last executing test programs: 12m21.290608377s ago: executing program 0 (id=1415): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821d"}, @local=@item_4={0x3, 0x2, 0xa, "8b923659"}, @local=@item_4={0x3, 0x2, 0x2, "000400"}, @main=@item_4={0x3, 0x0, 0x8, "9b9043d6"}]}}, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0x400, 0x5}) 12m17.99586767s ago: executing program 0 (id=1425): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0a390305c905"], 0x6) bind$x25(r1, &(0x7f0000000100), 0x12) listen(r1, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 12m17.007839785s ago: executing program 0 (id=1428): socket$alg(0x26, 0x5, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x4008, 0x0) 12m15.907973972s ago: executing program 0 (id=1433): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821d"}, @local=@item_4={0x3, 0x2, 0xa, "8b923659"}, @local=@item_4={0x3, 0x2, 0x2, "000400"}, @main=@item_4={0x3, 0x0, 0x8, "9b9043d6"}]}}, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0x400, 0x5}) 12m12.618559995s ago: executing program 2 (id=1446): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a5", 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0xb, 0x77, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x7, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8006, 0x5, 0xfffffff3, 0x10, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x9, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0xfff, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x2005, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x1200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x1000006, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x2], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x0, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2440, 0xfff]}, 0x45c) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 12m12.471580538s ago: executing program 0 (id=1448): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f00000009c0)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@quota}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0) setpgid(r0, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 12m12.199363065s ago: executing program 0 (id=1450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000040000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000480080004"], 0xe4}}, 0x0) 12m11.532832912s ago: executing program 1 (id=1452): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x5}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 12m11.405837395s ago: executing program 2 (id=1453): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x194, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x175, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x1d, @random="f8d9c3537204b0b478308bf7aa17d3cb35af8f0b1ac7ef800153d9b5ed"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0xc9, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa02cdfcf53398a468e407d653243c60d2b68860d62aed527c8ada6bd87dc42f8543857aaf627e0f869a34019a279bcf04ec91adfbb97013032d2b4e48865c7a65aca24bd9c4684815873149f0e3b5346511e46b8fb3e4b25f72018092f67ff89ba79db5666c88b753cfb28fd093fde041dea91a27dd937547308666b5ff26df707"}, {0xdd, 0x3d, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9"}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 12m11.265873708s ago: executing program 2 (id=1454): timer_create(0xfffffff9, 0x0, &(0x7f0000000040)) r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) capget(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000004000)={0x2020}, 0x2020) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @local, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100"], 0x22}}], 0x1, 0x800) tkill(r0, 0x7) 12m11.004788725s ago: executing program 1 (id=1455): socket$alg(0x26, 0x5, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x4008, 0x0) 12m10.390040791s ago: executing program 2 (id=1457): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}, 0x10000000}], 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) write$cgroup_devices(r3, &(0x7f0000000200)={'c', ' *:* ', 'rm\x00'}, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000180)) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) sendfile(r0, r3, 0x0, 0x106f) 12m10.00578066s ago: executing program 1 (id=1458): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2280}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7f, 0xb}}]}]}]}, 0x50}}, 0x0) 12m9.519456072s ago: executing program 2 (id=1459): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f00000009c0)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@quota}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 12m9.275497699s ago: executing program 2 (id=1460): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x1d0, 0x52, 0x510, 0x100, 0x4, {0xa}, [@typed={0x8, 0xcd, 0x0, 0x0, @pid}, @generic="bbfa6cad9cf18b064394abe64c2752cb35010318adba4179f5d8f4d56bf37eac7c87dbae260b7de6f2b3410798b61029180370920e4f800152324ed6677c221b3f0222f3591ce8474f9ddc170ef50f2af6e4b6796fd14a117bcaad921bffa2b614cfd64977818b2027a0fa4c31d8d0e2a9a9acf27e429687de555bbbb27ec8c094319b812b75c68eff65e8a67445093e982ff553e663c36a671366e536a1f96e77113d3fe2bb472115621674fa877756e92eeb1db4274fec71fdfcac077b3cd1db28f4090da37a171105e6ebe6be02fd02326d75a2f8af3ba0eaa214f46e9c3f6cdad6a152c531", @generic="3e2b0ee15d993019b5e259c1cd17e980f9aebd4073084bc96454a18fbb51b2854c571987053e52367b437c36475de220221559ffc38e27241191a1beb74ecac9755a70f1e59e4cf83621833844819e997ee9a68540cebc86716847d851b4dbee35281c2520ad3d0a5fdc21c6cca6652ff0af46a4108322d92cb04b22e2d00e1a02dcba55007c8f750b7f19026870652f571bc8df86c5aa7356f9fa6a304f8b44b7c97cf0f0bc1f332522344ee915e3bc180efd123e25a8255619ff2df8df4af4780305807cd634591702"]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12m8.82503822s ago: executing program 1 (id=1461): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x10120, 0x0, 0x0) 12m8.716935853s ago: executing program 1 (id=1462): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f00000009c0)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@quota}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0) setpgid(r0, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 12m8.612214135s ago: executing program 1 (id=1463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 11m56.895757649s ago: executing program 32 (id=1450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000040000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000480080004"], 0xe4}}, 0x0) 11m54.164702118s ago: executing program 33 (id=1460): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x1d0, 0x52, 0x510, 0x100, 0x4, {0xa}, [@typed={0x8, 0xcd, 0x0, 0x0, @pid}, @generic="bbfa6cad9cf18b064394abe64c2752cb35010318adba4179f5d8f4d56bf37eac7c87dbae260b7de6f2b3410798b61029180370920e4f800152324ed6677c221b3f0222f3591ce8474f9ddc170ef50f2af6e4b6796fd14a117bcaad921bffa2b614cfd64977818b2027a0fa4c31d8d0e2a9a9acf27e429687de555bbbb27ec8c094319b812b75c68eff65e8a67445093e982ff553e663c36a671366e536a1f96e77113d3fe2bb472115621674fa877756e92eeb1db4274fec71fdfcac077b3cd1db28f4090da37a171105e6ebe6be02fd02326d75a2f8af3ba0eaa214f46e9c3f6cdad6a152c531", @generic="3e2b0ee15d993019b5e259c1cd17e980f9aebd4073084bc96454a18fbb51b2854c571987053e52367b437c36475de220221559ffc38e27241191a1beb74ecac9755a70f1e59e4cf83621833844819e997ee9a68540cebc86716847d851b4dbee35281c2520ad3d0a5fdc21c6cca6652ff0af46a4108322d92cb04b22e2d00e1a02dcba55007c8f750b7f19026870652f571bc8df86c5aa7356f9fa6a304f8b44b7c97cf0f0bc1f332522344ee915e3bc180efd123e25a8255619ff2df8df4af4780305807cd634591702"]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m53.230140741s ago: executing program 34 (id=1463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 4m44.166864617s ago: executing program 6 (id=2474): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) dup(r3) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaa00001c000000000002907800009078000000000700000000000000"], 0x0) r5 = socket(0x10, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x8040) 4m41.496560363s ago: executing program 6 (id=2478): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4m40.576414096s ago: executing program 6 (id=2482): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x12, 0x1, 0x0, 0x25dfdbff, {0xa, 0xa5, 0x0, 0xfd, {0x4001, 0x0, [0x0, 0x3], [0x6, 0x0, 0x7ffffffe, 0x20000000], 0x0, [0xffff, 0x300]}, 0x0, 0x1}}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x400, &(0x7f0000000a00)={[{@uni_xlate}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_win95}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uni_xlate}, {@fat=@discard}, {@shortname_mixed}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x20008001) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x2, &(0x7f0000000400)="c20b", 0xb, 0x1, 0x4f3, 0x5505, 0x8b, 0x1, 0x9, 'syz1\x00'}) 4m37.643884839s ago: executing program 6 (id=2484): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000440)={[{@utf8}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@shortname_lower}, {@shortname_winnt}, {@utf8}, {@utf8}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@utf8no}, {@rodir}, {@shortname_winnt}, {@uni_xlate}]}, 0x0, 0x2be, &(0x7f0000002880)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 4m35.908014442s ago: executing program 6 (id=2490): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4m33.129991961s ago: executing program 6 (id=2496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x4, 0x4}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newtfilter={0x70, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x87}, {0xffffffff, 0xffff8000, 0x4, 0x304}}}]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, 0x0, 0x8804) 4m32.739918961s ago: executing program 35 (id=2496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x4, 0x4}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newtfilter={0x70, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x87}, {0xffffffff, 0xffff8000, 0x4, 0x304}}}]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, 0x0, 0x8804) 38.510778751s ago: executing program 5 (id=2991): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2280}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7f, 0xb}}]}]}]}, 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x358, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) 37.342874521s ago: executing program 5 (id=2993): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, 0x0, 0x40000d0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1d}, 0x1, 0x0, 0x0, 0x618b37b527276fec}, 0x20004000) 35.485409957s ago: executing program 5 (id=2996): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101840, 0x92) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 34.350677235s ago: executing program 5 (id=2999): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f00000002c0)={[{@init_itable_val={'init_itable', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) set_mempolicy(0x3, &(0x7f0000000480)=0x3d, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 33.870166607s ago: executing program 5 (id=3001): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x12, 0x1, 0x0, 0x25dfdbff, {0xa, 0xa5, 0x0, 0xfd, {0x4001, 0x0, [0x0, 0x3], [0x6, 0x0, 0x7ffffffe, 0x20000000], 0x0, [0xffff, 0x300]}, 0x0, 0x1}}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x400, &(0x7f0000000a00)={[{@uni_xlate}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_win95}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uni_xlate}, {@fat=@discard}, {@shortname_mixed}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, 0x0, 0x20008001) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x2, &(0x7f0000000400)="c20b", 0xb, 0x1, 0x4f3, 0x5505, 0x8b, 0x1, 0x9, 'syz1\x00'}) 32.845728062s ago: executing program 5 (id=3003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={{}, {0x1, 0x1}, [], {}, [], {0x10, 0x3}, {0x20, 0x1}}, 0x24, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r3, 0x400, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xfffffff7}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2, 0xfffffff7}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.578576204s ago: executing program 36 (id=3003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={{}, {0x1, 0x1}, [], {}, [], {0x10, 0x3}, {0x20, 0x1}}, 0x24, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r3, 0x400, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xfffffff7}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2, 0xfffffff7}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.83795818s ago: executing program 3 (id=3024): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740), 0x0, 0x8851) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000001d711849000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.069835094s ago: executing program 7 (id=3029): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x12, 0x1, 0x0, 0x25dfdbff, {0xa, 0xa5, 0x0, 0xfd, {0x4001, 0x0, [0x0, 0x3], [0x6, 0x0, 0x7ffffffe, 0x20000000], 0x0, [0xffff, 0x300]}, 0x0, 0x1}}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x400, &(0x7f0000000a00)={[{@uni_xlate}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_win95}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uni_xlate}, {@fat=@discard}, {@shortname_mixed}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, 0x0, 0x20008001) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x2, &(0x7f0000000400)="c20b", 0xb, 0x1, 0x4f3, 0x5505, 0x8b, 0x1, 0x9, 'syz1\x00'}) 12.672204444s ago: executing program 3 (id=3031): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) 10.767770712s ago: executing program 4 (id=3033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 10.616845616s ago: executing program 7 (id=3034): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0}) 10.42528413s ago: executing program 7 (id=3035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r3, 0x4b52, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10.194707306s ago: executing program 4 (id=3036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80) getresuid(&(0x7f0000000a40), &(0x7f0000000a80), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000040)) setregid(0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x84000) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00']}) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) 10.186041357s ago: executing program 3 (id=3037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80) getresuid(&(0x7f0000000a40), &(0x7f0000000a80), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000040)) setregid(r5, 0x0) sendmsg$nl_route(r3, 0x0, 0x84000) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00']}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x8000, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB]) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) 9.345373027s ago: executing program 7 (id=3038): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, 0x0, 0x40000d0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1d}, 0x1, 0x0, 0x0, 0x618b37b527276fec}, 0x20004000) 3.428305824s ago: executing program 3 (id=3039): syz_open_dev$vim2m(&(0x7f0000000280), 0x40003, 0x2) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000600)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x8000000000000001, 0x1, 0x2, 0xcc62, 0x9], 0x0, 0x0}, 0x78) msgget(0x1, 0x501) sendmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x4008040) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002a0003050002000000000000180000800c0000000df1ffffff"], 0x28}], 0x1}, 0x14008010) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) 3.427926524s ago: executing program 4 (id=3040): socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x16, 0x0, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x20000, 0x0, 0x0, 0x1, 0x2}}) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c8202000fcff"], 0x25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.961962636s ago: executing program 7 (id=3041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0xb, 0x196, 0x7ff, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0xb, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0xc, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x7, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xffdffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xf, 0x0, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) 2.961449396s ago: executing program 3 (id=3042): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x12, 0x1, 0x0, 0x25dfdbff, {0xa, 0xa5, 0x0, 0xfd, {0x4001, 0x0, [0x0, 0x3], [0x6, 0x0, 0x7ffffffe, 0x20000000], 0x0, [0xffff, 0x300]}, 0x0, 0x1}}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x400, &(0x7f0000000a00)={[{@uni_xlate}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_win95}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uni_xlate}, {@fat=@discard}, {@shortname_mixed}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, 0x0, 0x20008001) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x2, &(0x7f0000000400)="c20b", 0xb, 0x1, 0x4f3, 0x5505, 0x8b, 0x1, 0x9, 'syz1\x00'}) 2.080656968s ago: executing program 4 (id=3043): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x0, 0x0, 0x0}) 1.909647232s ago: executing program 4 (id=3044): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.60283862s ago: executing program 7 (id=3045): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x2, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, 0x0, 0x20000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x18, 0x0, 0x1, 0x70bd2d, 0xfffffffa, {0x22}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x24040) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x58, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x2e}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x404) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) 1.320568137s ago: executing program 3 (id=3046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80) getresuid(&(0x7f0000000a40), &(0x7f0000000a80), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000040)) setregid(r5, 0x0) sendmsg$nl_route(r3, 0x0, 0x84000) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00']}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x8000, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB]) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) 0s ago: executing program 4 (id=3047): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80) getresuid(&(0x7f0000000a40), &(0x7f0000000a80), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000040)) setregid(0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x84000) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00']}) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) kernel console output (not intermixed with test programs): sb 7-1: USB disconnect, device number 11 [ 734.006065][T15125] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.157782][T15151] loop6: detected capacity change from 0 to 128 [ 734.371202][ T5085] Bluetooth: hci2: command tx timeout [ 734.523251][T15125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 734.613268][T15125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 734.667579][T15125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 734.715904][T15125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 734.880463][T15125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.946179][T15125] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.978640][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.985880][ T9996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.065465][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.072749][ T9996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.114067][T15155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2328'. [ 735.157061][T15155] syzkaller0: entered promiscuous mode [ 735.163707][T15155] syzkaller0: entered allmulticast mode [ 735.773738][T15163] can0: slcan on ttyS3. [ 735.832518][T15163] can0 (unregistered): slcan off ttyS3. [ 736.053947][T15168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2331'. [ 736.114993][T15125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.281007][T15125] veth0_vlan: entered promiscuous mode [ 736.315292][T15125] veth1_vlan: entered promiscuous mode [ 736.412460][T15125] veth0_macvtap: entered promiscuous mode [ 736.433900][T15125] veth1_macvtap: entered promiscuous mode [ 736.441151][ T5085] Bluetooth: hci2: command tx timeout [ 736.460867][ T9251] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 736.479608][T15125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.490902][T15125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.500918][T15125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.512075][T15125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.522775][T15125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.550727][T15125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.572550][T15125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.626141][T15125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.660945][T15125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.670878][ T9251] usb 5-1: Using ep0 maxpacket: 16 [ 736.675551][ T9251] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.690741][ T9251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 736.700951][T15125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.719376][ T9251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 736.731077][T15125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.742618][ T9251] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 736.761505][T15125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.763918][ T9251] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.780785][T15125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.812463][T15125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.833461][ T9251] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 736.850213][ T9251] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 736.858513][ T9251] usb 5-1: Manufacturer: syz [ 736.872172][T15125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.887858][T15125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.898864][ T9251] usb 5-1: config 0 descriptor?? [ 736.927105][T15125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.954156][T15125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.140845][ T4817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.148753][ T4817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.228319][ T2883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.239328][ T2883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.300806][ T9251] rc_core: IR keymap rc-hauppauge not found [ 737.306805][ T9251] Registered IR keymap rc-empty [ 737.324472][T15171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.342922][ T9251] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 737.381127][T15171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.399906][ T9251] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 737.451893][ T9251] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 737.497856][T15175] syzkaller0: entered promiscuous mode [ 737.498229][ T9251] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input48 [ 737.510960][T15175] syzkaller0: entered allmulticast mode [ 737.547765][ T9251] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 737.589017][ T9251] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 737.650041][ T9251] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 737.681143][ T9251] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 737.724161][ T9251] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 737.781205][ T9251] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 737.821446][ T9251] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 737.860827][ T9251] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 737.890917][ T9251] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 737.929945][ T9251] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 737.969685][ T9251] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 738.000188][ T9251] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 738.031581][ T9251] usb 5-1: USB disconnect, device number 18 [ 738.082425][ T2180] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 738.272347][ T2180] usb 6-1: Using ep0 maxpacket: 32 [ 738.308834][ T2180] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.368058][ T2180] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 738.385752][ T2180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.399741][ T2180] usb 6-1: Product: syz [ 738.431612][ T2180] usb 6-1: Manufacturer: syz [ 738.436467][ T2180] usb 6-1: SerialNumber: syz [ 738.562197][ T5085] Bluetooth: hci2: command tx timeout [ 738.606058][ T2180] usb 6-1: config 0 descriptor?? [ 738.741984][ T2180] f81534 6-1:0.0: required endpoints missing [ 739.421358][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2336'. [ 739.432483][T15190] syzkaller0: entered promiscuous mode [ 739.438052][T15190] syzkaller0: entered allmulticast mode [ 739.745934][T15194] loop4: detected capacity change from 0 to 256 [ 739.852102][T15193] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2337'. [ 739.983225][ T2180] hid-generic 0005:04F3:5505.0014: item fetching failed at offset 0/2 [ 740.019348][ T2180] hid-generic: probe of 0005:04F3:5505.0014 failed with error -22 [ 740.912800][T15203] can0: slcan on ttyS3. [ 741.002294][ T2180] usb 6-1: USB disconnect, device number 20 [ 741.012195][T15203] can0 (unregistered): slcan off ttyS3. [ 741.324325][T15206] 0x000000000006-0x000000020000 : "" [ 741.334933][T15206] ftl_cs: FTL header corrupt! [ 741.712915][ T2180] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 741.920958][ T2180] usb 7-1: Using ep0 maxpacket: 16 [ 742.016309][ T2180] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.163045][ T2180] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 742.323028][ T2180] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 742.454352][ T2180] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 742.484091][ T2180] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.546563][ T2180] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 742.575331][ T2180] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 742.598749][ T2180] usb 7-1: Manufacturer: syz [ 742.621019][ T2180] usb 7-1: config 0 descriptor?? [ 743.062537][T15211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.078111][T15211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.132323][ T2180] rc_core: IR keymap rc-hauppauge not found [ 743.140193][ T2180] Registered IR keymap rc-empty [ 743.158807][ T2180] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 743.185641][T15224] loop3: detected capacity change from 0 to 128 [ 743.228139][ T2180] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 743.291798][ T2180] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 743.330127][ T2180] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input49 [ 743.367719][ T2180] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 743.412462][ T2180] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 743.461024][ T2180] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 743.521048][ T2180] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 743.561190][ T2180] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 743.603932][ T2180] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 743.650824][ T2180] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 743.709180][ T2180] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 743.760797][ T2180] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 743.814389][ T2180] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 743.864281][T15227] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2345'. [ 743.874404][ T2180] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 743.892604][ T2180] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 743.902146][T15227] syzkaller0: entered promiscuous mode [ 743.907678][T15227] syzkaller0: entered allmulticast mode [ 743.934438][ T2180] usb 7-1: USB disconnect, device number 12 [ 744.605040][T15233] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2346'. [ 744.978163][T15235] syzkaller0: entered promiscuous mode [ 744.997873][T15235] syzkaller0: entered allmulticast mode [ 745.836515][T15243] can0: slcan on ttyS3. [ 745.856259][ T2180] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 745.990901][T15243] can0 (unregistered): slcan off ttyS3. [ 746.371743][ T2180] usb 7-1: Using ep0 maxpacket: 32 [ 746.413619][ T2180] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.460953][ T2180] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 746.474245][ T2180] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.494451][ T2180] usb 7-1: Product: syz [ 746.505471][ T2180] usb 7-1: Manufacturer: syz [ 746.510142][ T2180] usb 7-1: SerialNumber: syz [ 746.529674][ T2180] usb 7-1: config 0 descriptor?? [ 746.544927][ T2180] f81534 7-1:0.0: required endpoints missing [ 746.921385][ T2180] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 747.231412][ T2180] usb 5-1: Using ep0 maxpacket: 16 [ 747.320465][ T2180] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.347051][ T2180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 747.376664][ T2180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 747.405263][ T2180] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 747.443250][ T2180] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 747.472411][ T2180] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 747.490560][ T2180] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 747.508923][ T2180] usb 5-1: Manufacturer: syz [ 747.529063][ T2180] usb 5-1: config 0 descriptor?? [ 747.647628][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.654555][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.725016][T15256] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2354'. [ 747.742294][T15256] syzkaller0: entered promiscuous mode [ 747.755156][T15256] syzkaller0: entered allmulticast mode [ 747.890797][ T2180] rc_core: IR keymap rc-hauppauge not found [ 747.901156][ T2180] Registered IR keymap rc-empty [ 747.911837][ T2180] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 747.964147][T15250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.975095][ T2180] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 747.989687][T15250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.041978][ T2180] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 748.072721][ T2180] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input50 [ 748.111217][ T2180] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 748.150820][ T2180] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 748.181575][ T2180] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 748.225659][ T2180] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 748.261384][ T2180] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 748.300807][ T2180] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 748.342519][ T2180] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 748.353821][ T9251] usb 7-1: USB disconnect, device number 13 [ 748.381027][ T2180] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 748.439325][ T2180] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 748.500845][ T2180] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 748.541610][ T2180] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 748.591487][ T2180] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 748.641143][ T2180] usb 5-1: USB disconnect, device number 19 [ 749.066083][T15268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2357'. [ 749.507376][T15271] syzkaller0: entered promiscuous mode [ 749.520801][T15271] syzkaller0: entered allmulticast mode [ 749.535947][T15272] loop6: detected capacity change from 0 to 256 [ 749.786224][ T5156] hid-generic 0005:04F3:5505.0015: item fetching failed at offset 0/2 [ 749.811432][ T5156] hid-generic: probe of 0005:04F3:5505.0015 failed with error -22 [ 750.667971][T15279] can0: slcan on ttyS3. [ 750.783364][T15279] can0 (unregistered): slcan off ttyS3. [ 751.888055][ T9273] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 752.194809][ T9273] usb 5-1: Using ep0 maxpacket: 32 [ 752.351019][ T9273] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.392049][ T9273] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 752.420911][ T9273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.448329][ T9273] usb 5-1: Product: syz [ 752.480908][ T9273] usb 5-1: Manufacturer: syz [ 752.496052][ T9273] usb 5-1: SerialNumber: syz [ 752.535485][ T9273] usb 5-1: config 0 descriptor?? [ 752.578876][ T9273] f81534 5-1:0.0: required endpoints missing [ 753.012620][T15299] loop3: detected capacity change from 0 to 128 [ 753.723782][T15305] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2367'. [ 754.494796][T15307] syzkaller0: entered promiscuous mode [ 754.500362][T15307] syzkaller0: entered allmulticast mode [ 754.508847][ T2180] usb 5-1: USB disconnect, device number 20 [ 756.484706][T15322] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 758.392817][T15340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2376'. [ 758.979901][T15344] syzkaller0: entered promiscuous mode [ 759.001220][T15344] syzkaller0: entered allmulticast mode [ 759.041048][ T9251] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 759.271457][ T9251] usb 6-1: Using ep0 maxpacket: 32 [ 759.297783][ T9251] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.356889][ T9251] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 759.393733][ T9251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.971277][ T9251] usb 6-1: Product: syz [ 759.981698][ T9251] usb 6-1: Manufacturer: syz [ 760.030780][ T9251] usb 6-1: SerialNumber: syz [ 760.091897][ T9251] usb 6-1: config 0 descriptor?? [ 760.129922][ T9251] f81534 6-1:0.0: required endpoints missing [ 761.207271][T15364] loop6: detected capacity change from 0 to 256 [ 761.369311][ T9266] hid-generic 0005:04F3:5505.0016: item fetching failed at offset 0/2 [ 761.412990][ T9266] hid-generic: probe of 0005:04F3:5505.0016 failed with error -22 [ 762.325670][T15376] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 762.530309][ T5156] usb 6-1: USB disconnect, device number 21 [ 764.408976][T15386] syzkaller0: entered promiscuous mode [ 764.425150][T15386] syzkaller0: entered allmulticast mode [ 764.805886][T15391] loop5: detected capacity change from 0 to 128 [ 765.229713][T15384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2388'. [ 767.090796][ T5156] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 