last executing test programs: 11m41.344169028s ago: executing program 32 (id=1475): r0 = socket(0x23, 0x80000, 0xd9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = creat(&(0x7f0000000280)='.\x00', 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x4, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r1}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baf80cb85fb9c78eef66bafc0cec66baf80cb8a42e4b81ef66bafc0cb802000000ef66bad10466edc461717dffb98c040000b8d7000000ba000000000f30b94a0300000f32662666400fd6a6dc380000400f32460f01cfc403b54442b4d2", 0x5f}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x6, 0x518, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010002bd06e640d112237bb2d00102030109020605030902d0030904d40803ff044c070905000000020c0a01f50ee50800000000000000be2d16e9094aa2b228178e2854f4a1e6f34eaffaef2c248ddbe0aaf544ab32179d3a8e693072be9ce71d419b176ae5a7e8d925b9922df95171b8e8d506d8de6a3b0e821ac9e9c05b9d07ccfeb48904d2712ab3f00fb980f63e9bb74b933c82877f96f74ba77a7214b926fe734313c889c0f2c51d2af1fe16784ecb50b91c9dfc9202e0ce0256abc84e00e1dfcc7c26530cee20e960c579cda27562cbc0bce564b8852ed3e79fce5d358bc8a38eb451dc612ef1d936d93f63e723a975695408c8b017367ec818406bda94d0de564bb868f08dd36eb6e885ce869d00b791592cc65e6bc7a2d88906a0865009050e014000b3d40f8b23721ca7940c974c9ff4082a90e85c8cf4aef12086d7a5d2838e7ccab2b564a2ee70bd16d9d4f655a00fdae329ff565979c925face94839a94627269f78a1c4e43f2f848e5cfde450fcad4f7df2fff65854bd77621316d3b72b0cb7a09d458fffc0e6755bb0fa9cb2946b8f7cce04ad03a6cf18d449779b1cd32209af729f8f41095b199a51637636df5072501080403000905011010000107050904ca0b04936bd2400905000840006e0204090507100002e281050725010806450107250108074e7c090504100004040908072501000009000905050008000678080725010c09040009048bf709ff5d01c209050f00000208060109050a101000ff0d0509050c00ae07ba7f4c430c65d17889548d9db89b8a70002e93b467c6bba06ae6c9205c9ba017625a4c44cb97ce237b10e07479ad94f5b06b5b8326fb2f569c03c1bbf69777ce84b126b9511a0905020c6006057e054e0a3972d9bc1a2ecbd01152e98e23e11cf2d3180e1a6e923d0885c6682fae9561dd9bc6ffede02af332cc0b27a889b6fccca7ef5170b4ade1cad429e381c7879c63e91846d11d42ad9d250cb77ba811c47cbf0c366866309014bb6d461285fbf4cf4d4e175f4b6e9867f6469dd068eca51f612e77ec3d875b118dc15a623c3f78332cdda59acbc9a8ff40b78eab169e4d25f3b0c55f74d00ecf443c72bf0ff2adfb24cb86254a4a03ed35c43bf606a19d259faf82fa9a3ef557c7f7a669e2e18b7758820c748afd5f24ca91b1acb1f5f9c66fb1ca326feb08a71caa65e3f48d97631f2b4c433d4ee36fafe80489bbba2aa9cc0221ce09050700ff03080703ab31fc5c4aa50965752190abc6e08cccbb30f512c102ba014a7028117e187fc3ce020bf2e2f4241d958b9e1341206f56eb3e06cd9d0ca99ab6c3b786137f09311320bfb313690cd1d7daacacfe6c02dad2b489287624651ef101b8a641cc7a31b01d2e7285dfe53288393d574ec11dd68503f9a9b5254d082f7117975b498fc9f69ea81cf9542a26bc03a0d015c5e16428bd68f184ec5ecd5e1e2ca656fb4db386c885f9d812b10fe2f0f609050d08bf07b20f041e0f4937cd05f46ca0d8effbd10935495553894d25dde3954805a10cc72509050e0100020901fe15236cd159671f8e8ce54fe122388760643fdb8c6d0725010409080009050a032000f50a02912b54c02c1ddee2e39a7499865959a7e56e5287d484f8edea39199646b906cb8145180e664e008e5944f96f9c8172e83e68158a5e6626c81c9021fb4acb584e7cadf23371535912fbf3a513adfef461ecef1fb08277cf9615ec66ceeb2e611dc6c42436940e1b438490770d85ce4e560297b6be9282bd5f3cba221524b438f9d9bab51a0a4d0bf8b56d02532b3fb6a4c60905040c10000cd604"], &(0x7f00000010c0)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x201, 0x3, 0x0, 0x6, 0x40, 0xf}, 0x5, &(0x7f0000000fc0)={0x5, 0xf, 0x5}, 0x1, [{0x9a, &(0x7f0000001000)=@string={0x9a, 0x3, "77e1f5c017fe8e46d96ab245709e0f2076d3adfa3714242144560b9c46f060fb19376788644b89d9936f1d60220b2f0ba96f8185c0d3688eefb2c5290686a2d84e2b83bd4025fba774e7623812d2c68993fccefe5480c5a1131024720b0054c86ed7c3cb2d67e7ccd45138bbb526e4d7093c53ee270bd2ec122d650526b29fce1f400424766b4f56c1dd7b95238e75019c873de11d2a7ec5"}}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 8m55.038003691s ago: executing program 4 (id=1987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x5, 0x401, 0x5}) socket$inet6_mptcp(0xa, 0x1, 0x106) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010000000080fbdbe5250a0300"], 0x2c}}, 0x20000050) 8m54.005034317s ago: executing program 4 (id=1991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) fsetxattr(r3, &(0x7f0000000480)=@random={'user.', '/dev/fuse\x00'}, 0x0, 0x0, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x530, &(0x7f0000000e00)="$eJzs3U9vI2cZAPBnJvEmu5uSFDiUSi0VLdqtYO1NQ9uIQ7tIiFslULlvo8SJojhxFDtlE/WQig+AhBD0yokDSHwAJNSPgCpVoncECIRgCwcOwKCxx9Rxx/mjje0l+f2kGc+8M/M+zxsl43f+ZCaAK+u5iLgXEVMR8WJEzBflaTHEUXfI1/v44Tur+ZAvefOvSSRFWUQs9OrLy252Nrl+YtzWweHWSqNR3yvma+3t3Vrr4PDO5vbKRn2jvrO0tPjK8qvLLy/fvZB25u167Zt//PEPfvat13791e/97v6fb0/3Ly/acRbpeeJ+1BlXYravLA+8d55KHmNTRXsqk04EAIAzyTuzn42IL3X6//MxFf/rFg926WbHnx0AAABwEbLX5+JfSUQGAAAAXFqvR8RcJGm1uBdgLtK0Wu3ew/v5uJE2mq32V9ab+ztr+bKIhaik65uN+t3intqFqCT5/GJxE3Bv/qWB+aWIeDIifjR/vTNfXW021iZ98gMAAACuiJsDx///mO8e/wMAAACXzMKkEwAAAABGbtjxfzLmPAAAAIDRGXb8PzPmPAAAAICR+PYbb+RDNhvd91+vvX2wv9V8+85avbVV3d5fra4293arG83mRueZfdun1ddoNne/Fjv7D2rt+r2k1jo4vL/d3N9p39/0/kAAAACYlCe/+P5HSUQcff16Z8hdW3srYmrIBp4VAJdGep6V/zC6PIDxG/Y1D1x+05NOAJico0knAEzasUd9lHQK+m/eSftX/s0IkwIAAC7UrS+UXP8vDgEqk04OGKlzXf8HLhXX/+HqOuf1/w9GlQcwfpVPegBuBYIr6rRXfQx9eEfZ9f9rZStm2al1AQAAIzXXGSdptbgWOBdpWq1GPNH5V/9Ksr7ZqN+NiM9ExG/nKzP5/GJ3G68HBAAAAAAAAAAAAAAAAAAAAAAAAIAzyrIkMgAAAOBSi0j/lBTv/7o1/8Lc4PmBa8k/56P7Sq/e+wHbe4t5+d965dF+782fPFhpt/deGvfZCwAAAKBM7zi987k46WwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuGw+fvjOajFcG2fcv3wjIhaOxV/tLpmO2c7nbFQi4sbfk5ju2y6JiKkLiH/0bkQ8VRY/ydOKhSKLwfhpRFwfT/xnsiwrjX/zAuLDVfZ+vv+5V/b3l8Zznc/yv//pYnhUvf3fTEn83v5vasj+74kzxnj6w1/WhsZ/N+Lp6fL9Ty9+0ok/c2y7vOz5sgpLfihvfffw8FOF3coj+2nErSiP3x+r1t7erbUODu9sbq9s1DfqO0tLi68sv7r88vLd2vpmo16MB6P8PB/98Jlf/Weg/N9ZV6f9MST+wrH2f/rn/0I+UekrzAbDFME+fPDwc93JykAVnfi3ny///XvqhPj578SXi++BfPmt3vRRd7rfs7/44NnSxIr4a0PaP3tK+28Pq3TAi9/5/u/PuCoAMAatg8OtlUajvjfyifeyLHuUem6ML9UrOdHr3Z2wzswjhZh9XFr6/ziRH32NL+hFnNkCAAAeN590+iedCQAAAAAAAAAAAAAAAAAAAFxdrYNIR/04scGYR5NpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4bAAD//25f1Kg=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) listen(r4, 0x0) 8m50.978764333s ago: executing program 4 (id=1995): mprotect(&(0x7f00001ad000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f000053a000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x212, 0xc) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x4001, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 8m49.588115947s ago: executing program 0 (id=1999): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2280}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7f, 0xb}}]}]}]}, 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) 8m49.026409781s ago: executing program 0 (id=2000): preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x2, 0x8) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) 8m48.808905707s ago: executing program 4 (id=2001): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f00000009c0)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@quota}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 8m48.417761197s ago: executing program 4 (id=2003): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_emit_vhci(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000001180)=@framed={{0x18, 0x2}}, 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000180), 0x80000) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r3 = open$dir(&(0x7f0000000100)='./file1\x00', 0x656202, 0x41) fspick(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x64}}, {@lazytime}, {@data_journal}, {@noload}, {@oldalloc}]}, 0x3, 0x440, &(0x7f0000000280)="$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") 8m47.297565735s ago: executing program 33 (id=2004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) fsetxattr(r3, &(0x7f0000000480)=@random={'user.', '/dev/fuse\x00'}, 0x0, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x530, &(0x7f0000000e00)="$eJzs3U9vI2cZAPBnJvEmu5uSFDiUSi0VLdqtYO1NQ9uIQ7tIiFslULlvo8SJojhxFDtlE/WQig+AhBD0yokDSHwAJNSPgCpVoncECIRgCwcOwKCxx9Rxx/mjje0l+f2kGc+8M/M+zxsl43f+ZCaAK+u5iLgXEVMR8WJEzBflaTHEUXfI1/v44Tur+ZAvefOvSSRFWUQs9OrLy252Nrl+YtzWweHWSqNR3yvma+3t3Vrr4PDO5vbKRn2jvrO0tPjK8qvLLy/fvZB25u167Zt//PEPfvat13791e/97v6fb0/3Ly/acRbpeeJ+1BlXYravLA+8d55KHmNTRXsqk04EAIAzyTuzn42IL3X6//MxFf/rFg926WbHnx0AAABwEbLX5+JfSUQGAAAAXFqvR8RcJGm1uBdgLtK0Wu3ew/v5uJE2mq32V9ab+ztr+bKIhaik65uN+t3intqFqCT5/GJxE3Bv/qWB+aWIeDIifjR/vTNfXW021iZ98gMAAACuiJsDx///mO8e/wMAAACXzMKkEwAAAABGbtjxfzLmPAAAAIDRGXb8PzPmPAAAAICR+PYbb+RDNhvd91+vvX2wv9V8+85avbVV3d5fra4293arG83mRueZfdun1ddoNne/Fjv7D2rt+r2k1jo4vL/d3N9p39/0/kAAAACYlCe/+P5HSUQcff16Z8hdW3srYmrIBp4VAJdGep6V/zC6PIDxG/Y1D1x+05NOAJico0knAEzasUd9lHQK+m/eSftX/s0IkwIAAC7UrS+UXP8vDgEqk04OGKlzXf8HLhXX/+HqOuf1/w9GlQcwfpVPegBuBYIr6rRXfQx9eEfZ9f9rZStm2al1AQAAIzXXGSdptbgWOBdpWq1GPNH5V/9Ksr7ZqN+NiM9ExG/nKzP5/GJ3G68HBAAAAAAAAAAAAAAAAAAAAAAAAIAzyrIkMgAAAOBSi0j/lBTv/7o1/8Lc4PmBa8k/56P7Sq/e+wHbe4t5+d965dF+782fPFhpt/deGvfZCwAAAKBM7zi987k46WwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuGw+fvjOajFcG2fcv3wjIhaOxV/tLpmO2c7nbFQi4sbfk5ju2y6JiKkLiH/0bkQ8VRY/ydOKhSKLwfhpRFwfT/xnsiwrjX/zAuLDVfZ+vv+5V/b3l8Zznc/yv//pYnhUvf3fTEn83v5vasj+74kzxnj6w1/WhsZ/N+Lp6fL9Ty9+0ok/c2y7vOz5sgpLfihvfffw8FOF3coj+2nErSiP3x+r1t7erbUODu9sbq9s1DfqO0tLi68sv7r88vLd2vpmo16MB6P8PB/98Jlf/Weg/N9ZV6f9MST+wrH2f/rn/0I+UekrzAbDFME+fPDwc93JykAVnfi3ny///XvqhPj578SXi++BfPmt3vRRd7rfs7/44NnSxIr4a0PaP3tK+28Pq3TAi9/5/u/PuCoAMAatg8OtlUajvjfyifeyLHuUem6ML9UrOdHr3Z2wzswjhZh9XFr6/ziRH32NL+hFnNkCAAAeN590+iedCQAAAAAAAAAAAAAAAAAAAFxdrYNIR/04scGYR5NpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4bAAD//25f1Kg=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) listen(0xffffffffffffffff, 0x0) 8m46.868469516s ago: executing program 0 (id=2006): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2280}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7f, 0xb}}]}]}]}, 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001ac1414aa0702440c0cf1ac1414aa00008001000000004e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf25dbd8850a0000000314000000080018004e204e20140001002001000000001000000000000000000114000200fc000000000000000000000000000004"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r8, 0x0, 0x0) 8m46.563844054s ago: executing program 4 (id=2007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}}, 0x24}}, 0x0) 8m45.083754351s ago: executing program 34 (id=2007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}}, 0x24}}, 0x0) 8m45.075719911s ago: executing program 0 (id=2009): mprotect(&(0x7f00001ad000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f000053a000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x212, 0xc) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x4001, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 8m43.977579008s ago: executing program 0 (id=2011): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f00000009c0)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@quota}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 8m43.467047441s ago: executing program 0 (id=2013): preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x8) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) 8m42.431639697s ago: executing program 2 (id=2015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0xfc, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xcc, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x2, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x0, 0x3, 0x0, 0x1, [{0x0, 0x3, 0x1}, {0x0, 0x3, 0x8001}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x73203f01}, {0x0, 0x3, 0xfffffffffffffeff}, {0x0, 0x3, 0x4}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x4c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x2}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x2c}, {0x952f, 0x3, 0x7}, {0xc}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0xfc}}, 0x20000000) 8m40.657378512s ago: executing program 2 (id=2016): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 8m40.584077484s ago: executing program 2 (id=2017): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f000053a000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x212, 0xc) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x4001, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 8m38.976750673s ago: executing program 2 (id=2018): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2280}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7f, 0xb}}]}]}]}, 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) 8m37.228429538s ago: executing program 2 (id=2019): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f00000009c0)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@quota}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 8m36.853500317s ago: executing program 2 (id=2020): syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x10, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 8m28.255750553s ago: executing program 35 (id=2013): preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x8) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) 8m20.840478839s ago: executing program 36 (id=2020): syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x10, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 7m57.425499246s ago: executing program 7 (id=2026): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f00000009c0)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@quota}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$eJzs3d9vU1UcAPDv7X4wB8pICFEfDAkPYpCObf7AxER8NErE6Ds0W1nIOkrWjrBJIjzIiy+GF2MkMf4BvvtI/Af8K0iUhBgy9cEfqbndLXTrum61c4N+PsmFc+6PnvvtuefsnN42N4C+dTT9JxfxQkR8mUQcbNo2GNnGo6v7rTy8Pp0uSdRqH/+aRJKta+yfZP/vzzLPR8SPn0ecyLWWW1laniuUSsWFLD9enb8yXllaPnlpvjBbnC1enpyaOv361ORbb77Rs1hfOffH1x/efe/0F8dWvvr+/qHbSZyJA9m25jj+gxvNmaOFv7PUUJxZt+NEDwrbS5LdPgG6MpC186FI+4CDMZC1euDp91lE1IA+lWj/0Kca44DG3L5H8+AnxoN3VydA9diHm+MfXP1sJEbqc6PRlWTNzCid7471oPy0jB9+uXM7XWLzzyGe6ZAH2JYbNyPi1OBga/+fZP1f907VPzze3Poy+u3vD+ymu+n459WNxn+5R+Of2GD8s3+DttuNzu0/d78HxbSVjv/e3nD8+6jrGhvIcs/Wx3xDycVLpeKpiHguIo5HreOtj9Mr92rttjWP/9IlLb8xFszO4/7gvrXHzBSqhYgY7jLkNR7cjHixMf5NK7il/x+pj3XX13/6fpzbYhlHindeal1b+yu2FP/Oqn0X8fKG9f+4WpPN70+O16+H8cZV0er3W0d+alf+bsef1v/o5vGPJc33ayvbL+PbkT+L7bZ1e/0PJ5/U041GcK1QrS5MRAwnH7Sun3x8bCPf2D+N//ixzfu/ja7/dPJ1IUvX9m0e/63Dty50H//OSuOf2Vb9bz9x7/1Pv2lX/tbq/7V66ni2Juv/IuKfkZYXzOpiqyfYkzcRAAAAAAAA9ohcRByIJJd/lM7l8vnV73ccjtFcqVypnrhYXrw8E/Xfyo7FUK5xp/tg0/chJrLvwzbyk+vyUxFxKOK3rNhifrpcmtnl2AEAAAAAAAAAAAAAAAAAAGCv2N/m9/+pnwd2++yAHVd/sEGHhxiEh7zDU6njI/978aQnYE/q2P6Bp5b2D/1L+4f+pf1D/9L+oX9p/9C/tH/oX9o/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NS5s2fTpbby8Pp0mp+5urQ4V756cqZYmcvPL07np8sLV/Kz5fJsqZifLs93er1SuXxlYjIWr41Xi5XqeGVp+fx8efFy9fyl+cJs8Xxx6H+JCgAAAAAAAAAAAAAAAAAAAJ4slaXluUKpVFyQaJt4J/bEaexkgKu6OnwwS3w0ulfCkVibuJlV7/aO2sVOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADW+TcAAP//CskxYQ==") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 7m56.603493697s ago: executing program 7 (id=2078): mprotect(&(0x7f00001ad000/0x3000)=nil, 0x3000, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f000053a000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x212, 0xc) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x4001, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 7m41.448216744s ago: executing program 37 (id=2078): mprotect(&(0x7f00001ad000/0x3000)=nil, 0x3000, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f000053a000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1, 0x212, 0xc) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x4001, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 4m57.577404993s ago: executing program 6 (id=2484): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0xfffffce5) r2 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) io_setup(0x8, &(0x7f0000001d80)=0x0) io_pgetevents(r5, 0x3, 0x3, &(0x7f0000001dc0)=[{}, {}, {}], &(0x7f0000001e40), 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) fcntl$getflags(r2, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r6, 0xc138fd01, &(0x7f0000000000)="040000000000000000000000380100"/38) write(r6, &(0x7f0000000138), 0x0) 4m55.441858036s ago: executing program 6 (id=2488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80) getresuid(&(0x7f0000000a40), &(0x7f0000000a80), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000040)) setregid(r6, 0x0) sendmsg$nl_route(r3, 0x0, 0x84000) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00']}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x8000, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB]) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) 4m52.720335864s ago: executing program 6 (id=2492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB='\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="000200000000000000001d0000000c000600020000000200000014002f80080001000000000008"], 0x34}}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 4m51.510110254s ago: executing program 6 (id=2495): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000440)={[{@utf8}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@shortname_lower}, {@shortname_winnt}, {@utf8}, {@utf8}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@utf8no}, {@rodir}, {@shortname_winnt}, {@uni_xlate}]}, 0x0, 0x2be, &(0x7f0000002880)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 4m48.791582782s ago: executing program 6 (id=2500): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f086dd2de0ffff200000000002000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m47.673340839s ago: executing program 6 (id=2505): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821d"}, @local=@item_4={0x3, 