last executing test programs: 5m41.248017255s ago: executing program 2 (id=1572): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b409859a3cb7dbf298c7802264387811e20a0d78489eab0b0e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x3f, 0x51, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x50) 5m39.490126738s ago: executing program 2 (id=1574): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 5m39.158882576s ago: executing program 2 (id=1575): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x36, 0x0, 0x1, 0x1}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x8000) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f5c0a000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) socket$packet(0x11, 0x3, 0x300) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x5a2e}, 0x0, 0x0, 0x2, 0x8, 0xb0, 0x2, 0xffff, 0x3, 0x5, 0x5bfb, r0, r3}) 5m36.16197699s ago: executing program 2 (id=1580): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000f00)="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", 0x13b}, {&(0x7f0000000b40)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c356c2692c102092e1f43782559cb76acaa20f83d5e807ad43b8e153ccdf10b894d755e849d01bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9697697b53fee3e5f94497031ff2e460d2c011d0db5a289bde09ac884de124e62b5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce00000000000000", 0xc9}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f0000000280)="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", 0xfb}, {&(0x7f00000009c0)="1679c98357b6294679b45dac19ffee9a12bec86bf722e0f5fe8109dedde67afa6fb2c50395312b4b14b9a3e357cf93f4958ba63aab925daef4a74f1ab0f984a9e5c3ff2d5fff0d90f60cdcbb5793cff25656584db85d70e52e9a0b1b4ca37c99ce544b8e0bf72cdb3d8abf22bd0c21120b9be60f59ae0d111d56b9a65fda31ba8bde49d572efc8e4f901700f13d785dc4b873195a9b873846067134950acc84d608c7aa118778e0c37159045350895d99088504fc46d32ede3d82f1d0683f0fb510500000000000000853fe91bbe45da1c4af881b7769897519e91ff22011706873c87ef430630c58206ee0c31e98f3890fd6787c8d06b4e9739a7227037c6086c537398d94020d6", 0x108}], 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) 5m34.315415785s ago: executing program 2 (id=1584): timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) 5m33.651879972s ago: executing program 2 (id=1586): sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d33aaad447788d30188897", 0x14}], 0x1}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x102) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 5m17.984232798s ago: executing program 32 (id=1586): sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d33aaad447788d30188897", 0x14}], 0x1}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x102) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 2m1.39027078s ago: executing program 0 (id=2014): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x28, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m1.080371908s ago: executing program 0 (id=2016): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r3, &(0x7f0000000180)='nullb1\x00', 0x1ff) unlinkat(r3, &(0x7f0000000680)='nullb1\x00', 0x200) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r4, &(0x7f0000000400)='wusb3801 0x4', 0xc) io_uring_enter(0xffffffffffffffff, 0x10062c4, 0xffffffdc, 0xa3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200000f00000004030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 1m59.560205925s ago: executing program 0 (id=2019): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10043, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_ublk_setup_queues(r0, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f51, 0x8000, 0x2, 0x2d7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfe3, 0x4, 0x1, 0x272}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa471, 0x100, 0x3, 0xd1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a5, 0x20, 0x0, 0xaa}}], 0x4, &(0x7f0000001d00)={0x2e, 0x30, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x2, 0x6d7, 0x0, 0x0}}, &(0x7f0000001d80)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f}) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x1, 0xe3a, 0xfffffffd, 0x4}) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) 1m56.776675214s ago: executing program 0 (id=2021): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000080)=0x3f) io_submit(r1, 0x48, &(0x7f0000000540)=[&(0x7f0000000280)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x200}]) 1m56.250667327s ago: executing program 0 (id=2023): r0 = syz_open_dev$video(0x0, 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x0, 0x0, {0xa, 0x3, 0x7, 0xfffffffe}}) 1m55.679235291s ago: executing program 0 (id=2024): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x28, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m55.017484157s ago: executing program 33 (id=2024): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x28, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 23.731469826s ago: executing program 1 (id=2201): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r1 = io_uring_setup(0x7d1, &(0x7f0000000240)={0x0, 0xddf9, 0x100, 0xfffffffe, 0x183}) close_range(r1, r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000001440)=@get={0x1, &(0x7f00000013c0)=""/106, 0x7}) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0)) 23.491329652s ago: executing program 1 (id=2202): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r1, &(0x7f0000002ec0)={0x2020}, 0x2020) 23.301896956s ago: executing program 1 (id=2204): bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) bind$alg(r0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, 0x0, 0x0, &(0x7f0000000140)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) 22.088474226s ago: executing program 1 (id=2205): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f) io_submit(0x0, 0x48, &(0x7f0000000540)=[&(0x7f0000000280)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x200}]) 19.259381546s ago: executing program 1 (id=2207): socket$kcm(0x21, 0x2, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) lseek(r0, 0x1000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004000000020000000700000000000000", @ANYRES32, @ANYBLOB="0000000c80000088c377b00bdce930000001000013627390ca4b96a6d8dcf2c33e5640efbb7c36cb7c08ad6ba9395dfd7b65c917c3a9c14dabed37687b87c591eb7c72216ef9a48c568964c96fc083c413453e4d23e3a010928b32e70c313d91d19d4e58344f826d9f88ec7fc90a95887366adb3cd9aec492a87ced5b9911de279cc1386af5db48afb39382fc3c47cbaf06f67f1111255eeb205bea391824bc201a1542fbdb37a16646f29fb5373a004fe4b04584a0988cb383b6c3fd549e4d97b37c760c5c7cbdff03a49c33a3b0897ec5aaf825350094f19cd6233cdf88b7ed038943481507256dd040c8c7740b8cb28d134f66b668bc4341ed84a1332ff29d15bc1f39d5f5a19aeaab6e6fa8f1bbb172568f36398", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 17.123940528s ago: executing program 1 (id=2215): socket(0x10, 0xa, 0x20000086) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x9, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d0200", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000010000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000400100008000140040000", 0x57}], 0x1) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4, 0xd, 0x20, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x31435641}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4a0, 0x328, 0x328, 0xffffffff, 0x280, 0x328, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1d0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @loopback, @dev={0xac, 0x14, 0x14, 0x20}, @gre_key=0x1, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 15.893434519s ago: executing program 34 (id=2215): socket(0x10, 0xa, 0x20000086) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x9, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d0200", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000010000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000400100008000140040000", 0x57}], 0x1) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4, 0xd, 0x20, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x31435641}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4a0, 0x328, 0x328, 0xffffffff, 0x280, 0x328, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1d0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @loopback, @dev={0xac, 0x14, 0x14, 0x20}, @gre_key=0x1, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 9.370381929s ago: executing program 4 (id=2230): socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fbffffff00000000fdfffdfa8500000028000c0018010000646c6c2500000292c595454f0000002020207b1af8ff00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d64", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) epoll_create1(0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', r0}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000) mount(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') 7.787014308s ago: executing program 4 (id=2232): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r1, &(0x7f0000002ec0)={0x2020}, 0x2020) 7.72077515s ago: executing program 5 (id=2233): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 7.503685125s ago: executing program 4 (id=2234): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r1, 0x0, 0x0) 6.310540825s ago: executing program 4 (id=2237): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) epoll_create1(0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 4.225015966s ago: executing program 4 (id=2240): socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fbffffff00000000fdfffdfa8500000028000c0018010000646c6c2500000292c595454f0000002020207b1af8ff00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d64", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) epoll_create1(0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', r0}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000) mount(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') 3.405766576s ago: executing program 5 (id=2243): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 3.171406542s ago: executing program 3 (id=2244): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r1, 0x0, 0x0) 3.037043255s ago: executing program 5 (id=2245): socket(0x2, 0x80805, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x14f, &(0x7f0000000240)="$eJzs289KAlEUx/HfqKnZP8tqES2CINrkqIHVzh5FdBJpLMk2ShA9Su9Xi3atMpr0hqMQGHrJ+X42np+Hi2cWV89GAYisig7kyPkO++nsY86xPRKAOekPXj/6AKIn/m57AgB2vF5KbUkvbw81xZNj+8FXvzLsx1Lj/SdpLzHoO2kth/eLZ+loeN7JTDyfMf2Vif3jw+Hnr2pN69pQVpvaUm7Qr5vzu3/YhAAAiA5H+XAeeSOmq6bvFUxeCnLR5GSQS6F8anIqyPnarV+f1SMAmFLsl/sfD93/ROj+A/i/Ot3eddX3vTsKCgoKU9j+ZgIwa+59q+12ur2TZqva8BreTblULl8Uzs+KbrD4u6PrP4AF8vOjb3sSAAAAAAAAAAAAAAAwrW3t2B4BAAAAwJzM4+9Etp8RAAAAAAAAAAAAAAAAAIBF8xkAAP//Cn4hMA==") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp1251'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0xfff}], 0x1, 0x122, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r1, &(0x7f0000001540), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=win95,utf8=1,utf8=1,utf8=1,shortname=win95,fmask=00000000000000000005645,shortname=lower,uni_xlate=0,utf8=1,uni_xlate=0,utf8=0,allow_utime=00000000000000000000007,rodir,discard,nfs\x00\x00\x00\x00tale_ro,rodir,check=relaxed,fsuuid=098Ve991-V279-^fc0-d\x00b0-e53da23f,uid=', @ANYRES8, @ANYBLOB=',subj_role=%,fowner<', @ANYRESDEC=0x0, @ANYRES8], 0x26, 0x2bf, &(0x7f0000000900)="$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") 2.85619207s ago: executing program 5 (id=2246): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x50}}, 0x0) 1.739297497s ago: executing program 3 (id=2247): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) epoll_create1(0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 1.710425628s ago: executing program 5 (id=2248): syz_usb_connect(0x0, 0x91, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d04210800010102030109027f0002010080fa09040000010e0100000d240100013f000000000001010f24020101020000000000000000001a240603820661637050ab49b8ccb3855e8d22560101010101000924030201010003000705810308001009040100010e0200000e2401011700820002000000010009240901000000000007058205000401"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x2) syz_open_dev$video(&(0x7f0000000100), 0x1, 0x2) ioctl(r0, 0xc0607520, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r1, 0x800) r3 = dup3(r2, r1, 0x80000) read(r3, &(0x7f00000000c0)=""/226, 0xe2) pselect6(0x40, &(0x7f0000000340)={0x7ab5, 0x1, 0x8000000000000000, 0x80000001, 0x3, 0x1ff, 0x9, 0xfffffffffffffffb}, &(0x7f0000000380)={0x7, 0x8, 0x9, 0x80000000, 0x0, 0x20000000000000, 0x3, 0xfcc}, &(0x7f00000003c0)={0x8, 0x8, 0x0, 0xffffffffa8fb74ae, 0x401, 0x80, 0x6, 0x8}, &(0x7f0000000400)={0x77359400}, &(0x7f0000000480)={&(0x7f0000000440)={[0x80000000]}, 0x8}) read$watch_queue(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') getgroups(0x3, &(0x7f0000004400)=[0x0, 0x0, 0x0]) syz_fuse_handle_req(r4, &(0x7f0000002080)="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", 0x2000, &(0x7f0000004900)={&(0x7f0000004080)={0x50, 0x0, 0x6, {0x7, 0x2d, 0x17c, 0x4a002408, 0xfffa, 0x2, 0x1, 0x3, 0x0, 0x0, 0x10, 0x5c1}}, 0x0, &(0x7f0000004140)={0x18, 0x0, 0xede, {0x6}}, &(0x7f0000004180)={0x18, 0x0, 0x41e2, {0x3ff}}, &(0x7f00000041c0)={0x18, 0x0, 0x4, {0x1}}, &(0x7f0000004200)={0x28, 0x0, 0x100, {{0x3, 0x6, 0x1}}}, &(0x7f0000004240)={0x60, 0x0, 0xffffffff00000000, {{0x4, 0x40, 0x10, 0x2, 0x4, 0xe, 0x8, 0x2}}}, &(0x7f00000042c0)={0x18, 0xffffffffffffffda, 0x0, {0x1a49}}, &(0x7f0000004300)={0x15, 0x0, 0x2, {'vlan\x00'}}, &(0x7f0000004340)={0x20, 0xb, 0x6, {0x0, 0x18}}, &(0x7f0000004380)={0x78, 0x0, 0x73, {0xe63, 0x10001, 0x0, {0x4, 0xffffffffffffffff, 0xed2, 0x3, 0x401, 0x0, 0x61, 0x101, 0x5, 0xa000, 0xfff, 0x0, 0x0, 0x7}}}, &(0x7f0000004500)={0x90, 0x0, 0x3, {0x3, 0x0, 0x7, 0xc000000000000, 0x5c55c78e, 0x1, {0x0, 0x0, 0x5, 0x2a, 0x0, 0x2cc00204, 0x0, 0x0, 0x1, 0xc000, 0x5, 0x0, r5, 0xd4, 0xffff}}}, &(0x7f00000045c0)={0x30, 0x0, 0x3, [{0x0, 0x6712, 0x7, 0x7, 'ip6gre\x00'}]}, &(0x7f0000004600)={0xb0, 0x0, 0x5, [{{0x5, 0x1, 0x3, 0x9, 0x4, 0x0, {0x3, 0x8, 0x7, 0x2, 0xff, 0xd, 0xaaf7, 0x7fffffff, 0x7, 0xa000, 0x7, 0x0, 0x0, 0x7, 0x4}}, {0x6, 0x89d4, 0x5, 0x6, 'syz1\x00'}}]}, &(0x7f00000046c0)={0xa0, 0x0, 0xfffffffffffffff7, {{0x1, 0x2, 0xffffffff, 0xfffffffffffffff9, 0x3, 0x4, {0x6, 0x2, 0x6b4, 0xfffffffffffffffb, 0x4, 0x56, 0x8b, 0x7, 0x1, 0xa000, 0x4, 0x0, 0x0, 0xe, 0x3}}, {0x0, 0x1a}}}, &(0x7f0000004780)={0x20, 0x0, 0x2, {0xce, 0x4}}, &(0x7f00000047c0)={0x130, 0xfffffffffffffffe, 0xf20, {0x9, 0x8, 0x0, '\x00', {0x800, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x8000, '\x00', 0x9, 0x91, 0x2, 0x3ff, {0x5, 0x81}, {0x4, 0xfff}, {0x7, 0x4}, {0x4, 0xe00000}, 0xfffffffa, 0x600000, 0x2bf7, 0x3}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) 782.216951ms ago: executing program 3 (id=2249): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r1, &(0x7f0000002ec0)={0x2020}, 0x2020) 664.104274ms ago: executing program 3 (id=2250): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 551.487797ms ago: executing program 3 (id=2251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b00)='%ps \x00'}, 0x20) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 459.157159ms ago: executing program 4 (id=2252): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 290.426323ms ago: executing program 3 (id=2253): bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) add_key$user(&(0x7f0000000040), 0x0, &(0x7f00000011c0), 0x0, 0xfffffffffffffffb) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x190, 0x10, 0x1, 0x70bd27, 0x100000, {{@in6=@mcast2, @in6=@local, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x2c}, [@algo_crypt={0x54, 0x2, {{'cbc(twofish)\x00'}, 0x60, "e0fa01040040000000100000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x190}}, 0x44050) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000002140)=0x20) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1000) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 5 (id=2254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") r0 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, 0x0, 0x7f03) kernel console output (not intermixed with test programs): eusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 309.069412][ T5842] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 309.109114][ T5842] usb 3-1: USB disconnect, device number 29 [ 309.754163][ T8202] loop0: detected capacity change from 0 to 2048 [ 309.767577][ T8202] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 309.808603][ T8202] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.874294][ T28] audit: type=1800 audit(1786672348.652:23): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.805" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 310.199833][ T8211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.808'. [ 310.333036][ T8216] 9pnet_virtio: no channels available for device 127.0.0.1 [ 310.800929][ T8211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.808'. [ 311.059609][ T8220] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.116990][ T8220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.124898][ T8220] IPv6: NLM_F_CREATE should be set when creating new route [ 311.509329][ T2181] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 311.585790][ T8232] loop1: detected capacity change from 0 to 128 [ 312.080571][ T2181] usb 4-1: Using ep0 maxpacket: 16 [ 312.227248][ T2181] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.237635][ T2181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.253818][ T2181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 312.263698][ T2181] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 312.273491][ T2181] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.315037][ T2181] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 312.324198][ T2181] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 312.332407][ T2181] usb 4-1: Manufacturer: syz [ 312.343316][ T2181] usb 4-1: config 0 descriptor?? [ 312.426684][ T8232] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 312.438942][ T8232] hpfs: filesystem error: improperly stopped [ 312.491834][ T8232] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 312.520427][ T8232] hpfs: You really don't want any checks? You are crazy... [ 312.553398][ T8232] hpfs: Code page index out of array [ 312.586576][ T8232] hpfs: code page support is disabled [ 312.632339][ T8232] hpfs: hpfs_map_4sectors(): unaligned read [ 312.638360][ T8232] hpfs: hpfs_map_4sectors(): unaligned read [ 312.666428][ T8232] hpfs: filesystem error: unable to find root dir [ 312.695094][ T8231] hpfs: hpfs_map_4sectors(): unaligned read [ 312.723699][ T2181] rc_core: IR keymap rc-hauppauge not found [ 312.729675][ T2181] Registered IR keymap rc-empty [ 312.764784][ T2181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 312.813535][ T2181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 312.894157][ T2181] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 312.932012][ T2181] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input51 [ 312.953071][ T8240] loop2: detected capacity change from 0 to 2048 [ 312.964007][ T2181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 312.984754][ T8240] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 313.012807][ T8240] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.022395][ T2181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 313.064754][ T8245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.820'. [ 313.071509][ T2181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 313.079163][ T8245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.820'. [ 313.132990][ T28] audit: type=1800 audit(1786672351.912:24): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.818" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 313.160970][ T2181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 313.209167][ T2181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 313.255290][ T2181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 313.312143][ T2181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 313.370557][ T2181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 313.441864][ T2181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 313.613518][ T8254] 9pnet_virtio: no channels available for device 127.0.0.1 [ 314.222086][ T2181] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 314.254513][ T2181] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 314.305301][ T2181] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 314.356121][ T2181] usb 4-1: USB disconnect, device number 22 [ 315.474334][ T8279] loop1: detected capacity change from 0 to 128 [ 315.724402][ T8281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.830'. [ 316.115806][ T8281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.830'. [ 316.133195][ T8279] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 316.166890][ T8279] hpfs: filesystem error: improperly stopped [ 316.180951][ T8279] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 316.188750][ T8279] hpfs: You really don't want any checks? You are crazy... [ 316.221419][ T8279] hpfs: Code page index out of array [ 316.269503][ T8279] hpfs: code page support is disabled [ 316.276192][ T8279] hpfs: hpfs_map_4sectors(): unaligned read [ 316.282482][ T8279] hpfs: hpfs_map_4sectors(): unaligned read [ 316.288498][ T8279] hpfs: filesystem error: unable to find root dir [ 316.344409][ T8278] hpfs: hpfs_map_4sectors(): unaligned read [ 316.529782][ T8290] loop0: detected capacity change from 0 to 2048 [ 316.574665][ T8290] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 316.654435][ T8290] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.670449][ T5816] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 316.699962][ T28] audit: type=1800 audit(1786672355.472:25): pid=8290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.833" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 317.110767][ T8295] 9pnet_virtio: no channels available for device 127.0.0.1 [ 317.171173][ T5816] usb 3-1: Using ep0 maxpacket: 16 [ 317.209112][ T5816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.316553][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.424935][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.431491][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.483878][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 317.515790][ T5816] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 317.550598][ T5816] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.631281][ T5816] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 317.669984][ T5816] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 317.720332][ T5816] usb 3-1: Manufacturer: syz [ 317.746817][ T5816] usb 3-1: config 0 descriptor?? [ 318.261702][ T8308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.840'. [ 318.277930][ T8308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.840'. [ 318.287822][ T5816] rc_core: IR keymap rc-hauppauge not found [ 318.313465][ T5816] Registered IR keymap rc-empty [ 318.331011][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 318.373486][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 318.437178][ T5816] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 318.514230][ T5816] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input54 [ 319.000969][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 319.070531][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 319.161429][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 319.230441][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 319.261679][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 319.310637][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 319.440688][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 319.536265][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 319.574629][ T8318] loop3: detected capacity change from 0 to 128 [ 319.653702][ T8318] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 319.666065][ T8318] hpfs: filesystem error: improperly stopped [ 319.673192][ T8318] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 319.682525][ T8318] hpfs: You really don't want any checks? You are crazy... [ 319.690145][ T8318] hpfs: Code page index out of array [ 319.706366][ T8318] hpfs: code page support is disabled [ 319.761408][ T8318] hpfs: hpfs_map_4sectors(): unaligned read [ 319.825868][ T8318] hpfs: hpfs_map_4sectors(): unaligned read [ 319.832139][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 319.839519][ T8318] hpfs: filesystem error: unable to find root dir [ 319.880389][ T5816] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 319.929060][ T8316] hpfs: hpfs_map_4sectors(): unaligned read [ 320.002828][ T5816] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 320.012262][ T5816] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 320.034491][ T5816] usb 3-1: USB disconnect, device number 30 [ 320.452550][ T8331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.849'. [ 320.486162][ T8331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.849'. [ 320.528720][ T8332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.847'. [ 320.930627][ T5842] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 321.130815][ T5842] usb 2-1: Using ep0 maxpacket: 32 [ 321.184261][ T5842] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 321.192931][ T5851] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 321.224300][ T5842] usb 2-1: config 0 has no interface number 0 [ 321.303729][ T5842] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 321.383819][ T5842] usb 2-1: config 0 interface 85 has no altsetting 0 [ 321.522631][ T5842] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 321.531818][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.539856][ T5842] usb 2-1: Product: syz [ 321.544100][ T5851] usb 1-1: Using ep0 maxpacket: 16 [ 321.551417][ T5851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.562950][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 321.580335][ T5842] usb 2-1: Manufacturer: syz [ 321.595455][ T5842] usb 2-1: SerialNumber: syz [ 321.619621][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 321.642978][ T5842] usb 2-1: config 0 descriptor?? [ 321.654847][ T5851] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 321.701464][ T5851] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.740788][ T5851] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 321.754610][ T5851] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 321.764774][ T5851] usb 1-1: Manufacturer: syz [ 321.776081][ T5851] usb 1-1: config 0 descriptor?? [ 321.797696][ T8349] loop3: detected capacity change from 0 to 128 [ 321.844661][ T8349] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 321.856643][ T8349] hpfs: filesystem error: improperly stopped [ 321.862702][ T8349] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 321.871394][ T8349] hpfs: You really don't want any checks? You are crazy... [ 321.879158][ T8349] hpfs: Code page index out of array [ 321.884539][ T8349] hpfs: code page support is disabled [ 321.890097][ T8349] hpfs: hpfs_map_4sectors(): unaligned read [ 321.896210][ T8349] hpfs: hpfs_map_4sectors(): unaligned read [ 321.902177][ T8349] hpfs: filesystem error: unable to find root dir [ 321.922228][ T8349] hpfs: hpfs_map_4sectors(): unaligned read [ 322.110413][ T5851] rc_core: IR keymap rc-hauppauge not found [ 322.116473][ T5851] Registered IR keymap rc-empty [ 322.132203][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.175942][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.234470][ T5851] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 322.271065][ T5851] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input56 [ 322.313114][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.346627][ T5842] appletouch 2-1:0.85: Geyser mode initialized. [ 322.365718][ T5842] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input55 [ 322.384700][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.439249][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.497927][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.543124][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.590656][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.601694][ T5816] usb 2-1: USB disconnect, device number 13 [ 322.660824][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.713275][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.738454][ T5816] appletouch 2-1:0.85: input: appletouch disconnected [ 322.790504][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.860723][ T5851] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.906477][ T5851] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 322.925880][ T5851] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 322.970863][ T5851] usb 1-1: USB disconnect, device number 15 [ 323.253707][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 323.295124][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.860'. [ 323.346759][ T8363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.861'. [ 323.363407][ T8363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.861'. [ 324.263803][ T8374] loop3: detected capacity change from 0 to 128 [ 326.037682][ T8374] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 326.049748][ T8374] hpfs: filesystem error: improperly stopped [ 326.055994][ T8374] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 326.064396][ T8374] hpfs: You really don't want any checks? You are crazy... [ 326.071867][ T8374] hpfs: Code page index out of array [ 326.077198][ T8374] hpfs: code page support is disabled [ 326.089392][ T8374] hpfs: hpfs_map_4sectors(): unaligned read [ 326.096715][ T8374] hpfs: hpfs_map_4sectors(): unaligned read [ 326.102839][ T8374] hpfs: filesystem error: unable to find root dir [ 326.135895][ T8374] hpfs: hpfs_map_4sectors(): unaligned read [ 327.010560][ T5815] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 327.249010][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 327.289443][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.363996][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.421119][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 327.463428][ T5815] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 327.476534][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.520706][ T5815] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 327.547655][ T5815] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 327.565785][ T5815] usb 4-1: Manufacturer: syz [ 327.601502][ T5815] usb 4-1: config 0 descriptor?? [ 329.250511][ T5815] rc_core: IR keymap rc-hauppauge not found [ 329.269450][ T5815] Registered IR keymap rc-empty [ 329.277804][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 329.320736][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 329.971298][ T5815] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 329.986261][ T5815] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input57 [ 330.063802][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 330.111778][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 330.150431][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 330.210400][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 330.243669][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 330.520422][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 330.561213][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 330.615462][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 330.660541][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 330.690830][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 330.731118][ T5815] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 330.760341][ T5815] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 330.792958][ T5815] usb 4-1: USB disconnect, device number 23 [ 330.948987][ T8425] Driver unsupported XDP return value 0 on prog (id 108) dev N/A, expect packet loss! [ 331.716937][ T8433] loop0: detected capacity change from 0 to 64 [ 331.740131][ T8433] MINIX-fs: bad superblock [ 333.633539][ T8447] loop3: detected capacity change from 0 to 128 [ 333.661226][ T8447] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 333.673390][ T8447] hpfs: filesystem error: improperly stopped [ 333.679473][ T8447] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 333.687339][ T8447] hpfs: You really don't want any checks? You are crazy... [ 333.694650][ T8447] hpfs: Code page index out of array [ 333.699992][ T8447] hpfs: code page support is disabled [ 333.705688][ T8447] hpfs: hpfs_map_4sectors(): unaligned read [ 333.711797][ T8447] hpfs: hpfs_map_4sectors(): unaligned read [ 333.717766][ T8447] hpfs: filesystem error: unable to find root dir [ 333.738477][ T8447] hpfs: hpfs_map_4sectors(): unaligned read [ 334.349611][ T5835] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 335.850350][ T5835] usb 1-1: Using ep0 maxpacket: 16 [ 335.876110][ T5835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.157418][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.748297][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 336.775745][ T5835] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 336.800687][ T5835] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.944477][ T5835] usb 1-1: string descriptor 0 read error: -71 [ 336.956924][ T5835] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 336.980340][ T5835] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 337.003583][ T5835] usb 1-1: config 0 descriptor?? [ 337.010776][ T5835] usb 1-1: can't set config #0, error -71 [ 337.051697][ T5835] usb 1-1: USB disconnect, device number 16 [ 337.117501][ T8462] loop3: detected capacity change from 0 to 64 [ 337.129834][ T8462] MINIX-fs: bad superblock [ 337.201322][ T5790] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 337.334238][ T8465] loop3: detected capacity change from 0 to 1024 [ 339.560641][ T5852] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 339.773023][ T5852] usb 4-1: config 1 interface 0 has no altsetting 0 [ 339.794891][ T5852] usb 4-1: string descriptor 0 read error: -22 [ 339.802763][ T5852] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.40 [ 339.817353][ T8478] loop1: detected capacity change from 0 to 128 [ 339.825326][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.827235][ T8478] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 339.845146][ T8478] hpfs: filesystem error: improperly stopped [ 339.851168][ T8478] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 339.858902][ T8478] hpfs: You really don't want any checks? You are crazy... [ 339.866186][ T8478] hpfs: Code page index out of array [ 339.871576][ T8478] hpfs: code page support is disabled [ 339.878089][ T8478] hpfs: hpfs_map_4sectors(): unaligned read [ 339.884378][ T8478] hpfs: hpfs_map_4sectors(): unaligned read [ 339.890756][ T8478] hpfs: filesystem error: unable to find root dir [ 339.912824][ T8478] hpfs: hpfs_map_4sectors(): unaligned read [ 340.270388][ T5842] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 340.381980][ T5852] hid-generic 0003:1038:12C2.0001: unknown main item tag 0x5 [ 340.390025][ T5852] hid-generic 0003:1038:12C2.0001: unexpected long global item [ 340.399986][ T5852] hid-generic: probe of 0003:1038:12C2.0001 failed with error -22 [ 340.440423][ T5817] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 340.450631][ T5842] usb 1-1: Using ep0 maxpacket: 32 [ 340.458286][ T5842] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 340.466590][ T5842] usb 1-1: config 0 has no interface number 0 [ 340.473307][ T5842] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 340.484329][ T5842] usb 1-1: config 0 interface 85 has no altsetting 0 [ 340.493837][ T5842] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 