: using flush barriers [ 323.766370][ T6884] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 323.783424][ T6884] REISERFS (device loop1): checking transaction log (loop1) [ 323.797313][ T6884] REISERFS (device loop1): Using r5 hash to sort names [ 323.827054][ T6884] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 323.860683][ T6878] loop3: detected capacity change from 0 to 32768 [ 323.877502][ T6884] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 324.077937][ T4191] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 324.097329][ T4191] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 324.157449][ T6888] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 324.172821][ T6888] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 324.187496][ T6888] overlayfs: upper fs needs to support d_type. [ 324.193711][ T6888] overlayfs: upper fs does not support tmpfile. [ 324.200114][ T6888] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 324.215088][ T6888] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 324.222241][ T6888] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 324.236719][ T6888] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 324.251488][ T6888] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 324.266137][ T6888] overlayfs: failed to set xattr on upper [ 324.271884][ T6888] overlayfs: ...falling back to index=off,metacopy=off. [ 324.280070][ T6888] overlayfs: failed to resolve './file0': -2 [ 324.315875][ T5987] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 324.333508][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.352459][ T5987] usb 5-1: Product: syz [ 324.375614][ T5987] usb 5-1: Manufacturer: syz [ 324.398274][ T5987] usb 5-1: SerialNumber: syz [ 325.065043][ T5987] usb 5-1: config 0 descriptor?? [ 325.209135][ T5987] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 326.505539][ T6910] netlink: set zone limit has 8 unknown bytes [ 326.881686][ T6924] netlink: 5 bytes leftover after parsing attributes in process `syz.2.693'. [ 327.650605][ T5987] usb 5-1: USB disconnect, device number 20 [ 327.764880][ T6931] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 327.909779][ T6937] loop5: detected capacity change from 0 to 4671 [ 327.928788][ T6928] loop2: detected capacity change from 0 to 4096 [ 327.967377][ T6926] loop3: detected capacity change from 0 to 8192 [ 328.049116][ T6926] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 328.065318][ T6926] REISERFS (device loop3): using journaled data mode [ 328.125072][ T6926] reiserfs: using flush barriers [ 328.221351][ T6926] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 328.273524][ T6926] REISERFS (device loop3): checking transaction log (loop3) [ 328.303461][ T6926] REISERFS (device loop3): Using r5 hash to sort names [ 328.338428][ T6926] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 328.389782][ T4183] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 328.403120][ T4183] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 328.460799][ T6926] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 328.692846][ T6926] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 328.707484][ T6926] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 328.722627][ T6926] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 328.738541][ T6926] overlayfs: upper fs needs to support d_type. [ 328.744872][ T6926] overlayfs: upper fs does not support tmpfile. [ 328.751308][ T6926] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 328.766173][ T6926] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 328.773290][ T6926] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 328.787701][ T6926] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 328.802174][ T6926] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 328.817108][ T6926] overlayfs: failed to set xattr on upper [ 328.822851][ T6926] overlayfs: ...falling back to index=off,metacopy=off. [ 328.833551][ T6926] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 328.946138][ T4182] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 329.821534][ T4182] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 329.867869][ T4182] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 329.949031][ T6955] device syzkaller0 entered promiscuous mode [ 331.113839][ T5990] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 331.202218][ T6973] loop2: detected capacity change from 0 to 8192 [ 331.245642][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 331.261252][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.269228][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.307170][ T6973] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 331.323765][ T6973] REISERFS (device loop2): using journaled data mode [ 331.337693][ T6973] reiserfs: using flush barriers [ 331.376049][ T6973] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 331.463723][ T6973] REISERFS (device loop2): checking transaction log (loop2) [ 331.508115][ T6975] loop1: detected