0x2, 0xa, "8b923659"}, @local=@item_4={0x3, 0x2, 0x2, "000400"}, @main=@item_4={0x3, 0x0, 0x8, "9b9043d6"}]}}, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, 0x0) 4m46.961654167s ago: executing program 38 (id=2505): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821d"}, @local=@item_4={0x3, 0x2, 0xa, "8b923659"}, @local=@item_4={0x3, 0x2, 0x2, "000400"}, @main=@item_4={0x3, 0x0, 0x8, "9b9043d6"}]}}, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, 0x0) 3m12.299844513s ago: executing program 5 (id=2716): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)}], 0x1, 0x3, 0x9) 3m10.926811997s ago: executing program 5 (id=2718): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2280}}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) 3m7.062811283s ago: executing program 5 (id=2722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xf, 0x0, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) 3m4.295628303s ago: executing program 5 (id=2726): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="9bbf54613447920367fff229978a5fcad5a4cf0ff3ca457672211e34bc8e3e3d5a", 0x21}], 0x1, 0x3, 0x9) 3m3.368710896s ago: executing program 5 (id=2728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 3m0.996228365s ago: executing program 5 (id=2733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1000, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 2m45.160448219s ago: executing program 39 (id=2733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1000, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 21.842532856s ago: executing program 1 (id=3006): syz_open_dev$vim2m(&(0x7f0000000280), 0x40003, 0x2) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000600)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x8000000000000001, 0x1, 0x2, 0xcc62, 0x9], 0x0, 0x0}, 0x78) msgget(0x1, 0x501) sendmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x4008040) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002a0003050002000000000000180000800c0000000df1ffffff"], 0x28}], 0x1}, 0x14008010) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) 20.592515218s ago: executing program 1 (id=3007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0xb, 0x196, 0x7ff, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0xb, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0xc, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x7, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xffdffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xf, 0x0, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) 17.703919169s ago: executing program 9 (id=3011): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) r3 = socket$phonet(0x23, 0x2, 0x1) getpeername(r3, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000180)=0x80) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(0x0, r4, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x808880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r7 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x81) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000080)={0xe, 0x101, 0x2, {0xfffffffd, 0x8, 0x5, 0xe}}) 16.46127441s ago: executing program 9 (id=3012): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0xfffffce5) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) io_setup(0x8, &(0x7f0000001d80)=0x0) io_pgetevents(r4, 0x3, 0x3, &(0x7f0000001dc0)=[{}, {}, {}], &(0x7f0000001e40), 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) fcntl$getflags(r1, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd01, &(0x7f0000000000)="040000000000000000000000380100"/38) write(r5, &(0x7f0000000138), 0x0) 15.375943627s ago: executing program 9 (id=3013): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101840, 0x92) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 14.295721934s ago: executing program 9 (id=3014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000200000000000000001d0000000c000600020000000200000014002f80080001000000000008"], 0x34}}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 12.700064633s ago: executing program 8 (id=3016): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2280}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7f, 0xb}}]}]}]}, 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0xc0, 0x128, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) 10.129764167s ago: executing program 3 (id=3020): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) r3 = socket$phonet(0x23, 0x2, 0x1) getpeername(r3, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000180)=0x80) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(0x0, r4, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x808880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r7 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x81) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000080)={0xe, 0x101, 0x2, {0xfffffffd, 0x8, 0x5, 0xe}}) 9.033184095s ago: executing program 3 (id=3021): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0xfffffce5) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) io_setup(0x8, &(0x7f0000001d80)=0x0) io_pgetevents(r4, 0x3, 0x3, &(0x7f0000001dc0)=[{}, {}, {}], &(0x7f0000001e40), 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) fcntl$getflags(r1, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd01, &(0x7f0000000000)="040000000000000000000000380100"/38) write(r5, &(0x7f0000000138), 0x0) 7.991107971s ago: executing program 3 (id=3022): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f00000002c0)={[{@init_itable_val={'init_itable', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) set_mempolicy(0x3, &(0x7f0000000480)=0x3d, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.901618448s ago: executing program 3 (id=3023): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400) dup(r2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaa00001c000000000002907800009078000000000700000000000000"], 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x8040) 5.63094611s ago: executing program 9 (id=3024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x2, 0x10000000, 0x400, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1220, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x90}}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d8", 0x1}], 0x1}, 0x20000885) 5.573303071s ago: executing program 1 (id=3025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1000, 0x1000) 5.504527643s ago: executing program 8 (id=3026): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x2, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, 0x0, 0x20000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x18, 0x0, 0x1, 0x70bd2d, 0xfffffffa, {0x22}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x24040) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x58, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x2e}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x404) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) 4.294354143s ago: executing program 8 (id=3027): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x12, 0x1, 0x0, 0x25dfdbff, {0xa, 0xa5, 0x0, 0xfd, {0x4001, 0x0, [0x0, 0x3], [0x6, 0x0, 0x7ffffffe, 0x20000000], 0x0, [0xffff, 0x300]}, 0x0, 0x1}}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x400, &(0x7f0000000a00)={[{@uni_xlate}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_win95}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uni_xlate}, {@fat=@discard}, {@shortname_mixed}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$eJzs3bFqU1EYB/AvbaqlIOkgFEXwiotTaCruEVEQCgqSwc1iU5QkFgwE2qHVyZfQV9DRVXAQV19ABKmCi906CJF6Y2NL2kRqcov9/ZZ8JOd/z3cuIYcMObl3rlFbXG4ubW5uxORkLvLlKMdWLqZjLMYj9SQAgP/JVrsd39uprHsBAEbD/g8Ax8+A+//tEbYEAAzZwN//x0bWEgAwZHfutnNplUxGNJ61Kq1K+pg+e3UpHkY9qjEbhfgR0d6R1jduzl+fTbZ9mY5KY72TX29VxnfnS1GI6d75UpLanZ+IqU7+41RUYy4Kcbp3fq5n/kRcuvjH/MUoxIf7sRz1WIztbDe/VkqSa7fm9+RP/hoHAAAAAAAAAAAAAAAAAAAAAADDUEx29Dy/p1jc7/U0n56vk4/+5wPtPZ8nH2fz2a4dAAAAAAAAAAAAAAAAAAAAjormymptoV6vPj6oePT+5dt+YwYscp15D3udwxenLnx+vv+Yp39zf/5t8eZ8lrdlwOLdxoMzl5szV45KPyurtYmD3lrfChFDmv1Vpmv/veq+g2delBder336OuiVM/gwAgAAAAAAAAAAAAAAAACAY677o9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT//394RdZrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwEAAP//Rp2fMw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, 0x0, 0x20008001) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x2, &(0x7f0000000400)="c20b", 0xb, 0x1, 0x4f3, 0x5505, 0x8b, 0x1, 0x9, 'syz1\x00'}) 4.02062453s ago: executing program 1 (id=3028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1000, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 3.048746554s ago: executing program 3 (id=3029): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) r2 = socket$phonet(0x23, 0x2, 0x1) getpeername(r2, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000180)=0x80) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(0x0, r3, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x808880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x81) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000080)={0xe, 0x101, 0x2, {0xfffffffd, 0x8, 0x5, 0xe}}) 2.641806134s ago: executing program 1 (id=3030): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0xfffffce5) r2 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) io_setup(0x8, &(0x7f0000001d80)=0x0) io_pgetevents(r5, 0x3, 0x3, &(0x7f0000001dc0)=[{}, {}, {}], &(0x7f0000001e40), 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) fcntl$getflags(r2, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r6, 0xc138fd01, &(0x7f0000000000)="040000000000000000000000380100"/38) write(r6, &(0x7f0000000138), 0x0) 2.254530504s ago: executing program 8 (id=3031): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="9bbf54613447920367fff229978a5fcad5a4cf0ff3ca457672211e34bc8e3e3d5a7b900fe042c17910d5193c305c8aca693dc50a0e075ca99c81217567895b2c33b0844b211b01567032458cd1736dfb68b543e18cd12009742aa830ceec82f597ab673c117e39bfdd14beeb12de391b2a0ebfc8d6d143848361278cd1c70b07b879b3dfabbce73d08e1238c3ec2451b3ccebd479332f16f18ec780421739d5ad0f591246e7c4df79b3f47403bed", 0xae}, {&(0x7f0000000140)="e19909081d61", 0x6}], 0x2, 0x3, 0x9) 1.914832402s ago: executing program 8 (id=3032): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f00000002c0)={[{@init_itable_val={'init_itable', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) set_mempolicy(0x3, &(0x7f0000000480)=0x3d, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.914367952s ago: executing program 3 (id=3033): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2280}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7f, 0xb}}]}]}]}, 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0xc0, 0x128, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) 810.645249ms ago: executing program 1 (id=3034): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='\xff\x00l\x1e\xa00x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): failed: -22 [ 809.356983][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.573110][T12106] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 811.601834][T12106] f81534 10-1:0.12: f81534_find_config_idx: read failed: -32 [ 811.609515][T12106] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 811.634217][T12106] f81534: probe of 10-1:0.12 failed with error -32 [ 812.029834][ T1206] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 812.232670][ T1206] usb 6-1: Using ep0 maxpacket: 16 [ 812.242888][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.254322][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.264769][ T1206] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 812.277818][ T1206] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 812.287098][ T1206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.317519][ T1206] usb 6-1: config 0 descriptor?? [ 812.731047][T12106] usb 10-1: USB disconnect, device number 8 [ 812.824165][T15097] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2322'. [ 812.961868][ T1206] usbhid 6-1:0.0: can't add hid device: -71 [ 812.979614][ T1206] usbhid: probe of 6-1:0.0 failed with error -71 [ 813.225245][ T1206] usb 6-1: USB disconnect, device number 13 [ 815.719213][T15121] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2328'. [ 816.021022][T15129] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2333'. [ 816.137448][T13859] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 816.333516][T13859] usb 10-1: Using ep0 maxpacket: 32 [ 816.562544][T13859] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 816.571174][T13859] usb 10-1: config 0 has no interface number 0 [ 816.578183][T13859] usb 10-1: config 0 interface 12 has no altsetting 0 [ 816.592041][T13859] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 816.606846][T13859] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.615656][T13859] usb 10-1: Product: syz [ 816.620002][T13859] usb 10-1: Manufacturer: syz [ 817.377022][ T6820] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 817.396864][T13859] usb 10-1: SerialNumber: syz [ 817.425140][T13859] usb 10-1: config 0 descriptor?? [ 817.574642][ T6820] usb 7-1: Using ep0 maxpacket: 16 [ 817.628169][ T6820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.672683][ T6820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.685639][ T6820] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 817.710089][ T6820] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 817.719868][ T6820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.746765][ T6820] usb 7-1: config 0 descriptor?? [ 818.375623][ T6820] usbhid 7-1:0.0: can't add hid device: -71 [ 818.396432][ T6820] usbhid: probe of 7-1:0.0 failed with error -71 [ 818.457271][ T6820] usb 7-1: USB disconnect, device number 6 [ 819.823626][T13859] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 819.844583][T13859] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 819.852100][T13859] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 819.942720][T13859] f81534: probe of 10-1:0.12 failed with error -71 [ 819.992023][T15166] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2342'. [ 820.019615][T13859] usb 10-1: USB disconnect, device number 9 [ 821.310001][T15183] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2347'. [ 821.380251][T15184] 0x000000000006-0x000000020000 : "" [ 821.389610][T15184] ftl_cs: FTL header corrupt! [ 821.418253][T15185] syzkaller0: entered promiscuous mode [ 821.455097][T15185] syzkaller0: entered allmulticast mode [ 821.862632][T14999] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 822.061608][T14999] usb 6-1: Using ep0 maxpacket: 16 [ 822.094749][T14999] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.127776][T14999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 822.169360][T14999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 822.188790][T14999] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 822.213731][T14999] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.229399][T14999] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 822.239431][T14999] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 822.248106][T14999] usb 6-1: Manufacturer: syz [ 822.259461][T14999] usb 6-1: config 0 descriptor?? [ 822.412737][T13859] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 822.433368][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 822.577137][T14999] rc_core: IR keymap rc-hauppauge not found [ 822.584957][T14999] Registered IR keymap rc-empty [ 822.590024][T14999] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 822.608074][T13859] usb 10-1: Using ep0 maxpacket: 32 [ 822.619474][T13859] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 822.635226][T13859] usb 10-1: config 0 has no interface number 0 [ 822.641520][T13859] usb 10-1: config 0 interface 12 has no altsetting 0 [ 822.650903][T14999] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 822.654448][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 822.670161][T13859] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 822.679964][T13859] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.680955][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.688855][T13859] usb 10-1: Product: syz [ 822.713140][T15189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.714263][T14999] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 822.727725][T15189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.748210][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.758489][T13859] usb 10-1: Manufacturer: syz [ 822.758514][T13859] usb 10-1: SerialNumber: syz [ 822.772521][T13859] usb 10-1: config 0 descriptor?? [ 822.781147][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 822.812343][T14999] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input74 [ 822.814776][ T8] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 822.860180][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.871477][T14999] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 822.877839][ T8] usb 7-1: config 0 descriptor?? [ 822.933041][T14999] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 822.983607][T14999] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 823.032616][T14999] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 823.072980][T14999] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 823.124326][T14999] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 823.162606][T14999] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 823.203671][T14999] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 