340.503266][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.511383][ T5842] usb 1-1: Product: syz [ 340.515591][ T5842] usb 1-1: Manufacturer: syz [ 340.520419][ T5842] usb 1-1: SerialNumber: syz [ 340.527885][ T5842] usb 1-1: config 0 descriptor?? [ 340.592133][ T5852] usb 4-1: USB disconnect, device number 24 [ 340.620571][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 340.650041][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.677610][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 340.693913][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 340.704372][ T5817] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 340.714604][ T5817] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.729877][ T5817] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 340.745927][ T5817] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 340.755129][ T5817] usb 3-1: Manufacturer: syz [ 340.776733][ T5817] usb 3-1: config 0 descriptor?? [ 341.162075][ T5842] appletouch 1-1:0.85: Geyser mode initialized. [ 341.218694][ T5842] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input58 [ 341.350399][ T5817] rc_core: IR keymap rc-hauppauge not found [ 341.359037][ T5817] Registered IR keymap rc-empty [ 341.385739][ T5835] usb 1-1: USB disconnect, device number 17 [ 341.389327][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 341.486451][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 341.584666][ T5817] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 341.658517][ T5817] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input59 [ 341.952588][ T5835] appletouch 1-1:0.85: input: appletouch disconnected [ 342.391313][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 342.450668][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 342.491254][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 342.591843][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 342.639377][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 342.676175][ T8501] loop0: detected capacity change from 0 to 64 [ 342.683533][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 342.702529][ T8501] MINIX-fs: bad superblock [ 342.781780][ T8505] loop1: detected capacity change from 0 to 128 [ 342.789962][ T8505] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 342.802016][ T8505] hpfs: filesystem error: improperly stopped [ 342.808171][ T8505] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 342.816008][ T8505] hpfs: You really don't want any checks? You are crazy... [ 342.823298][ T8505] hpfs: Code page index out of array [ 342.828632][ T8505] hpfs: code page support is disabled [ 342.834408][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 342.841816][ T8505] hpfs: hpfs_map_4sectors(): unaligned read [ 342.848279][ T8505] hpfs: hpfs_map_4sectors(): unaligned read [ 342.854399][ T8505] hpfs: filesystem error: unable to find root dir [ 342.882201][ T8505] hpfs: hpfs_map_4sectors(): unaligned read [ 342.900799][ T8506] loop3: detected capacity change from 0 to 1024 [ 342.911831][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 342.911967][ T5777] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 343.028466][ T8508] loop0: detected capacity change from 0 to 1024 [ 344.911114][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 345.117704][ T5817] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 345.163970][ T5817] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 345.183505][ T5817] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 345.200825][ T5817] usb 3-1: USB disconnect, device number 31 [ 345.364811][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.912'. [ 346.282210][ T8527] loop1: detected capacity change from 0 to 2048 [ 346.302398][ T8527] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 346.324972][ T8527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.362750][ T28] audit: type=1800 audit(1786672385.142:26): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.918" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 346.782561][ T8535] 9pnet_fd: p9_fd_create_tcp (8535): problem connecting socket to 127.0.0.1 [ 347.290972][ T28] audit: type=1800 audit(1786672386.072:27): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.918" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 348.219448][ T8543] loop1: detected capacity change from 0 to 128 [ 348.958786][ T5842] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 349.019259][ T8543] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 349.031221][ T8543] hpfs: filesystem error: improperly stopped [ 349.037246][ T8543] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 349.045025][ T8543] hpfs: You really don't want any checks? You are crazy... [ 349.052270][ T8543] hpfs: Code page index out of array [ 349.057559][ T8543] hpfs: code page support is disabled [ 349.064133][ T8543] hpfs: hpfs_map_4sectors(): unaligned read [ 349.070171][ T8543] hpfs: hpfs_map_4sectors(): unaligned read [ 349.076177][ T8543] hpfs: filesystem error: unable to find root dir [ 349.410278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 349.600448][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 349.626189][ T8543] hpfs: hpfs_map_4sectors(): unaligned read [ 349.696342][ T5842] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.706683][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.745338][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 349.814467][ T5842] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 349.846992][ T5842] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.532569][ T5842] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 351.571412][ T5842] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 351.593770][ T5842] usb 1-1: config 0 descriptor?? [ 351.613553][ T5842] usb 1-1: can't set config #0, error -71 [ 351.649524][ T5842] usb 1-1: USB disconnect, device number 18 [ 351.723032][ T8561] loop0: detected capacity change from 0 to 2048 [ 351.747089][ T8561] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 351.772618][ T8561] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.827655][ T28] audit: type=1800 audit(1786672390.602:28): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.930" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 351.871794][ T8563] syzkaller0: entered promiscuous mode [ 351.880369][ T8563] syzkaller0: entered allmulticast mode [ 352.294689][ T8569] 9pnet_fd: p9_fd_create_tcp (8569): problem connecting socket to 127.0.0.1 [ 352.621956][ T28] audit: type=1800 audit(1786672391.372:29): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.930" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 353.459443][ T8579] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 356.862136][ T8596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.939'. [ 358.639246][ T8620] sd 0:0:1:0: PR command failed: 1026 [ 358.660289][ T8620] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 358.668695][ T8620] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 359.346187][ T8624] netlink: 36 bytes leftover after parsing attributes in process `syz.1.952'. [ 360.573805][ T8635] syzkaller0: entered promiscuous mode [ 360.636655][ T8635] syzkaller0: entered allmulticast mode [ 361.246982][ T8637] syz.3.957 (8637): drop_caches: 2 [ 364.870827][ T8667] netlink: 64 bytes leftover after parsing attributes in process `syz.1.967'. [ 364.906244][ T8651] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 364.925991][ T8651] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 364.940331][ T8651] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 369.889704][ T8750] binder: 8749:8750 ioctl c0306201 0 returned -14 [ 369.991254][ T8745] syzkaller0: entered promiscuous mode [ 370.041886][ T8745] syzkaller0: entered allmulticast mode [ 372.102538][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.985'. [ 373.091896][ T8779] binder: 8778:8779 ioctl c0306201 0 returned -14 [ 374.860286][ T5817] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 375.047877][ T8800] binder: 8799:8800 ioctl c0306201 0 returned -14 [ 375.085728][ T5817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.113059][ T5817] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 375.129007][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.148178][ T5817] usb 1-1: Product: syz [ 375.152828][ T5817] usb 1-1: Manufacturer: syz [ 375.157474][ T5817] usb 1-1: SerialNumber: syz [ 375.499779][ T5817] dvbdev: DVB: registering new adapter (DEC3000-s) [ 375.547857][ T5817] usb 1-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 375.714334][ T5817] usb 1-1: selecting invalid altsetting 8 [ 376.164380][ T5842] usb 1-1: USB disconnect, device number 19 [ 378.775056][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.781808][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.809663][ T8833] loop0: detected capacity change from 0 to 32768 [ 378.822000][ T8841] loop2: detected capacity change from 0 to 128 [ 378.831901][ T8841] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 378.843684][ T8841] hpfs: filesystem error: improperly stopped [ 378.849675][ T8841] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 378.857495][ T8841] hpfs: You really don't want any checks? You are crazy... [ 378.864778][ T8841] hpfs: Code page index out of array [ 378.870059][ T8841] hpfs: code page support is disabled [ 378.875955][ T8841] hpfs: hpfs_map_4sectors(): unaligned read [ 378.881995][ T8841] hpfs: hpfs_map_4sectors(): unaligned read [ 378.887895][ T8841] hpfs: filesystem error: unable to find root dir [ 378.900492][ T8841] hpfs: hpfs_map_4sectors(): unaligned read [ 378.992995][ T8833] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 379.103197][ T8833] XFS (loop0): Ending clean mount [ 379.119297][ T8833] XFS (loop0): Quotacheck needed: Please wait. [ 379.198242][ T8833] XFS (loop0): Quotacheck: Done. [ 379.344872][ T5778] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 380.773221][ T8868] loop2: detected capacity change from 0 to 64 [ 380.793951][ T8868] MINIX-fs: bad superblock [ 381.327753][ T6535] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 381.346608][ T8868] loop2: detected capacity change from 0 to 1024 [ 382.619173][ T8879] syzkaller0: entered promiscuous mode [ 382.674932][ T8879] syzkaller0: entered allmulticast mode [ 382.876904][ T8886] loop0: detected capacity change from 0 to 128 [ 382.889590][ T8886] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 382.901795][ T8886] hpfs: filesystem error: improperly stopped [ 382.907792][ T8886] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 382.915564][ T8886] hpfs: You really don't want any checks? You are crazy... [ 382.922807][ T8886] hpfs: Code page index out of array [ 382.928089][ T8886] hpfs: code page support is disabled [ 382.936283][ T8886] hpfs: hpfs_map_4sectors(): unaligned read [ 382.942320][ T8886] hpfs: hpfs_map_4sectors(): unaligned read [ 382.948239][ T8886] hpfs: filesystem error: unable to find root dir [ 382.963781][ T8886] hpfs: hpfs_map_4sectors(): unaligned read [ 383.232954][ T8877] loop3: detected capacity change from 0 to 32768 [ 383.309050][ T8877] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 383.444493][ T8877] XFS (loop3): Ending clean mount [ 383.456020][ T8877] XFS (loop3): Quotacheck needed: Please wait. [ 383.583020][ T8877] XFS (loop3): Quotacheck: Done. [ 383.736805][ T5782] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 384.075056][ T8905] sd 0:0:1:0: PR command failed: 1026 [ 384.081329][ T8905] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 384.088093][ T8905] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 385.422170][ T8920] binder: 8919:8920 ioctl c0306201 0 returned -14 [ 385.463504][ T8920] binder_alloc: 8919: binder_alloc_buf, no vma [ 385.525142][ T8922] loop2: detected capacity change from 0 to 128 [ 385.546988][ T8922] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 385.559814][ T8922] hpfs: filesystem error: improperly stopped [ 385.565897][ T8922] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 385.573978][ T8922] hpfs: You really don't want any checks? You are crazy... [ 385.581253][ T8922] hpfs: Code page index out of array [ 385.586546][ T8922] hpfs: code page support is disabled [ 385.608388][ T8922] hpfs: hpfs_map_4sectors(): unaligned read [ 385.614476][ T8922] hpfs: hpfs_map_4sectors(): unaligned read [ 385.620493][ T8922] hpfs: filesystem error: unable to find root dir [ 385.648489][ T8922] hpfs: hpfs_map_4sectors(): unaligned read [ 386.159048][ T8925] loop3: detected capacity change from 0 to 32768 [ 386.233139][ T8925] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 386.324638][ T8925] XFS (loop3): Ending clean mount [ 386.363990][ T8925] XFS (loop3): Quotacheck needed: Please wait. [ 386.485571][ T8925] XFS (loop3): Quotacheck: Done. [ 386.598994][ T5782] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 387.049337][ T8946] sd 0:0:1:0: PR command failed: 1026 [ 387.055122][ T8946] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 387.062035][ T8946] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 387.619643][ T8954] loop2: detected capacity change from 0 to 128 [ 387.628550][ T8954] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 387.640516][ T8954] hpfs: filesystem error: improperly stopped [ 387.646513][ T8954] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 387.654314][ T8954] hpfs: You really don't want any checks? You are crazy... [ 387.661646][ T8954] hpfs: Code page index out of array [ 387.667452][ T8954] hpfs: code page support is disabled [ 387.674651][ T8954] hpfs: hpfs_map_4sectors(): unaligned read [ 387.680714][ T8954] hpfs: hpfs_map_4sectors(): unaligned read [ 387.686611][ T8954] hpfs: filesystem error: unable to find root dir [ 387.713674][ T8954] hpfs: hpfs_map_4sectors(): unaligned read [ 388.303703][ T8967] sd 0:0:1:0: PR command failed: 1026 [ 388.309280][ T8967] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 388.316897][ T8967] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 388.842827][ T8980] loop1: detected capacity change from 0 to 64 [ 388.881249][ T8980] MINIX-fs: bad superblock [ 389.189411][ T8986] loop1: detected capacity change from 0 to 1024 [ 389.486819][ T8994] loop0: detected capacity change from 0 to 128 [ 389.504274][ T8994] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 389.516292][ T8994] hpfs: filesystem error: improperly stopped [ 389.522430][ T8994] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 389.530337][ T8994] hpfs: You really don't want any checks? You are crazy... [ 389.537626][ T8994] hpfs: Code page index out of array [ 389.543037][ T8994] hpfs: code page support is disabled [ 389.556302][ T8994] hpfs: hpfs_map_4sectors(): unaligned read [ 389.562677][ T8994] hpfs: hpfs_map_4sectors(): unaligned read [ 389.568644][ T8994] hpfs: filesystem error: unable to find root dir [ 389.600126][ T8994] hpfs: hpfs_map_4sectors(): unaligned read [ 389.638818][ T8998] sd 0:0:1:0: PR command failed: 1026 [ 389.654057][ T8998] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 389.683173][ T8998] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 389.738658][ T8993] syzkaller0: entered promiscuous mode [ 389.778563][ T8993] syzkaller0: entered allmulticast mode [ 390.960403][ T5817] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 391.164650][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 391.172273][ T5817] usb 1-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 391.187605][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 391.199373][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 391.214369][ T5817] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 391.227329][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.247673][ T5817] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 391.265320][ T5817] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 391.273825][ T5817] usb 1-1: Manufacturer: syz [ 391.292957][ T5817] usb 1-1: config 0 descriptor?? [ 391.360615][ T5842] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 391.426100][ T9026] loop1: detected capacity change from 0 to 128 [ 391.435950][ T9026] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 391.447807][ T9026] hpfs: filesystem error: improperly stopped [ 391.453857][ T9026] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 391.461652][ T9026] hpfs: You really don't want any checks? You are crazy... [ 391.468889][ T9026] hpfs: Code page index out of array [ 391.474245][ T9026] hpfs: code page support is disabled [ 391.490924][ T9026] hpfs: hpfs_map_4sectors(): unaligned read [ 391.497595][ T9026] hpfs: hpfs_map_4sectors(): unaligned read [ 391.503698][ T9026] hpfs: filesystem error: unable to find root dir [ 391.520296][ T9026] hpfs: hpfs_map_4sectors(): unaligned read [ 391.593996][ T5842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.624263][ T5842] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 391.634348][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.643886][ T5842] usb 3-1: Product: syz [ 391.648305][ T5842] usb 3-1: Manufacturer: syz [ 391.653749][ T5842] usb 3-1: SerialNumber: syz [ 391.690382][ T5817] rc_core: IR keymap rc-hauppauge not found [ 391.696538][ T5817] Registered IR keymap rc-empty [ 391.708662][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.741728][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.778193][ T5817] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 391.794692][ T5817] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input62 [ 391.814377][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.850764][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.880692][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.888358][ T5842] dvbdev: DVB: registering new adapter (DEC3000-s) [ 391.909188][ T5842] usb 3-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 