last executing test programs: 20.747747968s ago: executing program 3 (id=1513): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_int(r1, 0x1, 0x27, 0x0, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001900)=[{{&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x2, 0x4) syz_open_dev$cec(0x0, 0x0, 0xe8c00) io_submit(0x0, 0x0, &(0x7f0000000800)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) close(r3) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x40000008}) poll(&(0x7f0000000000)=[{r5, 0x9000}], 0x1, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffa9, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x0, 0xa, 0xac, {0xac, 0x6, "abc22720873de8afd3877f7656aa7df34f2d98afcb1785e3bb4ebacd9cca45b1edaa8bffdf75e425b38a4305e80823b4027d748d12e4b73ce49e50aba093f5d1084addcbbe3593d93556ce569cb431588ed20a415f659964a28614e135b6c81051ecdc32fff6eddff997cb67049000610e25b3345a2d2e1424a755aeba10f830de7edf308318fd11b7a782ab63e2172a2ad680918fd92cbbf07d536863a0fce89a94bba770447065c0ed"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0105b08, &(0x7f0000000040)) 18.591263332s ago: executing program 4 (id=1521): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0x3ff, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffb, 0x0, 0x8, 0xfffffffc, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x2, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r0, r3, 0x6700000000000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) utimes(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={{0x77359400}, {0x77359400}}) close_range(r4, 0xffffffffffffffff, 0x0) 18.027306414s ago: executing program 4 (id=1524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) readv(r3, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f00000000c0)) memfd_create(&(0x7f0000000900)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\x87\f\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vs7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\xb3\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x02\x00\x00\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x9b\x99\xa8<\x12\xd5\xd78\x9d\x84\x1c&_I\xbd\xb8[\xc3^\xfb\x8a\x05*\x14[\xac\x7f\xb2\xa1\x1b\xbbI\xdbd\x87\xdbl\x13\xa7\x91\xbd\b\xbb\xb0\xf6\xc3m\xc1\vEa\xa5\x16\xf9\xfe\xe4\x9a:\xa65\xaamX#\xf8\xadlq&\xc6\x9aF\xec\x81-\xef\xf2\x92_z\x8a \xb0\x15m\xc2\xe6Z\xdc\xa7F\xe9\xe8|\x9ac\xf3\x85:\xf7fL\tTb\xa5\xb6\x80x\x0f\x10\xd4\xe6\xb9\x9d\x9fE\xe2`\xe4\xd8m\r-`\xde_}\xa7\t:\xd7X\x17\x10\xc2\\\x90u2\x9a\x8e\xe0\xf4\xf4\b\xe1\xd3\r\x02\xbavSyf\xe0\x9biT\xdc#\x1e\x86\xf9H\x9d\xbd\x0e\x7f\xca\x93\x8e\x83S\x06!\a;\x1b\xb3v\x06\xb65%\x88w\x13\xc1\xe3]nMG\x9eL\xb8v\x1c4\x04\xbd\x8acx\r\xb2\x10.\x18M\xd4\x90\xc2\nX\x85\xf4H\x7f\xd2b*A', 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_open(&(0x7f00000007c0)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x8a\xe0U\xbc%\x05%\xfei\x96\xb0\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\x96yU\x9c\x0f\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V', 0x83, 0x10, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'veth0_to_bond\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x604000, 0x82) landlock_restrict_self(r4, 0x0) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) r6 = fsmount(r5, 0x1, 0x2) fchdir(r6) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r7, 0x6, 0x1) 15.31203992s ago: executing program 3 (id=1529): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x40, 0xa, 0x3, "7e359c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000cc0)={0x1c, &(0x7f0000000740)={0x40, 0x8, 0x3d, "3a6beaaed77a26cab82be35b9560b17df8e911db3b6194f8da6b6b1e13195e9a799ce84fe8c680224f81a3fc5be5dd2765974b296171c4e6a9f941e8a0"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 15.184532933s ago: executing program 4 (id=1530): syz_open_dev$evdev(&(0x7f0000000040), 0x52, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406", @ANYRES64=r0], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000012c0)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\v3'], 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x1, "9b"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000007c0)={0x44, &(0x7f00000003c0)={0x40, 0x13, 0x84, "2104df1373093eebd860ec90d6c3d4995d91781e066772764c085d39cbebd81806045e331db248737bb39844f1721e4107cac667067f357efbabcfc60bba1520e2cccc35c4974c80108bfaedf3b74559de5602346dbb2b65d1693230d3d83f6cbaa6d18c2ce7ee8d60576e8124b8402d3ae8a91e23d428391899ebded33c6fe4caf0e666"}, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x81, 0x2, '-e'}, &(0x7f00000006c0)={0x20, 0x82, 0x1, "8d"}, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14.229652968s ago: executing program 5 (id=1534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 14.121640334s ago: executing program 0 (id=1535): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x4000}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) fsopen(&(0x7f00000003c0)='ecryptfs\x00', 0x1) 13.826931043s ago: executing program 1 (id=1537): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r1, &(0x7f0000000180)='nullb1\x00', 0x1ff) bind$inet(r0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)=ANY=[@ANYBLOB="df26337ef300aaaaaaaaaa2608004b00002c00"], 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x837, 0x452d40) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000000314230c2ebd7000ffdbdf250900020073797a310000000008004100736977001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 13.651957028s ago: executing program 5 (id=1538): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)=r1}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 13.429197267s ago: executing program 0 (id=1540): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000080)="5ba0", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x4040891) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$xdp(0x2c, 0x3, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x23a000, 0x1000, 0x0, 0x3}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 13.095813608s ago: executing program 5 (id=1541): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_int(r1, 0x1, 0x27, 0x0, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001900)=[{{&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x2, 0x4) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_submit(0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) close(r3) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x40000008}) poll(&(0x7f0000000000)=[{r5, 0x9000}], 0x1, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffa9, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x0, 0xa, 0xac, {0xac, 0x6, "abc22720873de8afd3877f7656aa7df34f2d98afcb1785e3bb4ebacd9cca45b1edaa8bffdf75e425b38a4305e80823b4027d748d12e4b73ce49e50aba093f5d1084addcbbe3593d93556ce569cb431588ed20a415f659964a28614e135b6c81051ecdc32fff6eddff997cb67049000610e25b3345a2d2e1424a755aeba10f830de7edf308318fd11b7a782ab63e2172a2ad680918fd92cbbf07d536863a0fce89a94bba770447065c0ed"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0105b08, &(0x7f0000000040)) 12.708810438s ago: executing program 2 (id=1542): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0x4, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x1, 0xc}, {0x5}, {0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x4, 0x7, 0x45, 0x10, 0xf7, 0x1d, 0x9, 0x8, 0xc, 0x5, 0xf, 0xa, 0x2, 0x6, 0xc, 0xc], 0x1, [0x200, 0xc, 0x101, 0x7, 0x486, 0x40, 0x8, 0x5, 0x8, 0x2a, 0x1, 0x134e, 0x1, 0x6, 0x8, 0xba], [0x3, 0xa, 0x3, 0x0, 0xffff, 0x0, 0x22b8, 0x4, 0x3, 0x48aa, 0xfffc, 0x7, 0x73, 0x4, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004841}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e1205002100", 0x2c}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 12.498860388s ago: executing program 2 (id=1543): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fb43e0ff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 12.187763981s ago: executing program 2 (id=1544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="110725bd7000f9dbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001f80)=r2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r4, &(0x7f0000000000)="41000200010001", 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x344, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0x0, 0xb}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x314, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x842e}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}, @TCA_FLOW_EMATCHES={0x2dc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x7, 0x0, 0x0, {{0x10, 0x8, 0x9}, {0x1, 0x5, 0x1}}}, @TCF_EM_IPT={0xb8, 0x1, 0x0, 0x0, {{0x401, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x95, 0x5, "3d9692ca844a7123810aaf582610bced46edf5b664ffdd09b1a28f01b8ff93938cf9d4b87f1619a21fcd3a25c3fb81707f3d1460e7c887fb5f132303f60734c3966ec2352e11449bb06b39f78bdb5cc2d598fc43d32b02285968dde2ecbcc2794705897a2116c2aa0facd6bed07724957d0f5184025b08abc39858b538ca58756ebbbcd5bac431ac53cbcbf088229648a6"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0x7}, {0x3, 0x2, 0x3}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x1}, {{0x4, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_META={0xa0, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="c8186403dc54", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="bd", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_VAR='2', @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="1aab3ed5d4f9f690", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="4fd3b1a159c95a", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR='\'', @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="04"]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="e17cb0b3eabe0f9c", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa, 0x8}, {0x6, 0x6}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe0}}, @TCA_EMATCH_TREE_LIST={0x134, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x6}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_META={0xac, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x8bdb}, [@TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="7ffd4a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x0, 