823.253709][T14999] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 823.282747][T14999] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 823.332744][T14999] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 823.386037][T14999] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 823.474186][T14999] usb 6-1: USB disconnect, device number 14 [ 823.528621][ T8] usbhid 7-1:0.0: can't add hid device: -71 [ 823.550816][ T8] usbhid: probe of 7-1:0.0 failed with error -71 [ 823.603844][T15225] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2353'. [ 823.620348][ T8] usb 7-1: USB disconnect, device number 7 [ 825.235084][T13859] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 825.262251][T13859] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 825.270759][T15249] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2359'. [ 825.290628][T13859] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 825.311005][T13859] f81534: probe of 10-1:0.12 failed with error -71 [ 825.327051][T15249] syzkaller0: entered promiscuous mode [ 825.340769][T15249] syzkaller0: entered allmulticast mode [ 825.357351][T13859] usb 10-1: USB disconnect, device number 10 [ 826.198123][T15265] can0: slcan on ttyS3. [ 826.293655][T15265] can0 (unregistered): slcan off ttyS3. [ 826.422556][T13859] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 826.560589][T15281] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2365'. [ 826.601315][T15283] loop5: detected capacity change from 0 to 1024 [ 826.648138][T13859] usb 10-1: Using ep0 maxpacket: 16 [ 826.666775][T13859] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.697636][T15283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.709934][T13859] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 826.722354][T13859] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 826.733143][T13859] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 826.743376][T13859] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 826.759483][T13859] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 826.768952][T12106] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 826.776822][T13859] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 826.785237][T13859] usb 10-1: Manufacturer: syz [ 826.793874][T13859] usb 10-1: config 0 descriptor?? [ 827.226436][T15262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.320747][T15262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.892532][T13859] rc_core: IR keymap rc-hauppauge not found [ 827.898609][T13859] Registered IR keymap rc-empty [ 827.914192][T13859] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 827.942517][T12106] usb 9-1: Using ep0 maxpacket: 16 [ 827.947931][T13859] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 827.963877][T12106] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.992722][T12106] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.013631][T13859] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 828.040086][T12106] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 828.060311][T13859] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input75 [ 828.083734][T12106] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 828.106023][T12106] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.123230][T13859] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 828.139370][T12106] usb 9-1: config 0 descriptor?? [ 828.173317][T13859] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 828.212792][T13859] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 828.252705][T13859] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 828.303463][T13859] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 828.342781][T13859] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 828.413047][T13859] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 828.452633][T13859] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 828.503158][T13859] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 828.554325][T13859] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 828.612991][T13859] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 828.635325][T13859] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 828.686410][T13859] usb 10-1: USB disconnect, device number 11 [ 828.793849][T12106] usbhid 9-1:0.0: can't add hid device: -71 [ 828.807355][T12106] usbhid: probe of 9-1:0.0 failed with error -71 [ 828.850444][T12106] usb 9-1: USB disconnect, device number 14 [ 828.960523][T15318] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2371'. [ 828.982004][T15318] syzkaller0: entered promiscuous mode [ 828.999630][T15318] syzkaller0: entered allmulticast mode [ 829.609545][T12943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.749344][T15334] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2376'. [ 830.433015][ T27] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 830.762619][ T27] usb 9-1: Using ep0 maxpacket: 16 [ 830.845962][ T27] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.887881][ T27] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 830.972676][ T27] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 831.035604][ T27] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 831.125348][ T27] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 831.295184][ T27] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 831.311338][ T27] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 831.320855][ T27] usb 9-1: Manufacturer: syz [ 831.345718][ T27] usb 9-1: config 0 descriptor?? [ 831.416735][T15361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2380'. [ 831.480111][T15363] syzkaller0: entered promiscuous mode [ 831.523560][T15363] syzkaller0: entered allmulticast mode [ 831.577741][T15346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.593716][T15346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.783253][ T27] rc_core: IR keymap rc-hauppauge not found [ 831.795378][T12946] Bluetooth: hci4: command 0x0406 tx timeout [ 831.800023][ T27] Registered IR keymap rc-empty [ 831.806786][T12106] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 831.830955][ T27] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 831.901742][ T27] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 831.983744][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 832.042592][T12106] usb 6-1: Using ep0 maxpacket: 16 [ 832.049311][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input76 [ 832.076631][T12106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.109801][T12106] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.139901][T12106] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 832.173385][ T27] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 832.207516][T12106] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 832.232722][ T27] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 832.252038][T12106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.283960][T12106] usb 6-1: config 0 descriptor?? [ 832.301623][ T27] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 832.362748][ T27] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 832.415600][ T27] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 832.474517][ T27] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 832.522757][ T27] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 832.583054][ T27] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 832.623865][ T27] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 832.673326][ T27] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 832.726609][ T27] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 832.758686][ T27] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 832.781385][T15392] loop8: detected capacity change from 0 to 1024 [ 832.803599][ T27] usb 9-1: USB disconnect, device number 15 [ 832.857962][T15392] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 832.896185][T15397] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2386'. [ 832.955709][T12106] usbhid 6-1:0.0: can't add hid device: -71 [ 832.961955][T12106] usbhid: probe of 6-1:0.0 failed with error -71 [ 832.993838][T12106] usb 6-1: USB disconnect, device number 15 [ 834.640363][T15420] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2391'. [ 834.661797][T15420] syzkaller0: entered promiscuous mode [ 834.674744][T15420] syzkaller0: entered allmulticast mode [ 834.912858][ T8] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 835.132837][ T8] usb 10-1: Using ep0 maxpacket: 16 [ 835.371108][ T8] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.381463][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 835.393269][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 835.417198][ T8] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 836.169449][ T8] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 836.203415][ T8] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 836.234632][ T8] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 836.273371][ T8] usb 10-1: Manufacturer: syz [ 836.314632][ T8] usb 10-1: config 0 descriptor?? [ 836.574402][T15424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.633694][T15424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.872546][ T8] rc_core: IR keymap rc-hauppauge not found [ 836.903984][ T8] Registered IR keymap rc-empty [ 836.929312][ T8] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 836.976064][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.989249][ T8] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 837.034022][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 837.075118][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input77 [ 837.127954][ T8] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 837.172705][ T8] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 837.221318][ T8] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 837.274568][ T8] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 837.313784][ T8] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 837.363197][ T8] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 837.401337][ T8] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 837.436010][ T1206] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 837.443952][ T8] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 837.493624][ T8] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 837.533038][ T8] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 837.568364][ T8] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 837.577831][ T8] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 837.613256][ T8] usb 10-1: USB disconnect, device number 12 [ 837.632983][ T1206] usb 9-1: Using ep0 maxpacket: 16 [ 837.648426][ T1206] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.682514][ T1206] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.692470][ T1206] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 837.717975][ T1206] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 837.778758][ T1206] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.793159][ T1206] usb 9-1: config 0 descriptor?? [ 837.928915][T15492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2401'. [ 837.940099][T15492] syzkaller0: entered promiscuous mode [ 837.945858][T15492] syzkaller0: entered allmulticast mode [ 838.435066][ T1206] usbhid 9-1:0.0: can't add hid device: -71 [ 838.442233][ T1206] usbhid: probe of 9-1:0.0 failed with error -71 [ 838.461728][ T1206] usb 9-1: USB disconnect, device number 16 [ 839.106492][T15509] loop9: detected capacity change from 0 to 1024 [ 839.137835][T15509] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.372568][ T8] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 839.572554][ T8] usb 9-1: Using ep0 maxpacket: 16 [ 839.586397][ T8] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.618039][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 839.652372][T15519] gtp0: entered allmulticast mode [ 839.661639][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 839.703756][ T8] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 839.734825][ T8] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.775426][ T8] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 839.804253][ T8] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 839.822120][ T8] usb 9-1: Manufacturer: syz [ 839.843813][ T8] usb 9-1: config 0 descriptor?? [ 840.079322][T15531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2410'. [ 840.120953][T15510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.153039][T15510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.163730][T15531] syzkaller0: entered promiscuous mode [ 840.169454][T15531] syzkaller0: entered allmulticast mode [ 840.372557][ T8] rc_core: IR keymap rc-hauppauge not found [ 840.389236][ T8] Registered IR keymap rc-empty [ 840.409689][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 840.473330][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 840.534146][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 840.583079][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input78 [ 840.631235][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 840.702821][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 840.742671][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 840.792583][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 840.852295][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 840.902705][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 840.962620][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 841.013251][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 841.072773][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 841.132590][ T8] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 841.185678][ T8] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 841.235605][ T8] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 841.293632][ T8] usb 9-1: USB disconnect, device number 17 [ 841.882493][T13676] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 841.958417][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.103037][T13676] usb 7-1: Using ep0 maxpacket: 16 [ 842.123108][T13676] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.152369][T13676] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.188330][T13676] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 842.224505][T13676] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 842.248853][T13676] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.301694][T13676] usb 7-1: config 0 descriptor?? [ 843.008916][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2419'. [ 843.062070][T15582] syzkaller0: entered promiscuous mode [ 843.068725][T15582] syzkaller0: entered allmulticast mode [ 843.452653][ T8] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 843.672671][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 843.688795][T13676] usbhid 7-1:0.0: can't add hid device: -71 [ 843.705946][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.726846][T13676] usbhid: probe of 7-1:0.0 failed with error -71 [ 843.743587][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 843.762725][T13676] usb 7-1: USB disconnect, device number 8 [ 843.772491][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 843.805625][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 843.837312][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 843.877569][ T8] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 843.893114][ T8] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 843.911131][ T8] usb 6-1: Manufacturer: syz [ 843.939225][ T8] usb 6-1: config 0 descriptor?? [ 844.219969][T15587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.269991][T15587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.457400][T15612] loop9: detected capacity change from 0 to 256 [ 845.412816][ T8] rc_core: IR keymap rc-hauppauge not found [ 845.419200][ T8] Registered IR keymap rc-empty [ 845.511462][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 845.862343][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 845.959332][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 846.069728][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input79 [ 846.212810][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 846.302836][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 846.402886][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 846.484765][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 846.656250][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 846.720873][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 846.803569][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 846.824030][T15630] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 846.840136][T15634] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2431'. [ 846.862745][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 846.872783][T15634] syzkaller0: entered promiscuous mode [ 846.872845][T15634] syzkaller0: entered allmulticast mode [ 846.893219][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 846.923658][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 846.997772][ T8] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 847.027985][ T8] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 847.085422][ T8] usb 6-1: USB disconnect, device number 16 [ 847.516035][T15655] loop8: detected capacity change from 0 to 512 [ 847.587226][T15655] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.631614][T15655] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 