391.920695][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.960562][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 392.001999][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 392.030621][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 392.082536][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 392.111108][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 392.141102][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 392.178264][ T5817] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 392.189817][ T5817] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 392.208339][ T5817] usb 1-1: USB disconnect, device number 20 [ 392.287496][ T5842] ttusb_dec_send_command: command bulk message failed: error -71 [ 392.316474][ T5842] usb 3-1: USB disconnect, device number 32 [ 394.047823][ T9056] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1088'. [ 394.265897][ T9061] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 395.189924][ T9071] binder: 9070:9071 ioctl c0306201 0 returned -14 [ 396.610229][ T9092] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 397.176314][ T9096] binder: 9095:9096 ioctl c0306201 0 returned -14 [ 397.467771][ T9103] loop0: detected capacity change from 0 to 64 [ 397.483631][ T9103] MINIX-fs: bad superblock [ 397.586523][ T9106] No such timeout policy "syz1" [ 398.232999][ T6535] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 398.496144][ T9107] loop0: detected capacity change from 0 to 1024 [ 398.522980][ T6535] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 399.755301][ T9123] syzkaller0: entered promiscuous mode [ 399.768289][ T9123] syzkaller0: entered allmulticast mode [ 399.919293][ T9133] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 402.756149][ T5835] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 402.960846][ T5835] usb 1-1: Using ep0 maxpacket: 16 [ 402.993451][ T5835] usb 1-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 403.004630][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.032760][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 403.055323][ T5835] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 403.073113][ T5835] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.111719][ T5835] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 403.121255][ T5835] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 403.129299][ T5835] usb 1-1: Manufacturer: syz [ 403.145903][ T5835] usb 1-1: config 0 descriptor?? [ 403.280374][ T9151] loop3: detected capacity change from 0 to 1024 [ 403.463266][ T5835] rc_core: IR keymap rc-hauppauge not found [ 403.469221][ T5835] Registered IR keymap rc-empty [ 403.484211][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.523135][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.571287][ T5835] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 403.594059][ T5835] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input63 [ 403.629207][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.664464][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.705785][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.757917][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.802180][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.851816][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.890466][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.921974][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.951061][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.993234][ T5835] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 404.043281][ T5835] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 404.088264][ T5835] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 404.137890][ T5835] usb 1-1: USB disconnect, device number 21 [ 404.329566][ T9157] binder: 9156:9157 ioctl c0306201 0 returned -14 [ 404.647317][ T9142] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 404.658041][ T9142] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 404.667948][ T9142] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 405.336869][ T9164] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 405.854675][ T9172] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1130'. [ 406.469162][ T9178] loop2: detected capacity change from 0 to 1024 [ 406.790501][ T5842] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 407.859734][ T5842] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 407.869209][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.877342][ T5842] usb 2-1: Product: syz [ 407.884226][ T5842] usb 2-1: Manufacturer: syz [ 407.889107][ T5842] usb 2-1: SerialNumber: syz [ 407.985610][ T9188] loop2: detected capacity change from 0 to 64 [ 407.993913][ T9188] MINIX-fs: bad superblock [ 408.143715][ T9189] loop2: detected capacity change from 0 to 1024 [ 408.200414][ T5835] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 408.368604][ T5842] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 408.457916][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.504153][ T5835] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 408.513582][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.522158][ T5835] usb 1-1: Product: syz [ 408.526466][ T5835] usb 1-1: Manufacturer: syz [ 408.531434][ T5835] usb 1-1: SerialNumber: syz [ 409.072224][ T9198] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 409.072252][ T9197] syzkaller0: entered promiscuous mode [ 409.092918][ T9197] syzkaller0: entered allmulticast mode [ 409.126448][ T5835] ttusb-dec: probe of 1-1:1.0 failed with error -2 [ 409.445027][ T5842] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 409.459548][ T5842] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 409.473360][ T5842] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 409.486689][ T5842] lan78xx: probe of 2-1:1.0 failed with error -71 [ 409.504050][ T5842] usb 2-1: USB disconnect, device number 14 [ 409.915986][ T9202] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1139'. [ 410.916561][ T9211] loop1: detected capacity change from 0 to 1024 [ 410.978017][ T5835] usb 1-1: USB disconnect, device number 22 [ 411.813033][ T9223] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 411.980306][ T9225] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1148'. [ 413.282993][ T9232] 9pnet: Could not find request transport:  [ 413.600346][ T5852] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 414.653360][ T5852] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.666909][ T5852] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 414.676236][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.684546][ T5852] usb 2-1: Product: syz [ 414.688754][ T5852] usb 2-1: Manufacturer: syz [ 414.694033][ T5852] usb 2-1: SerialNumber: syz [ 414.855484][ T9243] loop0: detected capacity change from 0 to 1024 [ 415.012270][ T9245] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 415.066481][ T9247] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1157'. [ 415.446252][ T5852] ttusb-dec: probe of 2-1:1.0 failed with error -2 [ 416.682634][ T9259] loop3: detected capacity change from 0 to 2048 [ 416.845626][ T9259] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 416.954142][ T9259] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.022025][ T28] audit: type=1800 audit(1786672455.802:30): pid=9259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1161" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 417.189545][ T5842] usb 2-1: USB disconnect, device number 15 [ 417.495471][ T9271] 9pnet_fd: p9_fd_create_tcp (9271): problem binding to privport [ 418.089509][ T9278] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1166'. [ 418.260088][ T9269] loop0: detected capacity change from 0 to 256 [ 418.745891][ T9280] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 418.948104][ T9285] loop3: detected capacity change from 0 to 1024 [ 419.419165][ T9291] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1172'. [ 420.870981][ T5851] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 421.080504][ T5851] usb 2-1: Using ep0 maxpacket: 16 [ 421.404101][ T9301] loop2: detected capacity change from 0 to 131072 [ 421.429004][ T9301] F2FS-fs (loop2): invalid crc value [ 421.453050][ T9301] F2FS-fs (loop2): Found nat_bits in checkpoint [ 421.553843][ T9316] loop0: detected capacity change from 0 to 1024 [ 421.578732][ T9301] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 421.908275][ T5851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.918785][ T5851] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 421.932904][ T5851] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 421.942399][ T5851] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 421.950463][ T5851] usb 2-1: Manufacturer: syz [ 422.285776][ T5851] usb 2-1: config 0 descriptor?? [ 423.864527][ T9339] loop0: detected capacity change from 0 to 1024 [ 424.597959][ T2181] usb 2-1: USB disconnect, device number 16 [ 427.697935][ T9368] 9pnet: Could not find request transport:  [ 427.765079][ T9378] loop0: detected capacity change from 0 to 1024 [ 430.630577][ T5816] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 431.095646][ T5816] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.119181][ T5816] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 431.843109][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.851561][ T5816] usb 4-1: Product: syz [ 431.856346][ T5816] usb 4-1: Manufacturer: syz [ 431.863129][ T5816] usb 4-1: SerialNumber: syz [ 432.456191][ T5816] dvbdev: DVB: registering new adapter (DEC3000-s) [ 432.667475][ T5816] usb 4-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 433.810985][ T5816] ttusb_dec_send_command: command bulk message failed: error -110 [ 434.186666][ T5816] usb 4-1: USB disconnect, device number 25 [ 438.143951][ T9486] loop2: detected capacity change from 0 to 1024 [ 440.233611][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.330697][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.494993][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 442.686183][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'. [ 442.885812][ T9545] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1259'. [ 446.236868][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'. [ 446.267611][ T9577] fuse: Bad value for 'fd' [ 448.365286][ T9607] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 450.227177][ T9640] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 451.033700][ T9653] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 451.046949][ T9654] No such timeout policy "syz1" [ 452.123671][ T9666] loop2: detected capacity change from 0 to 64 [ 452.132864][ T9666] MINIX-fs: bad superblock [ 452.292638][ T9671] loop2: detected capacity change from 0 to 1024 [ 455.280599][ T9686] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 455.496036][ T9691] No such timeout policy "syz1" [ 455.964826][ T9694] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 458.201396][ T9721] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1323'. [ 459.943799][ T9725] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 460.359994][ T9735] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 460.519280][ T9738] No such timeout policy "syz1" [ 461.008083][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'. [ 461.332014][ T9749] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1333'. [ 462.218817][ T9753] loop0: detected capacity change from 0 to 131072 [ 462.267848][ T9753] F2FS-fs (loop0): invalid crc value [ 462.317992][ T9753] F2FS-fs (loop0): Found nat_bits in checkpoint [ 462.395903][ T9753] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 463.348316][ T9769] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 463.902693][ T9774] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 464.807424][ T9782] loop2: detected capacity change from 0 to 256 [ 464.841509][ T9782] exfat: Deprecated parameter 'namecase' [ 464.847285][ T9782] exfat: Deprecated parameter 'namecase' [ 464.884679][ T9782] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 465.144933][ T9786] input: syz0 as /devices/virtual/input/input65 [ 465.295580][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1339'. [ 465.753468][ T9795] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1349'. [ 465.880842][ T9800] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 466.240460][ T9788] loop1: detected capacity change from 0 to 131072 [ 466.271938][ T9788] F2FS-fs (loop1): invalid crc value [ 466.290164][ T9788] F2FS-fs (loop1): Found nat_bits in checkpoint [ 466.328782][ T9788] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 467.481556][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 467.582811][ T9820] input: syz0 as /devices/virtual/input/input66 [ 468.076413][ T9827] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1361'. [ 468.428514][ T9837] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 468.741969][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 469.270275][ T5816] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 469.510433][ T5816] usb 4-1: device descriptor read/64, error -71 [ 469.715950][ T9850] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1370'. [ 470.011979][ T5816] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 470.230822][ T5816] usb 4-1: device descriptor read/64, error -71 [ 470.429866][ T5816] usb usb4-port1: attempt power cycle [ 470.855681][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'. [ 470.960377][ T5816] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 471.029480][ T5816] usb 4-1: device descriptor read/8, error -71 [ 471.157884][ T9870] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 471.423580][ T5816] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 471.546883][ T5816] usb 4-1: device descriptor read/8, error -71 [ 471.690657][ T5816] usb usb4-port1: unable to enumerate USB device [ 471.777319][ T9877] netlink: 'syz.2.1381': attribute type 72 has an invalid length. [ 472.176637][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 475.033372][ T9899] loop0: detected capacity change from 0 to 64 [ 475.121718][ T9899] MINIX-fs: bad superblock [ 476.998083][ T9905] loop0: detected capacity change from 0 to 1024 [ 477.272229][ T9908] netlink: 'syz.2.1392': attribute type 72 has an invalid length. [ 477.862983][ T9924] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1400'. [ 478.744536][ T9931] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 479.099143][ T9938] loop2: detected capacity change from 0 to 256 [ 479.117532][ T9938] exfat: Deprecated parameter 'namecase' [ 479.137138][ T9938] exfat: Deprecated parameter 'namecase' [ 479.187632][ T9938] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 479.483296][ T9940] netlink: 'syz.1.1405': attribute type 72 has an invalid length. [ 481.265657][ T9946] loop1: detected capacity change from 0 to 64 [ 481.289378][ T9946] MINIX-fs: bad superblock [ 482.969992][ T9946] loop1: detected capacity change from 0 to 1024 [ 484.230795][ T9970] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 486.702148][ T9977] No such timeout policy "syz1" [ 486.707898][ T9975] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1416'. [ 487.906535][ T9983] loop3: detected capacity change from 0 to 1024 [ 487.946573][ T9983] EXT4-fs: Ignoring removed bh option [ 488.044687][ T9983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.203660][ T9994] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1423'. [ 488.223651][ T9983] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 488.811419][T10004] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 489.353772][T10007] loop2: detected capacity change from 0 to 64 [ 489.362309][T10007] MINIX-fs: bad superblock [ 489.408326][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.420384][ T6535] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 489.675563][T10010] loop2: detected capacity change from 0 to 1024 [ 489.711208][T10013] No such timeout policy "syz1" [ 490.885755][T10024] netlink: 'syz.2.1433': attribute type 4 has an invalid length. [ 491.161778][T10031] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1435'. [ 491.187322][T10034] binder: 10032:10034 ioctl 4018620d 0 returned -22 [ 491.825997][T10043] No such timeout policy "syz1" [ 492.126328][T10044] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 494.328672][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1446'. [ 494.583085][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1446'. [ 495.362330][T10063] binder: 10062:10063 ioctl 4018620d 0 returned -22 [ 495.441446][T10067] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1450'. [ 497.851882][T10078] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 499.176779][T10093] loop2: detected capacity change from 0 to 64 [ 499.199157][T10093] MINIX-fs: bad superblock [ 499.310417][ T5852] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 499.529159][ T5852] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 499.553717][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.570693][ T5852] usb 2-1: Product: syz [ 499.579479][ T5852] usb 2-1: Manufacturer: syz [ 499.597305][ T5852] usb 2-1: SerialNumber: syz [ 499.804429][T10102] No such timeout policy "syz1" [ 500.053939][ T5852] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 500.240344][ T5851] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 502.525317][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.531849][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.572577][ T5851] usb 3-1: Using ep0 maxpacket: 16 [ 502.592607][ T5851] usb 3-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 502.628604][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 502.672130][ T5852] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 502.684054][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 502.705279][ T5852] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 502.715135][ T5851] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 502.735415][ T5852] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 502.744345][ T5851] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.769402][ T5852] lan78xx: probe of 2-1:1.0 failed with error -71 [ 502.778114][ T5851] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 502.802005][ T5852] usb 2-1: USB disconnect, device number 17 [ 502.814720][ T5851] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 502.849806][ T5851] usb 3-1: Manufacturer: syz [ 504.451772][ T5851] usb 3-1: config 0 descriptor?? [ 504.530478][ T5851] usb 3-1: can't set config #0, error -71 [ 504.551188][ T5851] usb 3-1: USB disconnect, device number 33 [ 505.079072][T10126] loop2: detected capacity change from 0 to 4096 [ 505.656032][T10133] loop0: detected capacity change from 0 to 256 [ 505.683867][T10133] exfat: Deprecated parameter 'namecase' [ 505.715077][T10133] exfat: Deprecated parameter 'namecase' [ 505.737250][T10133] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 507.520359][ T5835] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 507.760079][ T5835] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 507.774349][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.784245][ T5835] usb 3-1: Product: syz [ 507.788458][ T5835] usb 3-1: Manufacturer: syz [ 507.799499][ T5835] usb 3-1: SerialNumber: syz [ 508.227588][ T5835] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 509.001915][ T5835] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 509.058048][ T5835] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 509.171284][ T5835] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 509.225481][ T5835] lan78xx: probe of 3-1:1.0 failed with error -71 [ 509.238288][ T5835] usb 3-1: USB disconnect, device number 34 [ 509.301686][T10172] fuse: Bad value for 'group_id' [ 511.558004][T10195] binder: BINDER_SET_CONTEXT_MGR already set [ 511.569865][T10195] binder: 10194:10195 ioctl 4018620d 200000004a80 returned -16 [ 511.780856][ T5852] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 511.993134][ T5852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.015046][ T5852] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 512.060146][ T5852] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 512.120236][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.149411][ T5852] usb 1-1: Product: syz [ 512.164485][ T5852] usb 1-1: Manufacturer: syz [ 512.169152][ T5852] usb 1-1: SerialNumber: syz [ 512.237374][ T5852] ttusb_dec_send_command: command bulk message failed: error -22 [ 512.277473][ T5852] ttusb-dec: probe of 1-1:1.0 failed with error -22 [ 512.468872][ T5852] usb 1-1: USB disconnect, device number 23 [ 512.720939][T10212] fuse: Bad value for 'group_id' [ 514.437983][T10219] binder: BINDER_SET_CONTEXT_MGR already set [ 514.444615][T10219] binder: 10218:10219 ioctl 4018620d 200000004a80 returned -16 [ 517.905017][T10241] Bluetooth: MGMT ver 1.22 [ 518.024394][T10244] fuse: Bad value for 'group_id' [ 526.464804][T10294] loop0: detected capacity change from 0 to 512 [ 526.586371][T10294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.617953][T10294] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 527.204446][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.253777][T10309] syzkaller0: entered promiscuous mode [ 527.259446][T10309] syzkaller0: entered allmulticast mode [ 527.420435][ T5835] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 527.632980][ T5835] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.697129][ T5835] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 527.713749][ T5835] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 527.729892][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.738466][ T5835] usb 2-1: Product: syz [ 527.743054][ T5835] usb 2-1: Manufacturer: syz [ 527.747692][ T5835] usb 2-1: SerialNumber: syz [ 527.776582][ T5835] ttusb_dec_send_command: command bulk message failed: error -22 [ 527.787010][ T5835] ttusb-dec: probe of 2-1:1.0 failed with error -22 [ 528.319895][ T5851] usb 2-1: USB disconnect, device number 18 [ 529.168108][T10328] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1543'. [ 530.801774][T10343] input: syz0 as /devices/virtual/input/input67 [ 532.974663][T10355] 9pnet: Could not find request transport:  [ 533.367508][T10361] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1552'. [ 534.466949][T10320] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 534.476537][T10320] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 534.486218][T10320] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 534.700103][T10369] input: syz0 as /devices/virtual/input/input68 [ 536.281090][T10377] 9pnet: Could not find request transport:  [ 539.022575][T10394] syzkaller0: entered promiscuous mode [ 539.064315][T10394] syzkaller0: entered allmulticast mode [ 543.392912][T10424] loop2: detected capacity change from 0 to 512 [ 543.486950][T10424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.500448][T10424] ext4 filesystem being mounted at /410/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 543.657329][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.731355][T10441] Cannot find set identified by id 0 to match [ 549.672966][T10463] syzkaller0: entered promiscuous mode [ 549.704872][T10463] syzkaller0: entered allmulticast mode [ 550.763425][T10466] loop3: detected capacity change from 0 to 32768 [ 550.811169][T10466] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1587 (10466) [ 550.899416][T10466] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 550.946459][T10466] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 550.973818][T10466] BTRFS info (device loop3): setting nodatacow, compression disabled [ 551.000505][T10466] BTRFS info (device loop3): setting datasum, datacow enabled [ 551.010605][T10466] BTRFS info (device loop3): force clearing of disk cache [ 551.017797][T10466] BTRFS info (device loop3): enabling ssd optimizations [ 551.050267][T10466] BTRFS info (device loop3): using spread ssd allocation scheme [ 551.108307][T10466] BTRFS info (device loop3): turning on sync discard [ 551.126182][T10466] BTRFS info (device loop3): turning on flush-on-commit [ 551.186371][ T5780] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 551.193456][T10466] BTRFS info (device loop3): not using ssd optimizations [ 551.201128][T10466] BTRFS info (device loop3): not using spread ssd allocation scheme [ 551.209677][T10466] BTRFS info (device loop3): using free space tree [ 551.825315][T10466] BTRFS info (device loop3): rebuilding free space tree [ 553.911386][ T5782] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 556.648090][ T5780] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 556.656987][ T5780] Bluetooth: hci3: Injecting HCI hardware error event [ 556.667334][ T5780] Bluetooth: hci3: hardware error 0x00 [ 560.112971][ T5780] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 563.100910][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.107414][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.820904][T10519] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 569.830634][T10519] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 569.844976][T10519] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 569.856660][T10519] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 569.875429][T10519] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 569.885624][T10519] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 570.634487][T10599] loop0: detected capacity change from 0 to 64 [ 570.651609][T10599] MINIX-fs: bad superblock [ 570.707514][T10581] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 570.754408][T10599] loop0: detected capacity change from 0 to 1024 [ 572.399860][ T5780] Bluetooth: hci4: command tx timeout [ 574.670393][ T5780] Bluetooth: hci4: command tx timeout [ 574.959590][T10623] loop0: detected capacity change from 0 to 4096 [ 576.246441][T10584] chnl_net:caif_netlink_parms(): no params data found [ 576.690263][ T5780] Bluetooth: hci4: command tx timeout [ 578.770426][ T5780] Bluetooth: hci4: command tx timeout [ 579.155132][ T8704] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.907059][ T8704] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.300002][ T8704] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.380727][T10584] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.387926][T10584] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.420469][T10584] bridge_slave_0: entered allmulticast mode [ 580.439003][T10584] bridge_slave_0: entered promiscuous mode [ 580.470616][T10666] ip_tables: iptables: counters copy to user failed while replacing table [ 580.506919][ T8704] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.668366][T10584] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.756651][T10584] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.839597][T10584] bridge_slave_1: entered allmulticast mode [ 580.936155][T10584] bridge_slave_1: entered promiscuous mode [ 581.465229][T10584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.579348][T10584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.402856][T10584] team0: Port device team_slave_0 added [ 585.652797][T10584] team0: Port device team_slave_1 added [ 585.771199][T10684] fuse: Unknown parameter 'grou00000000000000000000' [ 585.831889][T10584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.838896][T10584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.906619][T10584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.942798][T10584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.960337][T10584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.030215][T10584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.384716][T10584] hsr_slave_0: entered promiscuous mode [ 586.427804][T10584] hsr_slave_1: entered promiscuous mode [ 586.439898][T10584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 586.460640][T10584] Cannot create hsr debugfs directory [ 589.478350][T10709] loop0: detected capacity change from 0 to 4096 [ 589.643482][T10584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 589.938536][T10584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 590.039410][T10584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 591.475862][T10584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 591.582639][T10728] loop0: detected capacity change from 0 to 4096 [ 594.820253][ T8704] hsr_slave_0: left promiscuous mode [ 594.910416][ T8704] hsr_slave_1: left promiscuous mode [ 594.990538][ T8704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.998168][ T8704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.019802][T10728] ntfs3: loop0: Failed to read $AttrDef (-4). [ 595.097853][ T8704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.110501][ T8704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.141112][ T8704] bridge_slave_1: left allmulticast mode [ 595.146828][ T8704] bridge_slave_1: left promiscuous mode [ 595.187998][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.269077][ T8704] bridge_slave_0: left allmulticast mode [ 595.276710][ T8704] bridge_slave_0: left promiscuous mode [ 595.306609][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.432990][ T8704] veth1_macvtap: left promiscuous mode [ 595.439238][ T8704] veth0_macvtap: left promiscuous mode [ 595.466319][ T8704] veth1_vlan: left promiscuous mode [ 595.507407][ T8704] veth0_vlan: left promiscuous mode [ 596.619120][T10755] loop3: detected capacity change from 0 to 1024 [ 596.628672][T10757] fuse: Unknown parameter 'group_i00000000000000000000' [ 598.440737][ T5851] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 600.306516][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 600.326962][ T5851] usb 4-1: unable to get BOS descriptor or descriptor too short [ 600.350048][ T5851] usb 4-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 600.368209][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.376848][ T5851] usb 4-1: Product: syz [ 600.387755][ T5851] usb 4-1: Manufacturer: syz [ 600.392968][ T5851] usb 4-1: SerialNumber: syz [ 600.425416][ T8704] team0 (unregistering): Port device team_slave_1 removed [ 600.517204][ T8704] team0 (unregistering): Port device team_slave_0 removed [ 600.602961][ T8704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.687220][ T8704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.198888][T10783] loop1: detected capacity change from 0 to 4096 [ 601.360748][ T8704] bond0 (unregistering): Released all slaves [ 601.630027][T10776] hsr_slave_0: left promiscuous mode [ 601.745389][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 601.912632][ T5851] usb 4-1: 1:1 : bogus bTerminalLink 5 [ 601.933611][ T5851] usb 4-1: unit 5 not found! [ 601.938285][ T5851] usb 4-1: unit 0 not found! [ 601.952998][T10788] loop0: detected capacity change from 0 to 4096 [ 602.644937][T10584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.982687][T10797] fuse: Unknown parameter 'group_i00000000000000000000' [ 603.005576][ T5851] usb 4-1: USB disconnect, device number 30 [ 603.059600][T10584] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.133913][ T8710] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.141139][ T8710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.207914][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.215186][ T8710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.060066][T10815] loop0: detected capacity change from 0 to 4096 [ 606.472418][T10584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.533094][T10840] 9pnet: Could not find request transport:  [ 608.746692][T10847] loop0: detected capacity change from 0 to 4096 [ 610.692605][T10584] veth0_vlan: entered promiscuous mode [ 610.735501][T10584] veth1_vlan: entered promiscuous mode [ 610.838432][T10584] veth0_macvtap: entered promiscuous mode [ 610.913765][T10584] veth1_macvtap: entered promiscuous mode [ 610.952850][T10584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.995434][T10584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.026035][T10584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.073720][T10584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.100309][T10584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.134762][T10584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.155398][T10584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.178760][T10867] loop3: detected capacity change from 0 to 4096 [ 611.227725][T10584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.236759][T10871] loop0: detected capacity change from 0 to 1024 [ 611.263837][T10584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.320814][T10584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.346519][T10584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.523738][T10584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.593574][T10584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.611752][T10584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.112277][T10584] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.180326][T10584] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.189097][T10584] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.305488][T10584] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.567476][T10880] loop3: detected capacity change from 0 to 512 [ 612.782362][T10880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.052127][T10880] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 613.371424][ T8700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.458383][T10887] 9pnet: Could not find request transport:  [ 613.463877][ T8700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.279360][ T8712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.287710][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.311890][ T8712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.448638][T10896] fuse: Unknown parameter 'group_i00000000000000000000' [ 617.859749][T10917] loop4: detected capacity change from 0 to 4096 [ 618.894874][T10928] loop0: detected capacity change from 0 to 4096 [ 619.185849][T10930] loop1: detected capacity change from 0 to 4096 [ 619.240698][T10930] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 619.378555][T10930] ntfs3: loop1: $Secure::$SDH is corrupted. [ 619.421427][T10930] ntfs3: loop1: Failed to initialize $Secure (-22). [ 623.509149][T10950] qrtr: Invalid version 36 [ 624.547914][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.557531][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.825807][T10984] 9pnet: Could not find request transport:  [ 627.898885][T10981] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 627.927203][T10981] CIFS: Attempting to mount //127.0.0.1/share [ 627.940183][T10981] CIFS: VFS: Error connecting to socket. Aborting operation. [ 627.947846][T10981] CIFS: VFS: cifs_mount failed w/return code = -111 [ 628.239017][ T5780] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 633.249193][T11045] ip_tables: iptables: counters copy to user failed while replacing table [ 635.375901][T11067] 9pnet: Could not find request transport:  [ 636.162886][T11074] loop3: detected capacity change from 0 to 1024 [ 636.207391][T11074] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 639.568607][T11113] 9pnet: Could not find request transport:  [ 641.220799][T11148] loop0: detected capacity change from 0 to 4096 [ 643.110816][T11171] 9pnet: Could not find request transport:  [ 648.851853][T11215] 9pnet: Could not find request transport:  [ 649.761194][T11221] loop1: detected capacity change from 0 to 40427 [ 649.778273][T11221] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 649.785508][T11221] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 649.797378][T11221] F2FS-fs (loop1): heap/no_heap