0x2}, {0x8, 0x6, 0x2}}}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="e5698e70f0", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="b888e4bdb5f23ba6bbca"]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="d5ea69fad795cc3652", @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="c10d38", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="983f1ab3"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x846c, 0x5}, {0x5, 0x9}}}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="522432efd1e5e51c", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="58342cc8b675ef", @TCF_META_TYPE_VAR="6a2d156278e6"]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x86b, 0x3, 0x7}, {0x9, 0x723e, 0x101, 0x8}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x40, 0x2, 0x7, 0x6}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0xb5}, {0x0, 0x1, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x2}, {{0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x8}, {{0x1}, {0x1, 0x1, 0x1}}}}]}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xa84f0cd5}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1eb56}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x80}]}}]}, 0x344}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 12.041753523s ago: executing program 0 (id=1545): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000001001800000000ebff0018000000180000000200000000000000beaecfd850a95c5ed497b3007dc09c85d1d2f91100000003000000000372"], 0x0, 0x32, 0x0, 0x1}, 0x28) socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x76, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/snmp\x00') lseek(r4, 0x38, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x5}) 11.81014439s ago: executing program 1 (id=1546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x6e37b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x210000, 0x0, 0x334e8b, 0x200000a00000}) 9.621982623s ago: executing program 3 (id=1547): r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() close(0x3) open(0x0, 0x143142, 0x80) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x14) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mq_notify(0xffffffffffffffff, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) r4 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$IPC_RMID(r4, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 8.415252415s ago: executing program 4 (id=1548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="110725bd7000"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) 8.399433683s ago: executing program 5 (id=1549): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 7.636364043s ago: executing program 1 (id=1550): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x3f3a, 0x80008100088b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) timer_create(0x4, &(0x7f00000002c0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000280)="4d847217153995de750bb6e9bd085ddfe94acf", &(0x7f0000002540)="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"}}, &(0x7f0000000240)) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x10004, 0x5}) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$packet(r1, 0x0, 0x0, 0x4, &(0x7f0000000200)={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @random="00f8ff00"}, 0x14) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000140)={0x6, @output={0x0, 0x0, {0x8b, 0x3ae4}, 0xd, 0x1003}}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x200100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r3}, 0x18) 7.476648664s ago: executing program 0 (id=1551): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0x3ff, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffb, 0x0, 0x8, 0xfffffffc, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x2, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r0, r3, 0x6700000000000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) utimes(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={{0x77359400}, {0x77359400}}) close_range(r4, 0xffffffffffffffff, 0x0) 7.243555379s ago: executing program 2 (id=1552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), 0x0}, 0x20) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) 7.173655186s ago: executing program 5 (id=1553): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)=r1}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 7.17229286s ago: executing program 4 (id=1554): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x40, &(0x7f0000000000)=0x0) io_submit(r1, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0x5, 0x0, &(0x7f00000016c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) socket(0x2, 0x80805, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_off}, {@uuid_on}, {@redirect_dir_on}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = open(0x0, 0x84242, 0x1df2a23c5997fad6) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) fallocate(r2, 0x0, 0x1, 0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 6.994811233s ago: executing program 0 (id=1555): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0x4, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x1, 0xc}, {0x5}, {0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x4, 0x7, 0x45, 0x10, 0xf7, 0x1d, 0x9, 0x8, 0xc, 0x5, 0xf, 0xa, 0x2, 0x6, 0xc, 0xc], 0x1, [0x200, 0xc, 0x101, 0x7, 0x486, 0x40, 0x8, 0x5, 0x8, 0x2a, 0x1, 0x134e, 0x1, 0x6, 0x8, 0xba], [0x3, 0xa, 0x3, 0x0, 0xffff, 0x0, 0x22b8, 0x4, 0x3, 0x48aa, 0xfffc, 0x7, 0x73, 0x4, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004841}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a80016", 0x33}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 6.990512745s ago: executing program 1 (id=1556): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 6.824120416s ago: executing program 2 (id=1557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x8) open_by_handle_at(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='\b'], 0x4f0280) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 4.728950744s ago: executing program 5 (id=1558): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) memfd_create(0x0, 0x1) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) socket(0x10, 0x803, 0x2) 3.790626885s ago: executing program 2 (id=1559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, 0x0, 0xfffffffffffffffd, {0x0, 0x1, 0x3}, 0xfe}, 0x18) close(0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0xa8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc1d}, 0x1c) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='1', 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8040, 0x0, 0xffffffffffffff0a) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffb) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000880)={0xf30, r1, 0x8d61ddcfedb48df, 0x0, 0x25dfd9fd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0xf10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf04, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}]}, 0xf30}}, 0x20000000) 3.748629951s ago: executing program 3 (id=1560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800082582"], 0x4a) 3.723085161s ago: executing program 0 (id=1561): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x52d00, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x42}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r6, r7, 0x0, 0x1800, 0xfffffffe, 0x804, {0x8, 0x1, 0x3, 0x58, 0xf4b, 0x8001, 0x2, 0x0, 0x412e, 0xe154, 0x1000, 0x7f, 0x1f, 0xffffffff, "fe1d00003413000000000020b427173041a58e00e7000000cd0000734ebc9705"}}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x600801, 0x0) r9 = dup(0xffffffffffffffff) close_range(r8, r9, 0x2) 3.684223165s ago: executing program 1 (id=1562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x6e37b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x210000, 0x0, 0x334e8b, 0x200000a00000}) 3.518244787s ago: executing program 4 (id=1563): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.524115307s ago: executing program 1 (id=1564): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x20, 0x0, "bb02dfc344ca41256db7084508474004a18b56c53a306d8bcf11007bbe00040000000000000000000000000000000000000000000000000000000000000000fee58bb2e86600"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff0000"], 0x78) 1.185051917s ago: executing program 3 (id=1565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 0s ago: executing program 3 (id=1566): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x163) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_open_procfs(r3, &(0x7f0000000080)='gid_map\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1101, 0x0) getsockname$llc(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000003}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) lseek(0xffffffffffffffff, 0x8000000010007, 0x0) kernel console output (not intermixed with test programs): op1): Total free blocks count 0 [ 231.092854][ T8024] EXT4-fs (loop1): Free/Dirty block details [ 231.098820][ T8024] EXT4-fs (loop1): free_blocks=0 [ 231.103775][ T8024] EXT4-fs (loop1): dirty_blocks=1461 [ 231.109665][ T8024] EXT4-fs (loop1): Block reservation details [ 231.115702][ T8024] EXT4-fs (loop1): i_reserved_data_blocks=1461 [ 231.173088][ T29] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 231.618606][ T5635] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 231.641778][ T8035] loop4: detected capacity change from 0 to 128 [ 231.710751][ T5635] usb 5-1: USB disconnect, device number 16 [ 231.752924][ T8035] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.834337][ T8035] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 231.880778][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.948160][ T8029] syzkaller0: entered promiscuous mode [ 231.968442][ T8029] syzkaller0: entered allmulticast mode [ 232.121005][ T181] tipc: Subscription rejected, illegal request [ 232.209869][ T5621] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 232.294229][ T5624] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.320668][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.330565][ T29] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 232.507441][ T5629] usb 4-1: USB disconnect, device number 14 [ 232.525964][ T29] usb 3-1: device descriptor read/64, error -71 [ 232.636058][ T8052] loop4: detected capacity change from 0 to 164 [ 232.709654][ T8052] ISOFS: unable to read i-node block [ 232.743309][ T8052] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 232.816701][ T29] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 233.014867][ T29] usb 3-1: device descriptor read/64, error -71 [ 233.173049][ T29] usb usb3-port1: attempt power cycle [ 233.945577][ T29] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 234.016351][ T8076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.769'. [ 234.057266][ T29] usb 3-1: device descriptor read/8, error -71 [ 234.354951][ T29] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 234.414215][ T8082] loop1: detected capacity change from 0 to 1024 [ 234.422594][ T8084] binder: 8083:8084 ioctl c0306201 200000000540 returned -22 [ 234.434472][ T29] usb 3-1: device descriptor read/8, error -71 [ 234.458873][ T8082] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.488266][ T8082] EXT4-fs: Ignoring removed oldalloc option [ 234.528310][ T8082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 234.529623][ T8090] binder: 8083:8090 ioctl c0306201 200000000640 returned -22 [ 234.552860][ T8082] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.575268][ T29] usb usb3-port1: unable to enumerate USB device [ 234.650019][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 234.725471][ T5859] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 234.894975][ T5859] usb 1-1: Using ep0 maxpacket: 16 [ 234.905385][ T5859] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.921101][ T5859] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 234.954399][ T5859] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 235.004402][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.081821][ T5859] usb 1-1: config 0 descriptor?? [ 235.093247][ T8096] loop1: detected capacity change from 0 to 512 [ 235.127115][ T5859] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 235.256179][ T8096] EXT4-fs (loop1): 1 orphan inode deleted [ 235.282959][ T49] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 235.339866][ T8103] loop2: detected capacity change from 0 to 512 [ 235.351809][ T8096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.392561][ T49] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1 [ 235.447474][ T8103] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 235.467640][ T8096] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.520927][ T8103] EXT4-fs (loop2): orphan cleanup on readonly fs [ 235.579915][ T8103] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.778: bad orphan inode 15 [ 235.625597][ T8096] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 235.664013][ T8103] loop2: lost filesystem error report for type 5 error -117 [ 235.664276][ T8103] ext4_test_bit(bit=14, block=5) = 0 [ 235.672416][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 235.672434][ C0] EXT4-fs (loop2): initial error at time 1785732835: ext4_orphan_get:1425 [ 235.672457][ C0] EXT4-fs (loop2): last error at time 1785732835: ext4_orphan_get:1425 [ 235.758568][ T8096] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 235.867305][ T8096] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 235.913618][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 235.961350][ T8103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 236.055527][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.244018][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.389167][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.787'. [ 236.402200][ T8121] loop4: detected capacity change from 0 to 1024 [ 236.418425][ T8124] loop1: detected capacity change from 0 to 1024 [ 236.453620][ T8121] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.527954][ T8121] EXT4-fs: Ignoring removed oldalloc option [ 236.572304][ T8124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.713068][ T8121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 236.841911][ T8121] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.020598][ T8138] binder: 8136:8138 ioctl c0306201 200000000540 returned -22 [ 237.047571][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.072770][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 237.115465][ T5629] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 237.124203][ T8141] binder: 8136:8141 ioctl c0306201 200000000640 returned -22 [ 237.285295][ T5629] usb 6-1: device descriptor read/64, error -71 [ 237.473894][ T5859] usb 1-1: USB disconnect, device number 28 [ 237.576767][ T5629] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 237.745525][ T5629] usb 6-1: device descriptor read/64, error -71 [ 237.795638][ T29] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 237.879797][ T5629] usb usb6-port1: attempt power cycle [ 238.028344][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.080903][ T29] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 238.096359][ T8161] syzkaller0: entered promiscuous mode [ 238.126301][ T8161] syzkaller0: entered allmulticast mode [ 238.146438][ T29] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 238.188895][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.221747][ T29] usb 5-1: Product: syz [ 238.234449][ T29] usb 5-1: Manufacturer: syz [ 238.249368][ T29] usb 5-1: SerialNumber: syz [ 238.257398][ T5629] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 238.328152][ T5629] usb 6-1: device descriptor read/8, error -71 [ 238.555516][ T29] usb 5-1: unit 4 not found! [ 238.608854][ T5629] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 238.664567][ T8174] loop2: detected capacity change from 0 to 1024 [ 238.696541][ T5629] usb 6-1: device descriptor read/8, error -71 [ 238.794074][ T8174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.856422][ T5629] usb usb6-port1: unable to enumerate USB device [ 238.913990][ T29] usb 5-1: USB disconnect, device number 17 [ 239.201804][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.259337][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.068123][ T8198] binder: 8197:8198 ioctl c0306201 200000000540 returned -22 [ 243.168763][ T8200] binder: 8197:8200 ioctl c0306201 200000000640 returned -22 [ 243.404445][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 243.428199][ T8207] syzkaller0: entered promiscuous mode [ 243.476222][ T8207] syzkaller0: entered allmulticast mode [ 243.547977][ T8209] netlink: 'syz.0.818': attribute type 1 has an invalid length. [ 243.595558][ T8209] netlink: 'syz.0.818': attribute type 2 has an invalid length. [ 243.609059][ T8214] loop4: detected capacity change from 0 to 512 [ 243.749710][ T8214] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.820: iget: bad i_size value: 38620345925642 [ 243.869903][ T8214] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 243.870379][ T8214] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.820: couldn't read orphan inode 15 (err -117) [ 243.879690][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 243.879714][ C0] EXT4-fs (loop4): initial error at time 1785732843: ext4_orphan_get:1399: inode 15 [ 243.879744][ C0] EXT4-fs (loop4): last error at time 1785732843: ext4_orphan_get:1399: inode 15 [ 244.217759][ T8214] loop4: lost filesystem error report for type 5 error -117 [ 244.232275][ T8214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.343780][ T8223] loop5: detected capacity change from 0 to 1024 [ 244.461239][ T8223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.670888][ T7668] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:10: bg 0: block 5: invalid block bitmap [ 245.824053][ T7668] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 245.957435][ T7668] EXT4-fs (loop4): This should not happen!! Data will be lost [ 245.957435][ T7668] [ 246.058124][ T7668] EXT4-fs (loop4): Total free blocks count 0 [ 246.125363][ T7668] EXT4-fs (loop4): Free/Dirty block details [ 246.175413][ T7668] EXT4-fs (loop4): free_blocks=0 [ 246.192652][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.231590][ T7668] EXT4-fs (loop4): dirty_blocks=16000 [ 246.265936][ T7668] EXT4-fs (loop4): Block reservation details [ 246.319503][ T7668] EXT4-fs (loop4): i_reserved_data_blocks=16000 [ 246.681283][ T8251] binder: 8249:8251 ioctl c0306201 200000000540 returned -22 [ 246.860528][ T49] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 246.895999][ T8255] binder: 8249:8255 ioctl c0306201 200000000640 returned -22 [ 247.065777][ T5859] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 247.133291][ T8257] syzkaller0: entered promiscuous mode [ 247.178580][ T8257] syzkaller0: entered allmulticast mode [ 247.226099][ T5859] usb 6-1: device descriptor read/64, error -71 [ 247.431313][ T5624] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 247.545707][ T5859] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 247.735669][ T5859] usb 6-1: device descriptor read/64, error -71 [ 247.778163][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 247.875911][ T5859] usb usb6-port1: attempt power cycle [ 248.100357][ T8275] vlan2: entered allmulticast mode [ 248.144465][ T8275] bridge1: entered allmulticast mode [ 248.189862][ T8276] bridge1: port 1(erspan0) entered blocking state [ 248.238000][ T8276] bridge1: port 1(erspan0) entered disabled state [ 248.260562][ T5859] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 248.311709][ T8276] erspan0: entered allmulticast mode [ 248.333958][ T5859] usb 6-1: device descriptor read/8, error -71 [ 248.382102][ T8276] erspan0: entered promiscuous mode [ 248.443096][ T8276] bridge1: port 1(erspan0) entered blocking state [ 248.449942][ T8276] bridge1: port 1(erspan0) entered forwarding state [ 248.501347][ T8283] netlink: 14 bytes leftover after parsing attributes in process `syz.0.843'. [ 248.563732][ T8286] loop1: detected capacity change from 0 to 512 [ 248.628948][ T8286] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.845: iget: bad i_size