767.321100][ T5156] usb 6-1: Using ep0 maxpacket: 32 [ 767.340950][ T5156] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.367109][ T5156] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 767.380804][ T5156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.404637][ T5156] usb 6-1: Product: syz [ 767.408886][ T5156] usb 6-1: Manufacturer: syz [ 767.430730][ T5156] usb 6-1: SerialNumber: syz [ 767.451714][ T5156] usb 6-1: config 0 descriptor?? [ 767.473290][ T5156] f81534 6-1:0.0: required endpoints missing [ 767.632466][T15415] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 767.952741][T15419] syzkaller0: entered promiscuous mode [ 767.958337][T15419] syzkaller0: entered allmulticast mode [ 768.255089][T15424] 0x000000000006-0x000000020000 : "" [ 768.264306][T15424] ftl_cs: FTL header corrupt! [ 769.956777][ T9272] usb 6-1: USB disconnect, device number 22 [ 770.764294][T15440] loop4: detected capacity change from 0 to 256 [ 770.860213][ T9266] hid-generic 0005:04F3:5505.0017: item fetching failed at offset 0/2 [ 770.954244][ T9266] hid-generic: probe of 0005:04F3:5505.0017 failed with error -22 [ 771.112286][T15448] loop3: detected capacity change from 0 to 128 [ 774.877120][T15456] syzkaller0: entered promiscuous mode [ 774.894143][T15456] syzkaller0: entered allmulticast mode [ 775.303095][T15464] 0x000000000006-0x000000020000 : "" [ 775.313368][T15464] ftl_cs: FTL header corrupt! [ 775.780714][ T9273] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 775.981110][ T9273] usb 4-1: Using ep0 maxpacket: 32 [ 775.998396][ T9273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.015020][ T9273] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 776.031060][ T9273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.247948][ T9273] usb 4-1: Product: syz [ 776.252913][ T9273] usb 4-1: Manufacturer: syz [ 776.257583][ T9273] usb 4-1: SerialNumber: syz [ 776.264984][ T9273] usb 4-1: config 0 descriptor?? [ 776.289449][ T9273] f81534 4-1:0.0: required endpoints missing [ 777.644140][T15487] loop5: detected capacity change from 0 to 256 [ 778.701064][T15492] loop6: detected capacity change from 0 to 128 [ 779.652492][ T9251] usb 4-1: USB disconnect, device number 57 [ 781.339001][ T9273] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 782.341012][ T9273] usb 5-1: Using ep0 maxpacket: 16 [ 782.351573][ T9273] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.364389][ T9273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 782.383123][ T9273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 782.503716][ T9273] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 782.513537][ T9273] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.528244][ T9273] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 782.537459][ T9273] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 782.546972][ T9273] usb 5-1: Manufacturer: syz [ 782.559084][ T9273] usb 5-1: config 0 descriptor?? [ 782.800126][T15499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.829673][T15499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.052037][ T9273] rc_core: IR keymap rc-hauppauge not found [ 783.058027][ T9273] Registered IR keymap rc-empty [ 783.079955][ T9273] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 783.121146][ T9273] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 783.361983][ T9273] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 783.376922][ T9273] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input51 [ 783.462885][T15538] loop3: detected capacity change from 0 to 256 [ 783.560901][ T5156] hid-generic 0005:04F3:5505.0018: item fetching failed at offset 0/2 [ 783.576088][ T5156] hid-generic: probe of 0005:04F3:5505.0018 failed with error -22 [ 783.607573][ T9273] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 783.763347][ T9273] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 783.933259][ T9273] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.110896][ T9273] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.180350][ T9273] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.271198][ T9273] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.371395][ T9273] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.425888][ T9273] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.511023][ T9273] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.575257][ T9273] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.652977][ T9273] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 784.694888][ T9273] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 784.761196][ T9273] usb 5-1: USB disconnect, device number 21 [ 785.468218][ T9251] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 785.651625][ T9251] usb 6-1: Using ep0 maxpacket: 32 [ 785.659159][ T9251] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.659505][T15555] tipc: Started in network mode [ 785.680552][T15555] tipc: Node identity ac1414aa, cluster identity 4711 [ 785.701730][ T9251] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 785.714585][T15555] tipc: Enabled bearer , priority 10 [ 785.721452][ T9251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.729515][ T9251] usb 6-1: Product: syz [ 785.744390][T15556] loop6: detected capacity change from 0 to 128 [ 785.750994][ T9251] usb 6-1: Manufacturer: syz [ 785.755662][ T9251] usb 6-1: SerialNumber: syz [ 785.780026][ T9251] usb 6-1: config 0 descriptor?? [ 785.814443][ T9251] f81534 6-1:0.0: required endpoints missing [ 786.832977][ T9251] tipc: Node number set to 2886997162 [ 787.384109][T15571] syz_tun: entered allmulticast mode [ 787.949719][T15566] syz_tun: left allmulticast mode [ 788.245688][ T9275] usb 6-1: USB disconnect, device number 23 [ 788.632039][ T790] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 788.830763][ T790] usb 5-1: Using ep0 maxpacket: 16 [ 788.839540][ T790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.871162][ T790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 788.890702][ T790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 788.900427][ T790] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 788.930727][ T790] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 788.953053][ T790] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 788.981325][ T790] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 788.989422][ T790] usb 5-1: Manufacturer: syz [ 789.013542][ T790] usb 5-1: config 0 descriptor?? [ 789.183316][T15578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2439'. [ 789.240407][T15573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.260014][T15573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.410923][ T790] rc_core: IR keymap rc-hauppauge not found [ 789.421314][ T790] Registered IR keymap rc-empty [ 789.431952][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 789.470906][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 789.518136][ T790] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 789.552713][ T790] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input52 [ 789.598449][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 789.834147][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 789.873662][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 789.921286][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 789.979835][T15586] loop3: detected capacity change from 0 to 256 [ 790.151464][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 790.351462][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 790.611101][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 790.662551][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 790.731005][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 791.002312][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 791.050206][ T790] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 791.740717][ T790] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 791.832071][ T790] usb 5-1: USB disconnect, device number 22 [ 792.490235][T15597] loop4: detected capacity change from 0 to 512 [ 792.607477][T15597] EXT4-fs (loop4): Test dummy encryption mode enabled [ 792.725052][T15597] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.2443: corrupted in-inode xattr: invalid ea_ino [ 793.194355][T15608] syz_tun: entered allmulticast mode [ 793.262338][T15597] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2443: couldn't read orphan inode 15 (err -117) [ 793.689924][T15603] syz_tun: left allmulticast mode [ 793.921546][T15597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.194944][T11090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.317310][T15616] syzkaller0: entered promiscuous mode [ 794.326198][T15616] syzkaller0: entered allmulticast mode [ 795.320855][ T9266] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 795.499091][T15627] loop6: detected capacity change from 0 to 128 [ 795.540803][ T790] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 795.625564][T15627] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 795.660821][T15627] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.180867][ T790] usb 5-1: Using ep0 maxpacket: 16 [ 796.500755][ T790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.544592][ T790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 796.599369][ T790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 796.650104][ T790] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 796.688016][ T790] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 796.737533][ T790] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 796.757418][ T790] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 796.786041][ T790] usb 5-1: Manufacturer: syz [ 796.811884][ T790] usb 5-1: config 0 descriptor?? [ 796.929616][ T9266] usb 4-1: Using ep0 maxpacket: 32 [ 796.937212][ T9266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.950561][ T9266] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 796.960018][ T9266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.271066][ T790] rc_core: IR keymap rc-hauppauge not found [ 797.277523][ T790] Registered IR keymap rc-empty [ 797.348572][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 797.408182][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 797.462591][ T790] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 797.512744][ T790] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input53 [ 797.586735][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 797.641522][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 797.691063][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 797.732976][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 797.780042][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 797.830969][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 797.930735][ T9266] usb 4-1: Product: syz [ 797.934996][ T9266] usb 4-1: Manufacturer: syz [ 797.939633][ T9266] usb 4-1: SerialNumber: syz [ 798.077768][ T9266] usb 4-1: config 0 descriptor?? [ 798.091915][ T9266] usb 4-1: can't set config #0, error -71 [ 798.101962][T11136] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 798.111513][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 798.127208][ T9266] usb 4-1: USB disconnect, device number 58 [ 798.143873][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 798.198873][T15637] loop5: detected capacity change from 0 to 256 [ 798.226813][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 798.398973][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 798.618068][ T2180] hid-generic 0005:04F3:5505.0019: item fetching failed at offset 0/2 [ 798.749281][ T790] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 798.791977][ T2180] hid-generic: probe of 0005:04F3:5505.0019 failed with error -22 [ 799.044014][ T790] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 799.081433][ T790] usb 5-1: USB disconnect, device number 23 [ 799.203247][T15642] syz_tun: entered allmulticast mode [ 799.667633][T15639] syz_tun: left allmulticast mode [ 800.391381][ T9266] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 802.192515][T15667] loop4: detected capacity change from 0 to 128 [ 802.280805][ T9275] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 802.397277][ T9266] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 802.470919][ T9275] usb 7-1: Using ep0 maxpacket: 32 [ 802.482730][ T9275] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.506742][ T9275] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 802.523201][ T9275] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.538313][ T9275] usb 7-1: Product: syz [ 802.550680][ T9275] usb 7-1: Manufacturer: syz [ 802.555436][ T9275] usb 7-1: SerialNumber: syz [ 802.568559][ T9275] usb 7-1: config 0 descriptor?? [ 802.588483][ T9275] f81534 7-1:0.0: required endpoints missing [ 802.595138][ T9266] usb 4-1: Using ep0 maxpacket: 16 [ 802.602850][ T9266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.622158][ T9266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 802.660767][ T9266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 802.679959][ T9266] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 802.699685][ T9266] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 802.725762][ T9266] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 802.735040][ T9266] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 802.743206][ T9266] usb 4-1: Manufacturer: syz [ 802.762711][ T9266] usb 4-1: config 0 descriptor?? [ 803.110737][ T9266] rc_core: IR keymap rc-hauppauge not found [ 803.127069][ T9266] Registered IR keymap rc-empty [ 803.133783][ T9266] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 803.180918][ T9266] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 803.251521][ T9266] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 803.293419][ T9266] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input54 [ 803.315487][ T9266] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 803.360993][ T9266] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 803.402147][ T9266] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 803.461458][ T9266] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 803.500968][ T9266] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 803.552197][ T9266] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 803.567986][T15678] loop5: detected capacity change from 0 to 256 [ 803.585009][T15678] FAT-fs (loop5): Unrecognized mount option "smackfsdef=874" or missing value [ 803.601113][ T9266] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 803.650836][ T9266] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 803.691552][ T9266] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 803.751168][ T9266] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 803.802911][ T9266] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 803.820946][ T9266] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 803.852442][ T9266] usb 4-1: USB disconnect, device number 60 [ 804.258880][T15685] syz_tun: entered allmulticast mode [ 804.521225][ T9266] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 804.771445][T15679] syz_tun: left allmulticast mode [ 804.870875][ T9266] usb 4-1: device descriptor read/64, error -71 [ 805.065220][ T9275] usb 7-1: USB disconnect, device number 14 [ 805.161162][ T9266] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 805.360761][ T9266] usb 4-1: device descriptor read/64, error -71 [ 805.501380][ T9266] usb usb4-port1: attempt power cycle [ 805.586715][T15696] loop6: detected capacity change from 0 to 256 [ 806.647776][T15700] autofs4:pid:15700:autofs_fill_super: called with bogus options [ 807.872324][T15704] tmpfs: Too few inodes for current use [ 808.698258][T15706] syzkaller0: entered promiscuous mode [ 808.727561][T15706] syzkaller0: entered allmulticast mode [ 809.862000][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.868429][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.750906][T15714] syz_tun: entered allmulticast mode [ 810.757796][T15714] syz_tun: left allmulticast mode [ 811.213368][T15724] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2478'. [ 811.279259][ T2180] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 811.324956][ T9273] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 811.470894][ T2180] usb 5-1: Using ep0 maxpacket: 32 [ 811.480861][ T9273] usb 4-1: device descriptor read/64, error -71 [ 811.491990][ T2180] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.511729][ T2180] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 811.521228][ T2180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.529430][ T2180] usb 5-1: Product: syz [ 811.534137][ T2180] usb 5-1: Manufacturer: syz [ 811.539308][ T2180] usb 5-1: SerialNumber: syz [ 811.562019][ T2180] usb 5-1: config 0 descriptor?? [ 811.578915][ T2180] f81534 5-1:0.0: required endpoints missing [ 811.750725][ T9273] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 812.108835][ T9273] usb 4-1: device descriptor read/64, error -71 [ 812.255563][T15737] loop6: detected capacity change from 0 to 256 [ 812.271291][ T9273] usb usb4-port1: attempt power cycle [ 812.449650][ T5156] hid-generic 0005:04F3:5505.001A: item fetching failed at offset 0/2 [ 812.610840][ T5156] hid-generic: probe of 0005:04F3:5505.001A failed with error -22 [ 812.711779][ T9273] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 812.881271][ T9273] usb 4-1: device descriptor read/8, error -71 [ 813.171380][ T9273] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 813.223061][ T9273] usb 4-1: device descriptor read/8, error -71 [ 813.351114][ T9273] usb usb4-port1: unable to enumerate USB device [ 813.389980][T15741] loop5: detected capacity change from 0 to 1024 [ 813.411416][T15741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 813.458538][T15741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.880755][ T5841] usb 5-1: USB disconnect, device number 24 [ 814.953280][T15748] loop6: detected capacity change from 0 to 128 [ 814.999701][T11130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.339916][T15753] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2485'. [ 815.418861][T15755] syzkaller0: entered promiscuous mode [ 815.427276][T15755] syzkaller0: entered allmulticast mode [ 815.593074][T15757] syz_tun: entered allmulticast mode [ 816.088882][T15750] syz_tun: left allmulticast mode [ 816.495504][T11136] FAT-fs (loop6): error, invalid access to FAT (entry 0xffff0000) [ 816.511443][T11136] FAT-fs (loop6): Filesystem has been set read-only [ 816.553283][T11136] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 816.578660][T11136] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 817.474951][T15774] loop4: detected capacity change from 0 to 256 [ 818.550809][ T9253] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 818.740698][ T9253] usb 6-1: Using ep0 maxpacket: 32 [ 818.748518][ T9253] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.768486][ T9253] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 818.778133][ T9253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.786723][ T9253] usb 6-1: Product: syz [ 818.800702][ T9253] usb 6-1: Manufacturer: syz [ 818.808197][ T9253] usb 6-1: SerialNumber: syz [ 818.827398][ T9253] usb 6-1: config 0 descriptor?? [ 818.848041][ T9253] f81534 6-1:0.0: required endpoints missing [ 819.221230][ T5156] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 819.354636][ T2883] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.391412][ T5156] usb 4-1: device descriptor read/64, error -71 [ 819.659738][ T2883] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.690022][T15784] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2497'. [ 819.768494][ T2883] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.783778][ T5156] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 819.909096][ T2883] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.335172][ T2883] tipc: Left network mode [ 820.408694][T15126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 820.422657][T15126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 820.441020][T15126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 820.471275][T15126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 820.496486][T15126] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 820.506101][T15126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 821.835900][ T5156] usb 6-1: USB disconnect, device number 24 [ 822.448349][T15831] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2507'. [ 822.531048][ T5156] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 822.608203][ T5085] Bluetooth: hci1: command tx timeout [ 822.644286][T15790] chnl_net:caif_netlink_parms(): no params data found [ 822.720973][ T5156] usb 5-1: device descriptor read/64, error -71 [ 822.764889][T15790] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.780037][T15790] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.787719][T15790] bridge_slave_0: entered allmulticast mode [ 822.795998][T15790] bridge_slave_0: entered promiscuous mode [ 822.832337][T15790] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.846236][T15790] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.860666][T15790] bridge_slave_1: entered allmulticast mode [ 822.876390][T15790] bridge_slave_1: entered promiscuous mode [ 822.993141][ T5156] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 823.084760][T15790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.126325][T15790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.270748][ T5156] usb 5-1: device descriptor read/64, error -71 [ 823.281493][ T2883] hsr_slave_0: left promiscuous mode [ 823.289704][T15847] loop3: detected capacity change from 0 to 128 [ 823.301466][ T2883] hsr_slave_1: left promiscuous mode [ 823.312410][ T2883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.323526][ T2883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.346368][T15847] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 823.360718][ T2883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.368206][ T2883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.382077][T15847] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 823.392660][ T5156] usb usb5-port1: attempt power cycle [ 823.393563][ T2883] bridge_slave_1: left allmulticast mode [ 823.404478][ T2883] bridge_slave_1: left promiscuous mode [ 823.426155][ T2883] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.436725][ T2883] bridge_slave_0: left allmulticast mode [ 823.443277][ T2883] bridge_slave_0: left promiscuous mode [ 823.449586][ T2883] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.493684][ T2883] veth1_macvtap: left promiscuous mode [ 823.499405][ T2883] veth0_macvtap: left promiscuous mode [ 823.505253][ T2883] veth1_vlan: left promiscuous mode [ 823.511978][ T2883] veth0_vlan: left promiscuous mode [ 823.611819][ T9273] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 823.637619][T15125] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 823.783673][ T2883] bond2 (unregistering): Released all slaves [ 823.801902][ T5156] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 823.810977][ T9273] usb 6-1: Using ep0 maxpacket: 32 [ 823.825132][ T9273] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.843939][ T5156] usb 5-1: device descriptor read/8, error -71 [ 823.856567][ T9273] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 823.866052][ T9273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.874272][ T9273] usb 6-1: Product: syz [ 823.878631][ T9273] usb 6-1: Manufacturer: syz [ 823.883508][ T9273] usb 6-1: SerialNumber: syz [ 823.901351][ T2883] bond1 (unregistering): Released all slaves [ 823.905899][ T9273] usb 6-1: config 0 descriptor?? [ 823.926852][ T9273] f81534 6-1:0.0: required endpoints missing [ 824.745755][ T5085] Bluetooth: hci1: command tx timeout [ 824.903954][ T5156] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 824.951414][ T5156] usb 5-1: device descriptor read/8, error -71 [ 825.081086][ T5156] usb usb5-port1: unable to enumerate USB device [ 826.122717][ T2883] team0 (unregistering): Port device team_slave_1 removed [ 826.187736][ T2883] team0 (unregistering): Port device team_slave_0 removed [ 826.251288][ T2883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.322515][ T2883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.760891][ T5085] Bluetooth: hci1: command tx timeout [ 826.792753][ T2883] bond0 (unregistering): Released all slaves [ 826.896773][T15790] team0: Port device team_slave_0 added [ 826.974742][ T5841] usb 6-1: USB disconnect, device number 25 [ 827.010769][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2515'. [ 827.056358][T15790] team0: Port device team_slave_1 added [ 827.207053][T15790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.217046][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.244225][T15790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.257708][T15790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.265198][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.333738][T15790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.895598][T15893] loop5: detected capacity change from 0 to 128 [ 828.044235][T15895] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2518'. [ 828.097676][T15893] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 828.188302][T15893] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 828.233767][T15790] hsr_slave_0: entered promiscuous mode [ 828.419031][T15790] hsr_slave_1: entered promiscuous mode [ 828.665286][T11130] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 828.750704][ T9253] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 828.840733][ T5085] Bluetooth: hci1: command tx timeout [ 828.930997][ T9253] usb 5-1: device descriptor read/64, error -71 [ 828.952482][T15913] loop5: detected capacity change from 0 to 2048 [ 829.037910][T15913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.105464][T15913] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 829.183554][T15790] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 829.230516][T15790] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 829.280811][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2524'. [ 829.330799][T15790] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 829.394795][T15790] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 829.406004][ T9253] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 830.059055][T15790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.093592][T11130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.113313][ T9253] usb 5-1: device descriptor read/64, error -71 [ 830.127003][T15790] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.302523][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.309799][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.431225][ T9253] usb usb5-port1: attempt power cycle [ 830.488756][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.496062][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.739344][T15938] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2528'. [ 830.854595][ T9253] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 830.965312][ T9253] usb 5-1: device descriptor read/8, error -71 [ 831.664120][T15953] loop3: detected capacity change from 0 to 128 [ 831.813731][T15953] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 831.908592][T15953] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 832.054337][T15965] syz_tun: entered allmulticast mode [ 832.600371][T15952] syz_tun: left allmulticast mode [ 832.936691][T15790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.984499][T15125] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 833.055303][T15970] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2532'. [ 833.230260][T15976] loop3: detected capacity change from 0 to 2048 [ 833.329949][T15976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 833.370484][T15976] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 833.816463][T15991] fs-verity: sha512 using implementation "sha512-avx2" [ 834.364071][T15125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.388633][T15790] veth0_vlan: entered promiscuous mode [ 834.647056][T15790] veth1_vlan: entered promiscuous mode [ 835.029864][ T2883] tipc: Left network mode [ 835.150184][T15790] veth0_macvtap: entered promiscuous mode [ 835.166329][T15790] veth1_macvtap: entered promiscuous mode [ 835.225484][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.260761][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.282721][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.302054][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.344785][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.430986][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.472568][T15790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.503444][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.548685][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.585458][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.620810][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.658165][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.670723][ T790] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 835.869263][ T790] usb 4-1: Using ep0 maxpacket: 32 [ 835.964610][ T790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.191614][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.335911][ T790] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 836.415799][T15790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.431513][T16009] syz_tun: entered allmulticast mode [ 836.437172][T16009] syz_tun: left allmulticast mode [ 836.576021][ T790] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 836.615476][ T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.623865][ T790] usb 4-1: Product: syz [ 836.628088][ T790] usb 4-1: Manufacturer: syz [ 836.641072][ T790] usb 4-1: SerialNumber: syz [ 836.662752][ T790] usb 4-1: config 0 descriptor?? [ 837.393441][T15790] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.528520][T15790] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.637167][T15790] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.646256][T15790] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.973746][T16028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2542'. [ 838.018347][T16031] can0: slcan on ttyS3. [ 838.510850][T16033] can0 (unregistered): slcan off ttyS3. [ 839.218748][ T4817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.280811][ T4817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.328988][ T9266] usb 4-1: USB disconnect, device number 70 [ 839.569126][ T4705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.581042][ T4705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.019626][T16063] autofs4:pid:16063:autofs_fill_super: called with bogus options [ 841.457802][T16080] syz_tun: entered allmulticast mode [ 841.742578][T16074] loop5: detected capacity change from 0 to 1024 [ 842.017584][ T2883] hsr_slave_0: left promiscuous mode [ 842.041406][ T2883] hsr_slave_1: left promiscuous mode [ 842.055876][ T2883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.074114][T16074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 842.096740][ T2883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.116532][ T2883] bridge_slave_1: left allmulticast mode [ 842.154711][ T2883] bridge_slave_1: left promiscuous mode [ 842.166648][ T2883] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.392860][ T2883] bridge_slave_0: left allmulticast mode [ 842.398611][ T2883] bridge_slave_0: left promiscuous mode [ 842.404949][ T2883] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.528074][T16093] overlayfs: failed to resolve './bus': -2 [ 843.032414][T11130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.076822][ T2883] bond2 (unregistering): Released all slaves [ 843.158712][ T2883] bond1 (unregistering): Released all slaves [ 843.390752][ T5156] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 843.572612][ T5156] usb 6-1: Using ep0 maxpacket: 32 [ 843.581933][ T5156] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.592611][ T5156] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 843.604579][ T5156] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 843.613969][ T5156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.625891][ C1] vkms_vblank_simulate: vblank timer overrun [ 843.626984][ T5156] usb 6-1: Product: syz [ 843.640193][ T5156] usb 6-1: Manufacturer: syz [ 843.646060][ T5156] usb 6-1: SerialNumber: syz [ 843.661677][ T5156] usb 6-1: config 0 descriptor?? [ 843.909953][ T2883] team0 (unregistering): Port device team_slave_1 removed [ 843.966541][ T2883] team0 (unregistering): Port device team_slave_0 removed [ 844.034510][ T2883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.096161][ T2883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.573044][ T2883] bond0 (unregistering): Released all slaves [ 844.691006][T16071] syz_tun: left allmulticast mode [ 844.709629][T16081] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2550'. [ 845.214135][T16113] loop7: detected capacity change from 0 to 128 [ 847.251286][T16128] autofs4:pid:16128:autofs_fill_super: called with bogus options [ 847.704421][T16135] can0: slcan on ttyS3. [ 848.491713][ T2883] IPVS: stop unused estimator thread 0... [ 848.726097][ T5841] usb 6-1: USB disconnect, device number 26 [ 848.861843][T16135] can0 (unregistered): slcan off ttyS3. [ 849.866641][T16153] loop5: detected capacity change from 0 to 2048 [ 850.222016][T16149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2563'. [ 852.214764][T16146] loop4: detected capacity change from 0 to 1024 [ 852.233391][T16146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 852.929866][T16153] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5. [ 853.009010][T16146] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 855.736263][T16185] autofs4:pid:16185:autofs_fill_super: called with bogus options [ 856.671741][T16201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2572'. [ 856.825103][T16209] loop4: detected capacity change from 0 to 128 [ 857.356140][T16214] loop3: detected capacity change from 0 to 2048 [ 859.219535][T16209] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 860.222703][T16209] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 860.673493][T16214] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 861.090899][T11090] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 861.181264][T16222] loop5: detected capacity change from 0 to 256 [ 864.021935][T16230] loop3: detected capacity change from 0 