847.693284][T12106] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 847.770654][T15665] loop5: detected capacity change from 0 to 1024 [ 847.830564][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.854660][T15665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.882670][T12106] usb 10-1: Using ep0 maxpacket: 16 [ 847.894032][T12106] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.915537][T12106] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.926988][T12106] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 847.940508][T12106] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 847.951087][T12106] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.963798][T12106] usb 10-1: config 0 descriptor?? [ 848.319335][T15675] overlayfs: failed to resolve './bus': -2 [ 848.640183][T12106] usbhid 10-1:0.0: can't add hid device: -71 [ 848.681571][T12106] usbhid: probe of 10-1:0.0 failed with error -71 [ 848.769287][T12106] usb 10-1: USB disconnect, device number 13 [ 848.856683][T12943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.396301][T15687] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 849.731359][T15694] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2444'. [ 849.756211][T15694] syzkaller0: entered promiscuous mode [ 849.765206][T15694] syzkaller0: entered allmulticast mode [ 849.796501][T15694] tipc: Enabling of bearer rejected, failed to enable media [ 850.265902][T15712] can0: slcan on ttyS3. [ 850.894287][T15712] can0 (unregistered): slcan off ttyS3. [ 850.944548][T15716] loop8: detected capacity change from 0 to 1024 [ 851.064590][T15716] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 851.511565][T15730] overlayfs: failed to resolve './bus': -2 [ 852.124477][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.387799][T15739] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 852.608604][T13676] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 852.817070][T15752] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2458'. [ 852.859530][T15752] syzkaller0: entered promiscuous mode [ 852.883628][T15752] syzkaller0: entered allmulticast mode [ 852.915460][T15752] tipc: Enabling of bearer rejected, failed to enable media [ 852.981224][T13676] usb 6-1: Using ep0 maxpacket: 16 [ 852.995281][T13676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.032601][T13676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.046203][T13676] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 853.077317][T13676] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 853.090076][T13676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.160657][T13676] usb 6-1: config 0 descriptor?? [ 853.624755][T15767] can0: slcan on ttyS3. [ 853.763614][T15768] can0 (unregistered): slcan off ttyS3. [ 853.826170][T13676] usbhid 6-1:0.0: can't add hid device: -71 [ 853.845460][T13676] usbhid: probe of 6-1:0.0 failed with error -71 [ 853.877686][T13676] usb 6-1: USB disconnect, device number 17 [ 855.556605][T15796] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 855.621853][T15798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2468'. [ 855.686347][T15800] syzkaller0: entered promiscuous mode [ 855.718651][T15800] syzkaller0: entered allmulticast mode [ 855.783316][T15798] tipc: Enabling of bearer rejected, failed to enable media [ 857.195805][T12106] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 857.382553][T12106] usb 10-1: Using ep0 maxpacket: 16 [ 857.407362][T12106] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.430840][T15849] loop8: detected capacity change from 0 to 1024 [ 857.437613][T12106] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.458076][T12106] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 857.490312][T12106] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 857.519557][T15849] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 857.535657][T12106] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.573991][T12106] usb 10-1: config 0 descriptor?? [ 857.651238][T15854] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2478'. [ 857.699607][T15854] syzkaller0: entered promiscuous mode [ 857.712719][T15854] syzkaller0: entered allmulticast mode [ 857.771184][T15854] tipc: Enabling of bearer rejected, failed to enable media [ 858.723376][T15865] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 858.784068][T12106] usbhid 10-1:0.0: can't add hid device: -71 [ 858.799175][T12106] usbhid: probe of 10-1:0.0 failed with error -71 [ 858.812905][T12106] usb 10-1: USB disconnect, device number 14 [ 859.002038][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.128524][T15873] loop6: detected capacity change from 0 to 2048 [ 859.208827][T15873] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 859.221288][T15873] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.485983][T12974] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.655082][T15889] loop9: detected capacity change from 0 to 128 [ 859.808710][T15889] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 859.828085][T15889] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 860.542709][T15886] can0: slcan on ttyS3. [ 861.105900][T15894] can0 (unregistered): slcan off ttyS3. [ 861.953571][T15914] loop6: detected capacity change from 0 to 2048 [ 862.134287][T15914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.178653][T15914] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 862.393204][T13671] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 862.957595][T15920] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2490'. [ 862.990852][T15920] syzkaller0: entered promiscuous mode [ 863.002687][T15920] syzkaller0: entered allmulticast mode [ 863.030342][T15920] tipc: Enabling of bearer rejected, failed to enable media [ 863.653122][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 863.998708][T15933] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 864.349716][T12974] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.461918][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 864.484116][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.632449][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.642606][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 864.655645][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 864.664890][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.684937][ T9] usb 6-1: config 0 descriptor?? [ 864.912317][T15939] loop9: detected capacity change from 0 to 2048 [ 865.055132][T15944] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2492'. [ 865.108834][T15939] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 865.156405][T15939] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 865.294890][T15939] fs-verity: sha512 using implementation "sha512-avx2" [ 865.428642][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0016/input/input80 [ 865.632238][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.795995][T15951] loop6: detected capacity change from 0 to 128 [ 867.215245][T15972] autofs4:pid:15972:autofs_fill_super: called with bogus options [ 867.353137][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2499'. [ 867.390491][T15973] syzkaller0: entered promiscuous mode [ 867.407580][T15973] syzkaller0: entered allmulticast mode [ 867.444517][T15973] tipc: Enabling of bearer rejected, failed to enable media [ 868.239161][ T9] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 868.261331][T12974] FAT-fs (loop6): error, invalid access to FAT (entry 0xffff0000) [ 868.341520][ T9] usb 6-1: USB disconnect, device number 18 [ 868.368043][T12974] FAT-fs (loop6): Filesystem has been set read-only [ 868.447679][T12974] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 868.469798][T12974] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 868.645472][T15988] loop5: detected capacity change from 0 to 2048 [ 868.916288][T15994] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 869.039394][T15988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 869.110418][T15988] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 869.347750][T16002] can0: slcan on ttyS3. [ 869.552075][T12943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.605873][ T9539] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.911335][T16005] can0 (unregistered): slcan off ttyS3. [ 869.965698][ T9539] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.116929][ T9539] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.287402][ T9539] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.682327][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.692638][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.806238][ T9539] tipc: Left network mode [ 871.212356][T16038] loop8: detected capacity change from 0 to 1024 [ 871.263786][T16038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 871.324351][T12946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 871.341542][T12946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 871.351867][T16031] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2510'. [ 871.361223][T12946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 871.382813][T12946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 871.395026][T16038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 871.432584][T12946] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 871.443341][T12946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 871.504506][T16031] syzkaller0: entered promiscuous mode [ 871.510080][T16031] syzkaller0: entered allmulticast mode [ 871.702879][T16031] tipc: Enabling of bearer rejected, failed to enable media [ 872.484226][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.669668][T16040] lo speed is unknown, defaulting to 1000 [ 872.967270][T16073] loop8: detected capacity change from 0 to 4096 [ 873.024245][T16073] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.257655][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.562779][T12946] Bluetooth: hci2: command tx timeout [ 873.809857][T16089] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 873.868590][T16091] syzkaller0: entered promiscuous mode [ 873.868621][T16091] syzkaller0: entered allmulticast mode [ 874.516863][T16106] can0: slcan on ttyS3. [ 874.638204][T16040] chnl_net:caif_netlink_parms(): no params data found [ 874.683348][T16107] can0 (unregistered): slcan off ttyS3. [ 874.769149][ T9539] hsr_slave_0: left promiscuous mode [ 874.798205][ T9539] hsr_slave_1: left promiscuous mode [ 874.816929][ T9539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.835174][ T9539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.855431][ T9539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.873561][ T9539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.889734][ T9539] bridge_slave_1: left allmulticast mode [ 874.905996][ T9539] bridge_slave_1: left promiscuous mode [ 874.920834][ T9539] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.951173][ T9539] bridge_slave_0: left allmulticast mode [ 874.971172][ T9539] bridge_slave_0: left promiscuous mode [ 874.993044][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2521'. [ 875.004389][ T9539] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.122185][ T9539] veth1_macvtap: left promiscuous mode [ 875.134838][ T9539] veth0_macvtap: left promiscuous mode [ 875.150999][ T9539] veth1_vlan: left promiscuous mode [ 875.171212][ T9539] veth0_vlan: left promiscuous mode [ 875.632725][T12946] Bluetooth: hci2: command tx timeout [ 875.895965][T16136] 0x000000000000-0x000000020000 : "" [ 875.968285][T16136] ftl_cs: FTL header not found. [ 877.712707][T12946] Bluetooth: hci2: command tx timeout [ 877.963799][ T9539] team0 (unregistering): Port device team_slave_1 removed [ 878.065822][ T9539] team0 (unregistering): Port device team_slave_0 removed [ 878.157714][ T9539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.260770][ T9539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.901699][ T9539] bond0 (unregistering): Released all slaves [ 879.061491][T16115] tipc: Enabling of bearer rejected, failed to enable media [ 879.372140][T16040] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.438912][T16040] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.458770][T16040] bridge_slave_0: entered allmulticast mode [ 879.470350][T16040] bridge_slave_0: entered promiscuous mode [ 879.505166][T16040] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.532592][T16040] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.559514][T16040] bridge_slave_1: entered allmulticast mode [ 879.581292][T16040] bridge_slave_1: entered promiscuous mode [ 879.818350][T12946] Bluetooth: hci2: command tx timeout [ 879.850637][T16167] syzkaller0: entered promiscuous mode [ 879.880460][T16167] syzkaller0: entered allmulticast mode [ 879.936978][T16040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.970759][T16177] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 879.974508][T16040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.053888][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.157141][T16040] team0: Port device team_slave_0 added [ 880.181423][T16040] team0: Port device team_slave_1 added [ 880.271594][T16040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.305143][T16040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.345397][T16040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.375258][T16040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.392489][T16040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.418907][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.488634][T16040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.725719][T16040] hsr_slave_0: entered promiscuous mode [ 880.764430][T16040] hsr_slave_1: entered promiscuous mode [ 880.841402][T16040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 880.866233][T16199] loop8: detected capacity change from 0 to 2048 [ 880.877858][T16040] Cannot create hsr debugfs directory [ 880.988817][T16199] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 881.065257][T16205] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2533'. [ 881.084304][T16199] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 881.140452][T16201] syzkaller0: entered promiscuous mode [ 881.158321][T16201] syzkaller0: entered allmulticast mode [ 881.429556][T16209] can0: slcan on ttyS3. [ 881.904501][ T28] audit: type=1800 audit(1786087209.419:66): pid=16211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2532" name="file0" dev="loop8" ino=13 res=0 errno=0 [ 881.945567][T16209] can0 (unregistered): slcan off ttyS3. [ 882.090610][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.105469][T16201] tipc: Enabling of bearer rejected, failed to enable media [ 882.751509][T16234] syzkaller0: entered promiscuous mode [ 882.770570][T16234] syzkaller0: entered allmulticast mode [ 882.898244][T16238] tmpfs: Too few inodes for current use [ 884.782256][T16250] binder: BINDER_SET_CONTEXT_MGR already set [ 884.816933][T16250] binder: 16249:16250 ioctl 4018620d 200000000480 returned -16 [ 885.025184][T16253] loop9: detected capacity change from 0 to 2048 [ 885.070580][T16253] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 885.102833][T16253] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 885.326930][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2542'. [ 885.478265][T16262] loop8: detected capacity change from 0 to 4096 [ 885.829846][T16262] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 885.903124][T16268] syzkaller0: entered promiscuous mode [ 885.919015][T16268] syzkaller0: entered allmulticast mode [ 886.143806][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.337365][ T28] audit: type=1800 audit(1786087213.889:67): pid=16276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2543" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 886.361142][T16276] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #15: comm syz.8.2543: corrupted inode contents [ 886.409977][T16276] EXT4-fs error (device loop8): ext4_dirty_inode:6144: inode #15: comm syz.8.2543: mark_inode_dirty error [ 886.515157][T16276] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #15: comm syz.8.2543: corrupted inode contents [ 886.554658][T16276] EXT4-fs error (device loop8): __ext4_ext_dirty:208: inode #15: comm syz.8.2543: mark_inode_dirty error [ 886.596962][T16276] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #15: comm syz.8.2543: corrupted inode contents [ 886.628848][T16276] EXT4-fs error (device loop8): __ext4_ext_dirty:208: inode #15: comm syz.8.2543: mark_inode_dirty error [ 886.646263][T16040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 886.652127][T16276] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #15: comm syz.8.2543: corrupted inode contents [ 886.709215][T16276] EXT4-fs error (device loop8): ext4_truncate:4302: inode #15: comm syz.8.2543: mark_inode_dirty error [ 886.756520][T16040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 886.794363][T16276] EXT4-fs error (device loop8) in ext4_setattr:5683: Corrupt filesystem [ 886.825859][T16040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 886.887238][T16040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 887.131000][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.250667][T16299] loop9: detected capacity change from 0 to 256 [ 887.757670][ T27] hid-generic 0005:04F3:5505.0017: item fetching failed at offset 0/2 [ 887.863714][ T27] hid-generic: probe of 0005:04F3:5505.0017 failed with error -22 [ 888.331941][T16304] syzkaller0: entered promiscuous mode [ 