options were deprecated [ 649.806353][T11221] F2FS-fs (loop1): invalid crc value [ 649.829115][T11221] F2FS-fs (loop1): Found nat_bits in checkpoint [ 650.013279][T11221] F2FS-fs (loop1): Start checkpoint disabled! [ 650.138708][T11221] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 650.178013][T11221] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 650.515256][ T28] audit: type=1800 audit(1786672689.212:31): pid=11247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1750" name="pnp_string" dev="configfs" ino=23760 res=0 errno=0 [ 651.462651][ T8712] kworker/u4:16: attempt to access beyond end of device [ 651.462651][ T8712] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 651.503748][ T8712] F2FS-fs (loop1): Remounting filesystem read-only [ 651.542210][ T8712] kworker/u4:16: attempt to access beyond end of device [ 651.542210][ T8712] loop1: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 651.668896][ T8712] F2FS-fs (loop1): Remounting filesystem read-only [ 652.402779][T11283] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 653.412710][T11319] No such timeout policy "syz1" [ 655.991320][T11361] No such timeout policy "syz1" [ 656.690235][ T5835] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 656.888486][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.991855][ T5835] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 657.001303][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.009969][ T5835] usb 1-1: Product: syz [ 657.015022][ T5835] usb 1-1: Manufacturer: syz [ 657.021546][ T5835] usb 1-1: SerialNumber: syz [ 657.340373][ T5835] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report [ 657.408664][T11379] loop3: detected capacity change from 0 to 64 [ 657.420921][ T5835] ttusb-dec: probe of 1-1:1.0 failed with error -2 [ 657.442040][T11379] MINIX-fs: bad superblock [ 660.177911][T10169] usb 1-1: USB disconnect, device number 24 [ 660.443132][T11399] No such timeout policy "syz1" [ 667.909304][T11454] loop0: detected capacity change from 0 to 1024 [ 667.955477][T11454] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 668.787912][T11468] ip_tables: iptables: counters copy to user failed while replacing table [ 671.555567][T11498] loop1: detected capacity change from 0 to 1024 [ 671.653962][T11498] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 675.049607][T11522] 9pnet: Could not find request transport:  [ 678.987499][T11545] loop3: detected capacity change from 0 to 1024 [ 681.263109][T11555] 9pnet: Could not find request transport:  [ 685.213624][T11583] loop1: detected capacity change from 0 to 1024 [ 685.977797][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.984564][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.388206][T11602] autofs4:pid:11602:autofs_fill_super: called with bogus options [ 688.543978][T11603] loop1: detected capacity change from 0 to 2048 [ 689.330446][T11603] loop1: unable to read partition table [ 689.336702][T11603] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 691.063259][T11612] 9pnet: Could not find request transport:  [ 693.180472][T10519] Bluetooth: hci4: command 0x0406 tx timeout [ 695.575090][T11656] loop3: detected capacity change from 0 to 1024 [ 695.736455][T11656] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 696.579897][T11669] loop3: detected capacity change from 0 to 1024 [ 704.974150][T11724] 9pnet: Could not find request transport:  [ 705.986907][ T5842] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 706.247583][ T5842] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.327701][ T5842] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 706.490175][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.498245][ T5842] usb 1-1: Product: syz [ 706.520363][ T5842] usb 1-1: Manufacturer: syz [ 706.525213][ T5842] usb 1-1: SerialNumber: syz [ 707.503534][ T5842] ttusb-dec: probe of 1-1:1.0 failed with error -2 [ 707.745309][T11761] loop3: detected capacity change from 0 to 128 [ 707.780374][T11761] EXT4-fs (loop3): Test dummy encryption mode enabled [ 707.788513][ T5842] usb 1-1: USB disconnect, device number 25 [ 707.862032][T11761] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 707.952232][T11761] ext4 filesystem being mounted at /479/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 710.119969][ T5782] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 712.546770][T11807] loop0: detected capacity change from 0 to 1024 [ 712.592596][T11807] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 716.293414][T11843] loop3: detected capacity change from 0 to 1024 [ 716.397112][T11843] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 720.114962][T11873] 9pnet: Could not find request transport:  [ 720.473703][T11882] loop3: detected capacity change from 0 to 1024 [ 720.554337][T11882] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 729.016382][T11939] 9pnet: Could not find request transport:  [ 729.695600][T11953] ip_tables: iptables: counters copy to user failed while replacing table [ 730.317400][T11951] loop0: detected capacity change from 0 to 131072 [ 730.453666][T11951] F2FS-fs (loop0): invalid crc value [ 730.499672][T11951] F2FS-fs (loop0): Found nat_bits in checkpoint [ 730.599540][T11951] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 735.235111][T11988] 9pnet: Could not find request transport:  [ 740.080261][ T5851] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 740.291638][ T5851] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 740.307566][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.324261][ T5851] usb 5-1: Product: syz [ 740.328485][ T5851] usb 5-1: Manufacturer: syz [ 740.332568][T12021] loop1: detected capacity change from 0 to 1024 [ 740.364788][ T5851] usb 5-1: SerialNumber: syz [ 740.613155][ T5851] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 741.118977][ T5851] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 743.219770][ T5851] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 743.243597][ T5851] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 743.274948][ T5851] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 743.332005][ T5851] lan78xx: probe of 5-1:1.0 failed with error -71 [ 743.389820][ T5851] usb 5-1: USB disconnect, device number 2 [ 744.729620][T12051] fuse: Unknown parameter 'use00000000000000000000' [ 745.069293][T12056] loop3: detected capacity change from 0 to 1024 [ 747.502804][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.509189][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.741957][T12073] ip_tables: iptables: counters copy to user failed while replacing table [ 747.810467][ T5851] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 748.092932][ T5851] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 748.140240][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.148444][ T5851] usb 5-1: Product: syz [ 748.172540][ T5851] usb 5-1: Manufacturer: syz [ 748.177436][ T5851] usb 5-1: SerialNumber: syz [ 748.474289][ T5851] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 748.493898][ T5851] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 748.828133][T12080] No such timeout policy "syz1" [ 748.981447][ T5851] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 749.112334][ T5851] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 749.520798][ T5851] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 749.552309][ T5851] lan78xx: probe of 5-1:1.0 failed with error -32 [ 749.601166][ T5851] usb 5-1: USB disconnect, device number 3 [ 749.681712][T12088] fuse: Bad value for 'fd' [ 750.666230][T12097] loop3: detected capacity change from 0 to 1024 [ 751.199114][T12103] loop0: detected capacity change from 0 to 64 [ 751.269125][T12103] MINIX-fs: bad superblock [ 751.768013][T12107] loop0: detected capacity change from 0 to 1024 [ 752.655664][T12115] loop3: detected capacity change from 0 to 256 [ 752.746949][T12115] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 755.134884][T12127] fuse: Unknown parameter 'user_i00000000000000000000' [ 755.180531][ T5816] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 755.376020][ T5816] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 755.390106][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.410135][ T5816] usb 4-1: Product: syz [ 755.414468][ T5816] usb 4-1: Manufacturer: syz [ 755.421399][ T5816] usb 4-1: SerialNumber: syz [ 755.667640][ T5816] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 755.701656][ T5816] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 756.425186][ T5816] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 756.447615][ T5816] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 756.473751][ T5816] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 756.529782][ T5816] lan78xx: probe of 4-1:1.0 failed with error -71 [ 756.614067][ T5816] usb 4-1: USB disconnect, device number 31 [ 758.276401][T12156] loop1: detected capacity change from 0 to 1024 [ 761.733500][T12175] loop1: detected capacity change from 0 to 1024 [ 762.458461][T12183] rt1719: probe of 0-0049 failed with error -5 [ 762.467989][T12183] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 762.710833][ T5817] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 762.880449][T12183] i2c i2c-0: new_device: Missing parameters [ 762.915513][ T5817] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 762.925369][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.933742][ T5817] usb 5-1: Product: syz [ 762.940225][ T5817] usb 5-1: Manufacturer: syz [ 762.944983][ T5817] usb 5-1: SerialNumber: syz [ 764.759399][ T5817] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 764.787603][ T5817] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 765.434073][ T5817] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 765.936764][ T5817] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 765.947120][ T5817] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 765.975160][ T5817] lan78xx: probe of 5-1:1.0 failed with error -71 [ 766.010385][ T5817] usb 5-1: USB disconnect, device number 4 [ 766.047744][T12193] loop0: detected capacity change from 0 to 64 [ 766.117896][T12193] Trying to write to read-only block-device loop0 [ 766.566293][T12197] fuse: Unknown parameter 'user_i00000000000000000000' [ 766.737761][T10334] hfs: node 4:3 still has 1 user(s)! [ 767.283414][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.427198][T12203] loop1: detected capacity change from 0 to 1024 [ 767.485212][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.796674][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.949078][T12208] loop3: detected capacity change from 0 to 2048 [ 767.972727][T12208] EXT4-fs: Ignoring removed i_version option [ 768.037760][T12208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.074634][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.078823][T12208] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 768.213236][T12208] fs-verity: sha512 using implementation "sha512-avx2" [ 768.645045][T10519] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 768.656068][T10519] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 768.664842][T10519] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 768.673741][T10519] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 768.682557][T10519] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 768.819364][T10519] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 771.019861][ T5780] Bluetooth: hci0: command tx timeout [ 772.347585][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.743178][T12244] fuse: Unknown parameter 'user_i00000000000000000000' [ 773.090401][ T5780] Bluetooth: hci0: command tx timeout [ 773.521217][T12254] loop1: detected capacity change from 0 to 1024 [ 773.616420][T12214] chnl_net:caif_netlink_parms(): no params data found [ 775.170236][ T5780] Bluetooth: hci0: command tx timeout [ 775.494572][T12214] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.619849][T12214] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.647998][T12214] bridge_slave_0: entered allmulticast mode [ 775.691777][T12214] bridge_slave_0: entered promiscuous mode [ 775.761264][T12214] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.768448][T12214] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.810486][T12214] bridge_slave_1: entered allmulticast mode [ 775.860694][T12214] bridge_slave_1: entered promiscuous mode [ 776.871252][ T59] hsr_slave_0: left promiscuous mode [ 776.880523][ T59] hsr_slave_1: left promiscuous mode [ 776.911990][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.919442][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.510673][ T5780] Bluetooth: hci0: command tx timeout [ 778.631648][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.639357][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.708180][ T59] bridge_slave_1: left allmulticast mode [ 778.714809][ T59] bridge_slave_1: left promiscuous mode [ 778.725779][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.757626][ T59] bridge_slave_0: left allmulticast mode [ 778.763513][ T59] bridge_slave_0: left promiscuous mode [ 778.777497][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.271904][ T59] veth1_macvtap: left promiscuous mode [ 779.277559][ T59] veth0_macvtap: left promiscuous mode [ 779.300662][ T59] veth1_vlan: left promiscuous mode [ 779.311507][ T59] veth0_vlan: left promiscuous mode [ 781.846995][T12310] loop1: detected capacity change from 0 to 64 [ 781.907816][T12310] MINIX-fs: bad superblock [ 785.646609][ T59] team0 (unregistering): Port device team_slave_1 removed [ 785.748339][ T59] team0 (unregistering): Port device team_slave_0 removed [ 785.832802][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.909032][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.523189][ T59] bond0 (unregistering): Released all slaves [ 787.615100][T12349] ip_tables: iptables: counters copy to user failed while replacing table [ 789.405289][T12214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.538569][T12214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.789537][T12214] team0: Port device team_slave_0 added [ 790.803271][T12214] team0: Port device team_slave_1 added [ 790.923584][T12214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.962067][T12214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.017968][T12214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.047258][T12214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.080458][T12214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.160291][T12214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.349995][T12214] hsr_slave_0: entered promiscuous mode [ 791.432628][T12214] hsr_slave_1: entered promiscuous mode [ 793.879980][T12394] ip_tables: iptables: counters copy to user failed while replacing table [ 794.224301][T12214] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 794.245842][T12214] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 794.257766][T12214] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 794.269162][T12214] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 795.119980][T12401] loop1: detected capacity change from 0 to 131072 [ 796.711815][T12401] F2FS-fs (loop1): invalid crc value [ 796.776492][T12401] F2FS-fs (loop1): Found nat_bits in checkpoint [ 796.829256][T12401] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 796.878101][T12214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.776441][T12214] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.102112][ T8712] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.109369][ T8712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.218658][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.225950][ T8712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.384001][T12214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 798.394695][T12214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 799.149178][T12214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.802245][T12214] veth0_vlan: entered promiscuous mode [ 801.886787][T12214] veth1_vlan: entered promiscuous mode [ 802.058293][T12214] veth0_macvtap: entered promiscuous mode [ 802.088153][T12214] veth1_macvtap: entered promiscuous mode [ 802.134540][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.150179][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.162909][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.187251][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.226078][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.281196][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.351286][T12214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.427070][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.447281][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.680295][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.730314][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.786126][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.826234][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.421535][T12214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.524956][T12214] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.560120][T12214] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.568895][T12214] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.590094][T12214] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.519575][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.623785][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.819603][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.846844][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.821980][T12499] ip_tables: iptables: counters copy to user failed while replacing table [ 808.912186][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.366663][T12514] loop1: detected capacity change from 0 to 131072 [ 