to 2048 [ 864.144970][T16230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 864.193169][T16230] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 865.334447][T15125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.920718][T16260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2584'. [ 865.941825][ T790] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 866.112144][T16266] loop4: detected capacity change from 0 to 128 [ 866.140234][ T790] usb 6-1: Using ep0 maxpacket: 32 [ 866.153157][ T790] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 866.168973][ T790] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.196674][T16266] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 866.229994][ T790] usb 6-1: config 0 has no interface number 0 [ 866.237314][T16266] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 866.261805][ T790] usb 6-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 866.308815][ T790] usb 6-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 866.384614][ T790] usb 6-1: config 0 interface 12 has no altsetting 0 [ 867.502337][T16277] loop7: detected capacity change from 0 to 256 [ 867.700494][ T790] usb 6-1: string descriptor 0 read error: -71 [ 867.740234][ T790] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 867.789649][T11090] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 867.838140][ T790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.965968][ T790] usb 6-1: config 0 descriptor?? [ 868.013691][ T790] usb 6-1: can't set config #0, error -71 [ 868.308998][ T790] usb 6-1: USB disconnect, device number 27 [ 869.140485][ T5156] hid-generic 0005:04F3:5505.001B: item fetching failed at offset 0/2 [ 869.201409][ T5156] hid-generic: probe of 0005:04F3:5505.001B failed with error -22 [ 870.509870][T16315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2595'. [ 870.529331][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.537035][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.701613][T16317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2596'. [ 871.068885][T16336] loop4: detected capacity change from 0 to 128 [ 871.207771][T16337] loop7: detected capacity change from 0 to 128 [ 871.381795][T16336] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 871.401329][T16337] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 871.422410][T16337] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 871.483197][T16336] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 871.961008][T16325] sctp: failed to load transform for md5: -2 [ 872.052402][T15790] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 872.461512][T16348] loop5: detected capacity change from 0 to 256 [ 875.728266][T11090] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 876.011357][T16359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2606'. [ 877.227749][T16376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2608'. [ 877.938875][T16397] loop5: detected capacity change from 0 to 128 [ 877.956776][T16395] loop4: detected capacity change from 0 to 1024 [ 877.965161][T16395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 877.972493][T16397] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 877.985643][T16397] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 878.038764][T16395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 878.092390][T11130] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 879.065953][T16415] loop7: detected capacity change from 0 to 256 [ 879.875219][T16416] loop5: detected capacity change from 0 to 256 [ 881.234243][T11090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.708561][T16424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2616'. [ 883.845825][ T9704] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 884.758656][T16448] loop5: detected capacity change from 0 to 128 [ 884.847995][T16448] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 884.861974][T16448] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 887.037431][T16467] loop4: detected capacity change from 0 to 256 [ 888.443812][T11130] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 888.800061][ T9273] hid-generic 0005:04F3:5505.001C: item fetching failed at offset 0/2 [ 888.869941][ T9273] hid-generic: probe of 0005:04F3:5505.001C failed with error -22 [ 889.912413][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2628'. [ 890.090706][T16486] loop5: detected capacity change from 0 to 256 [ 890.769602][T16489] loop4: detected capacity change from 0 to 1024 [ 890.933769][T16489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 892.643387][T16517] autofs4:pid:16517:autofs_fill_super: called with bogus options [ 893.997062][T16530] loop7: detected capacity change from 0 to 256 [ 894.240227][T16529] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2639'. [ 895.317948][T11090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.540558][T16547] loop5: detected capacity change from 0 to 128 [ 896.027855][T16547] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 896.047256][T16547] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.311057][T16562] loop4: detected capacity change from 0 to 256 [ 900.762890][T11130] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 901.027010][T16578] autofs4:pid:16578:autofs_fill_super: called with bogus options [ 902.041103][T16590] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2650'. [ 902.443932][T16598] loop5: detected capacity change from 0 to 256 [ 902.667235][ T5841] hid-generic 0005:04F3:5505.001D: item fetching failed at offset 0/2 [ 903.051388][ T5841] hid-generic: probe of 0005:04F3:5505.001D failed with error -22 [ 906.357976][T16635] loop7: detected capacity change from 0 to 256 [ 908.190207][T16645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2660'. [ 910.465200][T16672] loop3: detected capacity change from 0 to 256 [ 911.527044][T16678] loop4: detected capacity change from 0 to 128 [ 911.630161][T16678] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 911.643402][T16678] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 912.374059][T11090] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 912.803563][T16690] loop4: detected capacity change from 0 to 128 [ 912.838845][T16690] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 912.854271][T16690] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 914.028717][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2670'. [ 914.440893][ T5841] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 914.969212][ T5841] usb 6-1: Using ep0 maxpacket: 32 [ 914.984819][ T5841] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 914.996394][ T5841] usb 6-1: config 0 has no interface number 0 [ 915.008523][ T5841] usb 6-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 915.703274][T11090] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 915.850688][ T5841] usb 6-1: config 0 interface 12 has no altsetting 0 [ 915.860544][ T5841] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 915.870272][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.878820][ T5841] usb 6-1: Product: syz [ 915.890613][ T5841] usb 6-1: Manufacturer: syz [ 915.895281][ T5841] usb 6-1: SerialNumber: syz [ 915.951568][ T5841] usb 6-1: config 0 descriptor?? [ 915.968950][ T5841] f81534 6-1:0.12: required endpoints missing [ 916.460489][T16725] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2675'. [ 917.188098][T16730] loop7: detected capacity change from 0 to 256 [ 917.723840][ T9266] hid-generic 0005:04F3:5505.001E: item fetching failed at offset 0/2 [ 917.804952][ T9266] hid-generic: probe of 0005:04F3:5505.001E failed with error -22 [ 920.227775][ T9253] usb 6-1: USB disconnect, device number 28 [ 920.391190][T16754] loop5: detected capacity change from 0 to 128 [ 920.447681][T16754] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 920.461100][T16754] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 920.478011][T16762] block2mtd: error: cannot open device Ta4Gg)_դEvr!4>=Z{By<0\i= [ 920.556173][T11130] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 920.630935][T16765] loop3: detected capacity change from 0 to 128 [ 920.825181][T16765] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 920.839547][T16765] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 922.236422][T16772] loop7: detected capacity change from 0 to 2048 [ 922.947620][T16772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 923.822651][T16772] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 923.835182][T16785] loop4: detected capacity change from 0 to 512 [ 923.884200][T15125] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 924.144218][T16785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 924.217048][T16785] ext4 filesystem being mounted at /309/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.875723][T15790] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.158073][T16809] loop3: detected capacity change from 0 to 256 [ 927.504115][T11090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.980980][T16813] loop5: detected capacity change from 0 to 2048 [ 928.517419][T16813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 928.555164][T16813] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 929.581840][ T9253] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 929.777993][T16828] loop4: detected capacity change from 0 to 1024 [ 929.820884][ T9253] usb 8-1: Using ep0 maxpacket: 32 [ 930.065617][T16828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 930.266757][ T9253] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 930.282476][ T9253] usb 8-1: config 0 has no interface number 0 [ 930.300403][ T9253] usb 8-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 930.354637][T11130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.370860][ T9253] usb 8-1: config 0 interface 12 has no altsetting 0 [ 930.397183][ T9253] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 930.438845][ T9253] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.519379][ T9253] usb 8-1: Product: syz [ 930.625284][ T9253] usb 8-1: Manufacturer: syz [ 930.697670][ T9253] usb 8-1: SerialNumber: syz [ 930.860237][ T9253] usb 8-1: config 0 descriptor?? [ 930.963633][ T9253] f81534 8-1:0.12: required endpoints missing [ 931.466537][T16843] loop3: detected capacity change from 0 to 4096 [ 931.725302][T16843] EXT4-fs: inline encryption not supported [ 931.740249][T16843] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 931.775493][T16843] EXT4-fs (loop3): Test dummy encryption mode enabled [ 932.372463][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.378943][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.427345][T16843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 932.855552][ T9273] usb 8-1: USB disconnect, device number 2 [ 932.920728][T11090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.159988][T16856] loop5: detected capacity change from 0 to 2048 [ 933.308340][T16856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 933.427642][T16856] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 933.509546][T15125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.519709][T11130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.827207][T16901] loop3: detected capacity change from 0 to 1024 [ 936.890054][T16901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 937.014755][T16901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.450410][ T9273] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 938.318353][T15125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.401705][ T9273] usb 5-1: Using ep0 maxpacket: 32 [ 938.497898][ T9273] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 938.530730][ T9273] usb 5-1: config 0 has no interface number 0 [ 938.570977][ T9273] usb 5-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 938.674930][ T9273] usb 5-1: config 0 interface 12 has no altsetting 0 [ 939.036322][ T9273] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 939.246630][ T9273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.300111][ T9273] usb 5-1: Product: syz [ 939.336491][ T9273] usb 5-1: Manufacturer: syz [ 939.358784][ T9273] usb 5-1: SerialNumber: syz [ 939.432878][ T9273] usb 5-1: config 0 descriptor?? [ 939.494020][ T9273] f81534 5-1:0.12: required endpoints missing [ 940.947173][T16957] syz_tun: entered allmulticast mode [ 940.952908][T16957] syz_tun: left allmulticast mode [ 941.043242][T16963] block2mtd: error: cannot open device Ta4Gg)_դEvr!4>=Z{By<0\i= [ 941.043242][T16963] \!ug [ 941.259953][T16967] loop3: detected capacity change from 0 to 2048 [ 941.369951][T16967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 941.642487][T16907] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 942.388253][ T9275] usb 5-1: USB disconnect, device number 33 [ 943.145661][T16973] syzkaller0: entered promiscuous mode [ 943.185082][T16973] syzkaller0: entered allmulticast mode [ 943.980172][T15125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.440930][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 944.524731][T16985] loop7: detected capacity change from 0 to 2048 [ 944.716656][T16985] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.784195][T16985] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 945.467873][ T5085] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 946.308159][T17012] block2mtd: error: cannot open device Ta4Gg)_դEvr!4>=Z{By<0\i= [ 946.308159][T17012] \!ug [ 946.475278][T15790] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.663725][T17020] syz_tun: entered allmulticast mode [ 947.190401][T17011] syz_tun: left allmulticast mode [ 947.420734][ T9275] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 947.559384][T17026] syzkaller0: entered promiscuous mode [ 947.581254][T17026] syzkaller0: entered allmulticast mode [ 947.640924][ T9275] usb 6-1: Using ep0 maxpacket: 32 [ 947.658626][ T9275] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 947.671284][ T9275] usb 6-1: config 0 has no interface number 0 [ 947.678361][ T9275] usb 6-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 947.831258][T17032] loop3: detected capacity change from 0 to 2048 [ 947.989863][T17032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.210609][ T9275] usb 6-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 949.240868][ T9275] usb 6-1: config 0 interface 12 has no altsetting 0 [ 949.361511][T17044] loop7: detected capacity change from 0 to 2048 [ 950.147112][T17044] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.226966][T15125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.226739][ T9275] usb 6-1: string descriptor 0 read error: -71 [ 951.233183][ T9275] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 951.248151][T17059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2738'. [ 952.220640][ T9275] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.336925][ T9275] usb 6-1: config 0 descriptor?? [ 952.362320][ T9275] usb 6-1: can't set config #0, error -71 [ 952.632505][ T9275] usb 6-1: USB disconnect, device number 29 [ 953.075327][T15790] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.144314][T17067] block2mtd: error: cannot open device Ta4Gg)_դEvr!4>=Z{By<0\i= [ 953.144314][T17067] \!ug [ 953.606003][T17076] syzkaller0: entered promiscuous mode [ 953.674980][T17076] syzkaller0: entered allmulticast mode [ 953.948119][T17083] syz_tun: entered allmulticast mode [ 954.307129][T17071] syz_tun: left allmulticast mode [ 954.513657][T17090] loop5: detected capacity change from 0 to 2048 [ 954.655578][T17090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 954.887327][T17093] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 956.301372][T17098] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2747'. [ 957.109876][T15797] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 957.206230][T11130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.330685][T15797] usb 8-1: Using ep0 maxpacket: 32 [ 957.338135][T15797] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 957.355466][T15797] usb 8-1: config 0 has no interface number 0 [ 957.384836][T15797] usb 8-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 957.406009][T15797] usb 8-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 957.457102][T15797] usb 8-1: config 0 interface 12 has no altsetting 0 [ 957.487796][T15797] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 957.504181][T15797] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.523204][T15797] usb 8-1: Product: syz [ 957.535734][T15797] usb 8-1: Manufacturer: syz [ 957.540423][T15797] usb 8-1: SerialNumber: syz [ 957.596848][T15797] usb 8-1: config 0 descriptor?? [ 957.613292][T15797] f81534 8-1:0.12: unsupported endpoint max packet size [ 957.746545][T17113] loop3: detected capacity change from 0 to 2048 [ 958.366938][ T5085] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 958.650874][T17113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.500928][T17117] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 961.085229][T15125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.204799][T15797] usb 8-1: USB disconnect, device number 3 [ 961.490895][T17138] syzkaller0: entered promiscuous mode [ 961.505658][T17138] syzkaller0: entered allmulticast mode [ 962.311078][T17143] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2756'. [ 