888.374243][T16304] syzkaller0: entered allmulticast mode [ 888.439855][T16040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.688625][T16312] binder: BINDER_SET_CONTEXT_MGR already set [ 888.715399][T16312] binder: 16311:16312 ioctl 4018620d 200000000480 returned -16 [ 888.756954][T16040] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.874789][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.882079][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.996751][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.004096][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.326266][T16318] loop8: detected capacity change from 0 to 2048 [ 889.365999][T16040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 889.378531][T16318] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 889.419094][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2552'. [ 889.446290][T16318] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 889.550269][T16319] syzkaller0: entered promiscuous mode [ 889.587476][T16319] syzkaller0: entered allmulticast mode [ 890.540789][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.149312][T16040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.196709][T16040] veth0_vlan: entered promiscuous mode [ 892.253342][T16040] veth1_vlan: entered promiscuous mode [ 893.134746][T16040] veth0_macvtap: entered promiscuous mode [ 893.223927][T16040] veth1_macvtap: entered promiscuous mode [ 893.315140][T16040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.336885][T16040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.360550][T16040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.380775][T16040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.404262][T16040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.424934][T16040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.444761][T16040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.493861][T16040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.511380][T16377] loop8: detected capacity change from 0 to 128 [ 893.544871][T16040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.586347][T16040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.661549][T16040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.744973][T16382] loop5: detected capacity change from 0 to 256 [ 893.992544][T16040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.235193][T16377] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 894.298422][T16040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.400670][T16040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 894.508707][T16377] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 894.528299][T16040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.588179][T16040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.651457][T16040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.732843][T16040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.907336][T16369] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2559'. [ 895.355259][ T9539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.415024][ T9539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.639074][ T9538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.732246][ T9538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.805933][T16391] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2562'. [ 895.834516][T16391] syzkaller0: entered promiscuous mode [ 895.840215][T16391] syzkaller0: entered allmulticast mode [ 896.238981][T16400] loop9: detected capacity change from 0 to 128 [ 896.353736][T16400] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 897.602774][T16400] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 898.257110][T13671] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 899.321709][T16440] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 899.642165][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2569'. [ 899.663005][T16447] 8021q: VLANs not supported on vcan0 [ 900.050862][T16459] loop5: detected capacity change from 0 to 256 [ 902.488437][T16465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2572'. [ 902.561815][T16465] syzkaller0: entered promiscuous mode [ 902.570015][T16465] syzkaller0: entered allmulticast mode [ 903.707434][T16481] loop5: detected capacity change from 0 to 128 [ 903.778976][T16481] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 903.822985][T16481] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 904.287147][T12943] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 904.381413][T16492] syzkaller0: entered promiscuous mode [ 904.418682][T16492] syzkaller0: entered allmulticast mode [ 905.423283][T16522] loop1: detected capacity change from 0 to 256 [ 907.059022][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2582'. [ 907.647782][T13275] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 907.787014][T16538] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2584'. [ 907.882106][T16538] syzkaller0: entered promiscuous mode [ 907.889112][T16538] syzkaller0: entered allmulticast mode [ 908.081263][T16545] loop1: detected capacity change from 0 to 128 [ 908.151658][T16545] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 908.185803][T16550] syzkaller0: entered promiscuous mode [ 908.191715][T16550] syzkaller0: entered allmulticast mode [ 908.233992][T16545] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 908.330016][T16551] can0: slcan on ttyS3. [ 908.653001][T16551] can0 (unregistered): slcan off ttyS3. [ 908.736522][T16040] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 909.335816][T16577] loop1: detected capacity change from 0 to 256 [ 911.953174][T16588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2594'. [ 912.031290][T16588] vlan2: entered allmulticast mode [ 912.072763][T16588] veth0_to_batadv: entered allmulticast mode [ 912.392301][T16601] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2597'. [ 912.419654][T16601] syzkaller0: entered promiscuous mode [ 912.442665][T16601] syzkaller0: entered allmulticast mode [ 912.601273][T16603] syzkaller0: entered promiscuous mode [ 912.607148][T16603] syzkaller0: entered allmulticast mode [ 912.903215][T16609] loop9: detected capacity change from 0 to 128 [ 913.103110][T16609] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 913.117899][T16609] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 915.185941][T13671] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 916.287584][T16639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2607'. [ 916.324302][T16639] syzkaller0: entered promiscuous mode [ 916.352148][T16639] syzkaller0: entered allmulticast mode [ 917.917378][T16668] loop8: detected capacity change from 0 to 2048 [ 917.975653][T16670] block2mtd: parameter too long [ 918.071370][T16668] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.142725][T16668] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 919.494776][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.799098][T16700] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2622'. [ 919.844094][T16700] syzkaller0: entered promiscuous mode [ 919.860114][T16700] syzkaller0: entered allmulticast mode [ 920.229293][T16708] syzkaller0: entered promiscuous mode [ 920.237094][T16708] syzkaller0: entered allmulticast mode [ 922.217081][T16740] loop8: detected capacity change from 0 to 128 [ 922.311377][T16740] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 922.324674][ T5839] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 922.533160][ T5839] usb 10-1: Using ep0 maxpacket: 32 [ 922.638927][ T5839] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.747450][T16740] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 922.907384][ T5839] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 922.994288][ T5839] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 923.032793][ T5839] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.085060][ T5839] usb 10-1: Product: syz [ 923.089538][ T5839] usb 10-1: Manufacturer: syz [ 923.178518][ T5839] usb 10-1: SerialNumber: syz [ 923.215364][ T5839] usb 10-1: config 0 descriptor?? [ 923.319206][T13275] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 923.339813][T16753] loop1: detected capacity change from 0 to 2048 [ 923.448866][T16753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 923.471362][T16753] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 923.748956][T16761] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2632'. [ 923.785444][T16761] syzkaller0: entered promiscuous mode [ 923.791374][T16761] syzkaller0: entered allmulticast mode [ 924.456625][T16040] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.808095][T16774] syzkaller0: entered promiscuous mode [ 924.850800][T16774] syzkaller0: entered allmulticast mode [ 926.024437][ T5839] usb 10-1: USB disconnect, device number 15 [ 926.395687][T16806] loop9: detected capacity change from 0 to 2048 [ 926.477511][T16806] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.518987][T16806] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 928.076816][T16821] syz_tun: entered allmulticast mode [ 928.529913][T16815] syz_tun: left allmulticast mode [ 929.315810][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.442773][T16828] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2643'. [ 929.457780][T16828] syzkaller0: entered promiscuous mode [ 929.482710][T16828] syzkaller0: entered allmulticast mode [ 929.938226][T16835] loop9: detected capacity change from 0 to 256 [ 930.370791][T13859] hid-generic 0005:04F3:5505.0018: item fetching failed at offset 0/2 [ 930.575431][T13859] hid-generic: probe of 0005:04F3:5505.0018 failed with error -22 [ 930.755372][T16838] syzkaller0: entered promiscuous mode [ 930.760942][T16838] syzkaller0: entered allmulticast mode [ 932.262731][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.271603][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.854623][T16866] can0: slcan on ttyS3. [ 933.135099][T16866] can0 (unregistered): slcan off ttyS3. [ 933.851976][T16877] loop9: detected capacity change from 0 to 524287998 [ 934.963635][T16889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2655'. [ 935.043165][T16889] syzkaller0: entered promiscuous mode [ 935.094357][T16889] syzkaller0: entered allmulticast mode [ 935.489377][T16897] loop1: detected capacity change from 0 to 256 [ 938.873850][T16922] syzkaller0: entered promiscuous mode [ 938.879415][T16922] syzkaller0: entered allmulticast mode [ 939.513211][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2665'. [ 939.559194][T16944] syzkaller0: entered promiscuous mode [ 939.573477][T16944] syzkaller0: entered allmulticast mode [ 940.144819][T16959] can0: slcan on ttyS3. [ 940.228665][T16962] loop5: detected capacity change from 0 to 256 [ 940.250898][T13676] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 940.513012][T13676] usb 2-1: Using ep0 maxpacket: 32 [ 940.678753][T13676] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 940.773346][ T9] hid-generic 0005:04F3:5505.0019: item fetching failed at offset 0/2 [ 940.853042][T13676] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.900345][ T9] hid-generic: probe of 0005:04F3:5505.0019 failed with error -22 [ 940.932436][T13676] usb 2-1: config 0 has no interface number 0 [ 940.970354][T13676] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 941.032492][T13676] usb 2-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 941.127214][T13676] usb 2-1: config 0 interface 12 has no altsetting 0 [ 941.186585][T13676] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 941.226463][T13676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.281740][T13676] usb 2-1: Product: syz [ 941.303992][T13676] usb 2-1: Manufacturer: syz [ 941.327681][T13676] usb 2-1: SerialNumber: syz [ 941.359420][T13676] usb 2-1: config 0 descriptor?? [ 941.396374][T13676] f81534 2-1:0.12: required endpoints missing [ 942.603916][T16970] can0 (unregistered): slcan off ttyS3. [ 944.466841][T17001] syzkaller0: entered promiscuous mode [ 944.515268][T17001] syzkaller0: entered allmulticast mode [ 944.577410][T17008] loop9: detected capacity change from 0 to 512 [ 944.583460][ T1206] usb 2-1: USB disconnect, device number 45 [ 944.670897][T17008] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 944.752767][T17008] ext4 filesystem being mounted at /123/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 946.521994][T17030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2676'. [ 947.860656][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.153646][T17054] loop1: detected capacity change from 0 to 128 [ 949.033364][T17054] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 949.046646][T17054] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 949.872542][ T1206] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 950.322558][ T1206] usb 9-1: Using ep0 maxpacket: 32 [ 950.335026][ T1206] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 951.528988][ T1206] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.543704][ T1206] usb 9-1: config 0 has no interface number 0 [ 951.550036][ T1206] usb 9-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 951.560438][ T1206] usb 9-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 951.584520][T16040] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 951.594968][ T1206] usb 9-1: config 0 interface 12 has no altsetting 0 [ 951.652940][ T1206] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 951.658823][T17085] loop5: detected capacity change from 0 to 2048 [ 951.662068][ T1206] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.662097][ T1206] usb 9-1: Product: syz [ 951.785360][T17085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.802023][ T1206] usb 9-1: Manufacturer: syz [ 951.808365][T17085] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 951.851915][ T1206] usb 9-1: SerialNumber: syz [ 951.897996][ T1206] usb 9-1: config 0 descriptor?? [ 952.005624][ T1206] f81534 9-1:0.12: required endpoints missing [ 952.022749][T17095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2688'. [ 952.094291][T17095] syzkaller0: entered promiscuous mode [ 952.099872][T17095] syzkaller0: entered allmulticast mode [ 952.726732][T12943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.803086][T17106] loop9: detected capacity change from 0 to 128 [ 952.997089][T17106] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 953.011557][T17106] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 954.307547][T17117] loop5: detected capacity change from 0 to 128 [ 954.346669][T17117] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 954.360583][T17117] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 954.511851][T12943] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 955.522543][T17100] Bluetooth: hci0: command 0x0406 tx timeout [ 955.585439][T12106] usb 9-1: USB disconnect, device number 18 [ 955.637480][T13671] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 955.939514][T17130] loop8: detected capacity change from 0 to 1024 [ 956.006997][T17130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 956.661022][T17130] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.583405][T17148] syzkaller0: entered promiscuous mode [ 957.589115][T17148] syzkaller0: entered allmulticast mode [ 957.741056][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.024528][T17165] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2700'. [ 958.232185][T17169] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2699'. [ 958.274919][T17169] syzkaller0: entered promiscuous mode [ 958.281099][T17169] syzkaller0: entered allmulticast mode [ 958.291631][T17174] loop5: detected capacity change from 0 to 128 [ 958.330163][T17174] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 958.356623][T17174] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 958.598235][T12943] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 959.362673][T17182] syz_tun: entered allmulticast mode [ 960.794431][T17206] syzkaller0: entered promiscuous mode [ 960.830210][T17206] syzkaller0: entered allmulticast mode [ 961.054830][T17219] loop8: detected capacity change from 0 to 128 [ 961.250500][T17219] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 961.269092][T17219] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 962.276132][T17229] loop1: detected capacity change from 0 to 128 [ 963.677840][T17229] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 963.697035][T17229] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 963.901829][T13275] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 966.452061][T16040] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 968.024859][T17271] loop8: detected capacity change from 0 to 2048 [ 968.318054][T17272] loop1: detected capacity change from 0 to 128 [ 972.135356][T17271] EXT4-fs warning (device loop8): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop8. [ 972.166340][T17272] EXT4-fs: error -4 creating inode table initialization thread [ 972.175111][T17272] EXT4-fs (loop1): mount failed [ 972.262281][T17275] syzkaller0: entered promiscuous mode [ 972.323747][T17275] syzkaller0: entered allmulticast mode [ 973.301139][T17289] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 973.486577][T17294] block2mtd: error: cannot open device ›¿Ta4G’gÿò)—Š_ÊÕ¤ÏóÊEvr!4¼Ž>=Z [ 973.525578][T17296] loop1: detected capacity change from 0 to 128 [ 973.573403][T17296] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 973.587783][T17296] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.826370][T17314] loop9: detected capacity change from 0 to 2048 [ 974.903968][T17310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2728'. [ 975.058974][T17314] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.096811][T17314] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 975.198921][T16040] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 976.654105][T17334] can0: slcan on ttyS3. [ 977.353062][T17339] loop5: detected capacity change from 0 to 128 [ 977.391627][T17339] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 977.405760][T17339] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 977.502014][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.521664][T17334] can0 (unregistered): slcan off ttyS3. [ 977.721879][T17344] block2mtd: error: cannot open device ›¿Ta4G’gÿò)—Š_ÊÕ¤ÏóÊEvr!4¼Ž>=Z [ 977.830533][T17349] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 977.855923][T17342] syzkaller0: entered promiscuous mode [ 977.861619][T17342] syzkaller0: entered allmulticast mode [ 979.423386][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2741'. [ 980.777877][T17393] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2742'. [ 981.481166][T17399] loop1: detected capacity change from 0 to 128 [ 981.662914][T17399] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 981.677129][T17399] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.317385][T17407] can0: slcan on ttyS3. [ 983.123754][T17407] can0 (unregistered): slcan off ttyS3. [ 984.396698][T17416] syzkaller0: entered promiscuous mode [ 984.464098][T17420] loop8: detected capacity change from 0 to 256 [ 984.635834][T17416] syzkaller0: entered allmulticast mode [ 984.754060][T16040] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 984.802558][ T5839] hid-generic 0005:04F3:5505.001A: item fetching failed at offset 0/2 [ 985.048299][ T5839] hid-generic: probe of 0005:04F3:5505.001A failed with error -22 [ 987.517780][T17444] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2752'. [ 989.249931][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2757'. [ 989.491217][T17472] syzkaller0: entered promiscuous mode [ 989.531348][T17472] syzkaller0: entered allmulticast mode [ 990.909446][T17488] loop9: detected capacity change from 0 to 4096 [ 990.944991][T17488] EXT4-fs: inline encryption not supported [ 990.998494][T17488] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 991.051033][T17488] EXT4-fs (loop9): Test dummy encryption mode enabled [ 991.467129][T17488] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.048920][T17504] loop8: detected capacity change from 0 to 256 [ 992.768880][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.561866][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.574957][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.216602][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 995.296549][T17526] can0: slcan on ttyS3. [ 995.362958][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 995.375384][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 995.396102][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 995.413159][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 995.420835][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 995.533467][T17528] can0 (unregistered): slcan off ttyS3. [ 995.588476][T17337] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 995.963606][T17534] can0: slcan on ttyS3. [ 996.508454][T17525] lo speed is unknown, defaulting to 1000 [ 996.574729][T17534] can0 (unregistered): slcan off ttyS3. [ 997.416694][T17552] loop9: detected capacity change from 0 to 2048 [ 997.554813][ T5782] Bluetooth: hci3: command tx timeout [ 997.696908][T17552] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 997.724722][T17552] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 998.279940][T17525] chnl_net:caif_netlink_parms(): no params data found [ 998.731352][ T3498] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.178816][ T3498] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.519976][ T3498] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.634087][ T5782] Bluetooth: hci3: command tx timeout [ 999.705562][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.856092][ T3498] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.983088][T17525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.012195][T17525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.030489][T17525] bridge_slave_0: entered allmulticast mode [ 1000.039703][T17525] bridge_slave_0: entered promiscuous mode [ 1000.080652][T17525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.113482][T17525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.121277][T17525] bridge_slave_1: entered allmulticast mode [ 1000.164902][T17525] bridge_slave_1: entered promiscuous mode [ 1000.309371][T17525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.386035][T17525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.247410][T17525] team0: Port device team_slave_0 added [ 1001.338745][T17525] team0: Port device team_slave_1 added [ 1001.559149][T17525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.566397][T17525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.705597][T17525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.717098][ T5782] Bluetooth: hci3: command tx timeout [ 1002.607710][T17602] slcan: can't register candev [ 1002.612948][T17602] Falling back ldisc for ttyS3. [ 1003.224695][T17525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.231762][T17525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.311373][T17525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.812732][ T5782] Bluetooth: hci3: command tx timeout [ 1004.376411][T17525] hsr_slave_0: entered promiscuous mode [ 1004.408741][T17525] hsr_slave_1: entered promiscuous mode [ 1004.417669][T17525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1004.432711][T17525] Cannot create hsr debugfs directory [ 1004.934308][T17626] loop9: detected capacity change from 0 to 2048 [ 1004.998427][T17626] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.412563][T17634] can0: slcan on ttyS3. [ 1007.226854][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.315661][T17666] loop8: detected capacity change from 0 to 128 [ 1007.383394][T17666] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1007.397740][T17666] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.083389][T17638] can0 (unregistered): slcan off ttyS3. [ 1009.458522][T13275] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1011.119689][T17680] slcan: can't register candev [ 1011.126576][T17680] Falling back ldisc for ttyS3. [ 1013.529563][T17710] loop1: detected capacity change from 0 to 256 [ 1013.703662][ T3498] hsr_slave_0: left promiscuous mode [ 1013.725963][ T3498] hsr_slave_1: left promiscuous mode [ 1013.751790][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.781914][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.820143][ T8] hid-generic 0005:04F3:5505.001B: item fetching failed at offset 0/2 [ 1013.857238][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.872630][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.893347][ T3498] bridge_slave_1: left allmulticast mode [ 1013.899114][ T3498] bridge_slave_1: left promiscuous mode [ 1013.905345][ T8] hid-generic: probe of 0005:04F3:5505.001B failed with error -22 [ 1013.936819][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.965945][ T3498] bridge_slave_0: left allmulticast mode [ 1013.971805][ T3498] bridge_slave_0: left promiscuous mode [ 1014.003568][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.069184][ T3498] veth1_macvtap: left promiscuous mode [ 1014.077981][ T3498] veth0_macvtap: left promiscuous mode [ 1014.106083][ T3498] veth1_vlan: left promiscuous mode [ 1014.118369][ T3498] veth0_vlan: left promiscuous mode [ 1014.465945][ T3498] bond1 (unregistering): Released all slaves [ 1015.721082][ T3498] team0 (unregistering): Port device team_slave_1 removed [ 1015.821431][ T3498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.917295][ T3498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.617754][ T3498] bond0 (unregistering): Released all slaves [ 1017.637367][ T8] lo speed is unknown, defaulting to 1000 [ 1018.408632][T17738] can0: slcan on ttyS3. [ 1018.563250][T17741] can0 (unregistered): slcan off ttyS3. [ 1018.762848][T17525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1018.804886][T17525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1018.924172][T17748] can0: slcan on ttyS3. [ 1018.928783][T17525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1019.024742][T17525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1019.074431][T17749] can0 (unregistered): slcan off ttyS3. [ 1020.033097][T17525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.145809][T17525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.196739][ T9531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.204082][ T9531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.239539][ T9539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.246954][ T9539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.382135][T17525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1020.451107][T17525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1021.810684][T17525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.620539][T17525] veth0_vlan: entered promiscuous mode [ 1022.694722][T17525] veth1_vlan: entered promiscuous mode [ 1022.873107][T17525] veth0_macvtap: entered promiscuous mode [ 1022.902355][T17525] veth1_macvtap: entered promiscuous mode [ 1022.977481][T17789] syzkaller0: entered promiscuous mode [ 1022.990428][T17791] loop8: detected capacity change from 0 to 256 [ 1022.997894][T17789] syzkaller0: entered allmulticast mode [ 1023.014660][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1023.054783][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.104943][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1023.124399][ T5782] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 1023.143789][T13402] hid-generic 0005:04F3:5505.001C: item fetching failed at offset 0/2 [ 1023.154544][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.197104][T13402] hid-generic: probe of 0005:04F3:5505.001C failed with error -22 [ 1023.211262][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1023.245765][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.281610][T17525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1023.338160][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.372515][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.388007][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.419193][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.439853][T17525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.460903][T17525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.485405][T17525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1023.624609][T17525] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.652211][T17525] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.672113][T17525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.705162][T17525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.004794][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.034403][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.164328][T17814] loop9: detected capacity change from 0 to 2048 [ 1024.194249][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.205936][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.298765][T17814] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.413145][T17814] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.793222][T17825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2764'. [ 1024.959420][T17831] can0: slcan on ttyS3. [ 1025.094572][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.128424][T17831] can0 (unregistered): slcan off ttyS3. [ 1026.291721][T17840] loop3: detected capacity change from 0 to 4096 [ 1026.299697][T17840] EXT4-fs: inline encryption not supported [ 1026.318002][T17840] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1026.331495][T17840] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1026.394800][T17840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.476415][T17525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.733707][T17859] syzkaller0: entered promiscuous mode [ 1027.739707][T17859] syzkaller0: entered allmulticast mode [ 1028.866375][T17879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2816'. [ 1030.971209][T17907] loop9: detected capacity change from 0 to 4096 [ 1030.993870][T17907] EXT4-fs: inline encryption not supported [ 1031.047733][T17907] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1031.081430][T17907] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1031.176843][T17907] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.685234][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.805602][T17927] can0: slcan on ttyS3. [ 1034.200085][T17929] can0 (unregistered): slcan off ttyS3. [ 1034.247842][T17935] syzkaller0: entered promiscuous mode [ 1034.264826][T17935] syzkaller0: entered allmulticast mode [ 1035.650909][T17958] loop8: detected capacity change from 0 to 2048 [ 1035.857076][T17958] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1037.447980][T17972] loop9: detected capacity change from 0 to 256 [ 1038.994571][T17962] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1040.297040][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.970701][T17978] loop9: detected capacity change from 0 to 1024 [ 1041.025407][T17978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1041.135723][T17978] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1042.329443][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.936287][T18012] loop3: detected capacity change from 0 to 2048 [ 1042.997733][T18012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.020442][T18012] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1043.135163][T18024] loop1: detected capacity change from 0 to 256 [ 1043.356610][T18029] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2843'. [ 1043.556587][ T5839] hid-generic 0005:04F3:5505.001D: item fetching failed at offset 0/2 [ 1043.861917][ T5839] hid-generic: probe of 0005:04F3:5505.001D failed with error -22 [ 1044.696159][T17525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.750580][T18034] can0: slcan on ttyS3. [ 1044.854026][T18034] can0 (unregistered): slcan off ttyS3. [ 1045.008279][T18038] binder: BINDER_SET_CONTEXT_MGR already set [ 1045.014491][T18038] binder: 18037:18038 ioctl 4018620d 200000004a80 returned -16 [ 1045.045344][T18039] loop9: detected capacity change from 0 to 256 [ 1046.442576][T18051] loop8: detected capacity change from 0 to 2048 [ 1046.548308][T18051] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.617413][T18051] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.642578][T13873] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1047.589566][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.612456][T13873] usb 4-1: Using ep0 maxpacket: 16 [ 1047.619628][T13873] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.643674][T13873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1047.662720][T13873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1047.690330][T13873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1047.712515][T13873] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1047.749737][T13873] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1047.772492][T13873] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1047.797222][T13873] usb 4-1: Manufacturer: syz [ 1047.833724][T13873] usb 4-1: config 0 descriptor?? [ 1048.349554][T18049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.380414][T18069] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2853'. [ 1048.520213][T18049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.112377][T13873] rc_core: IR keymap rc-hauppauge not found [ 1049.118378][T13873] Registered IR keymap rc-empty [ 1049.134941][T13873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1049.170990][T13873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1049.235000][T13873] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1049.274465][T13873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input85 [ 1049.291277][T18077] loop8: detected capacity change from 0 to 128 [ 1049.328799][T13873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1049.371567][T18077] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1049.393138][T13873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1049.432504][T13873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1049.472880][T13873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1049.484695][T18077] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1049.504341][T13873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1049.543249][T13873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1049.599444][T13873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1049.663577][T13873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1049.712740][T13873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1049.755302][T13873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1049.769187][T18085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2855'. [ 1049.807284][T13873] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1049.829280][T18085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2855'. [ 