capacity change from 0 to 4096 [ 331.514812][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 331.526192][ T6973] REISERFS (device loop2): Using r5 hash to sort names [ 331.543740][ T6973] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 331.578727][ T6973] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 331.649087][ T6984] loop5: detected capacity change from 0 to 4551 [ 331.653521][ T5990] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 331.700202][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.743091][ T5990] usb 5-1: Product: syz [ 331.747310][ T5990] usb 5-1: Manufacturer: syz [ 331.751925][ T5990] usb 5-1: SerialNumber: syz [ 331.789420][ T5990] usb 5-1: config 0 descriptor?? [ 331.796331][ T4389] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 331.828123][ T4181] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 331.855307][ T5990] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 331.861874][ T4181] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 331.893401][ T6984] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 331.929314][ T6985] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 331.944715][ T6985] overlayfs: failed to resolve './file1': -2 [ 333.853757][ T5721] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 334.145344][ T5987] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 334.379609][ T4252] usb 5-1: USB disconnect, device number 21 [ 334.613141][ T5987] usb 2-1: Using ep0 maxpacket: 32 [ 334.763509][ T5987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.793386][ T5987] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.963183][ T5987] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 335.837327][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.845733][ T5987] usb 2-1: Product: syz [ 335.849933][ T5987] usb 2-1: Manufacturer: syz [ 335.854971][ T5987] usb 2-1: SerialNumber: syz [ 335.887097][ T5987] usb 2-1: config 0 descriptor?? [ 335.966646][ T7025] loop0: detected capacity change from 0 to 4096 [ 336.155519][ T4191] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 336.191966][ T4191] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 337.883462][ T5721] usb 2-1: USB disconnect, device number 14 [ 337.943093][ T5987] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 339.342820][ T7066] loop3: detected capacity change from 0 to 4096 [ 339.551107][ T7064] loop1: detected capacity change from 0 to 8192 [ 339.611792][ T7076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.740'. [ 340.260268][ T7064] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 340.294202][ T7064] REISERFS (device loop1): using journaled data mode [ 340.353069][ T7064] reiserfs: using flush barriers [ 340.396629][ T7064] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 340.424621][ T4182] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 340.431129][ T4182] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 340.486095][ T7064] REISERFS (device loop1): checking transaction log (loop1) [ 340.569430][ T7064] REISERFS (device loop1): Using r5 hash to sort names [ 340.606488][ T7064] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 340.647302][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 340.660251][ T7085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.743'. [ 340.703113][ T7064] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 340.889803][ T7093] loop5: detected capacity change from 0 to 4367 [ 340.961972][ T7094] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 340.976698][ T7094] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 340.992373][ T7094] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 341.007613][ T7094] overlayfs: upper fs needs to support d_type. [ 341.013846][ T7094] overlayfs: upper fs does not support tmpfile. [ 341.020506][ T7094] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 341.035301][ T7094] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 341.042382][ T7094] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 341.056784][ T7094] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 341.071130][ T7094] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 341.085795][ T7094] overlayfs: failed to set xattr on upper [ 341.091620][ T7094] overlayfs: ...falling back to index=off,metacopy=off. [ 341.102290][ T7094] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 341.166104][ T4199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 341.351806][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 341.379491][ T7093] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 341.424250][ T4181] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 343.212682][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'. [ 343.258738][ T7121] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 343.289306][ T7136] device hsr_slave_1 left promiscuous mode [ 343.300744][ T7137] device syzkaller0 entered promiscuous mode [ 343.300957][ T7121] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 343.383013][ T5087] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 343.743073][ T5087] usb 2-1: Using ep0 maxpacket: 16 [ 343.837874][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.760'. [ 344.583208][ T5087] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 344.600870][ T5087] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.635608][ T5087] usb 2-1: config 0 has no interface number 0 [ 344.641752][ T5087] usb 2-1: config 0 interface 113 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 344.683843][ T5087] usb 2-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.716703][ T5087] usb 2-1: config 0 interface 113 has no altsetting 0 [ 344.933346][ T5087] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 344.952615][ T5087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.965647][ T7158] device ip6gre1 entered promiscuous mode [ 345.000331][ T5087] usb 2-1: Product: syz [ 345.016684][ T5087] usb 2-1: Manufacturer: syz [ 345.042378][ T5087] usb 2-1: SerialNumber: syz [ 345.099594][ T5087] usb 2-1: config 0 descriptor?? [ 345.139397][ T7130] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 345.173737][ T5087] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 345.386411][ T5087] usb 2-1: USB disconnect, device number 15 [ 345.772033][ T7176] device syzkaller0 entered promiscuous mode [ 346.695810][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'. [ 347.447752][ T7192] sctp: failed to load transform for md5: -2 [ 348.731529][ T7221] device syzkaller0 entered promiscuous mode [ 349.918612][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.787'. [ 350.743159][ T5721] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 350.867804][ T7250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.792'. [ 350.988742][ T7255] device syzkaller0 entered promiscuous mode [ 352.203144][ T5721] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 352.212240][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.302463][ T5721] usb 4-1: Product: syz [ 352.332200][ T5721] usb 4-1: Manufacturer: syz [ 352.346916][ T5721] usb 4-1: SerialNumber: syz [ 352.408624][ T5721] usb 4-1: config 0 descriptor?? [ 352.465466][ T5721] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 352.569138][ T7270] loop4: detected capacity change from 0 to 8192 [ 352.684643][ T5721] gspca_sunplus: reg_r err -71 [ 352.702496][ T7270] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 352.716190][ T5721] usb 4-1: USB disconnect, device number 17 [ 352.769556][ T7270] REISERFS (device loop4): using journaled data mode [ 352.829701][ T7270] reiserfs: using flush barriers [ 352.928164][ T7270] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 353.021202][ T7270] REISERFS (device loop4): checking transaction log (loop4) [ 353.064401][ T7270] REISERFS (device loop4): Using r5 hash to sort names [ 353.075685][ T7270] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 353.177875][ T7270] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 353.402886][ T7290] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 353.417690][ T7290] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 353.432369][ T7290] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 353.447213][ T7290] overlayfs: upper fs needs to support d_type. [ 353.453930][ T7290] overlayfs: upper fs does not support tmpfile. [ 353.460280][ T7290] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 353.474674][ T7290] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 353.481710][ T7290] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 353.496016][ T7292] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 353.510654][ T7290] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 353.525700][ T7290] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 353.540382][ T7290] overlayfs: failed to set xattr on upper [ 353.546533][ T7290] overlayfs: ...falling back to index=off,metacopy=off. [ 353.553647][ T7290] overlayfs: failed to resolve './file0': -2 [ 353.903897][ T7286] sctp: failed to load transform for md5: -2 [ 354.418604][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.806'. [ 355.307657][ T7311] loop3: detected capacity change from 0 to 8192 [ 355.358578][ T5990] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 356.755258][ T4187] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 356.833136][ T5990] usb 1-1: Using ep0 maxpacket: 8 [ 357.778576][ T5990] usb 1-1: unable to read config index 0 descriptor/all [ 357.787346][ T5990] usb 1-1: can't read configurations, error -71 [ 357.850841][ T7342] loop4: detected capacity change from 0 to 8192 [ 357.938957][ T7342] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 357.987826][ T7342] REISERFS (device loop4): using journaled data mode [ 357.994746][ T7342] reiserfs: using flush barriers [ 358.010831][ T7342] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 358.028453][ T7342] REISERFS (device loop4): checking transaction log (loop4) [ 358.042215][ T7342] REISERFS (device loop4): Using r5 hash to sort names [ 358.055904][ T7342] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 358.070030][ T7342] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 358.253323][ T4187] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 358.273415][ T4187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.282407][ T4187] usb 2-1: Product: syz [ 358.287730][ T7355] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 358.302379][ T7355] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 358.317283][ T7355] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 358.332109][ T7355] overlayfs: upper fs needs to support d_type. [ 358.338418][ T7355] overlayfs: upper fs does not support tmpfile. [ 358.344782][ T7355] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 358.359276][ T7355] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 358.366338][ T7355] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 358.380618][ T7357] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 358.394954][ T7355] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 358.409798][ T7355] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 358.425168][ T7355] overlayfs: failed to set xattr on upper [ 358.430917][ T7355] overlayfs: ...falling back to index=off,metacopy=off. [ 358.438461][ T7355] overlayfs: failed to resolve './file0': -2 [ 358.463490][ T4187] usb 2-1: Manufacturer: syz [ 358.477740][ T4187] usb 2-1: SerialNumber: syz [ 358.500329][ T4187] usb 2-1: config 0 descriptor?? [ 358.533363][ T4187] usb 2-1: can't set config #0, error -71 [ 358.540563][ T4187] usb 2-1: USB disconnect, device number 16 [ 358.901841][ T7358] sctp: failed to load transform for md5: -4 [ 358.984794][ T7368] loop3: detected capacity change from 0 to 8192 [ 361.573183][ T4247] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 362.080133][ T7413] loop1: detected capacity change from 0 to 8192 [ 362.122457][ T7413] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 362.149185][ T7413] REISERFS (device loop1): using journaled data mode [ 362.170637][ T7413] reiserfs: using flush barriers [ 362.194212][ T7413] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 362.250195][ T7413] REISERFS (device loop1): checking transaction log (loop1) [ 362.309276][ T7413] REISERFS (device loop1): Using r5 hash to sort names [ 362.316552][ T4247] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 362.369727][ T4247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.378117][ T4247] usb 4-1: Product: syz [ 362.382415][ T4247] usb 4-1: Manufacturer: syz [ 362.387365][ T4247] usb 4-1: SerialNumber: syz [ 362.395792][ T7413] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 362.444320][ T4247] usb 4-1: config 0 descriptor?? [ 362.454419][ T7413] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 362.545288][ T4247] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 362.740256][ T7427] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 362.757630][ T7427] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 362.774145][ T7427] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 362.788618][ T7427] overlayfs: upper fs needs to support d_type. [ 362.794841][ T7427] overlayfs: upper fs does not support tmpfile. [ 362.801242][ T7427] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 362.815727][ T7427] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 362.822927][ T7427] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 362.837569][ T7429] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 362.851775][ T7427] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 362.866331][ T7427] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 362.881119][ T7427] overlayfs: failed to set xattr on upper [ 362.886909][ T7427] overlayfs: ...falling back to index=off,metacopy=off. [ 362.894161][ T7427] overlayfs: failed to resolve './file0': -2 [ 363.063809][ C0] ================================================================== [ 363.072268][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 363.080058][ C0] Read of size 2 at addr ffff88805e11b02a by task swapper/0/0 [ 363.087533][ C0] [ 363.089881][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.189-syzkaller #0 [ 363.097710][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.108062][ C0] Call Trace: [ 363.111362][ C0] [ 363.114218][ C0] dump_stack_lvl+0x168/0x230 [ 363.118901][ C0] ? show_regs_print_info+0x20/0x20 [ 363.124094][ C0] ? _printk+0xcc/0x110 [ 363.128435][ C0] ? rose_timer_expiry+0x470/0x490 [ 363.133734][ C0] ? load_image+0x3b0/0x3b0 [ 363.138244][ C0] print_address_description+0x60/0x2d0 [ 363.143794][ C0] ? rose_timer_expiry+0x470/0x490 [ 363.148925][ C0] kasan_report+0xdf/0x130 [ 363.153337][ C0] ? rose_timer_expiry+0x470/0x490 [ 363.158444][ C0] rose_timer_expiry+0x470/0x490 [ 363.163382][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 363.168461][ C0] call_timer_fn+0x16c/0x530 [ 363.173090][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 363.178243][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 363.184260][ C0] ? __run_timers+0x7c0/0x7c0 [ 363.188939][ C0] ? rcu_is_watching+0x11/0xa0 [ 363.193700][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 363.198896][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 363.204087][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 363.209112][ C0] __run_timers+0x525/0x7c0 [ 363.213619][ C0] ? detach_timer+0x2b0/0x2b0 [ 363.218636][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 363.224616][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 363.229491][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 363.234781][ C0] run_timer_softirq+0x63/0xf0 [ 363.239737][ C0] handle_softirqs+0x328/0x820 [ 363.244500][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 363.249348][ C0] ? do_softirq+0x200/0x200 [ 363.253862][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 363.259060][ C0] __irq_exit_rcu+0x12f/0x220 [ 363.263726][ C0] ? irq_exit_rcu+0x20/0x20 [ 363.268266][ C0] irq_exit_rcu+0x5/0x20 [ 363.272499][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 363.278130][ C0] [ 363.281054][ C0] [ 363.283975][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 363.289956][ C0] RIP: 0010:default_idle+0xb/0x10 [ 363.294981][ C0] Code: bf 48 89 df e8 a6 aa 0a f8 eb b5 e8 4f b0 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d e7 44 54 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 363.314596][ C0] RSP: 0018:ffffffff8be07dc8 EFLAGS: 000002c6 [ 363.320657][ C0] RAX: ff5b4413597c8900 RBX: ffffffff8bebc3c0 RCX: ff5b4413597c8900 [ 363.328619][ C0] RDX: 0000000000000001 RSI: ffffffff8a0b15c0 RDI: ffffffff8a599340 [ 363.336587][ C0] RBP: ffffffff8be07ef8 R08: dffffc0000000000 R09: ffffed101720765a [ 363.344564][ C0] R10: ffffed101720765a R11: 1ffff11017207659 R12: ffffffff8d696ea8 [ 363.352543][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff17d7878 [ 363.360538][ C0] default_idle_call+0x81/0xc0 [ 363.365303][ C0] do_idle+0x21b/0x5b0 [ 363.369377][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 363.374566][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 363.380201][ C0] cpu_startup_entry+0x14/0x20 [ 363.384968][ C0] ? time_init+0x40/0x40 [ 363.389208][ C0] start_kernel+0x486/0x530 [ 363.393799][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 363.399697][ C0] [ 363.402706][ C0] [ 363.405108][ C0] Allocated by task 5990: [ 363.409420][ C0] __kasan_kmalloc+0xb5/0xf0 [ 363.414000][ C0] __alloc_skb+0x22c/0x750 [ 363.418406][ C0] __neigh_notify+0x142/0x2e0 [ 363.423094][ C0] neigh_cleanup_and_release+0x9d/0x250 [ 363.428631][ C0] neigh_periodic_work+0x407/0xc70 [ 363.433736][ C0] process_one_work+0x863/0x1000 [ 363.438663][ C0] worker_thread+0xaa8/0x12a0 [ 363.443329][ C0] kthread+0x436/0x520 [ 363.447383][ C0] ret_from_fork+0x1f/0x30 [ 363.451787][ C0] [ 363.454113][ C0] Freed by task 5990: [ 363.458179][ C0] kasan_set_track+0x4b/0x70 [ 363.462763][ C0] kasan_set_free_info+0x1f/0x40 [ 363.467688][ C0] ____kasan_slab_free+0xd5/0x110 [ 363.472697][ C0] slab_free_freelist_hook+0xea/0x170 [ 363.478062][ C0] kfree+0xef/0x2a0 [ 363.481857][ C0] skb_release_data+0x6fe/0x850 [ 363.486698][ C0] consume_skb+0xa2/0x100 [ 363.491015][ C0] netlink_broadcast_filtered+0x107a/0x1170 [ 363.496901][ C0] nlmsg_notify+0xec/0x1a0 [ 363.501307][ C0] __neigh_notify+0x191/0x2e0 [ 363.505971][ C0] neigh_cleanup_and_release+0x9d/0x250 [ 363.511504][ C0] neigh_periodic_work+0x407/0xc70 [ 363.516601][ C0] process_one_work+0x863/0x1000 [ 363.521522][ C0] worker_thread+0xaa8/0x12a0 [ 363.526200][ C0] kthread+0x436/0x520 [ 363.530254][ C0] ret_from_fork+0x1f/0x30 [ 363.534659][ C0] [ 363.536967][ C0] The buggy address belongs to the object at ffff88805e11b000 [ 363.536967][ C0] which belongs to the cache kmalloc-512 of size 512 [ 363.551020][ C0] The buggy address is located 42 bytes inside of [ 363.551020][ C0] 512-byte region [ffff88805e11b000, ffff88805e11b200) [ 363.564212][ C0] The buggy address belongs to the page: [ 363.569916][ C0] page:ffffea0001784600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e118 [ 363.580053][ C0] head:ffffea0001784600 order:2 compound_mapcount:0 compound_pincount:0 [ 363.588374][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 363.596354][ C0] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841c80 [ 363.605033][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 363.613605][ C0] page dumped because: kasan: bad access detected [ 363.620017][ C0] page_owner tracks the page as allocated [ 363.625742][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1107, ts 65652424104, free_ts 20231766256 [ 363.644918][ C0] get_page_from_freelist+0x1b77/0x1c60 [ 363.650462][ C0] __alloc_pages+0x1e1/0x470 [ 363.655320][ C0] new_slab+0xc0/0x4b0 [ 363.659441][ C0] ___slab_alloc+0x81e/0xdf0 [ 363.664035][ C0] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 363.669411][ C0] __ipv6_dev_mc_inc+0x413/0xac0 [ 363.674452][ C0] addrconf_dad_work+0x3bf/0x1520 [ 363.679564][ C0] process_one_work+0x863/0x1000 [ 363.684505][ C0] worker_thread+0xaa8/0x12a0 [ 