962.322213][T17146] syz_tun: entered allmulticast mode [ 962.491726][T17137] syz_tun: left allmulticast mode [ 962.791770][T17124] can0: slcan on ttyS3. [ 962.835722][T17155] loop4: detected capacity change from 0 to 128 [ 962.844243][T17145] can0 (unregistered): slcan off ttyS3. [ 963.078810][T17155] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 963.093356][T17155] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 963.768797][T11090] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 964.704568][ T5085] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 964.860690][ T790] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 965.075395][ T790] usb 4-1: Using ep0 maxpacket: 16 [ 965.092031][ T790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.130762][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 965.180810][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 965.205767][ T790] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 965.220616][ T790] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 965.243206][ T790] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 965.256712][ T790] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 965.268135][ T790] usb 4-1: Manufacturer: syz [ 965.300886][ T9253] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 965.350193][ T790] usb 4-1: config 0 descriptor?? [ 965.501646][ T9253] usb 8-1: Using ep0 maxpacket: 32 [ 965.509668][ T9253] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 965.518777][ T9253] usb 8-1: config 0 has no interface number 0 [ 965.540815][ T9253] usb 8-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 965.559184][ T9253] usb 8-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 965.611940][T17183] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2766'. [ 965.695387][ T9253] usb 8-1: config 0 interface 12 has no altsetting 0 [ 965.756655][ T9253] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 965.861847][ T9253] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.908348][T17173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.029560][ T9253] usb 8-1: Product: syz [ 966.121072][T17173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.129160][ T9253] usb 8-1: Manufacturer: syz [ 966.147998][ T9253] usb 8-1: SerialNumber: syz [ 966.191990][ T9253] usb 8-1: config 0 descriptor?? [ 966.252362][ T9253] f81534 8-1:0.12: unsupported endpoint max packet size [ 966.330705][ T790] rc_core: IR keymap rc-hauppauge not found [ 966.355013][ T790] Registered IR keymap rc-empty [ 966.367436][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 966.410800][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 966.426973][T17188] syzkaller0: entered promiscuous mode [ 966.434468][T17186] loop4: detected capacity change from 0 to 4096 [ 966.447423][T17188] syzkaller0: entered allmulticast mode [ 966.449740][T17186] EXT4-fs: inline encryption not supported [ 966.469824][ T790] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 966.496842][T17186] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 966.509170][ T790] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input56 [ 966.533007][T17186] EXT4-fs (loop4): Test dummy encryption mode enabled [ 966.553841][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 966.563722][T17186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 966.601288][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 966.631834][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 966.662586][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 966.702083][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 966.774857][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 966.850685][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 966.931212][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 967.232232][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 967.306753][ T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 967.368874][T17196] loop3: detected capacity change from 0 to 1024 [ 967.382739][ T790] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 967.442965][ T790] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 967.480239][T17196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.524310][T17201] loop5: detected capacity change from 0 to 128 [ 967.537518][ T790] usb 4-1: USB disconnect, device number 71 [ 967.569021][T11090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.634885][T17201] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 967.666980][T17201] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 968.331476][T11130] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 968.445130][T15125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.632308][T17217] can0: slcan on ttyS3. [ 968.892501][T17217] can0 (unregistered): slcan off ttyS3. [ 969.779519][T15797] usb 8-1: USB disconnect, device number 4 [ 970.491089][T17237] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2776'. [ 971.004412][T17240] loop4: detected capacity change from 0 to 2048 [ 971.074687][T17240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.221626][T17248] loop5: detected capacity change from 0 to 2048 [ 971.317845][T17240] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 971.361997][T17248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.459135][T17248] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 972.017633][T15797] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 972.210659][T15797] usb 8-1: Using ep0 maxpacket: 16 [ 972.270905][T15797] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.339357][T15797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 972.426317][T15797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 972.477418][T15797] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 972.521771][T15797] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 972.611248][T15797] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 972.655422][T15797] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 972.683179][T15797] usb 8-1: Manufacturer: syz [ 972.721959][T15797] usb 8-1: config 0 descriptor?? [ 972.855607][T11090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.237845][T17263] block2mtd: error: cannot open device Ta4Gg)_դEvr!4>=Z{By<0\i= [ 973.237845][T17263] \!ug[ [ 973.414141][T15797] rc_core: IR keymap rc-hauppauge not found [ 973.453731][T15797] Registered IR keymap rc-empty [ 973.458846][T15797] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 973.573905][T15797] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 973.611473][T11130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.624640][T15797] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 973.664156][T15797] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input57 [ 973.715486][T17269] loop4: detected capacity change from 0 to 128 [ 973.721908][T15797] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 973.750807][T15797] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 973.805871][T15797] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 973.856567][T17269] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 973.870946][T15797] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 973.921192][T17268] syzkaller0: entered promiscuous mode [ 973.930799][T15797] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 973.940744][T17268] syzkaller0: entered allmulticast mode [ 973.950851][T17269] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 973.970360][T15797] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 974.021824][T15797] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 974.070904][T15797] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 974.109577][T15797] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 974.170744][T15797] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 974.222600][T15797] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 974.237210][T15797] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 974.288254][T15797] usb 8-1: USB disconnect, device number 5 [ 974.503868][T11090] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 974.571424][ T5841] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 975.650685][ T5841] usb 4-1: Using ep0 maxpacket: 32 [ 975.664024][ T5841] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 975.688458][ T5841] usb 4-1: config 0 has no interface number 0 [ 975.695196][ T5841] usb 4-1: config 0 interface 12 has no altsetting 0 [ 975.721346][ T5841] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 975.730485][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.750859][ T5841] usb 4-1: Product: syz [ 975.755106][ T5841] usb 4-1: Manufacturer: syz [ 975.759742][ T5841] usb 4-1: SerialNumber: syz [ 975.797364][ T5841] usb 4-1: config 0 descriptor?? [ 978.534706][ T5841] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 978.548114][ T5841] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 978.556080][ T5841] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 978.564716][ T5841] f81534: probe of 4-1:0.12 failed with error -32 [ 981.146068][T15797] usb 4-1: USB disconnect, device number 72 [ 981.193979][T17320] loop7: detected capacity change from 0 to 128 [ 981.209434][T17320] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 981.230212][T17320] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 981.308125][ T11] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 982.639638][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2794'. [ 984.048410][T17347] loop5: detected capacity change from 0 to 256 [ 985.213474][T17351] syzkaller0: entered promiscuous mode [ 985.219032][T17351] syzkaller0: entered allmulticast mode [ 985.356090][T17348] loop3: detected capacity change from 0 to 2048 [ 985.625901][T17348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.841297][T17348] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 985.921125][T17356] syzkaller0: entered promiscuous mode [ 985.926677][T17356] syzkaller0: entered allmulticast mode [ 986.115273][T15125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.256225][T17386] syzkaller0: entered promiscuous mode [ 987.278787][T17386] syzkaller0: entered allmulticast mode [ 988.277166][T17399] loop3: detected capacity change from 0 to 1024 [ 988.314593][T17399] EXT4-fs: Ignoring removed nomblk_io_submit option [ 988.558878][T17399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.601476][T17407] syzkaller0: entered promiscuous mode [ 988.648085][T17407] syzkaller0: entered allmulticast mode [ 988.734848][T17392] can0: slcan on ttyS3. [ 988.784037][T15125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.802762][T17392] can0 (unregistered): slcan off ttyS3. [ 989.647303][T17431] loop5: detected capacity change from 0 to 2048 [ 989.756774][T17431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.869393][T17431] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 990.183730][T17440] syzkaller0: entered promiscuous mode [ 990.189290][T17440] syzkaller0: entered allmulticast mode [ 990.539622][T11130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.213788][T17455] can0: slcan on ttyS3. [ 991.290861][T17455] can0 (unregistered): slcan off ttyS3. [ 991.719500][T17464] syzkaller0: entered promiscuous mode [ 991.740776][T17464] syzkaller0: entered allmulticast mode [ 991.929434][T17475] loop7: detected capacity change from 0 to 128 [ 992.055025][T17475] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 992.069656][T17475] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 992.782479][T17481] autofs4:pid:17481:autofs_fill_super: called with bogus options [ 993.406912][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.413666][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.452854][T17485] loop5: detected capacity change from 0 to 2048 [ 993.619591][T17485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 993.639991][T17487] loop4: detected capacity change from 0 to 4096 [ 993.671641][T17485] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 993.689714][T17487] EXT4-fs: inline encryption not supported [ 993.788842][T17487] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 994.091645][T17487] EXT4-fs (loop4): Test dummy encryption mode enabled [ 994.289409][T15790] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 994.328283][T17487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.725274][T11130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.361964][T11090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.165370][T17513] can0: slcan on ttyS3. [ 996.218754][T17513] can0 (unregistered): slcan off ttyS3. [ 996.455106][T17532] autofs4:pid:17532:autofs_fill_super: called with bogus options [ 997.314637][T17540] loop4: detected capacity change from 0 to 1024 [ 997.481987][T17540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 998.133648][T17552] loop5: detected capacity change from 0 to 4096 [ 998.161595][T17552] EXT4-fs: inline encryption not supported [ 998.199880][T11090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.212080][T17552] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 998.230774][T17552] EXT4-fs (loop5): Test dummy encryption mode enabled [ 998.279308][T17552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 999.189401][T11130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.755108][T17589] can0: slcan on ttyS3. [ 999.836582][T17591] autofs4:pid:17591:autofs_fill_super: called with bogus options [ 999.868865][T17589] can0 (unregistered): slcan off ttyS3. [ 1001.009469][T17606] bridge_slave_0: left allmulticast mode [ 1001.016073][T17606] bridge_slave_0: left promiscuous mode [ 1001.025456][T17606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.089049][T17606] bridge_slave_1: left allmulticast mode [ 1001.107624][T17606] bridge_slave_1: left promiscuous mode [ 1001.129645][T17606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.153579][T17606] bond0: (slave bond_slave_0): Releasing backup interface [ 1001.209183][T17606] bond0: (slave bond_slave_1): Releasing backup interface [ 1002.300497][T17587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1002.323222][T17606] team0: Port device team_slave_0 removed [ 1002.347048][T17606] team0: Port device team_slave_1 removed [ 1002.377948][T17606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.386278][T17606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.395877][T17606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.404429][T17606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.499813][T17611] team0: Port device xfrm0 added [ 1002.509668][T17613] tipc: Enabled bearer , priority 0 [ 1003.120042][ T5085] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1004.868550][T17643] loop5: detected capacity change from 0 to 4096 [ 1004.878903][T17643] EXT4-fs: inline encryption not supported [ 1004.928404][T17643] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1005.000761][T17643] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1005.096363][T17643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.501393][T17653] autofs4:pid:17653:autofs_fill_super: called with bogus options [ 1006.712575][T11130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.023409][T17671] loop4: detected capacity change from 0 to 2048 [ 1009.362207][T17671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.380242][T17671] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1011.059458][T11090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.233914][T17681] X25: received unknown 00 with LCI 000 [ 1011.685213][T17694] autofs4:pid:17694:autofs_fill_super: called with bogus options [ 1011.901433][T17689] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2872'. [ 1012.686974][T17704] vlan2: entered allmulticast mode [ 1012.736216][T17704] bond1: entered allmulticast mode [ 1012.966880][T17712] loop4: detected capacity change from 0 to 2048 [ 1013.144135][T17712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.187821][T17712] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1013.702662][T17717] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2879'. [ 1015.982985][T15797] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1016.211985][T11090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.233296][T15797] usb 4-1: device descriptor read/all, error -71 [ 1016.271209][T17735] X25: received unknown 00 with LCI 000 [ 1016.566322][T17744] autofs4:pid:17744:autofs_fill_super: called with bogus options [ 1016.582472][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2883'. [ 1016.691019][T17748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2883'. [ 1016.878752][T17750] netlink: 'syz.5.2887': attribute type 1 has an invalid length. [ 1018.336914][T17750] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1018.454061][T17756] vlan2: entered allmulticast mode [ 1018.520210][T17756] bond3: entered allmulticast mode [ 1018.778431][T17765] bond3: (slave geneve2): making interface the new active one [ 1018.860631][T17765] geneve2: entered allmulticast mode [ 1018.884030][T17765] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1018.964437][T17777] syzkaller0: entered promiscuous mode [ 1018.975473][T17777] syzkaller0: entered allmulticast mode [ 1019.009655][T17765] syz.5.2887 (17765) used greatest stack depth: 19544 bytes left [ 