value: 38620345925642 [ 248.645190][ T5859] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 248.692928][ T8283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.713341][ T5859] usb 6-1: device descriptor read/8, error -71 [ 248.731149][ T8286] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 248.733136][ T8286] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.845: couldn't read orphan inode 15 (err -117) [ 248.742431][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 248.742455][ C0] EXT4-fs (loop1): initial error at time 1785732848: ext4_orphan_get:1399: inode 15 [ 248.742484][ C0] EXT4-fs (loop1): last error at time 1785732848: ext4_orphan_get:1399: inode 15 [ 248.828675][ T8283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.878108][ T8283] bond0 (unregistering): Released all slaves [ 248.895615][ T5859] usb usb6-port1: unable to enumerate USB device [ 249.028226][ T8286] loop1: lost filesystem error report for type 5 error -117 [ 249.039983][ T8286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.396227][ T58] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 250.569439][ T58] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 250.692415][ T58] EXT4-fs (loop1): This should not happen!! Data will be lost [ 250.692415][ T58] [ 250.737960][ T8304] loop4: detected capacity change from 0 to 1764 [ 250.767585][ T58] EXT4-fs (loop1): Total free blocks count 0 [ 250.826770][ T8310] loop5: detected capacity change from 0 to 128 [ 250.840752][ T58] EXT4-fs (loop1): Free/Dirty block details [ 250.888100][ T58] EXT4-fs (loop1): free_blocks=0 [ 250.928206][ T8310] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.947372][ T58] EXT4-fs (loop1): dirty_blocks=16000 [ 250.983184][ T58] EXT4-fs (loop1): Block reservation details [ 251.037618][ T58] EXT4-fs (loop1): i_reserved_data_blocks=16000 [ 251.058149][ T8310] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.305299][ T8315] syzkaller0: entered promiscuous mode [ 251.373210][ T8315] syzkaller0: entered allmulticast mode [ 251.509433][ T5622] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.005189][ T8324] loop4: detected capacity change from 0 to 2048 [ 252.115561][ T8324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.151763][ T8327] syzkaller0: entered promiscuous mode [ 252.184583][ T8327] syzkaller0: entered allmulticast mode [ 252.585430][ T49] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 252.659689][ T8309] loop3: detected capacity change from 0 to 128 [ 253.069925][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.269508][ T5621] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 253.888936][ T8354] binder: 8352:8354 ioctl c0306201 0 returned -14 [ 253.996587][ T8357] binder: 8352:8357 ioctl c0306201 200000000640 returned -22 [ 254.013233][ T8337] usb usb8: usbfs: process 8337 (syz.5.859) did not claim interface 0 before use [ 254.606026][ T8362] syzkaller0: entered promiscuous mode [ 254.640015][ T8362] syzkaller0: entered allmulticast mode [ 255.075775][ T8369] loop2: detected capacity change from 0 to 512 [ 255.166415][ T8369] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.873: iget: bad i_size value: 38620345925642 [ 255.220997][ T5621] EXT4-fs: 15 callbacks suppressed [ 255.221016][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.269518][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.276032][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.290892][ T8369] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.291329][ T8369] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.873: couldn't read orphan inode 15 (err -117) [ 255.300570][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 255.300588][ C0] EXT4-fs (loop2): initial error at time 1785732854: ext4_orphan_get:1399: inode 15 [ 255.300617][ C0] EXT4-fs (loop2): last error at time 1785732854: ext4_orphan_get:1399: inode 15 [ 255.398184][ T8376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.407091][ T8376] IPv6: NLM_F_CREATE should be set when creating new route [ 255.414491][ T8376] IPv6: NLM_F_CREATE should be set when creating new route [ 255.421786][ T8376] IPv6: NLM_F_CREATE should be set when creating new route [ 255.701268][ T8369] loop2: lost filesystem error report for type 5 error -117 [ 255.703123][ T8369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.156350][ T29] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 257.114259][ T49] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 257.222794][ T49] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 257.240713][ T8395] usb usb8: usbfs: process 8395 (syz.3.884) did not claim interface 0 before use [ 257.265767][ T8392] loop5: detected capacity change from 0 to 1024 [ 257.278332][ T29] usb 2-1: device descriptor read/64, error -71 [ 257.330477][ T49] EXT4-fs (loop2): This should not happen!! Data will be lost [ 257.330477][ T49] [ 257.382803][ T8398] binder: 8397:8398 ioctl c0306201 0 returned -14 [ 257.412849][ T49] EXT4-fs (loop2): Total free blocks count 0 [ 257.429245][ T8392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.458353][ T8401] binder: 8397:8401 ioctl c0306201 200000000640 returned -22 [ 257.470904][ T49] EXT4-fs (loop2): Free/Dirty block details [ 257.507232][ T49] EXT4-fs (loop2): free_blocks=0 [ 257.554341][ T49] EXT4-fs (loop2): dirty_blocks=16000 [ 257.575164][ T29] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 257.609029][ T49] EXT4-fs (loop2): Block reservation details [ 257.666970][ T49] EXT4-fs (loop2): i_reserved_data_blocks=16000 [ 257.764922][ T29] usb 2-1: device descriptor read/64, error -71 [ 257.926297][ T29] usb usb2-port1: attempt power cycle [ 258.118776][ T8411] syzkaller0: entered promiscuous mode [ 258.142390][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.159367][ T8411] syzkaller0: entered allmulticast mode [ 258.306217][ T29] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 258.366197][ T29] usb 2-1: device descriptor read/8, error -71 [ 258.644919][ T29] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 258.706063][ T29] usb 2-1: device descriptor read/8, error -71 [ 258.865624][ T29] usb usb2-port1: unable to enumerate USB device [ 259.182593][ T13] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 259.239639][ T8427] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.897'. [ 259.382724][ T8430] netlink: 'syz.0.896': attribute type 22 has an invalid length. [ 259.419167][ T8432] usb usb8: usbfs: process 8432 (syz.4.899) did not claim interface 0 before use [ 259.804134][ T5620] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 259.872196][ T8444] syzkaller0: entered promiscuous mode [ 259.908916][ T8444] syzkaller0: entered allmulticast mode [ 260.425106][ T5351] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 260.450210][ T8457] loop0: detected capacity change from 0 to 512 [ 260.530688][ T8457] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.910: iget: bad i_size value: 38620345925642 [ 260.601423][ T8457] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 260.601856][ T8457] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.910: couldn't read orphan inode 15 (err -117) [ 260.611109][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 260.611127][ C0] EXT4-fs (loop0): initial error at time 1785732859: ext4_orphan_get:1399: inode 15 [ 260.611156][ C0] EXT4-fs (loop0): last error at time 1785732859: ext4_orphan_get:1399: inode 15 [ 260.653458][ T5859] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 260.698328][ T5351] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 260.732566][ T5351] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 260.775934][ T5351] usb 2-1: config 0 interface 0 has no altsetting 0 [ 260.855224][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 260.862764][ T5859] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.875948][ T5351] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 260.888934][ T8457] loop0: lost filesystem error report for type 5 error -117 [ 260.889207][ T5859] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.912402][ T8457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.912502][ T5351] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 261.153298][ T5859] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 261.169209][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.044887][ T3268] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:8: bg 0: block 5: invalid block bitmap [ 262.081798][ T5351] usb 2-1: Product: syz [ 262.101550][ T5351] usb 2-1: Manufacturer: syz [ 262.113310][ T5859] usb 4-1: Product: syz [ 262.138535][ T3268] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 262.155514][ T5351] usb 2-1: SerialNumber: syz [ 262.163521][ T5859] usb 4-1: Manufacturer: syz [ 262.193942][ T5859] usb 4-1: SerialNumber: syz [ 262.204953][ T5351] usb 2-1: config 0 descriptor?? [ 262.239240][ T3268] EXT4-fs (loop0): This should not happen!! Data will be lost [ 262.239240][ T3268] [ 262.289760][ T5351] usb 2-1: selecting invalid altsetting 0 [ 262.323039][ T3268] EXT4-fs (loop0): Total free blocks count 0 [ 262.368234][ T3268] EXT4-fs (loop0): Free/Dirty block details [ 262.408732][ T3268] EXT4-fs (loop0): free_blocks=0 [ 262.439485][ T3268] EXT4-fs (loop0): dirty_blocks=16000 [ 262.482877][ T3268] EXT4-fs (loop0): Block reservation details [ 262.536341][ T3268] EXT4-fs (loop0): i_reserved_data_blocks=16000 [ 262.640721][ T5629] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 262.651921][ T5620] EXT4-fs: 15 callbacks suppressed [ 262.651938][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.684550][ T5351] usb 2-1: USB disconnect, device number 29 [ 262.861077][ T5629] usb 5-1: Using ep0 maxpacket: 16 [ 262.878242][ T5629] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.912931][ T5629] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.968789][ T5629] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 263.016436][ T5629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 263.083312][ T5629] usb 5-1: SerialNumber: syz [ 263.229566][ T5629] usb 5-1: 0:2 : does not exist [ 263.349368][ T6654] udevd[6654]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.882813][ T49] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 263.942712][ T5629] usb 4-1: USB disconnect, device number 15 [ 264.588636][ T5623] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 264.606546][ T5859] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 264.763548][ T5859] usb 3-1: device descriptor read/64, error -71 [ 265.065387][ T5859] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 265.090138][ T8495] syzkaller0: entered promiscuous mode [ 265.110569][ T8495] syzkaller0: entered allmulticast mode [ 265.143674][ T8495] tipc: Enabling of bearer rejected, failed to enable media [ 265.215609][ T5859] usb 3-1: device descriptor read/64, error -71 [ 265.325690][ T5859] usb usb3-port1: attempt power cycle [ 265.697430][ T5859] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 265.769986][ T5629] usb 5-1: USB disconnect, device number 18 [ 265.797858][ T5859] usb 3-1: device descriptor read/8, error -71 [ 266.023872][ T5623] EXT4-fs: 15 callbacks suppressed [ 266.023889][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.096199][ T5859] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 266.161999][ T8508] loop1: detected capacity change from 0 to 512 [ 266.170210][ T5859] usb 3-1: device descriptor read/8, error -71 [ 266.311162][ T8508] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.929: iget: bad i_size value: 38620345925642 [ 266.335612][ T5859] usb usb3-port1: unable to enumerate USB device [ 266.418040][ T8508] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 266.418538][ T8508] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.929: couldn't read orphan inode 15 (err -117) [ 266.427851][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 266.427876][ C0] EXT4-fs (loop1): initial error at time 1785732865: ext4_orphan_get:1399: inode 15 [ 266.427906][ C0] EXT4-fs (loop1): last error at time 1785732865: ext4_orphan_get:1399: inode 15 [ 266.597828][ T5351] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 266.751978][ T8508] loop1: lost filesystem error report for type 5 error -117 [ 266.762296][ T8508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.783180][ T5351] usb 4-1: Using ep0 maxpacket: 8 [ 266.826472][ T5351] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.872709][ T5351] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.958523][ T5351] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 266.968062][ T5629] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 267.192733][ T5351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.073811][ T5629] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 268.106480][ T724] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 268.148805][ T5351] usb 4-1: Product: syz [ 268.164469][ T5629] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 268.198008][ T5351] usb 4-1: Manufacturer: syz [ 268.236199][ T724] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 268.256154][ T5351] usb 4-1: SerialNumber: syz [ 268.274763][ T5629] usb 5-1: config 0 interface 0 has no altsetting 0 [ 268.335871][ T5629] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 268.355704][ T724] EXT4-fs (loop1): This should not happen!! Data will be lost [ 268.355704][ T724] [ 268.407760][ T5629] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 268.430817][ T724] EXT4-fs (loop1): Total free blocks count 0 [ 268.470336][ T5629] usb 5-1: Product: syz [ 268.481454][ T724] EXT4-fs (loop1): Free/Dirty block details [ 268.519455][ T5629] usb 5-1: Manufacturer: syz [ 268.546110][ T724] EXT4-fs (loop1): free_blocks=0 [ 268.559794][ T5629] usb 5-1: SerialNumber: syz [ 268.580260][ T724] EXT4-fs (loop1): dirty_blocks=16000 [ 268.603653][ T5629] usb 5-1: config 0 descriptor?? [ 268.625044][ T724] EXT4-fs (loop1): Block reservation details [ 268.683618][ T724] EXT4-fs (loop1): i_reserved_data_blocks=16000 [ 268.749214][ T5629] usb 5-1: selecting invalid altsetting 0 [ 269.135502][ T5629] usb 5-1: USB disconnect, device number 19 [ 269.337492][ T5743] udevd[5743]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 269.876702][ T5629] usb 4-1: USB disconnect, device number 16 [ 270.179391][ T3268] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 270.615820][ T8571] netlink: 60 bytes leftover after parsing attributes in process `syz.3.955'. [ 270.742080][ T8575] netlink: 60 bytes leftover after parsing attributes in process `syz.3.955'. [ 270.988614][ T5621] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 271.834785][ T5351] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 272.074959][ T5351] usb 1-1: Using ep0 maxpacket: 8 [ 272.083717][ T5858] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 272.138468][ T5351] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.232689][ T5351] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.331076][ T5858] usb 3-1: unable to get BOS descriptor or descriptor too short [ 272.356767][ T5351] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 272.395006][ T5858] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 272.459119][ T5351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.514470][ T5858] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 272.539914][ T5351] usb 1-1: Product: syz [ 272.573029][ T5351] usb 1-1: Manufacturer: syz [ 272.587813][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.612831][ T5351] usb 1-1: SerialNumber: syz [ 272.645182][ T5858] usb 3-1: Product: syz [ 272.681356][ T5858] usb 3-1: Manufacturer: syz [ 272.713989][ T5858] usb 3-1: SerialNumber: syz [ 273.085141][ T5858] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 273.185573][ T5858] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 273.272948][ T5858] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 273.385813][ T5621] EXT4-fs: 15 callbacks suppressed [ 273.385834][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.409792][ T5858] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 273.492697][ T8623] dns_resolver: Unsupported content type (254) [ 273.791320][ T8623] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 273.824394][ T5858] usb 3-1: USB disconnect, device number 39 [ 274.211050][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 274.729144][ T5859] usb 1-1: USB disconnect, device number 29 [ 275.555266][ T8671] netlink: 128 bytes leftover after parsing attributes in process `syz.5.991'. [ 275.621163][ T8671] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 275.885300][ T8680] netlink: 'syz.4.995': attribute type 23 has an invalid length. [ 276.269638][ T8689] netlink: 188 bytes leftover after parsing attributes in process `syz.0.999'. [ 276.405944][ T5351] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 276.459232][ T8694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1001'. [ 276.541125][ T8695] syzkaller0: entered promiscuous mode [ 276.590696][ T8695] syzkaller0: entered allmulticast mode [ 276.605303][ T5351] usb 6-1: device descriptor read/64, error -71 [ 276.772127][ T8698] tipc: Enabling of bearer rejected, failed to enable media [ 276.790882][ T8702] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 276.895499][ T5351] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 277.137211][ T5351] usb 6-1: device descriptor read/64, error -71 [ 277.300517][ T5351] usb usb6-port1: attempt power cycle [ 277.542376][ T8717] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1010'. [ 277.616275][ T8717] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 277.725249][ T5351] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 277.798586][ T5351] usb 6-1: device descriptor read/8, error -71 [ 278.085707][ T5351] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 278.157801][ T5351] usb 6-1: device descriptor read/8, error -71 [ 278.311019][ T5351] usb usb6-port1: unable to enumerate USB device [ 278.765282][ T5859] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 278.957213][ T5859] usb 1-1: device descriptor read/64, error -71 [ 279.160638][ T8759] binder: 8757:8759 ioctl c0306201 200000000640 returned -22 [ 279.246992][ T5859] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 279.408126][ T8764] loop5: detected capacity change from 0 to 128 [ 279.445357][ T5859] usb 1-1: device descriptor read/64, error -71 [ 279.509700][ T8764] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 279.591528][ T8764] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 279.611776][ T5859] usb usb1-port1: attempt power cycle [ 279.735101][ T5629] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 279.863567][ T8776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.870909][ T8776] IPv6: NLM_F_CREATE should be set when creating new route [ 279.878381][ T8776] IPv6: NLM_F_CREATE should be set when creating new route [ 279.885685][ T8776] IPv6: NLM_F_CREATE should be set when creating new route [ 279.956527][ T5629] usb 4-1: Using ep0 maxpacket: 16 [ 279.978175][ T5622] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.006042][ T5629] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 280.015243][ T5859] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 280.056738][ T5629] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 280.067701][ T5859] usb 1-1: device descriptor read/8, error -71 [ 280.116028][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.171937][ T5629] usb 4-1: Product: syz [ 280.199963][ T5629] usb 4-1: Manufacturer: syz [ 280.232146][ T5629] usb 4-1: SerialNumber: syz [ 280.287226][ T5629] usb 4-1: config 0 descriptor?? [ 280.306292][ T5351] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 280.345050][ T5859] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 280.399347][ T5859] usb 1-1: device descriptor read/8, error -71 [ 280.505820][ T5351] usb 3-1: Using ep0 maxpacket: 8 [ 280.547948][ T5351] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.558942][ T5859] usb usb1-port1: unable to enumerate USB device [ 280.626992][ T5351] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.673967][ T5351] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 280.703745][ T5351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.746273][ T5351] usb 3-1: Product: syz [ 280.757668][ T5351] usb 3-1: Manufacturer: syz [ 280.779441][ T5351] usb 3-1: SerialNumber: syz [ 280.895799][ T5629] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 281.060454][ T5629] usb 2-1: device descriptor read/64, error -71 [ 281.129742][ T8802] binder: 8800:8802 ioctl c0306201 200000000640 returned -22 [ 281.330403][ T5629] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 281.507071][ T5629] usb 2-1: device descriptor read/64, error -71 [ 281.659369][ T5629] usb usb2-port1: attempt power cycle [ 281.705551][ T8814] syzkaller0: entered promiscuous mode [ 281.739664][ T8814] syzkaller0: entered allmulticast mode [ 281.750321][ T8816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.757590][ T8816] IPv6: NLM_F_CREATE should be set when creating new route [ 281.764885][ T8816] IPv6: NLM_F_CREATE should be set when creating new route [ 281.772086][ T8816] IPv6: NLM_F_CREATE should be set when creating new route [ 282.065324][ T5629] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 282.106672][ T5629] usb 2-1: device descriptor read/8, error -71 [ 282.136182][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1055'. [ 282.369093][ T5629] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 282.435797][ T5629] usb 2-1: device descriptor read/8, error -71 [ 282.586195][ T5629] usb usb2-port1: unable to enumerate USB device [ 282.644005][ T5859] usb 4-1: USB disconnect, device number 17 [ 284.944251][ T5629] usb 3-1: USB disconnect, device number 40 [ 285.350212][ T8857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.761994][ T8868] netlink: 'syz.4.1070': attribute type 22 has an invalid length. [ 287.728568][ T8882] raw_sendmsg: syz.2.1076 forgot to set AF_INET. Fix it! [ 287.954856][ T5629] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 289.543903][ T5629] usb 5-1: device descriptor read/all, error -71 [ 289.625197][ T5635] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 289.846119][ T5635] usb 1-1: device descriptor read/64, error -71 [ 290.125838][ T5635] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 290.315621][ T5635] usb 1-1: device descriptor read/64, error -71 [ 290.479704][ T5635] usb usb1-port1: attempt power cycle [ 290.711054][ T8915] netlink: 'syz.5.1089': attribute type 22 has an invalid length. [ 290.881456][ T5635] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 291.140240][ T5635] usb 1-1: device descriptor read/8, error -71 [ 293.145510][ T5629] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 293.345746][ T5629] usb 1-1: device descriptor read/64, error -71 [ 293.547670][ T8972] loop4: detected capacity change from 0 to 128 [ 293.604603][ T8972] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 293.615122][ T5859] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 293.638958][ T5629] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 293.657909][ T8972] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 293.815963][ T5629] usb 1-1: device descriptor read/64, error -71 [ 293.889657][ T5624] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.898938][ T5859] usb 6-1: Using ep0 maxpacket: 8 [ 293.937978][ T5859] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.952075][ T5629] usb usb1-port1: attempt power cycle [ 294.008287][ T5859] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 294.081712][ T5859] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 294.144568][ T5859] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 294.177416][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.307836][ T5859] usb 6-1: Product: syz [ 294.344567][ T5859] usb 6-1: Manufacturer: syz [ 294.355844][ T5629] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 294.379004][ T5859] usb 6-1: SerialNumber: syz [ 294.398799][ T8987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'. [ 294.424580][ T5629] usb 1-1: device descriptor read/8, error -71 [ 294.686416][ T5859] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 294.707691][ T5629] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 294.791718][ T5629] usb 1-1: device descriptor read/8, error -71 [ 294.953624][ T5629] usb usb1-port1: unable to enumerate USB device [ 295.083743][ T8999] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1123'. [ 295.111233][ T5859] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 295.384285][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.509173][ T9009] loop2: detected capacity change from 0 to 128 [ 296.715160][ T9009] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 296.802164][ T5629] usb 6-1: USB disconnect, device number 26 [ 296.839959][ T9009] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 297.258186][ T5620] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.335049][ T5859] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 297.443964][ T9029] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1135'. [ 297.521190][ T9029] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 297.572925][ T5859] usb 4-1: not running at top speed; connect to a high speed hub [ 297.624508][ T5859] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.699451][ T5859] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 297.812240][ T5859] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 297.902143][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 297.975666][ T5859] usb 4-1: Product: syz [ 298.007946][ T5859] usb 4-1: Manufacturer: syz [ 298.118989][ T9043] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.1141'. [ 298.606577][ T5629] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 298.695251][ T5351] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 298.805051][ T5629] usb 5-1: Using ep0 maxpacket: 8 [ 298.845640][ T5629] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.875048][ T5351] usb 1-1: device descriptor read/64, error -71 [ 298.916720][ T5629] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 298.962407][ T5629] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 299.027537][ T5629] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 299.076699][ T5629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.148286][ T5351] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 299.158221][ T5629] usb 5-1: Product: syz [ 299.184214][ T5629] usb 5-1: Manufacturer: syz [ 300.187369][ T5629] usb 5-1: SerialNumber: syz [ 300.367346][ T5351] usb 1-1: device descriptor read/64, error -71 [ 300.535981][ T5351] usb usb1-port1: attempt power cycle [ 300.652871][ T5629] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 301.868704][ T5351] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 302.669369][ T5629] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 302.681860][ T5351] usb 1-1: device descriptor read/8, error -71 [ 302.760455][ T5629] usb 5-1: USB disconnect, device number 22 [ 302.922608][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.976870][ T5351] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 303.160128][ T5859] sisusb 4-1:1.0: Invalid USB2VGA device [ 303.227732][ T5859] sisusb 4-1:1.0: probe with driver sisusb failed with error -22 [ 303.256479][ T5351] usb 1-1: device not accepting address 45, error -71 [ 303.308716][ T5351] usb usb1-port1: unable to enumerate USB device [ 303.487960][ T5629] usb 4-1: USB disconnect, device number 18 [ 303.685737][ T5859] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 303.917344][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 303.961113][ T5859] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.996905][ T5629] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 304.032142][ T5859] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.095390][ T5859] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.142779][ T5859] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.217096][ T5859] usb 5-1: config 0 interface 0 has no altsetting 0 [ 304.232189][ T5629] usb 4-1: unable to get BOS descriptor or descriptor too short [ 304.269180][ T5859] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 304.285073][ T5629] usb 4-1: config 114 has an invalid interface number: 240 but max is 0 [ 304.308774][ T5351] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 304.338054][ T5629] usb 4-1: config 114 has no interface number 0 [ 304.344587][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.342156][ T5629] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 305.431296][ T5859] usb 5-1: config 0 descriptor?? [ 305.473812][ T5629] usb 4-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 305.486366][ T5351] usb 6-1: Using ep0 maxpacket: 8 [ 305.542146][ T5351] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.590231][ T5629] usb 4-1: config 114 interface 240 altsetting 232 endpoint 0x8A has invalid wMaxPacketSize 0 [ 305.622697][ T5351] usb 6-1: config 0 has no interfaces? [ 305.643605][ T5351] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 305.671073][ T5629] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 0 [ 305.706457][ T5351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.726955][ T5629] usb 4-1: config 114 interface 240 has no altsetting 0 [ 305.773767][ T5351] usb 6-1: config 0 descriptor?? [ 305.787893][ T5629] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 305.846258][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.900567][ T5629] usb 4-1: Product: syz [ 305.937025][ T5629] usb 4-1: Manufacturer: syz [ 305.947407][ T5859] hid_parser_main: 17 callbacks suppressed [ 305.947429][ T5859] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x0 [ 305.981688][ T5629] usb 4-1: SerialNumber: syz [ 306.019770][ T9084] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 306.046727][ T5859] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x0 [ 306.091871][ T5859] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x0 [ 306.157440][ T5859] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x0 [ 306.191291][ T5859] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x0 [ 308.003905][ T5859] corsair-cpro 0003:1B1C:0C10.000B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 