1049.840588][T13873] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1049.885634][T13873] usb 4-1: USB disconnect, device number 56 [ 1050.128437][T13275] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1050.628445][T18098] loop3: detected capacity change from 0 to 4096 [ 1050.633124][T18097] can0: slcan on ttyS3. [ 1050.683869][T18098] EXT4-fs: inline encryption not supported [ 1050.695123][T18097] can0 (unregistered): slcan off ttyS3. [ 1050.785494][T18098] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1050.829232][T18098] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1050.850606][T18098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.963038][T17525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.381988][T18120] loop3: detected capacity change from 0 to 2048 [ 1052.484578][T18120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.535222][T18120] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.563152][T18123] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.569284][T18123] binder: 18122:18123 ioctl 4018620d 200000004a80 returned -16 [ 1052.965136][T18133] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2864'. [ 1053.001010][T18133] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2864'. [ 1053.259488][T17525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.290436][ T5820] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1053.482479][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 1053.503965][ T5820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.525302][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1053.561541][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1053.597752][ T5820] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1053.608283][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1053.633900][ T5820] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1053.662557][ T5820] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1053.681002][ T5820] usb 2-1: Manufacturer: syz [ 1053.707575][ T5820] usb 2-1: config 0 descriptor?? [ 1054.270818][T18132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.519847][T18132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.657152][T18152] slcan: can't register candev [ 1054.662569][T18152] Falling back ldisc for ttyS3. [ 1054.806424][ T5820] rc_core: IR keymap rc-hauppauge not found [ 1054.826584][ T5820] Registered IR keymap rc-empty [ 1054.872477][ T5820] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1054.932562][ T5820] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1055.001662][ T5820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1055.015579][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.021945][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.085729][ T5820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input86 [ 1055.187914][ T5820] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1055.207813][T18158] loop9: detected capacity change from 0 to 4096 [ 1055.215547][T18158] EXT4-fs: inline encryption not supported [ 1055.238157][T18158] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1055.247292][ T5820] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1055.272842][ T5820] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1055.292416][T18158] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1055.316026][ T5820] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1055.352445][T18158] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.382551][ T5820] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1055.674288][ T5820] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1055.739218][ T5820] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1056.088481][ T5820] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1056.252816][ T5820] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1056.319677][ T5820] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1056.391723][ T5820] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1056.437931][ T5820] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1056.451704][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.500296][ T5820] usb 2-1: USB disconnect, device number 46 [ 1056.910287][T18176] loop1: detected capacity change from 0 to 256 [ 1058.502698][ T8] hid-generic 0005:04F3:5505.001E: item fetching failed at offset 0/2 [ 1058.517863][ T8] hid-generic: probe of 0005:04F3:5505.001E failed with error -22 [ 1062.404158][T18161] syz_tun: entered allmulticast mode [ 1062.409868][T18161] syz_tun: left allmulticast mode [ 1062.452739][T18184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2873'. [ 1062.480701][T18187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2873'. [ 1062.490308][T18189] netlink: 27 bytes leftover after parsing attributes in process `syz.9.2874'. [ 1063.245671][T18211] can0: slcan on ttyS3. [ 1063.262675][T13492] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1063.663976][T18211] can0 (unregistered): slcan off ttyS3. [ 1064.062858][T13492] usb 4-1: Using ep0 maxpacket: 16 [ 1064.080741][T13492] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.119568][T13492] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1064.153797][T13492] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1064.207442][T13492] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1064.241592][T13492] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1064.305969][T13492] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1064.328428][T13492] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1064.362746][T13492] usb 4-1: Manufacturer: syz [ 1064.381559][T13492] usb 4-1: config 0 descriptor?? [ 1064.493065][T18224] loop9: detected capacity change from 0 to 256 [ 1064.791977][T13492] rc_core: IR keymap rc-hauppauge not found [ 1064.803017][T18205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.834011][T18205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.841894][T13492] Registered IR keymap rc-empty [ 1064.847712][T13492] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1064.902994][T13492] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1064.953480][T13492] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1065.012982][T13492] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input87 [ 1065.071623][T13492] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1065.114755][T18230] loop8: detected capacity change from 0 to 256 [ 1065.163743][T13492] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1065.222647][T13492] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1065.292886][T13492] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1065.364545][T13492] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1065.452540][T13492] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1065.522476][T13492] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1065.593241][T13492] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1065.662507][T13492] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1065.732873][T13492] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1065.786003][T13492] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1065.843423][T13492] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1065.905934][T13492] usb 4-1: USB disconnect, device number 57 [ 1066.191664][T18238] syz_tun: entered allmulticast mode [ 1066.647630][T18243] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2884'. [ 1066.794478][T18236] syz_tun: left allmulticast mode [ 1067.488226][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2885'. [ 1067.513407][T18247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2885'. [ 1068.006769][T18259] loop1: detected capacity change from 0 to 1024 [ 1068.036070][T18259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1068.154742][T18259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1070.344126][T16040] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.619387][T18285] loop1: detected capacity change from 0 to 128 [ 1070.856799][T18285] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1070.876138][T18285] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.927928][T16040] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1073.693105][T18312] loop1: detected capacity change from 0 to 1024 [ 1073.713683][T18312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1073.791817][T18312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.122249][T16040] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.600673][T18324] loop1: detected capacity change from 0 to 256 [ 1075.711131][ T5839] hid-generic 0005:04F3:5505.001F: item fetching failed at offset 0/2 [ 1075.767201][ T5839] hid-generic: probe of 0005:04F3:5505.001F failed with error -22 [ 1077.105607][T18305] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2895'. [ 1077.132484][T18309] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2895'. [ 1077.398454][T18330] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2900'. [ 1077.493359][T18333] loop8: detected capacity change from 0 to 128 [ 1077.723070][T13873] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1077.770655][T18333] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1077.791474][T18333] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1078.269133][T13873] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.510569][T13873] usb 10-1: config 0 has no interfaces? [ 1078.520760][T13873] usb 10-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1078.571878][T13873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.613404][T13873] usb 10-1: Product: syz [ 1078.617753][T13873] usb 10-1: Manufacturer: syz [ 1078.664739][T13873] usb 10-1: SerialNumber: syz [ 1078.724115][T13873] usb 10-1: config 0 descriptor?? [ 1078.787248][T18341] loop3: detected capacity change from 0 to 256 [ 1079.359974][T18344] netdevsim netdevsim9: Firmware load for '../file0/file0' refused, path contains '..' component [ 1079.880648][T13275] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1081.059328][T13676] usb 10-1: USB disconnect, device number 16 [ 1081.270770][T18360] netlink: 'syz.8.2904': attribute type 1 has an invalid length. [ 1081.491922][T18360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1081.605636][T18369] vlan2: entered allmulticast mode [ 1081.610888][T18369] bond2: entered allmulticast mode [ 1082.287977][T18360] bond2: (slave geneve2): making interface the new active one [ 1082.313780][T18360] geneve2: entered allmulticast mode [ 1082.325011][T18360] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1082.394107][T18360] syz.8.2904 (18360) used greatest stack depth: 19224 bytes left [ 1082.609237][T18379] loop8: detected capacity change from 0 to 1024 [ 1082.625053][T18379] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1082.629422][T18378] loop9: detected capacity change from 0 to 1024 [ 1082.727178][T18379] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.794589][T18378] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1083.626349][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.880750][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.665351][ T5782] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1087.528329][T18430] loop3: detected capacity change from 0 to 4096 [ 1087.543850][T18430] EXT4-fs: inline encryption not supported [ 1087.559469][T18430] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1087.572090][T18430] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1087.640870][T18430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.568389][T17525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.707476][T18459] loop3: detected capacity change from 0 to 256 [ 1091.907943][T18462] loop9: detected capacity change from 0 to 1024 [ 1091.930936][T18462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1092.125567][T13402] hid-generic 0005:04F3:5505.0020: item fetching failed at offset 0/2 [ 1092.211196][T18462] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1092.244891][T13402] hid-generic: probe of 0005:04F3:5505.0020 failed with error -22 [ 1093.035764][T18472] loop8: detected capacity change from 0 to 256 [ 1093.135928][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.622063][T18478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.724086][T18492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2920'. [ 1094.895677][T18492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2920'. [ 1095.474527][T18502] syzkaller0: entered promiscuous mode [ 1095.480143][T18502] syzkaller0: entered allmulticast mode [ 1096.306856][T18509] syz_tun: entered allmulticast mode [ 1096.853395][T18505] syz_tun: left allmulticast mode [ 1097.049907][T18514] syzkaller0: entered promiscuous mode [ 1097.093143][T18514] syzkaller0: entered allmulticast mode [ 1100.812464][ T5839] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 1101.005175][ T5839] usb 9-1: Invalid ep0 maxpacket: 64 [ 1101.180875][ T5839] usb 9-1: new low-speed USB device number 20 using dummy_hcd [ 1101.377300][ T5839] usb 9-1: Invalid ep0 maxpacket: 64 [ 1101.383005][ T5839] usb usb9-port1: attempt power cycle [ 1101.812483][ T5839] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 1101.855225][ T5839] usb 9-1: Invalid ep0 maxpacket: 64 [ 1102.016418][ T5839] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 1102.076608][ T5839] usb 9-1: Invalid ep0 maxpacket: 64 [ 1102.082271][ T5839] usb usb9-port1: unable to enumerate USB device [ 1103.232853][T18549] syzkaller0: entered promiscuous mode [ 1103.238451][T18549] syzkaller0: entered allmulticast mode [ 1103.954437][T18563] syz_tun: entered allmulticast mode [ 1104.223538][T18574] loop8: detected capacity change from 0 to 2048 [ 1104.236573][T18556] syz_tun: left allmulticast mode [ 1104.495381][T18574] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1104.532445][T13402] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1104.541625][T18574] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.812121][T13402] usb 10-1: device descriptor read/64, error -71 [ 1105.565187][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.706726][T13402] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1105.883474][T13402] usb 10-1: device descriptor read/64, error -71 [ 1106.022768][T13402] usb usb10-port1: attempt power cycle [ 1106.571687][T13402] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1106.648356][T18603] loop8: detected capacity change from 0 to 256 [ 1106.791605][T18606] loop1: detected capacity change from 0 to 256 [ 1106.827380][ T5839] hid-generic 0005:04F3:5505.0021: item fetching failed at offset 0/2 [ 1106.909904][ T5839] hid-generic: probe of 0005:04F3:5505.0021 failed with error -22 [ 1108.348125][T13402] usb 10-1: device descriptor read/8, error -71 [ 1108.588567][T18623] syzkaller0: entered promiscuous mode [ 1108.652544][T18623] syzkaller0: entered allmulticast mode [ 1109.294152][T18642] syz_tun: entered allmulticast mode [ 1109.769593][T18633] syz_tun: left allmulticast mode [ 1110.312605][T18651] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1110.335444][T18651] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1110.391296][T18651] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1110.420954][T18651] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1110.472132][T18651] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1110.501966][T18651] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1110.692559][T18661] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2947'. [ 1110.724503][T18651] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1110.827386][T18651] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1110.910295][T18651] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1111.373271][T18651] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1112.352520][T12946] Bluetooth: hci4: command 0x0406 tx timeout [ 1112.433126][T12946] Bluetooth: hci0: command 0x0406 tx timeout [ 1112.512533][T12946] Bluetooth: hci2: command 0x0c1a tx timeout [ 1112.832675][T12946] Bluetooth: hci3: command 0x0c1a tx timeout [ 1113.181652][T18689] loop8: detected capacity change from 0 to 1024 [ 1113.196556][T18689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1113.337575][T18689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.769891][T18703] syzkaller0: entered promiscuous mode [ 1113.798899][T18703] syzkaller0: entered allmulticast mode [ 1114.502394][T12946] Bluetooth: hci4: command 0x0406 tx timeout [ 1114.519766][T12946] Bluetooth: hci0: command 0x0406 tx timeout [ 1114.593116][T12946] Bluetooth: hci2: command 0x0c1a tx timeout [ 1114.758221][T18714] syz_tun: entered allmulticast mode [ 1114.772051][T18713] syz_tun: left allmulticast mode [ 1114.912423][T12946] Bluetooth: hci3: command 0x0c1a tx timeout [ 1115.196973][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.701728][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.701880][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.756111][T12946] Bluetooth: hci2: command 0x0c1a tx timeout [ 1116.939019][T18743] syzkaller0: entered promiscuous mode [ 1116.958159][T18743] syzkaller0: entered allmulticast mode [ 1117.001376][T12946] Bluetooth: hci3: command 0x0c1a tx timeout [ 1117.307624][T18746] loop1: detected capacity change from 0 to 256 [ 1117.655450][T18759] loop3: detected capacity change from 0 to 1024 [ 1117.705785][T18759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1117.993455][T18759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1118.390387][T18773] loop1: detected capacity change from 0 to 2048 [ 