809.400531][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.438737][T12514] F2FS-fs (loop1): invalid crc value [ 809.500281][T12514] F2FS-fs (loop1): Found nat_bits in checkpoint [ 809.597184][T12514] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 811.584915][T12552] ip_tables: iptables: counters copy to user failed while replacing table [ 817.581829][T12599] loop5: detected capacity change from 0 to 131072 [ 817.675911][T12599] F2FS-fs (loop5): invalid crc value [ 817.699909][T12604] ip_tables: iptables: counters copy to user failed while replacing table [ 817.711962][T12599] F2FS-fs (loop5): Found nat_bits in checkpoint [ 817.789491][T12599] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 822.141762][T12646] ip_tables: iptables: counters copy to user failed while replacing table [ 823.145258][T12650] loop1: detected capacity change from 0 to 131072 [ 823.241180][T12650] F2FS-fs (loop1): invalid crc value [ 823.297746][T12650] F2FS-fs (loop1): Found nat_bits in checkpoint [ 823.363326][T12650] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 826.067169][T12671] loop5: detected capacity change from 0 to 2048 [ 826.102802][T12671] EXT4-fs: Ignoring removed i_version option [ 826.130706][ T5852] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 826.211675][T12671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.244429][T12671] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.351493][ T5852] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 826.390183][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.420133][ T5852] usb 4-1: Product: syz [ 826.424400][ T5852] usb 4-1: Manufacturer: syz [ 826.464421][ T5852] usb 4-1: SerialNumber: syz [ 826.481599][T12214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.523821][ T5852] usb 4-1: Found UVC 1.00 device syz (046d:0821) [ 826.555874][ T5852] usb 4-1: No streaming interface found for terminal 2. [ 828.434998][T12707] ip_tables: iptables: counters copy to user failed while replacing table [ 828.538167][T10169] usb 4-1: USB disconnect, device number 32 [ 828.684952][T12714] loop5: detected capacity change from 0 to 2048 [ 828.717091][T12714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 830.930512][ T5817] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 831.140708][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 831.162999][ T5817] usb 4-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 831.184989][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 831.208294][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 831.224222][ T5817] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 831.239996][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 831.292516][ T5817] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 831.332064][ T5817] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 831.352501][ T5817] usb 4-1: Manufacturer: syz [ 832.038691][ T5817] usb 4-1: config 0 descriptor?? [ 832.196615][T12743] ip_tables: iptables: counters copy to user failed while replacing table [ 832.595861][ T5817] rc_core: IR keymap rc-hauppauge not found [ 832.613902][ T5817] Registered IR keymap rc-empty [ 832.618957][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 832.660234][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 832.711105][ T5817] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 832.737003][ T5817] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input69 [ 832.784630][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.232201][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.293348][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.360364][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.420477][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.461360][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.500237][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.560197][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.600169][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.720224][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 835.017299][ T5817] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 835.028273][ T5817] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 835.100003][ T5817] usb 4-1: USB disconnect, device number 33 [ 835.638043][T12781] ip_tables: iptables: counters copy to user failed while replacing table [ 835.834804][T12785] loop5: detected capacity change from 0 to 2048 [ 835.843378][T12785] EXT4-fs: Ignoring removed i_version option [ 836.088265][T12785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 836.101986][T12785] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 836.301899][T12214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.980156][ T5817] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 838.050280][ T5815] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 838.177453][ T5817] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 838.199413][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.218042][ T5817] usb 2-1: Product: syz [ 838.225337][ T5817] usb 2-1: Manufacturer: syz [ 838.235882][ T5817] usb 2-1: SerialNumber: syz [ 838.250257][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 838.266776][ T5817] usb 2-1: Found UVC 1.00 device syz (046d:0821) [ 838.283075][ T5817] usb 2-1: No streaming interface found for terminal 2. [ 838.300262][ T5815] usb 4-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 838.331019][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 838.373814][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 838.399771][ T5815] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 838.425065][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 838.457344][ T5815] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 838.490217][ T5815] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 838.507751][ T5815] usb 4-1: Manufacturer: syz [ 838.525400][ T5815] usb 4-1: config 0 descriptor?? [ 838.940181][ T5815] rc_core: IR keymap rc-hauppauge not found [ 838.959913][ T5815] Registered IR keymap rc-empty [ 838.980380][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 839.030306][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 839.071214][ T5815] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 839.106722][ T5815] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input70 [ 839.176040][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 839.240658][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 839.520801][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 839.539502][T12839] ip_tables: iptables: counters copy to user failed while replacing table [ 839.560161][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 840.261614][ T5817] usb 2-1: USB disconnect, device number 19 [ 840.318560][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 840.350188][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 840.380172][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 840.430372][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 840.495564][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 840.570173][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 840.588330][T12847] loop3: detected capacity change from 0 to 2048 [ 840.621087][T12847] EXT4-fs: Ignoring removed i_version option [ 840.752950][T12847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 840.812238][ T5815] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 840.860187][T12847] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 840.914132][ T5815] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 840.976650][ T5815] usb 4-1: USB disconnect, device number 34 [ 841.207440][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.334307][T12878] loop1: detected capacity change from 0 to 64 [ 842.452461][ T28] audit: type=1804 audit(1786672881.232:32): pid=12878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2163" name=2F6E6577726F6F742F3534342F2E022F627573 dev="loop1" ino=21 res=1 errno=0 [ 842.627315][ T5787] hfs: node 4:3 still has 1 user(s)! [ 843.785674][T12863] loop5: detected capacity change from 0 to 32768 [ 843.834598][T12863] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2159 (12863) [ 843.964735][T12863] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 844.057446][T12863] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 844.079191][T12863] BTRFS info (device loop5): force clearing of disk cache [ 844.107048][T12863] BTRFS info (device loop5): use zlib compression, level 3 [ 844.131029][T12863] BTRFS info (device loop5): enabling ssd optimizations [ 844.155506][T12863] BTRFS info (device loop5): using spread ssd allocation scheme [ 844.193149][T12863] BTRFS info (device loop5): using free space tree [ 844.220448][T12863] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 844.230621][T12863] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 844.275506][T12863] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 844.358370][T12863] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 844.478819][T12863] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 844.681409][T12863] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 844.897366][T12863] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 844.953931][ T5780] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 845.201515][T12863] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 845.214333][T12863] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 845.271020][T12863] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 845.291721][T12863] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 845.302833][T12863] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 845.314564][T12863] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 845.332750][T12863] BTRFS error (device loop5): open_ctree failed: -12 [ 846.342870][T12938] 9pnet: Could not find request transport:  [ 852.229029][T12982] 9pnet: Could not find request transport:  [ 854.566777][T13013] loop5: detected capacity change from 0 to 64 [ 854.683458][ T28] audit: type=1804 audit(1786672893.452:33): pid=13013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2191" name=2F6E6577726F6F742F32382F2E022F627573 dev="loop5" ino=21 res=1 errno=0 [ 855.644293][T12214] hfs: node 4:3 still has 1 user(s)! [ 856.967722][T13031] 9pnet: Could not find request transport:  [ 860.493528][T13064] loop5: detected capacity change from 0 to 2048 [ 860.651005][T13064] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 860.781213][ T28] audit: type=1800 audit(1786672899.562:34): pid=13064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2203" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 863.103905][T13079] loop1: detected capacity change from 0 to 64 [ 863.802830][ T49] Trying to write to read-only block-device loop1 [ 863.875090][T10592] hfs: node 4:3 still has 1 user(s)! [ 866.415042][ T8712] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.640824][ C1] Unknown status report in ack skb [ 866.777977][ T8712] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.192522][ T8712] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.412886][ T8712] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.171094][T10519] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 869.191428][T10519] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 869.205193][T10519] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 869.213446][T10519] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 869.229629][T10519] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 869.251280][T10519] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 870.294704][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.301312][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.565435][T13172] loop5: detected capacity change from 0 to 128 [ 870.659885][T13172] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 870.993026][T13172] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 871.410809][T10519] Bluetooth: hci1: command tx timeout [ 871.626976][T13145] chnl_net:caif_netlink_parms(): no params data found [ 871.648950][T13180] loop3: detected capacity change from 0 to 1024 [ 873.550155][T10519] Bluetooth: hci1: command tx timeout [ 873.591075][T13145] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.690614][T13145] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.735190][T13145] bridge_slave_0: entered allmulticast mode [ 873.749634][T13145] bridge_slave_0: entered promiscuous mode [ 874.750652][T13145] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.770863][T13145] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.790465][T13145] bridge_slave_1: entered allmulticast mode [ 874.813980][T13145] bridge_slave_1: entered promiscuous mode [ 875.196803][T13145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.315617][T13145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.570645][T10519] Bluetooth: hci1: command tx timeout [ 875.839007][ T8712] hsr_slave_0: left promiscuous mode [ 875.864067][ T8712] hsr_slave_1: left promiscuous mode [ 875.873751][ T8712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.894297][ T8712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.929079][ T8712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.017638][ T8712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.147538][ T8712] bridge_slave_1: left allmulticast mode [ 876.169701][ T8712] bridge_slave_1: left promiscuous mode [ 876.196439][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.411230][ T8712] bridge_slave_0: left allmulticast mode [ 876.416970][ T8712] bridge_slave_0: left promiscuous mode [ 876.541059][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.279392][ T8712] veth1_macvtap: left promiscuous mode [ 877.293991][ T8712] veth0_macvtap: left promiscuous mode [ 877.325309][ T8712] veth1_vlan: left promiscuous mode [ 877.355106][ T8712] veth0_vlan: left promiscuous mode [ 877.650740][T10519] Bluetooth: hci1: command tx timeout [ 881.394954][ T8712] team0 (unregistering): Port device team_slave_1 removed [ 881.449492][ T8712] team0 (unregistering): Port device team_slave_0 removed [ 881.505187][ T8712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.563200][ T8712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.042444][ T8712] bond0 (unregistering): Released all slaves [ 882.244877][T13145] team0: Port device team_slave_0 added [ 882.266102][T13145] team0: Port device team_slave_1 added [ 882.442147][T13145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.449180][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.540699][T13145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.593876][T13145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.612050][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.642403][T13145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.426749][ C0] ------------[ cut here ]------------ [ 883.432355][ C0] WARNING: CPU: 0 PID: 13292 at net/mac80211/tx.c:5048 __ieee80211_beacon_get+0x1141/0x1520 [ 883.442778][ C0] Modules linked in: [ 883.446787][ C0] CPU: 0 PID: 13292 Comm: syz.3.2253 Not tainted syzkaller #0 [ 883.454373][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 883.464535][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 883.471023][ C0] Code: f7 4c 89 ef e8 50 38 b8 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 1b 4c 7a f7 0f 0b e9 61 f8 ff ff e8 0f 4c 7a f7 <0f> 0b e9 85 fb ff ff e8 03 4c 7a f7 48 c7 c7 60 b8 65 8e 4c 89 e6 [ 883.490790][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 883.496989][ C0] RAX: ffffffff8a0d2611 RBX: dffffc0000000000 RCX: ffff88807d5cbc00 [ 883.505062][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 883.513128][ C0] RBP: 0000000000000000 R08: ffff88807d5cbc00 R09: 0000000000000003 [ 883.521200][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888027dbe440 [ 883.529219][ C0] R13: ffff88805d518024 R14: ffff888027dbe930 R15: ffff88805d518000 [ 883.537281][ C0] FS: 00007f07573f86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 883.546318][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 883.552979][ C0] CR2: 00007f07573d6ff8 CR3: 000000002c260000 CR4: 00000000003506f0 [ 883.561031][ C0] Call Trace: [ 883.564408][ C0] [ 883.567320][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 883.573042][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 883.578563][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 883.585425][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 883.591075][ C0] __iterate_interfaces+0x225/0x4c0 [ 883.596397][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 883.602725][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 883.609982][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 883.616342][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 883.623464][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 883.628802][ C0] ? hw_scan_work+0xf10/0xf10 [ 883.633583][ C0] __hrtimer_run_queues+0x525/0xc10 [ 883.638862][ C0] ? hrtimer_interrupt+0x980/0x980 [ 883.644085][ C0] ? read_tsc+0x9/0x20 [ 883.648246][ C0] hrtimer_run_softirq+0x177/0x290 [ 883.653363][ T34] ------------[ cut here ]------------ [ 883.658913][ C0] handle_softirqs+0x27d/0x820 [ 883.659084][ T34] WARNING: CPU: 1 PID: 34 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 883.663893][ C0] ? read_tsc+0x9/0x20 [ 883.663919][ C0] ? ktime_get+0x24b/0x280 [ 883.663948][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 883.663976][ C0] ? do_softirq+0x1a0/0x1a0 [ 883.674843][ T34] Modules linked in: [ 883.678957][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 883.683403][ T34] CPU: 1 PID: 34 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 883.688180][ C0] __irq_exit_rcu+0xd3/0x190 [ 883.692794][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 883.696612][ C0] ? irq_exit_rcu+0x20/0x20 [ 883.701840][ T34] Workqueue: phy13 ieee80211_csa_finalize_work [ 883.709227][ C0] irq_exit_rcu+0x9/0x20 [ 883.713866][ T34] [ 883.723939][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 883.728439][ T34] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 883.734625][ C0] [ 883.734635][ C0] [ 883.734698][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 883.734775][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 883.734846][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 6b 28 c4 f6 65 8b 05 cc f6 6a 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 883.734864][ C0] RSP: 0018:ffffc900035d75a0 EFLAGS: 00000206 [ 883.734885][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: dc5efe53e7421e00 [ 883.734900][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 883.734915][ C0] RBP: ffffc900035d7638 R08: ffffffff911ed5af R09: 1ffffffff223dab5 [ 883.734930][ C0] R10: dffffc0000000000 R11: fffffbfff223dab6 R12: dffffc0000000000 [ 883.734946][ C0] R13: ffff88802c8719d0 R14: ffff88802c8719d0 R15: 1ffff920006baeb4 [ 883.734985][ C0] ? _raw_spin_unlock+0x40/0x40 [ 883.735030][ C0] __skb_try_recv_datagram+0x181/0x4e0 [ 883.735114][ C0] ? sock_load_diag_module+0x140/0x140 [ 883.735149][ C0] __unix_dgram_recvmsg+0x2f9/0xd90 [ 883.735238][ C0] ? unix_unhash+0x10/0x10 [ 883.735268][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 883.735307][ C0] ? mark_lock+0x94/0x320 [ 883.735333][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 883.739614][ T34] Code: 48 89 df e8 04 22 ce f7 e9 d6 fc ff ff e8 ea 9e 75 f7 eb 24 e8 e3 9e 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 d2 9e 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 c4 9e 75 f7 48 8b 7c 24 08 4c 8b 74 [ 883.742024][ C0] ? unix_dgram_sendmsg+0x16e0/0x16e0 [ 883.742054][ C0] sock_recvmsg_nosec+0x82/0xd0 [ 883.742123][ C0] ____sys_recvmsg+0x4d7/0x5d0 [ 883.742160][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 883.742201][ C0] ? import_iovec+0x73/0xa0 [ 883.747839][ T34] RSP: 0018:ffffc90000aaf9c0 EFLAGS: 00010293 [ 883.755250][ C0] ___sys_recvmsg+0x214/0x590 [ 883.758184][ T34] [ 883.758194][ T34] RAX: ffffffff8a11cf42 RBX: 0000000000000001 RCX: ffff8880186e0000 [ 883.761179][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 883.761227][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 883.767195][ T34] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 883.773740][ C0] ? __might_fault+0xc6/0x120 [ 883.793415][ T34] RBP: dffffc0000000000 R08: ffff888027dbd62f R09: 1ffff11004fb7ac5 [ 883.799491][ C0] ? __might_fault+0xaa/0x120 [ 883.807497][ T34] R10: dffffc0000000000 R11: ffffed1004fb7ac6 R12: 0000000000000001 [ 883.807517][ T34] R13: ffff888027dbe659 R14: ffff8880307cad48 R15: ffff88802ed15e00 [ 883.815608][ C0] do_recvmmsg+0x377/0x810 [ 883.815645][ C0] ? __sys_recvmmsg+0x290/0x290 [ 883.815682][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 883.823743][ T34] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 883.831708][ C0] ? rcu_read_lock_sched_held+0x8a/0x110 [ 883.840958][ T34] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 883.844704][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 883.851517][ T34] CR2: 00007f7225c64368 CR3: 000000002c260000 CR4: 00000000003506e0 [ 883.855520][ C0] ? do_recvmmsg+0x810/0x810 [ 883.860816][ T34] Call Trace: [ 883.865170][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 883.870430][ T34] [ 883.874732][ C0] do_syscall_64+0x55/0xb0 [ 883.879780][ T34] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 883.899398][ C0] ? clear_bhb_loop+0x40/0x90 [ 883.904859][ T34] ieee80211_csa_finalize+0x571/0xeb0 [ 883.909658][ C0] ? clear_bhb_loop+0x40/0x90 [ 883.914455][ T34] ? mutex_lock_nested+0x20/0x20 [ 883.919490][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 883.924088][ T34] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 883.930119][ C0] RIP: 0033:0x7f075659e0d9 [ 883.930148][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.930168][ C0] RSP: 002b:00007f07573f8028 EFLAGS: 00000246 [ 883.934865][ T34] ? ieee80211_csa_finalize_work+0x140/0x140 [ 883.937201][ C0] ORIG_RAX: 000000000000012b [ 883.946412][ T34] ? read_lock_is_recursive+0x20/0x20 [ 883.950074][ C0] RAX: ffffffffffffffda RBX: 00007f0756826090 RCX: 00007f075659e0d9 [ 883.950096][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 883.950111][ C0] RBP: 00007f0756635024 R08: 0000000000000000 R09: 0000000000000000 [ 883.950131][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 883.950145][ C0] R13: 00007f0756826128 R14: 00007f0756826090 R15: 00007ffd863ee368 [ 883.950190][ C0] [ 883.955209][ T34] ieee80211_csa_finalize_work+0xf6/0x140 [ 883.963233][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 883.963256][ C0] CPU: 0 PID: 13292 Comm: syz.3.2253 Not tainted syzkaller #0 [ 883.963310][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 883.963355][ C0] Call Trace: [ 883.963390][ C0] [ 883.963416][ C0] dump_stack_lvl+0x18c/0x250 [ 883.963528][ C0] ? show_regs_print_info+0x20/0x20 [ 883.963590][ C0] ? load_image+0x420/0x420 [ 883.963740][ C0] panic+0x2ca/0x720 [ 883.963832][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 883.963946][ C0] __warn+0x2e0/0x470 [ 883.964012][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 883.964101][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 883.964192][ C0] report_bug+0x2be/0x4f0 [ 883.964262][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 883.964343][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 883.964425][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 883.964499][ C0] handle_bug+0xcf/0x120 [ 883.964562][ C0] exc_invalid_op+0x1a/0x50 [ 883.964628][ C0] asm_exc_invalid_op+0x1a/0x20 [ 883.964691][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 883.964784][ C0] Code: f7 4c 89 ef e8 50 38 b8 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 1b 4c 7a f7 0f 0b e9 61 f8 ff ff e8 0f 4c 7a f7 <0f> 0b e9 85 fb ff ff e8 03 4c 7a f7 48 c7 c7 60 b8 65 8e 4c 89 e6 [ 883.964846][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 883.964902][ C0] RAX: ffffffff8a0d2611 RBX: dffffc0000000000 RCX: ffff88807d5cbc00 [ 883.964943][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 883.964975][ C0] RBP: 0000000000000000 R08: ffff88807d5cbc00 R09: 0000000000000003 [ 883.965007][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888027dbe440 [ 883.965045][ C0] R13: ffff88805d518024 R14: ffff888027dbe930 R15: ffff88805d518000 [ 883.965105][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 883.965207][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 883.965279][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 883.965391][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 883.965476][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 883.965587][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 883.965677][ C0] __iterate_interfaces+0x225/0x4c0 [ 883.965741][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 883.965813][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 883.965873][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 883.965943][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 883.966015][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 883.966070][ C0] ? hw_scan_work+0xf10/0xf10 [ 883.966155][ C0] __hrtimer_run_queues+0x525/0xc10 [ 883.966299][ C0] ? hrtimer_interrupt+0x980/0x980 [ 883.966351][ C0] ? read_tsc+0x9/0x20 [ 883.966441][ C0] hrtimer_run_softirq+0x177/0x290 [ 883.966516][ C0] handle_softirqs+0x27d/0x820 [ 883.966577][ C0] ? read_tsc+0x9/0x20 [ 883.966624][ C0] ? ktime_get+0x24b/0x280 [ 883.966704][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 883.966776][ C0] ? do_softirq+0x1a0/0x1a0 [ 883.966847][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 883.966930][ C0] __irq_exit_rcu+0xd3/0x190 [ 883.966991][ C0] ? irq_exit_rcu+0x20/0x20 [ 883.967087][ C0] irq_exit_rcu+0x9/0x20 [ 883.967147][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 883.967220][ C0] [ 883.967239][ C0] [ 883.967260][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 883.967322][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 883.967414][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 6b 28 c4 f6 65 8b 05 cc f6 6a 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 883.967455][ C0] RSP: 0018:ffffc900035d75a0 EFLAGS: 00000206 [ 883.967506][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: dc5efe53e7421e00 [ 883.967554][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 883.967588][ C0] RBP: ffffc900035d7638 R08: ffffffff911ed5af R09: 1ffffffff223dab5 [ 883.967623][ C0] R10: dffffc0000000000 R11: fffffbfff223dab6 R12: dffffc0000000000 [ 883.967664][ C0] R13: ffff88802c8719d0 R14: ffff88802c8719d0 R15: 1ffff920006baeb4 [ 883.967756][ C0] ? _raw_spin_unlock+0x40/0x40 [ 883.967847][ C0] __skb_try_recv_datagram+0x181/0x4e0 [ 883.967944][ C0] ? sock_load_diag_module+0x140/0x140 [ 883.967944][ T34] ? process_scheduled_works+0x975/0x1600 [ 883.967980][ T34] process_scheduled_works+0xa60/0x1600 [ 883.968176][ T34] ? worker_attach_to_pool+0x370/0x370 [ 883.968268][ T34] ? assign_work+0x3cc/0x5d0 [ 883.968353][ T34] worker_thread+0xa5e/0xfe0 [ 883.968509][ T34] kthread+0x2fa/0x390 [ 883.968562][ T34] ? pr_cont_work+0x550/0x550 [ 883.968636][ T34] ? kthread_blkcg+0xd0/0xd0 [ 883.968691][ T34] ret_from_fork+0x48/0x80 [ 883.968763][ T34] ? kthread_blkcg+0xd0/0xd0 [ 883.968825][ T34] ret_from_fork_asm+0x11/0x20 [ 883.968968][ T34] [ 883.968997][ T34] irq event stamp: 8826359 [ 883.969018][ T34] hardirqs last enabled at (8826361): [] vprintk_store+0x9fb/0xd50 [ 883.969099][ T34] hardirqs last disabled at (8826362): [] vprintk_store+0x194/0xd50 [ 883.969175][ T34] softirqs last enabled at (8826330): [] __irq_exit_rcu+0xd3/0x190 [ 883.969239][ T34] softirqs last disabled at (8826315): [] __irq_exit_rcu+0xd3/0x190 [ 883.969309][ T34] ---[ end trace 0000000000000000 ]--- [ 884.133826][ T59] ------------[ cut here ]------------ [ 884.133858][ T59] WARNING: CPU: 1 PID: 59 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 884.133982][ T59] Modules linked in: [ 884.134013][ T59] CPU: 1 PID: 59 Comm: kworker/u4:4 Tainted: G W syzkaller #0 [ 884.134066][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 884.134107][ T59] Workqueue: phy14 ieee80211_csa_finalize_work [ 884.134177][ T59] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 884.134268][ T59] Code: 48 89 df e8 04 22 ce f7 e9 d6 fc ff ff e8 ea 9e 75 f7 eb 24 e8 e3 9e 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 d2 9e 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 c4 9e 75 f7 48 8b 7c 24 08 4c 8b 74 [ 884.134312][ T59] RSP: 0018:ffffc900015a79c0 EFLAGS: 00010293 [ 884.134355][ T59] RAX: ffffffff8a11cf42 RBX: 0000000000000001 RCX: ffff88801beb3c00 [ 884.134395][ T59] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 884.134428][ T59] RBP: dffffc0000000000 R08: ffff88807df7162f R09: 1ffff1100fbee2c5 [ 884.134470][ T59] R10: dffffc0000000000 R11: ffffed100fbee2c6 R12: 0000000000000001 [ 884.134510][ T59] R13: ffff88807df72659 R14: ffff88802cdead48 R15: ffff88805f0ed600 [ 884.134558][ T59] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 884.134609][ T59] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 884.134661][ T59] CR2: 0000001b2df0eff8 CR3: 0000000030b87000 CR4: 00000000003506e0 [ 884.134703][ T59] Call Trace: [ 884.134716][ T59] [ 884.134788][ T59] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 884.134889][ T59] ieee80211_csa_finalize+0x571/0xeb0 [ 884.134965][ T59] ? mutex_lock_nested+0x20/0x20 [ 884.135017][ T59] ? lockdep_hardirqs_on+0x98/0x150 [ 884.135116][ T59] ? ieee80211_csa_finalize_work+0x140/0x140 [ 884.135208][ T59] ? read_lock_is_recursive+0x20/0x20 [ 884.135304][ T59] ieee80211_csa_finalize_work+0xf6/0x140 [ 884.135378][ T59] ? process_scheduled_works+0x975/0x1600 [ 884.135461][ T59] process_scheduled_works+0xa60/0x1600 [ 884.135618][ T59] ? worker_attach_to_pool+0x370/0x370 [ 884.135712][ T59] ? assign_work+0x3cc/0x5d0 [ 884.135804][ T59] worker_thread+0xa5e/0xfe0 [ 884.135908][ T59] ? _raw_spin_unlock+0x40/0x40 [ 884.135990][ T59] ? __kthread_parkme+0x71/0x1c0 [ 884.136075][ T59] kthread+0x2fa/0x390 [ 884.136127][ T59] ? pr_cont_work+0x550/0x550 [ 884.136193][ T59] ? kthread_blkcg+0xd0/0xd0 [ 884.136251][ T59] ret_from_fork+0x48/0x80 [ 884.136308][ T59] ? kthread_blkcg+0xd0/0xd0 [ 884.136364][ T59] ret_from_fork_asm+0x11/0x20 [ 884.136507][ T59] [ 884.136534][ T59] irq event stamp: 9510405 [ 884.136562][ T59] hardirqs last enabled at (9510407): [] vprintk_store+0x9fb/0xd50 [ 884.136645][ T59] hardirqs last disabled at (9510408): [] vprintk_store+0x194/0xd50 [ 884.136735][ T59] softirqs last enabled at (9510316): [] __irq_exit_rcu+0xd3/0x190 [ 884.136800][ T59] softirqs last disabled at (9510253): [] __irq_exit_rcu+0xd3/0x190 [ 884.136870][ T59] ---[ end trace 0000000000000000 ]--- [ 884.139223][ T59] ------------[ cut here ]------------ [ 884.139249][ T59] WARNING: CPU: 1 PID: 59 at net/mac80211/chan.c:1423 ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 884.139372][ T59] Modules linked in: [ 884.139401][ T59] CPU: 1 PID: 59 Comm: kworker/u4:4 Tainted: G W syzkaller #0 [ 884.139453][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 884.139485][ T59] Workqueue: phy14 ieee80211_csa_finalize_work [ 884.139559][ T59] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 884.139642][ T59] Code: df e8 04 22 ce f7 e9 d6 fc ff ff e8 ea 9e 75 f7 eb 24 e8 e3 9e 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 d2 9e 75 f7 0f 0b <0f> 0b e9 b7 f5 ff ff e8 c4 9e 75 f7 48 8b 7c 24 08 4c 8b 74 24 30 [ 884.139696][ T59] RSP: 0018:ffffc900015a79c0 EFLAGS: 00010293 [ 884.139739][ T59] RAX: ffffffff8a11cf42 RBX: 0000000000000001 RCX: ffff88801beb3c00 [ 884.139779][ T59] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 884.139810][ T59] RBP: dffffc0000000000 R08: ffff88807df7162f R09: 1ffff1100fbee2c5 [ 884.139852][ T59] R10: dffffc0000000000 R11: ffffed100fbee2c6 R12: 0000000000000001 [ 884.139885][ T59] R13: ffff88807df72659 R14: ffff88802cdead48 R15: ffff88805f0ed600 [ 884.139928][ T59] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 884.139978][ T59] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 884.140096][ T59] CR2: 0000001b2df0eff8 CR3: 0000000030b87000 CR4: 00000000003506e0 [ 884.140148][ T59] Call Trace: [ 884.140161][ T59] [ 884.140216][ T59] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 884.140311][ T59] ieee80211_csa_finalize+0x571/0xeb0 [ 884.140392][ T59] ? mutex_lock_nested+0x20/0x20 [ 884.140473][ T59] ? lockdep_hardirqs_on+0x98/0x150 [ 884.140538][ T59] ? ieee80211_csa_finalize_work+0x140/0x140 [ 884.140628][ T59] ? read_lock_is_recursive+0x20/0x20 [ 884.140721][ T59] ieee80211_csa_finalize_work+0xf6/0x140 [ 884.140794][ T59] ? process_scheduled_works+0x975/0x1600 [ 884.140875][ T59] process_scheduled_works+0xa60/0x1600 [ 884.141014][ T59] ? worker_attach_to_pool+0x370/0x370 [ 884.141131][ T59] ? assign_work+0x3cc/0x5d0 [ 884.141222][ T59] worker_thread+0xa5e/0xfe0 [ 884.141329][ T59] ? _raw_spin_unlock+0x40/0x40 [ 884.141401][ T59] ? __kthread_parkme+0x71/0x1c0 [ 884.141495][ T59] kthread+0x2fa/0x390 [ 884.141546][ T59] ? pr_cont_work+0x550/0x550 [ 884.141618][ T59] ? kthread_blkcg+0xd0/0xd0 [ 884.141683][ T59] ret_from_fork+0x48/0x80 [ 884.141753][ T59] ? kthread_blkcg+0xd0/0xd0 [ 884.141813][ T59] ret_from_fork_asm+0x11/0x20 [ 884.141929][ T59] [ 884.141949][ T59] irq event stamp: 9510507 [ 884.141969][ T59] hardirqs last enabled at (9510509): [] vprintk_store+0x9fb/0xd50 [ 884.142053][ T59] hardirqs last disabled at (9510510): [] vprintk_store+0x194/0xd50 [ 884.142120][ T59] softirqs last enabled at (9510316): [] __irq_exit_rcu+0xd3/0x190 [ 884.142186][ T59] softirqs last disabled at (9510253): [] __irq_exit_rcu+0xd3/0x190 [ 884.142251][ T59] ---[ end trace 0000000000000000 ]--- [ 884.175255][ T59] wlan1: failed to finalize CSA, disconnecting [ 885.332935][ C0] __unix_dgram_recvmsg+0x2f9/0xd90 [ 885.338177][ C0] ? unix_unhash+0x10/0x10 [ 885.342620][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 885.347882][ C0] ? mark_lock+0x94/0x320 [ 885.352242][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 885.357288][ C0] ? unix_dgram_sendmsg+0x16e0/0x16e0 [ 885.362685][ C0] sock_recvmsg_nosec+0x82/0xd0 [ 885.367581][ C0] ____sys_recvmsg+0x4d7/0x5d0 [ 885.372409][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 885.377469][ C0] ? import_iovec+0x73/0xa0 [ 885.382014][ C0] ___sys_recvmsg+0x214/0x590 [ 885.386723][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 885.391529][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 885.396590][ C0] ? __might_fault+0xc6/0x120 [ 885.401286][ C0] ? __might_fault+0xaa/0x120 [ 885.405993][ C0] do_recvmmsg+0x377/0x810 [ 885.410461][ C0] ? __sys_recvmmsg+0x290/0x290 [ 885.415350][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 885.421264][ C0] ? rcu_read_lock_sched_held+0x8a/0x110 [ 885.426933][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 885.431991][ C0] ? do_recvmmsg+0x810/0x810 [ 885.436605][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 885.441835][ C0] do_syscall_64+0x55/0xb0 [ 885.446279][ C0] ? clear_bhb_loop+0x40/0x90 [ 885.450984][ C0] ? clear_bhb_loop+0x40/0x90 [ 885.455689][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 885.461605][ C0] RIP: 0033:0x7f075659e0d9 [ 885.466038][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.485755][ C0] RSP: 002b:00007f07573f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 885.494210][ C0] RAX: ffffffffffffffda RBX: 00007f0756826090 RCX: 00007f075659e0d9 [ 885.502297][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 885.510418][ C0] RBP: 00007f0756635024 R08: 0000000000000000 R09: 0000000000000000 [ 885.518427][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 885.526872][ C0] R13: 00007f0756826128 R14: 00007f0756826090 R15: 00007ffd863ee368 [ 885.534880][ C0] [ 885.538600][ C0] Kernel Offset: disabled [ 885.542978][ C0] Rebooting in 86400 seconds..