363.689177][ C0] kthread+0x436/0x520 [ 363.693245][ C0] ret_from_fork+0x1f/0x30 [ 363.697655][ C0] page last free stack trace: [ 363.702317][ C0] free_unref_page_prepare+0x637/0x6c0 [ 363.707773][ C0] free_unref_page+0x94/0x280 [ 363.712449][ C0] free_contig_range+0x96/0xf0 [ 363.717210][ C0] destroy_args+0xef/0x8b0 [ 363.721625][ C0] debug_vm_pgtable+0x318/0x370 [ 363.726468][ C0] do_one_initcall+0x1ee/0x680 [ 363.731217][ C0] do_initcall_level+0x137/0x1f0 [ 363.736232][ C0] do_initcalls+0x4b/0x90 [ 363.740559][ C0] kernel_init_freeable+0x3ce/0x560 [ 363.745743][ C0] kernel_init+0x19/0x1b0 [ 363.750068][ C0] ret_from_fork+0x1f/0x30 [ 363.754504][ C0] [ 363.756819][ C0] Memory state around the buggy address: [ 363.762435][ C0] ffff88805e11af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 363.770491][ C0] ffff88805e11af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 363.778559][ C0] >ffff88805e11b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 363.786612][ C0] ^ [ 363.791963][ C0] ffff88805e11b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 363.800010][ C0] ffff88805e11b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 363.808053][ C0] ================================================================== [ 363.816096][ C0] Disabling lock debugging due to kernel taint [ 363.824853][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 363.832029][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.15.189-syzkaller #0 [ 363.841202][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.851413][ C0] Call Trace: [ 363.854682][ C0] [ 363.857516][ C0] dump_stack_lvl+0x168/0x230 [ 363.862195][ C0] ? show_regs_print_info+0x20/0x20 [ 363.867387][ C0] ? load_image+0x3b0/0x3b0 [ 363.871884][ C0] panic+0x2c9/0x7f0 [ 363.875770][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 363.880272][ C0] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 363.886332][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 363.892218][ C0] ? _raw_spin_unlock+0x40/0x40 [ 363.897151][ C0] ? print_memory_metadata+0x314/0x400 [ 363.902610][ C0] ? rose_timer_expiry+0x470/0x490 [ 363.907720][ C0] check_panic_on_warn+0x80/0xa0 [ 363.912660][ C0] ? rose_timer_expiry+0x470/0x490 [ 363.917779][ C0] end_report+0x6d/0xf0 [ 363.921940][ C0] kasan_report+0x102/0x130 [ 363.926438][ C0] ? rose_timer_expiry+0x470/0x490 [ 363.931559][ C0] rose_timer_expiry+0x470/0x490 [ 363.936575][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 363.941592][ C0] call_timer_fn+0x16c/0x530 [ 363.946181][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 363.951201][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 363.957171][ C0] ? __run_timers+0x7c0/0x7c0 [ 363.961839][ C0] ? rcu_is_watching+0x11/0xa0 [ 363.966679][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 363.971874][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 363.977076][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 363.982257][ C0] __run_timers+0x525/0x7c0 [ 363.986778][ C0] ? detach_timer+0x2b0/0x2b0 [ 363.991465][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 363.997450][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 364.002303][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 364.007600][ C0] run_timer_softirq+0x63/0xf0 [ 364.012371][ C0] handle_softirqs+0x328/0x820 [ 364.017130][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 364.021973][ C0] ? do_softirq+0x200/0x200 [ 364.026486][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 364.031673][ C0] __irq_exit_rcu+0x12f/0x220 [ 364.036345][ C0] ? irq_exit_rcu+0x20/0x20 [ 364.040849][ C0] irq_exit_rcu+0x5/0x20 [ 364.045084][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 364.050721][ C0] [ 364.053642][ C0] [ 364.056559][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 364.062532][ C0] RIP: 0010:default_idle+0xb/0x10 [ 364.067553][ C0] Code: bf 48 89 df e8 a6 aa 0a f8 eb b5 e8 4f b0 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d e7 44 54 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 364.087156][ C0] RSP: 0018:ffffffff8be07dc8 EFLAGS: 000002c6 [ 364.093239][ C0] RAX: ff5b4413597c8900 RBX: ffffffff8bebc3c0 RCX: ff5b4413597c8900 [ 364.101213][ C0] RDX: 0000000000000001 RSI: ffffffff8a0b15c0 RDI: ffffffff8a599340 [ 364.109185][ C0] RBP: ffffffff8be07ef8 R08: dffffc0000000000 R09: ffffed101720765a [ 364.117156][ C0] R10: ffffed101720765a R11: 1ffff11017207659 R12: ffffffff8d696ea8 [ 364.125130][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff17d7878 [ 364.133107][ C0] default_idle_call+0x81/0xc0 [ 364.137877][ C0] do_idle+0x21b/0x5b0 [ 364.141957][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 364.147201][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 364.152826][ C0] cpu_startup_entry+0x14/0x20 [ 364.157577][ C0] ? time_init+0x40/0x40 [ 364.161809][ C0] start_kernel+0x486/0x530 [ 364.166476][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 364.172395][ C0] [ 364.175648][ C0] Kernel Offset: disabled [ 364.179991][ C0] Rebooting in 86400 seconds..