1118.696505][T18773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1118.747541][T18773] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.476995][ T5782] Bluetooth: hci3: command 0x0c1a tx timeout [ 1121.097393][T18819] loop9: detected capacity change from 0 to 128 [ 1121.124531][T18819] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1121.139537][T18819] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.318181][T17525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.457372][T18821] syz_tun: entered allmulticast mode [ 1121.473471][T18817] syz_tun: left allmulticast mode [ 1121.775489][T16040] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.072131][T18828] loop3: detected capacity change from 0 to 256 [ 1122.206551][T13671] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1122.879217][T18848] autofs4:pid:18848:autofs_fill_super: called with bogus options [ 1124.192530][T12946] Bluetooth: hci3: command 0x0c1a tx timeout [ 1125.391925][T18870] syz_tun: entered allmulticast mode [ 1125.663938][T18868] syz_tun: left allmulticast mode [ 1125.990034][T18876] loop3: detected capacity change from 0 to 2048 [ 1126.131812][T18876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1126.229633][T18876] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.958730][T17525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.969624][T18895] syzkaller0: entered promiscuous mode [ 1131.975664][T18895] syzkaller0: entered allmulticast mode [ 1132.020897][T18908] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2994'. [ 1132.481669][T18920] loop3: detected capacity change from 0 to 128 [ 1132.551449][T18923] autofs4:pid:18923:autofs_fill_super: called with bogus options [ 1132.608232][T18920] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1132.622137][T18920] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1132.856210][T17525] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1133.008199][T18929] binder: BINDER_SET_CONTEXT_MGR already set [ 1133.047203][T18929] binder: 18927:18929 ioctl 4018620d 200000004a80 returned -16 [ 1133.546273][T13676] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1133.743233][T13676] usb 10-1: Using ep0 maxpacket: 32 [ 1133.936009][T13676] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1133.947317][T13676] usb 10-1: config 0 has no interface number 0 [ 1133.954204][T13676] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1133.969350][T13676] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1133.985418][ T8] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1133.993777][T13676] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.006432][T18950] can0: slcan on ttyS3. [ 1134.024130][T13676] usb 10-1: Product: syz [ 1134.048878][T13676] usb 10-1: Manufacturer: syz [ 1134.055755][T13676] usb 10-1: SerialNumber: syz [ 1134.076628][T13676] usb 10-1: config 0 descriptor?? [ 1134.113602][T18950] can0 (unregistered): slcan off ttyS3. [ 1134.299728][ T8] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8 has an invalid bInterval 0, changing to 4 [ 1134.362472][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1134.466741][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1134.491084][ T8] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1134.530193][ T8] usb 4-1: Product: syz [ 1134.590284][ T8] usb 4-1: Manufacturer: syz [ 1134.702427][ T8] usb 4-1: SerialNumber: syz [ 1134.733821][ T8] usb 4-1: config 0 descriptor?? [ 1134.798540][ T8] usb 4-1: selecting invalid altsetting 0 [ 1134.858424][T18957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3004'. [ 1136.717621][T13676] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1136.752707][T13676] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1136.761191][T13676] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1136.782691][T13676] f81534: probe of 10-1:0.12 failed with error -71 [ 1136.850781][T13676] usb 10-1: USB disconnect, device number 21 [ 1136.957143][T18993] loop9: detected capacity change from 0 to 1024 [ 1137.003946][T18993] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1137.216522][T18993] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1137.652838][ T8] usb 4-1: USB disconnect, device number 58 [ 1139.009488][T13671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.171671][T19028] loop9: detected capacity change from 0 to 128 [ 1139.206566][T19028] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1139.220228][T19028] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1139.380758][T13671] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1139.608305][T19038] autofs4:pid:19038:autofs_fill_super: called with bogus options [ 1144.172848][T18996] syzkaller0: entered promiscuous mode [ 1144.178451][T18996] syzkaller0: entered allmulticast mode [ 1144.185679][T19015] syz_tun: entered allmulticast mode [ 1144.191589][T19015] syz_tun: left allmulticast mode [ 1144.200360][T19051] netlink: 27 bytes leftover after parsing attributes in process `syz.9.3014'. [ 1145.682097][ T6820] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1145.873433][T19066] loop3: detected capacity change from 0 to 128 [ 1145.923083][ T6820] usb 9-1: Using ep0 maxpacket: 32 [ 1145.930899][T19066] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1145.945031][T19066] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1145.978310][ T6820] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1145.992658][ T6820] usb 9-1: config 0 has no interface number 0 [ 1145.998924][ T6820] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1146.067829][ T6820] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1146.116533][ T6820] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.126587][ T6820] usb 9-1: Product: syz [ 1146.130977][ T6820] usb 9-1: Manufacturer: syz [ 1146.140548][ T6820] usb 9-1: SerialNumber: syz [ 1146.169008][ T6820] usb 9-1: config 0 descriptor?? [ 1146.685903][T17525] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1146.868867][T19074] binder: 19073:19074 ioctl c0306201 0 returned -14 [ 1147.021355][T19077] autofs4:pid:19077:autofs_fill_super: called with bogus options [ 1147.826264][ C1] vkms_vblank_simulate: vblank timer overrun [ 1148.921553][ T6820] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 1148.929606][ T6820] f81534 9-1:0.12: f81534_find_config_idx: read failed: -32 [ 1148.941315][ T6820] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1148.949447][ T6820] f81534: probe of 9-1:0.12 failed with error -32 [ 1149.227849][T19083] loop3: detected capacity change from 0 to 4096 [ 1149.260596][T19083] EXT4-fs: inline encryption not supported [ 1149.324691][T19083] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1149.347006][T19083] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1149.401543][T19083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1150.174036][T17525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.452328][T19092] syz_tun: entered allmulticast mode [ 1151.458073][T19092] syz_tun: left allmulticast mode [ 1151.505883][T13402] usb 9-1: USB disconnect, device number 23 [ 1151.690493][T19110] loop1: detected capacity change from 0 to 128 [ 1151.927787][T19110] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1151.994380][T19110] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.067267][T16040] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1153.239901][T19134] loop8: detected capacity change from 0 to 256 [ 1153.589555][T19138] loop1: detected capacity change from 0 to 128 [ 1153.642169][T19138] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1153.666235][T19138] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.142909][T19143] autofs4:pid:19143:autofs_fill_super: called with bogus options [ 1154.857823][T16040] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1155.402695][T12946] Bluetooth: hci3: command 0x0c1a tx timeout [ 1155.966165][ C1] vkms_vblank_simulate: vblank timer overrun [ 1156.160267][T19157] loop8: detected capacity change from 0 to 4096 [ 1156.185133][T19157] EXT4-fs: inline encryption not supported [ 1156.217997][T19157] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1156.233909][T19157] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1156.264511][T19157] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.734502][ T8] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1156.980164][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1157.018864][ T8] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1157.033213][ T8] usb 2-1: config 0 has no interface number 0 [ 1157.039688][ T8] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1157.071984][T13275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.094071][ T8] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1157.103806][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.111893][ T8] usb 2-1: Product: syz [ 1157.116911][ T8] usb 2-1: Manufacturer: syz [ 1157.121592][ T8] usb 2-1: SerialNumber: syz [ 1157.130722][ C1] vkms_vblank_simulate: vblank timer overrun [ 1157.158764][ T8] usb 2-1: config 0 descriptor?? [ 1157.794766][ C1] [ 1157.797187][ C1] ================================ [ 1157.802329][ C1] WARNING: inconsistent lock state [ 1157.807497][ C1] syzkaller #0 Not tainted [ 1157.811954][ C1] -------------------------------- [ 1157.817136][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 1157.824017][ C1] ksoftirqd/1/22 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 1157.830303][ C1] ffff888033f2e130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 1157.839862][ C1] {SOFTIRQ-ON-W} state was registered at: [ 1157.845638][ C1] lock_acquire+0x19e/0x420 [ 1157.850353][ C1] lock_sock_nested+0x48/0x100 [ 1157.855285][ C1] x25_bind+0x20a/0x460 [ 1157.859598][ C1] __sys_bind+0x2f0/0x3f0 [ 1157.864153][ C1] __x64_sys_bind+0x7a/0x90 [ 1157.868796][ C1] do_syscall_64+0x55/0xb0 [ 1157.873423][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1157.879569][ C1] irq event stamp: 4367864 [ 1157.884034][ C1] hardirqs last enabled at (4367864): [] __local_bh_enable_ip+0x13a/0x1c0 [ 1157.894462][ C1] hardirqs last disabled at (4367863): [] __local_bh_enable_ip+0xdb/0x1c0 [ 1157.904772][ C1] softirqs last enabled at (4367814): [] run_ksoftirqd+0xa8/0x100 [ 1157.914291][ C1] softirqs last disabled at (4367819): [] run_ksoftirqd+0xa8/0x100 [ 1157.923810][ C1] [ 1157.923810][ C1] other info that might help us debug this: [ 1157.932036][ C1] Possible unsafe locking scenario: [ 1157.932036][ C1] [ 1157.939525][ C1] CPU0 [ 1157.942970][ C1] ---- [ 1157.946290][ C1] lock(sk_lock-AF_X25); [ 1157.950669][ C1] [ 1157.954167][ C1] lock(sk_lock-AF_X25); [ 1157.958774][ C1] [ 1157.958774][ C1] *** DEADLOCK *** [ 1157.958774][ C1] [ 1157.967132][ C1] 1 lock held by ksoftirqd/1/22: [ 1157.972113][ C1] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x34/0x230 [ 1157.982378][ C1] [ 1157.982378][ C1] stack backtrace: [ 1157.988316][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 1157.995675][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1158.005798][ C1] Call Trace: [ 1158.009177][ C1] [ 1158.012284][ C1] dump_stack_lvl+0x18c/0x250 [ 1158.017272][ C1] ? show_regs_print_info+0x20/0x20 [ 1158.022579][ C1] ? ret_from_fork_asm+0x11/0x20 [ 1158.027695][ C1] valid_state+0x13b/0x1d0 [ 1158.032166][ C1] mark_lock_irq+0xad/0x900 [ 1158.036816][ C1] ? stack_trace_save+0xaa/0x100 [ 1158.041842][ C1] ? save_trace+0xcd0/0xcd0 [ 1158.046479][ C1] ? mark_lock+0x94/0x320 [ 1158.050856][ C1] ? save_trace+0x5d/0xcd0 [ 1158.055433][ C1] mark_lock+0x208/0x320 [ 1158.059836][ C1] __lock_acquire+0xcfc/0x7d80 [ 1158.064693][ C1] ? verify_lock_unused+0x140/0x140 [ 1158.069962][ C1] ? verify_lock_unused+0x140/0x140 [ 1158.075240][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1158.081287][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1158.086379][ C1] ? lock_chain_count+0x20/0x20 [ 1158.091312][ C1] lock_acquire+0x19e/0x420 [ 1158.095904][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 1158.101115][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1158.106564][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1158.111987][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1158.117264][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1158.122835][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1158.127747][ C1] lock_sock_nested+0x48/0x100 [ 1158.132602][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 1158.137775][ C1] x25_kill_by_neigh+0x10d/0x250 [ 1158.142782][ C1] x25_lapb_receive_frame+0x1a7/0xef0 [ 1158.148293][ C1] ? netif_receive_skb_core+0x34/0x230 [ 1158.153818][ C1] ? netif_receive_skb_core+0x34/0x230 [ 1158.159351][ C1] ? x25_device_event+0x280/0x280 [ 1158.164506][ C1] netif_receive_skb_core+0x16a/0x230 [ 1158.169973][ C1] lapbeth_napi_poll+0x42/0x80 [ 1158.174850][ C1] __napi_poll+0xbb/0x460 [ 1158.179311][ C1] net_rx_action+0x65f/0xcc0 [ 1158.184054][ C1] ? net_tx_action+0x950/0x950 [ 1158.188952][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1158.195005][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 1158.200360][ C1] ? lock_chain_count+0x20/0x20 [ 1158.205278][ C1] handle_softirqs+0x27d/0x820 [ 1158.210105][ C1] ? run_ksoftirqd+0xa8/0x100 [ 1158.214846][ C1] ? do_softirq+0x1a0/0x1a0 [ 1158.219410][ C1] run_ksoftirqd+0xa8/0x100 [ 1158.223970][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1158.229222][ C1] ? takeover_tasklets+0x770/0x770 [ 1158.234399][ C1] ? takeover_tasklets+0x770/0x770 [ 1158.239574][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1158.244837][ C1] smpboot_thread_fn+0x651/0x9f0 [ 1158.249861][ C1] ? smpboot_thread_fn+0x4d/0x9f0 [ 1158.254969][ C1] kthread+0x2fa/0x390 [ 1158.259112][ C1] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 1158.265599][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1158.270257][ C1] ret_from_fork+0x48/0x80 [ 1158.274762][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1158.279412][ C1] ret_from_fork_asm+0x11/0x20 [ 1158.284246][ C1] [ 1158.287422][ C1] vkms_vblank_simulate: vblank timer overrun [ 1158.293528][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3546 [ 1158.302383][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 22, name: ksoftirqd/1 [ 1158.311367][ C1] preempt_count: 100, expected: 0 [ 1158.316490][ C1] RCU nest depth: 1, expected: 0 [ 1158.321471][ C1] INFO: lockdep is turned off. [ 1158.326317][ C1] Preemption disabled at: [ 1158.326331][ C1] [] handle_softirqs+0x101/0x820 [ 1158.337292][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 1158.344884][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1158.355008][ C1] Call Trace: [ 1158.358376][ C1] [ 1158.361361][ C1] dump_stack_lvl+0x18c/0x250 [ 1158.366227][ C1] ? show_regs_print_info+0x20/0x20 [ 1158.371514][ C1] ? load_image+0x420/0x420 [ 1158.376127][ C1] ? handle_softirqs+0x101/0x820 [ 1158.381121][ C1] __might_resched+0x48d/0x5f0 [ 1158.385960][ C1] ? handle_softirqs+0x101/0x820 [ 1158.391042][ C1] ? __might_sleep+0xe0/0xe0 [ 1158.395798][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1158.401272][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1158.406710][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1158.412073][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1158.417548][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1158.422549][ C1] lock_sock_nested+0x5d/0x100 [ 1158.427372][ C1] x25_kill_by_neigh+0x10d/0x250 [ 1158.432384][ C1] x25_lapb_receive_frame+0x1a7/0xef0 [ 1158.437812][ C1] ? netif_receive_skb_core+0x34/0x230 [ 1158.443340][ C1] ? netif_receive_skb_core+0x34/0x230 [ 1158.448876][ C1] ? x25_device_event+0x280/0x280 [ 1158.453961][ C1] netif_receive_skb_core+0x16a/0x230 [ 1158.459517][ C1] lapbeth_napi_poll+0x42/0x80 [ 1158.464342][ C1] __napi_poll+0xbb/0x460 [ 1158.468754][ C1] net_rx_action+0x65f/0xcc0 [ 1158.473520][ C1] ? net_tx_action+0x950/0x950 [ 1158.478331][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1158.484468][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 1158.489796][ C1] ? lock_chain_count+0x20/0x20 [ 1158.494700][ C1] handle_softirqs+0x27d/0x820 [ 1158.499512][ C1] ? run_ksoftirqd+0xa8/0x100 [ 1158.504229][ C1] ? do_softirq+0x1a0/0x1a0 [ 1158.508794][ C1] run_ksoftirqd+0xa8/0x100 [ 1158.513346][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1158.518581][ C1] ? takeover_tasklets+0x770/0x770 [ 1158.523736][ C1] ? takeover_tasklets+0x770/0x770 [ 1158.528891][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1158.534147][ C1] smpboot_thread_fn+0x651/0x9f0 [ 1158.539129][ C1] ? smpboot_thread_fn+0x4d/0x9f0 [ 1158.544197][ C1] kthread+0x2fa/0x390 [ 1158.548325][ C1] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 1158.554817][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1158.559458][ C1] ret_from_fork+0x48/0x80 [ 1158.563956][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1158.568594][ C1] ret_from_fork_asm+0x11/0x20 [ 1158.573428][ C1] [ 1158.576534][ C1] vkms_vblank_simulate: vblank timer overrun [ 1158.783582][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.966533][ T8] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 1159.974376][ T8] f81534 2-1:0.12: f81534_find_config_idx: read failed: -32 [ 1159.981862][ T8] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1159.988379][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.992004][ T8] f81534: probe of 2-1:0.12 failed with error -32 [ 1161.388702][T19170] syzkaller0: entered promiscuous mode [ 1161.407468][T19170] syzkaller0: entered allmulticast mode [ 1161.472758][T13402] usb 2-1: USB disconnect, device number 47