1019.200641][T15797] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1019.367383][T17786] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1019.386366][T17786] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1019.411419][T15797] usb 4-1: Using ep0 maxpacket: 32 [ 1019.418966][T15797] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1019.450667][T15797] usb 4-1: config 0 has no interface number 0 [ 1019.456907][T15797] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1019.498987][T15797] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1019.508548][T17786] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1019.524171][T15797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.534963][T15797] usb 4-1: Product: syz [ 1019.539201][T15797] usb 4-1: Manufacturer: syz [ 1019.546487][T15797] usb 4-1: SerialNumber: syz [ 1019.560313][T17786] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1019.565209][T15797] usb 4-1: config 0 descriptor?? [ 1019.599371][T17786] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1019.617273][T17786] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1019.638860][T17786] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1019.645566][T17786] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1019.658002][T17786] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1020.147562][T17801] autofs4:pid:17801:autofs_fill_super: called with bogus options [ 1021.400854][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 1021.640796][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 1021.640816][T15126] Bluetooth: hci1: command 0x0c1a tx timeout [ 1021.640917][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 1022.622165][T15797] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 1022.622217][T15797] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 1022.622231][T15797] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1022.622289][T15797] f81534: probe of 4-1:0.12 failed with error -32 [ 1022.742593][T15797] usb 4-1: USB disconnect, device number 75 [ 1023.068350][T17819] loop3: detected capacity change from 0 to 4096 [ 1023.091865][T17819] EXT4-fs: inline encryption not supported [ 1023.130884][T17819] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1023.160211][T17819] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1023.299250][T17819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.590797][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 1023.720738][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 1023.720964][T15126] Bluetooth: hci0: command 0x0406 tx timeout [ 1023.729755][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 1024.314193][T15125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.781075][T17840] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2904'. [ 1025.518852][T17842] autofs4:pid:17842:autofs_fill_super: called with bogus options [ 1026.284441][T17853] loop7: detected capacity change from 0 to 128 [ 1026.299116][T17829] Bluetooth: hci1: command 0x0c1a tx timeout [ 1026.435689][T17853] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1026.477694][T17853] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.091791][T17859] netlink: 'syz.4.2910': attribute type 3 has an invalid length. [ 1028.402237][T17869] loop5: detected capacity change from 0 to 4096 [ 1028.419653][T17869] EXT4-fs: inline encryption not supported [ 1028.451106][T17869] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1028.482425][T17869] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1028.531339][T17869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.629371][T15790] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1029.041025][T17882] autofs4:pid:17882:autofs_fill_super: called with bogus options [ 1029.227202][T11130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.350774][T15797] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1029.583456][T15797] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1029.756412][T15797] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1029.961817][T15797] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1029.988203][T17890] loop5: detected capacity change from 0 to 1024 [ 1030.010559][T15797] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.034857][T17890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1030.072654][T15797] usb 8-1: config 0 descriptor?? [ 1030.108878][T15797] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1030.158242][T17890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1031.898252][T11130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.045640][T17912] loop3: detected capacity change from 0 to 128 [ 1032.082820][T17912] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1032.097178][T17912] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.110231][T17911] can0: slcan on ttyS3. [ 1032.162621][T17911] can0 (unregistered): slcan off ttyS3. [ 1032.714681][T17921] X25: received unknown 00 with LCI 000 [ 1032.877402][T15125] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1033.026613][ T9275] usb 8-1: USB disconnect, device number 6 [ 1034.130858][T17934] autofs4:pid:17934:autofs_fill_super: called with bogus options [ 1035.655983][T17958] can0: slcan on ttyS3. [ 1035.792616][T17958] can0 (unregistered): slcan off ttyS3. [ 1035.915979][T17961] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2935'. [ 1036.110937][T17973] loop7: detected capacity change from 0 to 128 [ 1036.227052][T17973] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1036.403584][T17973] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1037.727885][T15790] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1037.999074][T17995] tipc: Started in network mode [ 1038.010824][ T790] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1038.032125][T17995] tipc: Node identity 2007ff, cluster identity 4711 [ 1038.058208][T17995] tipc: Node number set to 2099199 [ 1038.249170][ T790] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1038.380494][ T790] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1038.438591][T18004] autofs4:pid:18004:autofs_fill_super: called with bogus options [ 1038.480152][ T790] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1038.532098][T18007] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2945'. [ 1038.751398][ T790] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1039.402189][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2945'. [ 1039.411623][ T790] usb 5-1: Product: syz [ 1039.460658][ T790] usb 5-1: Manufacturer: syz [ 1039.465530][ T790] usb 5-1: SerialNumber: syz [ 1039.487262][ T790] usb 5-1: config 0 descriptor?? [ 1040.754274][T18023] binder: 18020:18023 ioctl 4018620d 0 returned -22 [ 1042.879036][T18042] loop7: detected capacity change from 0 to 128 [ 1046.928575][ T790] usb 5-1: can't set config #0, error -110 [ 1047.130867][T18042] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1047.131704][T18042] EXT4-fs: failed to create workqueue [ 1047.146938][T18042] EXT4-fs (loop7): mount failed [ 1047.787097][ T9266] usb 5-1: USB disconnect, device number 34 [ 1047.843433][T18049] autofs4:pid:18049:autofs_fill_super: called with bogus options [ 1048.011588][T18053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2956'. [ 1048.774522][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2956'. [ 1049.000874][T18064] binder: 18062:18064 ioctl 4018620d 0 returned -22 [ 1049.365163][T18079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2962'. [ 1049.591060][T18086] syzkaller0: entered promiscuous mode [ 1049.610686][T18086] syzkaller0: entered allmulticast mode [ 1049.847299][T18096] autofs4:pid:18096:autofs_fill_super: called with bogus options [ 1050.049860][T18099] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2967'. [ 1050.963967][T18109] binder: 18108:18109 ioctl 4018620d 0 returned -22 [ 1051.442877][T18126] syzkaller0: entered promiscuous mode [ 1051.449008][T18126] syzkaller0: entered allmulticast mode [ 1052.487938][T18135] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2979'. [ 1052.738376][T18137] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.754438][T18137] binder: 18136:18137 ioctl 4018620d 200000004a80 returned -16 [ 1053.200325][T18153] syzkaller0: entered promiscuous mode [ 1053.220151][T18153] syzkaller0: entered allmulticast mode [ 1054.002944][ T9273] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1054.871351][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.881534][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.029999][ T9273] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.040819][ T9273] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1055.056335][ T9273] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1055.075852][ T9273] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1055.096522][ T9273] usb 8-1: SerialNumber: syz [ 1055.157548][T18183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2992'. [ 1055.778720][T18184] can0: slcan on ttyS3. [ 1055.914982][T18187] loop3: detected capacity change from 0 to 256 [ 1056.090887][T18184] can0 (unregistered): slcan off ttyS3. [ 1057.213438][ T9273] cdc_ether 8-1:1.0: skipping garbage [ 1057.218942][ T9273] usb 8-1: bad CDC descriptors [ 1057.228768][T18196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2997'. [ 1057.247835][ T9273] usb 8-1: USB disconnect, device number 7 [ 1058.040969][T17829] Bluetooth: hci1: command 0x0c1a tx timeout [ 1058.139697][T18208] loop5: detected capacity change from 0 to 4096 [ 1058.148550][T18208] EXT4-fs: inline encryption not supported [ 1058.166603][T18208] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1058.181101][T18208] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1058.207568][T18208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.260134][T18213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.658450][ T9266] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1060.374835][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.420977][ T9266] usb 8-1: device descriptor read/64, error -71 [ 1060.673477][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.740755][ T9266] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1060.800367][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.109405][ T9266] usb 8-1: device descriptor read/64, error -71 [ 1061.326124][ T9266] usb usb8-port1: attempt power cycle [ 1061.473348][T17829] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1061.789988][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.898782][ T9266] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1062.390908][ T49] tipc: Left network mode [ 1062.761635][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1062.775529][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1062.785739][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1062.794504][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1062.814432][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1062.823393][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1063.050694][ T9273] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1063.285111][ T9273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.340580][ T9273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.411154][ T9273] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1063.420335][ T9273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.505289][ T9273] usb 5-1: config 0 descriptor?? [ 1063.570256][ T9266] usb 8-1: device descriptor read/8, error -71 [ 1064.048597][ T9273] usbhid 5-1:0.0: can't add hid device: -71 [ 1064.070667][ T9273] usbhid: probe of 5-1:0.0 failed with error -71 [ 1064.103734][ T9273] usb 5-1: USB disconnect, device number 35 [ 1064.940926][ T5085] Bluetooth: hci0: command tx timeout [ 1065.102571][T18267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3010'. [ 1065.188903][T18272] loop7: detected capacity change from 0 to 256 [ 1065.286304][ T9273] hid-generic 0005:04F3:5505.001F: item fetching failed at offset 0/2 [ 1065.362128][ T9273] hid-generic: probe of 0005:04F3:5505.001F failed with error -22 [ 1065.381935][T18275] loop4: detected capacity change from 0 to 2048 [ 1065.557886][T18275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.697650][T18275] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.163462][T18243] chnl_net:caif_netlink_parms(): no params data found [ 1067.008180][ T5085] Bluetooth: hci0: command tx timeout [ 1067.877560][T18306] loop7: detected capacity change from 0 to 128 [ 1067.993340][T18309] loop3: detected capacity change from 0 to 2048 [ 1068.154129][T18309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.207649][T18309] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1068.351286][T18306] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1068.366086][T18306] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1068.425623][T18243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.656497][T18243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.867274][T15790] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1068.877634][T18243] bridge_slave_0: entered allmulticast mode [ 1068.920298][T18243] bridge_slave_0: entered promiscuous mode [ 1069.022688][T18243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.029920][T18243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.145979][T18243] bridge_slave_1: entered allmulticast mode [ 1069.152358][ T5085] Bluetooth: hci0: command tx timeout [ 1069.202504][T18243] bridge_slave_1: entered promiscuous mode [ 1069.348099][T18319] binder: BINDER_SET_CONTEXT_MGR already set [ 1069.376029][T18319] binder: 18317:18319 ioctl 4018620d 200000004a80 returned -16 [ 1069.571492][T18243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.654466][T18243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.782119][ T49] hsr_slave_0: left promiscuous mode [ 1069.806860][ T49] hsr_slave_1: left promiscuous mode [ 1069.837268][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.866617][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.901549][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.932977][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.002347][ T49] bridge_slave_1: left allmulticast mode [ 1070.030765][ T49] bridge_slave_1: left promiscuous mode [ 1070.082303][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.163021][ T49] bridge_slave_0: left allmulticast mode [ 1070.168752][ T49] bridge_slave_0: left promiscuous mode [ 1070.250783][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.422866][T15125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.569267][T11090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.761520][ T49] veth1_macvtap: left promiscuous mode [ 1070.767169][ T49] veth0_macvtap: left promiscuous mode [ 1071.608353][ T5085] Bluetooth: hci0: command tx timeout [ 1071.660957][ T49] veth1_vlan: left promiscuous mode [ 1071.671239][ T49] veth0_vlan: left promiscuous mode [ 1071.876368][T18345] slcan: can't register candev [ 1071.883783][T18345] Falling back ldisc for ttyS3. [ 1072.011266][ T49] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1072.019444][ T49] geneve2 (unregistering): left allmulticast mode [ 1072.369905][T18353] loop4: detected capacity change from 0 to 256 [ 1072.654464][ T49] bond3 (unregistering): Released all slaves [ 1072.932340][ T49] bond2 (unregistering): Released all slaves [ 1072.959940][ T49] bond1 (unregistering): Released all slaves [ 1074.247156][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1074.340197][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1074.459653][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.579604][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.132900][ T49] bond0 (unregistering): Released all slaves [ 1075.259085][T18349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'. [ 1075.303033][T18349] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1075.453061][T18243] team0: Port device team_slave_0 added [ 1075.638550][T18372] loop3: detected capacity change from 0 to 1024 [ 1075.652601][T18243] team0: Port device team_slave_1 added [ 1075.659782][T18372] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1075.806709][T18372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.819275][T18243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.859255][T18243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1075.990314][T18243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.033779][T18243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.042003][T18243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.196675][T18383] loop7: detected capacity change from 0 to 2048 [ 1076.418416][T18383] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.459856][T18383] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1076.623294][T18243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.303489][T18243] hsr_slave_0: entered promiscuous mode [ 1077.352338][T18243] hsr_slave_1: entered promiscuous mode [ 1077.387507][T18243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1077.420737][T18243] Cannot create hsr debugfs directory [ 1079.158073][T18399] can0: slcan on ttyS3. [ 1079.313182][T15790] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.325689][T18400] can0 (unregistered): slcan off ttyS3. [ 1079.672859][T18243] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1079.696246][T15125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.994756][T18243] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1080.033965][T18243] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1080.062614][T18411] loop7: detected capacity change from 0 to 256 [ 1080.119383][T18249] hid-generic 0005:04F3:5505.0020: item fetching failed at offset 0/2 [ 1080.321883][T18243] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1080.346328][T18249] hid-generic: probe of 0005:04F3:5505.0020 failed with error -22 [ 1081.343506][T18416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3031'. [ 1081.374416][ T5085] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1081.799872][T18243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.868612][T18430] binder: 18429:18430 ioctl c0306201 0 returned -14 [ 1081.876161][T18243] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.902813][T18427] syzkaller0: entered promiscuous mode [ 1081.918932][T18427] syzkaller0: entered allmulticast mode [ 1081.945198][ T705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.952467][ T705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.081957][ T705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.089186][ T705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.520777][T18446] loop3: detected capacity change from 0 to 2048 [ 1083.520818][T18447] loop4: detected capacity change from 0 to 2048 [ 1088.200738][T18453] can0: slcan on ttyS3. [ 1088.721523][T18446] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 1088.735842][T18447] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 1088.986698][T18453] can0 (unregistered): slcan off ttyS3. [ 1089.558026][ T5085] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1090.357433][T18243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.364734][T18476] binder: 18475:18476 ioctl c0306201 0 returned -14 [ 1090.389744][T18474] loop3: detected capacity change from 0 to 256 [ 1090.435743][T18252] hid-generic 0005:04F3:5505.0021: item fetching failed at offset 0/2 [ 1090.461532][T18252] hid-generic: probe of 0005:04F3:5505.0021 failed with error -22 [ 1090.505351][T18472] syzkaller0: entered promiscuous mode [ 1090.529701][T18472] syzkaller0: entered allmulticast mode [ 1090.744617][T18482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3044'. [ 1091.679279][T18508] loop3: detected capacity change from 0 to 2048 [ 1091.871915][T18508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1091.910439][T18508] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1092.520820][ C0] [ 1092.523266][ C0] ================================ [ 1092.528432][ C0] WARNING: inconsistent lock state [ 1092.533590][ C0] syzkaller #0 Not tainted [ 1092.538042][ C0] -------------------------------- [ 1092.543195][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 1092.550080][ C0] syz.3.3046/18507 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 1092.556542][ C0] ffff88802c1fe130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 1092.566135][ C0] {SOFTIRQ-ON-W} state was registered at: [ 1092.571897][ C0] lock_acquire+0x19e/0x420 [ 1092.576604][ C0] lock_sock_nested+0x48/0x100 [ 1092.581556][ C0] x25_ioctl+0x7ec/0xff0 [ 1092.586013][ C0] sock_do_ioctl+0xfc/0x310 [ 1092.590720][ C0] sock_ioctl+0x5be/0x7e0 [ 1092.595313][ C0] __se_sys_ioctl+0xfd/0x170 [ 1092.600115][ C0] do_syscall_64+0x55/0xb0 [ 1092.604742][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1092.611058][ C0] irq event stamp: 278386 [ 1092.615470][ C0] hardirqs last enabled at (278386): [] __local_bh_enable_ip+0x13a/0x1c0 [ 1092.625620][ C0] hardirqs last disabled at (278385): [] __local_bh_enable_ip+0xdb/0x1c0 [ 1092.635626][ C0] softirqs last enabled at (271080): [] __irq_exit_rcu+0xd3/0x190 [ 1092.645109][ C0] softirqs last disabled at (278309): [] __irq_exit_rcu+0xd3/0x190 [ 1092.654598][ C0] [ 1092.654598][ C0] other info that might help us debug this: [ 1092.662672][ C0] Possible unsafe locking scenario: [ 1092.662672][ C0] [ 1092.670163][ C0] CPU0 [ 1092.673462][ C0] ---- [ 1092.676756][ C0] lock(sk_lock-AF_X25); [ 1092.681125][ C0] [ 1092.684606][ C0] lock(sk_lock-AF_X25); [ 1092.689131][ C0] [ 1092.689131][ C0] *** DEADLOCK *** [ 1092.689131][ C0] [ 1092.697294][ C0] 2 locks held by syz.3.3046/18507: [ 1092.702521][ C0] #0: ffff88802e7db598 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x1fd/0xd90 [ 1092.712287][ C0] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x34/0x230 [ 1092.722440][ C0] [ 1092.722440][ C0] stack backtrace: [ 1092.728389][ C0] CPU: 0 PID: 18507 Comm: syz.3.3046 Not tainted syzkaller #0 [ 1092.735961][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1092.746051][ C0] Call Trace: [ 1092.749415][ C0] [ 1092.752295][ C0] dump_stack_lvl+0x18c/0x250 [ 1092.757081][ C0] ? show_regs_print_info+0x20/0x20 [ 1092.762345][ C0] ? __kernel_text_address+0xd/0x30 [ 1092.767594][ C0] ? unwind_get_return_address+0x91/0xc0 [ 1092.773280][ C0] valid_state+0x13b/0x1d0 [ 1092.777724][ C0] mark_lock_irq+0xad/0x900 [ 1092.782257][ C0] ? stack_trace_save+0xaa/0x100 [ 1092.787215][ C0] ? save_trace+0xcd0/0xcd0 [ 1092.791750][ C0] ? mark_lock+0x94/0x320 [ 1092.796110][ C0] ? save_trace+0x5d/0xcd0 [ 1092.800556][ C0] mark_lock+0x208/0x320 [ 1092.804829][ C0] __lock_acquire+0xcfc/0x7d80 [ 1092.809626][ C0] ? verify_lock_unused+0x140/0x140 [ 1092.814937][ C0] ? verify_lock_unused+0x140/0x140 [ 1092.820156][ C0] ? mark_lock+0x94/0x320 [ 1092.824510][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1092.830519][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1092.835576][ C0] lock_acquire+0x19e/0x420 [ 1092.840113][ C0] ? x25_kill_by_neigh+0x10d/0x250 [ 1092.845264][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1092.850671][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1092.856123][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1092.861404][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1092.866807][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1092.871687][ C0] lock_sock_nested+0x48/0x100 [ 1092.876498][ C0] ? x25_kill_by_neigh+0x10d/0x250 [ 1092.881653][ C0] x25_kill_by_neigh+0x10d/0x250 [ 1092.886626][ C0] x25_lapb_receive_frame+0x1a7/0xef0 [ 1092.892196][ C0] ? netif_receive_skb_core+0x34/0x230 [ 1092.897779][ C0] ? netif_receive_skb_core+0x34/0x230 [ 1092.903289][ C0] ? x25_device_event+0x280/0x280 [ 1092.908336][ C0] netif_receive_skb_core+0x16a/0x230 [ 1092.913761][ C0] lapbeth_napi_poll+0x42/0x80 [ 1092.918600][ C0] __napi_poll+0xbb/0x460 [ 1092.923061][ C0] net_rx_action+0x65f/0xcc0 [ 1092.927691][ C0] ? net_tx_action+0x950/0x950 [ 1092.932570][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1092.938578][ C0] ? lock_chain_count+0x20/0x20 [ 1092.943457][ C0] handle_softirqs+0x27d/0x820 [ 1092.948244][ C0] ? read_tsc+0x9/0x20 [ 1092.952369][ C0] ? ktime_get+0x24b/0x280 [ 1092.956812][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1092.961602][ C0] ? do_softirq+0x1a0/0x1a0 [ 1092.966142][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1092.971368][ C0] __irq_exit_rcu+0xd3/0x190 [ 1092.975987][ C0] ? irq_exit_rcu+0x20/0x20 [ 1092.980519][ C0] irq_exit_rcu+0x9/0x20 [ 1092.984782][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1092.990438][ C0] [ 1092.993500][ C0] [ 1092.996493][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1093.002567][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 1093.009147][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 fb 4e c6 f6 65 8b 05 5c 1d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1093.028928][ C0] RSP: 0018:ffffc90003b0f5a0 EFLAGS: 00000206 [ 1093.035096][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 0c26fefa3699b900 [ 1093.043092][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 1093.051087][ C0] RBP: ffffc90003b0f638 R08: ffffffff911eb5af R09: 1ffffffff223d6b5 [ 1093.059076][ C0] R10: dffffc0000000000 R11: fffffbfff223d6b6 R12: dffffc0000000000 [ 1093.067068][ C0] R13: ffff88802e7db1d0 R14: ffff88802e7db1d0 R15: 1ffff92000761eb4 [ 1093.075131][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1093.080023][ C0] __skb_try_recv_datagram+0x181/0x4e0 [ 1093.085522][ C0] ? sock_load_diag_module+0x140/0x140 [ 1093.091006][ C0] __unix_dgram_recvmsg+0x2f9/0xd90 [ 1093.096226][ C0] ? unix_unhash+0x10/0x10 [ 1093.100687][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1093.105915][ C0] ? exc_page_fault+0x8c/0x100 [ 1093.110709][ C0] ? mark_lock+0x94/0x320 [ 1093.115066][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 1093.120110][ C0] ? unix_dgram_sendmsg+0x16e0/0x16e0 [ 1093.125508][ C0] sock_recvmsg_nosec+0x82/0xd0 [ 1093.130382][ C0] ____sys_recvmsg+0x4d7/0x5d0 [ 1093.135284][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 1093.140359][ C0] ? import_iovec+0x73/0xa0 [ 1093.144958][ C0] ___sys_recvmsg+0x214/0x590 [ 1093.149678][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 1093.154481][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1093.159542][ C0] ? __might_fault+0xc6/0x120 [ 1093.164280][ C0] ? __might_fault+0xaa/0x120 [ 1093.168982][ C0] do_recvmmsg+0x377/0x810 [ 1093.173449][ C0] ? __sys_recvmmsg+0x290/0x290 [ 1093.178331][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1093.184269][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 1093.189345][ C0] ? do_recvmmsg+0x810/0x810 [ 1093.194008][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1093.199270][ C0] do_syscall_64+0x55/0xb0 [ 1093.203717][ C0] ? clear_bhb_loop+0x40/0x90 [ 1093.208444][ C0] ? clear_bhb_loop+0x40/0x90 [ 1093.213235][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.219151][ C0] RIP: 0033:0x7f765e59e0d9 [ 1093.223608][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.243277][ C0] RSP: 002b:00007f765f517028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1093.251928][ C0] RAX: ffffffffffffffda RBX: 00007f765e826090 RCX: 00007f765e59e0d9 [ 1093.259923][ C0] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1093.267922][ C0] RBP: 00007f765e635024 R08: 0000000000000000 R09: 0000000000000000 [ 1093.275913][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1093.283916][ C0] R13: 00007f765e826128 R14: 00007f765e826090 R15: 00007ffe0d66a4e8 [ 1093.292091][ C0] [ 1093.295190][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3546 [ 1093.304017][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 18507, name: syz.3.3046 [ 1093.313232][ C0] preempt_count: 101, expected: 0 [ 1093.318306][ C0] RCU nest depth: 1, expected: 0 [ 1093.323317][ C0] INFO: lockdep is turned off. [ 1093.328128][ C0] Preemption disabled at: [ 1093.328141][ C0] [<0000000000000000>] 0x0 [ 1093.337062][ C0] CPU: 0 PID: 18507 Comm: syz.3.3046 Not tainted syzkaller #0 [ 1093.344571][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1093.354679][ C0] Call Trace: [ 1093.358003][ C0] [ 1093.360887][ C0] dump_stack_lvl+0x18c/0x250 [ 1093.365621][ C0] ? show_regs_print_info+0x20/0x20 [ 1093.370862][ C0] ? load_image+0x420/0x420 [ 1093.375491][ C0] __might_resched+0x48d/0x5f0 [ 1093.380322][ C0] ? __might_sleep+0xe0/0xe0 [ 1093.384967][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1093.390400][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1093.395835][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1093.401151][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1093.406572][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1093.411488][ C0] lock_sock_nested+0x5d/0x100 [ 1093.416311][ C0] x25_kill_by_neigh+0x10d/0x250 [ 1093.421326][ C0] x25_lapb_receive_frame+0x1a7/0xef0 [ 1093.426759][ C0] ? netif_receive_skb_core+0x34/0x230 [ 1093.432283][ C0] ? netif_receive_skb_core+0x34/0x230 [ 1093.437802][ C0] ? x25_device_event+0x280/0x280 [ 1093.442876][ C0] netif_receive_skb_core+0x16a/0x230 [ 1093.448323][ C0] lapbeth_napi_poll+0x42/0x80 [ 1093.453155][ C0] __napi_poll+0xbb/0x460 [ 1093.457584][ C0] net_rx_action+0x65f/0xcc0 [ 1093.462241][ C0] ? net_tx_action+0x950/0x950 [ 1093.467066][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1093.473103][ C0] ? lock_chain_count+0x20/0x20 [ 1093.478009][ C0] handle_softirqs+0x27d/0x820 [ 1093.482829][ C0] ? read_tsc+0x9/0x20 [ 1093.486948][ C0] ? ktime_get+0x24b/0x280 [ 1093.491418][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1093.496237][ C0] ? do_softirq+0x1a0/0x1a0 [ 1093.500792][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1093.506050][ C0] __irq_exit_rcu+0xd3/0x190 [ 1093.510748][ C0] ? irq_exit_rcu+0x20/0x20 [ 1093.515314][ C0] irq_exit_rcu+0x9/0x20 [ 1093.519610][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1093.525310][ C0] [ 1093.528285][ C0] [ 1093.531261][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1093.537302][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 1093.543889][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 fb 4e c6 f6 65 8b 05 5c 1d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1093.563641][ C0] RSP: 0018:ffffc90003b0f5a0 EFLAGS: 00000206 [ 1093.569792][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 0c26fefa3699b900 [ 1093.577824][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 1093.585846][ C0] RBP: ffffc90003b0f638 R08: ffffffff911eb5af R09: 1ffffffff223d6b5 [ 1093.593867][ C0] R10: dffffc0000000000 R11: fffffbfff223d6b6 R12: dffffc0000000000 [ 1093.601889][ C0] R13: ffff88802e7db1d0 R14: ffff88802e7db1d0 R15: 1ffff92000761eb4 [ 1093.610100][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1093.615018][ C0] __skb_try_recv_datagram+0x181/0x4e0 [ 1093.620541][ C0] ? sock_load_diag_module+0x140/0x140 [ 1093.626097][ C0] __unix_dgram_recvmsg+0x2f9/0xd90 [ 1093.631352][ C0] ? unix_unhash+0x10/0x10 [ 1093.635819][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1093.641079][ C0] ? exc_page_fault+0x8c/0x100 [ 1093.645902][ C0] ? mark_lock+0x94/0x320 [ 1093.650310][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 1093.655393][ C0] ? unix_dgram_sendmsg+0x16e0/0x16e0 [ 1093.660847][ C0] sock_recvmsg_nosec+0x82/0xd0 [ 1093.665748][ C0] ____sys_recvmsg+0x4d7/0x5d0 [ 1093.670568][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 1093.675643][ C0] ? import_iovec+0x73/0xa0 [ 1093.680205][ C0] ___sys_recvmsg+0x214/0x590 [ 1093.684931][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 1093.689751][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1093.694831][ C0] ? __might_fault+0xc6/0x120 [ 1093.699552][ C0] ? __might_fault+0xaa/0x120 [ 1093.704276][ C0] do_recvmmsg+0x377/0x810 [ 1093.708740][ C0] ? __sys_recvmmsg+0x290/0x290 [ 1093.713648][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1093.719614][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 1093.724688][ C0] ? do_recvmmsg+0x810/0x810 [ 1093.729333][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1093.734589][ C0] do_syscall_64+0x55/0xb0 [ 1093.739049][ C0] ? clear_bhb_loop+0x40/0x90 [ 1093.743799][ C0] ? clear_bhb_loop+0x40/0x90 [ 1093.748562][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.754613][ C0] RIP: 0033:0x7f765e59e0d9 [ 1093.759083][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.778734][ C0] RSP: 002b:00007f765f517028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1093.787198][ C0] RAX: ffffffffffffffda RBX: 00007f765e826090 RCX: 00007f765e59e0d9 [ 1093.795224][ C0] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1093.803239][ C0] RBP: 00007f765e635024 R08: 0000000000000000 R09: 0000000000000000 [ 1093.811252][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1093.819262][ C0] R13: 00007f765e826128 R14: 00007f765e826090 R15: 00007ffe0d66a4e8 [ 1093.827290][ C0] [ 1093.934278][T18517] loop4: detected capacity change from 0 to 2048 [ 1095.001422][T18517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1095.042209][T18517] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1095.256322][T15125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.266935][T18243] veth0_vlan: entered promiscuous mode [ 1095.308569][T18243] veth1_vlan: entered promiscuous mode [ 1095.497059][T18243] veth0_macvtap: entered promiscuous mode [ 1095.525329][T18243] veth1_macvtap: entered promiscuous mode [ 1095.586819][T18243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.608444][T18243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.627737][T18243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.651080][T18243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.678164][T18243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.719018][T18243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.759334][T18243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.776842][T18243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.787373][T18243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.798538][T18243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.926995][T18243] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.959624][T18243] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.992512][T18243] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.006700][T18243] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.017628][T11090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.047103][T18243] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 1096.086149][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.107921][T18243] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 1096.109728][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.157185][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.166182][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50