308.030444][ T5635] usb 6-1: USB disconnect, device number 27 [ 308.092682][ T5629] ir_usb 4-1:114.240: IR Dongle converter detected [ 308.187651][ T5629] usb 4-1: IRDA class descriptor not found, device not bound [ 308.246338][ T5859] corsair-cpro 0003:1B1C:0C10.000B: probe with driver corsair-cpro failed with error -38 [ 308.333672][ T5629] usb 4-1: USB disconnect, device number 19 [ 308.393879][ T5859] usb 5-1: USB disconnect, device number 23 [ 308.558284][ T9099] fido_id[9099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 308.745015][ T5351] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 308.957268][ T5351] usb 6-1: Using ep0 maxpacket: 16 [ 309.006337][ T5351] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.074427][ T5351] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.158519][ T5351] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 309.232637][ T5351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 309.287984][ T5351] usb 6-1: SerialNumber: syz [ 309.366178][ T5351] usb 6-1: 0:2 : does not exist [ 309.434774][ T5859] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 309.638070][ T5859] usb 4-1: not running at top speed; connect to a high speed hub [ 309.704407][ T5859] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.788460][ T5859] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 309.876316][ T9119] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.883972][ T9119] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.930445][ T5859] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 309.969875][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 310.029479][ T5859] usb 4-1: Product: syz [ 310.063062][ T5859] usb 4-1: Manufacturer: syz [ 310.365510][ T9119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.479625][ T9119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.574584][ T5627] usb 6-1: USB disconnect, device number 28 [ 313.025144][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.055112][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.091144][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.135089][ T5627] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 313.157393][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.214886][ T29] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 313.325055][ T5627] usb 6-1: Using ep0 maxpacket: 32 [ 313.351209][ T5627] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.393482][ T5627] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.406444][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 313.437995][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.455683][ T5627] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.479962][ T29] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 313.512966][ T5351] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 313.524115][ T5627] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.552566][ T29] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 313.596873][ T5627] usb 6-1: config 0 interface 0 has no altsetting 0 [ 313.615998][ T29] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 313.636657][ T5627] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 313.653677][ T9145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.661815][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.673628][ T5627] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.688441][ T29] usb 3-1: Product: syz [ 313.704427][ T29] usb 3-1: Manufacturer: syz [ 313.728565][ T29] usb 3-1: SerialNumber: syz [ 313.744463][ T5351] usb 5-1: unable to get BOS descriptor or descriptor too short [ 313.759443][ T5627] usb 6-1: config 0 descriptor?? [ 313.769060][ T5351] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 313.830579][ T5351] usb 5-1: config 114 has no interface number 0 [ 313.869924][ T5351] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 313.926775][ T5351] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 314.071418][ T5351] usb 5-1: config 114 interface 240 altsetting 232 endpoint 0x8A has invalid wMaxPacketSize 0 [ 314.084968][ T29] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 314.131544][ T5351] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 0 [ 314.207772][ T5351] usb 5-1: config 114 interface 240 has no altsetting 0 [ 314.253658][ T5627] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 314.292726][ T5351] usb 5-1: string descriptor 0 read error: -22 [ 314.327582][ T5351] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 314.338494][ T5627] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 314.397718][ T5627] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 314.423747][ T5351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.442567][ T29] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 314.492923][ T5627] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 314.538563][ T9141] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 314.573422][ T5627] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 314.627597][ T5351] ir_usb 5-1:114.240: IR Dongle converter detected [ 314.668096][ T5627] corsair-cpro 0003:1B1C:0C10.000C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 314.698552][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.822207][ T5351] usb 5-1: IRDA class descriptor not found, device not bound [ 314.834899][ T5627] corsair-cpro 0003:1B1C:0C10.000C: probe with driver corsair-cpro failed with error -38 [ 314.959147][ T5351] usb 5-1: USB disconnect, device number 24 [ 314.970130][ T5627] usb 6-1: USB disconnect, device number 29 [ 315.101679][ T9153] fido_id[9153]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 315.197041][ T5859] sisusb 4-1:1.0: Invalid USB2VGA device [ 315.239380][ T5859] sisusb 4-1:1.0: probe with driver sisusb failed with error -22 [ 315.510742][ T5859] usb 4-1: USB disconnect, device number 20 [ 315.726863][ T9167] fuse: Unknown parameter 'fd0x0000000000000003' [ 315.868390][ T9171] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1192'. [ 317.016840][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.023253][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.430038][ T5351] usb 3-1: USB disconnect, device number 41 [ 317.741809][ T9184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.749147][ T9184] IPv6: NLM_F_CREATE should be set when creating new route [ 317.756447][ T9184] IPv6: NLM_F_CREATE should be set when creating new route [ 317.763712][ T9184] IPv6: NLM_F_CREATE should be set when creating new route [ 318.549304][ T9200] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 318.635069][ T5351] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 318.685697][ T5859] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 319.037886][ T5351] usb 1-1: unable to get BOS descriptor or descriptor too short [ 319.079600][ T5351] usb 1-1: config 114 has an invalid interface number: 240 but max is 0 [ 319.132582][ T5351] usb 1-1: config 114 has no interface number 0 [ 319.167002][ T5859] usb 3-1: unable to get BOS descriptor or descriptor too short [ 319.181644][ T5351] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 319.232802][ T5859] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 319.258117][ T9206] fuse: Unknown parameter 'fd0x0000000000000003' [ 319.268868][ T5351] usb 1-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 319.291790][ T5859] usb 3-1: config 114 has no interface number 0 [ 319.324125][ T5859] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 319.343273][ T5351] usb 1-1: config 114 interface 240 altsetting 232 endpoint 0x8A has invalid wMaxPacketSize 0 [ 319.397398][ T5859] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 319.428088][ T5351] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 0 [ 319.490317][ T5859] usb 3-1: config 114 interface 240 altsetting 232 endpoint 0x8A has invalid wMaxPacketSize 0 [ 319.512291][ T5351] usb 1-1: config 114 interface 240 has no altsetting 0 [ 319.584103][ T5351] usb 1-1: string descriptor 0 read error: -22 [ 319.600764][ T5859] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 0 [ 319.630546][ T5351] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 319.679812][ T5859] usb 3-1: config 114 interface 240 has no altsetting 0 [ 319.705633][ T5351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.744240][ T5859] usb 3-1: string descriptor 0 read error: -22 [ 319.768447][ T9194] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 319.785724][ T5859] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 319.848709][ T5351] ir_usb 1-1:114.240: IR Dongle converter detected [ 319.868206][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.960957][ T9198] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 320.016438][ T5859] ir_usb 3-1:114.240: IR Dongle converter detected [ 320.047680][ T5351] usb 1-1: IRDA class descriptor not found, device not bound [ 320.142926][ T5351] usb 1-1: USB disconnect, device number 46 [ 320.217973][ T5859] usb 3-1: IRDA class descriptor not found, device not bound [ 320.438953][ T5351] usb 3-1: USB disconnect, device number 42 [ 320.733425][ T9224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.938765][ T5859] IPVS: starting estimator thread 0... [ 320.948257][ T9230] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 321.181595][ T9231] IPVS: using max 34 ests per chain, 81600 per kthread [ 325.286718][ T9259] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.602623][ T9266] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 326.879395][ T9275] binder: 9273:9275 ioctl c0306201 200000000540 returned -22 [ 326.955080][ T9276] binder: 9273:9276 ioctl c0306201 200000000640 returned -22 [ 329.950880][ T9298] syzkaller0: entered promiscuous mode [ 330.017025][ T9298] syzkaller0: entered allmulticast mode [ 330.136820][ T9301] fuse: Bad value for 'fd' [ 331.867628][ T9314] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 331.883465][ T5859] IPVS: starting estimator thread 0... [ 332.056033][ T9318] IPVS: using max 35 ests per chain, 84000 per kthread [ 332.488317][ T9327] loop0: detected capacity change from 0 to 512 [ 332.518447][ T9329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.602524][ T9327] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1260: iget: bad i_size value: 38620345925642 [ 332.728814][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/243.tmp-b7:0' failed: Read-only file system [ 332.746778][ T9327] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 332.751944][ T9327] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1260: couldn't read orphan inode 15 (err -117) [ 332.761283][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 332.761312][ C0] EXT4-fs (loop0): initial error at time 1785732932: ext4_orphan_get:1399: inode 15 [ 332.761343][ C0] EXT4-fs (loop0): last error at time 1785732932: ext4_orphan_get:1399: inode 15 [ 332.964393][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 333.197370][ T9338] fuse: Bad value for 'fd' [ 333.340553][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/243.tmp-b7:0' failed: Read-only file system [ 333.392487][ T9327] loop0: lost filesystem error report for type 5 error -117 [ 333.406503][ T9327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.509134][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 333.663073][ T9343] syzkaller0: entered promiscuous mode [ 333.879825][ T9343] syzkaller0: entered allmulticast mode [ 334.313599][ T9349] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1260: bg 0: block 5: invalid block bitmap [ 334.334803][ T9349] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1736 with error 28 [ 334.347441][ T9349] EXT4-fs (loop0): This should not happen!! Data will be lost [ 334.347441][ T9349] [ 334.357232][ T9349] EXT4-fs (loop0): Total free blocks count 0 [ 334.363256][ T9349] EXT4-fs (loop0): Free/Dirty block details [ 334.369287][ T9349] EXT4-fs (loop0): free_blocks=0 [ 334.375494][ T9349] EXT4-fs (loop0): dirty_blocks=1736 [ 334.380789][ T9349] EXT4-fs (loop0): Block reservation details [ 334.388048][ T9349] EXT4-fs (loop0): i_reserved_data_blocks=1736 [ 334.427802][ T9349] EXT4-fs (loop0): shut down requested (0) [ 334.968975][ T9357] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 335.066042][ T5629] IPVS: starting estimator thread 0... [ 335.100419][ T5859] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 335.225438][ T9358] IPVS: using max 35 ests per chain, 84000 per kthread [ 335.317882][ T5859] usb 6-1: unable to get BOS descriptor or descriptor too short [ 335.370374][ T5859] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 335.469071][ T5859] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 335.562617][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.652150][ T5859] usb 6-1: Product: syz [ 335.741658][ T5629] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 335.752330][ T5859] usb 6-1: Manufacturer: syz [ 335.794442][ T5859] usb 6-1: SerialNumber: syz [ 335.827950][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/243.tmp-b7:0' failed: Read-only file system [ 335.985269][ T5629] usb 5-1: Using ep0 maxpacket: 16 [ 335.998685][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/243.tmp-b7:0' failed: Read-only file system [ 336.035835][ T5629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.075801][ T5629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.196688][ T29] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 336.230900][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 336.265963][ T5629] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 336.322230][ T5859] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 336.352015][ T5627] IPVS: starting estimator thread 0... [ 336.383213][ T5859] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 336.413760][ T5629] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 336.444808][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 336.457664][ T5859] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 336.467926][ T9375] IPVS: using max 35 ests per chain, 84000 per kthread [ 336.485515][ T5629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.493741][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.555239][ T29] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 336.592301][ T5629] usb 5-1: config 0 descriptor?? [ 336.634895][ T9377] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1258'. [ 336.644475][ T29] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 336.725234][ T9380] fuse: Bad value for 'fd' [ 336.751075][ T29] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 336.787532][ T5859] usb 6-1: invalid uac2 rates [ 336.795053][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.815625][ T5859] usb 6-1: invalid uac2 rates [ 336.838649][ T5859] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 336.852426][ T29] usb 1-1: Product: syz [ 336.873141][ T29] usb 1-1: Manufacturer: syz [ 336.909377][ T5859] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 336.921330][ T29] usb 1-1: SerialNumber: syz [ 336.989818][ T5859] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 337.116116][ T5629] usbhid 5-1:0.0: can't add hid device: -71 [ 337.178842][ T5629] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 337.292755][ T29] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 337.323354][ T5629] usb 5-1: USB disconnect, device number 25 [ 337.351332][ T5859] usb 6-1: USB disconnect, device number 30 [ 339.787402][ T29] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 339.998380][ T29] usb 1-1: USB disconnect, device number 47 [ 340.234074][ T9410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.321450][ T6038] udevd[6038]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 340.431984][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.478642][ T29] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 340.700860][ T29] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 340.808642][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.881064][ T5859] IPVS: starting estimator thread 0... [ 340.910363][ T29] usb 1-1: Product: syz [ 340.915692][ T9424] fuse: Bad value for 'fd' [ 340.959817][ T29] usb 1-1: Manufacturer: syz [ 341.018778][ T29] usb 1-1: SerialNumber: syz [ 341.025700][ T9423] IPVS: using max 34 ests per chain, 81600 per kthread [ 341.058247][ T6038] udevd[6038]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 341.124330][ T29] usb 1-1: config 0 descriptor?? [ 341.615032][ T5629] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 341.715107][ T5859] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 341.806139][ T5629] usb 2-1: Using ep0 maxpacket: 8 [ 341.815202][ T29] usb 1-1: f81604_read: reg: 105 failed: -EPIPE [ 341.851465][ T5629] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.868932][ T29] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 341.906790][ T29] f81604 1-1:0.0: probe with driver f81604 failed with error -32 [ 341.921816][ T5629] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 341.933030][ T5859] usb 4-1: unable to get BOS descriptor or descriptor too short [ 341.941042][ T5351] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 341.980392][ T5859] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 341.998982][ T5629] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 342.047465][ T5629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.081237][ T5859] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 342.123086][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.132401][ T5629] usb 2-1: config 0 descriptor?? [ 342.154987][ T5351] usb 6-1: Using ep0 maxpacket: 8 [ 342.175599][ T5351] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.191899][ T5859] usb 4-1: Product: syz [ 342.212656][ T5859] usb 4-1: Manufacturer: syz [ 342.227903][ T9445] syzkaller0: entered promiscuous mode [ 342.237252][ T5351] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 342.251633][ T5859] usb 4-1: SerialNumber: syz [ 342.270898][ T9445] syzkaller0: entered allmulticast mode [ 342.296960][ T5351] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.387837][ T5351] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 342.415224][ T5351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.470089][ T5351] usb 6-1: Product: syz [ 342.487094][ T5351] usb 6-1: Manufacturer: syz [ 342.513521][ T5351] usb 6-1: SerialNumber: syz [ 342.530415][ T5859] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 342.592889][ T9451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 342.709799][ T5859] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 342.763407][ T5859] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 343.089838][ T9460] fuse: Bad value for 'fd' [ 343.104159][ T5629] usb 1-1: USB disconnect, device number 48 [ 343.124093][ T5859] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 343.243030][ T6038] udevd[6038]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 343.370415][ T5351] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 343.419353][ T5859] usb 4-1: USB disconnect, device number 21 [ 343.653861][ T5908] udevd[5908]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 343.786466][ T5351] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 344.077357][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.102555][ T5744] udevd[5744]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 344.151564][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 344.375782][ T9485] syzkaller0: entered promiscuous mode [ 344.428127][ T5908] udevd[5908]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 344.441536][ T9485] syzkaller0: entered allmulticast mode [ 344.551326][ T9490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.564325][ T5351] usb 2-1: USB disconnect, device number 34 [ 344.779580][ T5859] usb 6-1: USB disconnect, device number 31 [ 344.914255][ T9498] fuse: Bad value for 'fd' [ 344.958689][ T6654] udevd[6654]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 345.105371][ T5351] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 347.259464][ T5351] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 347.299689][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 347.346055][ T5351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.405873][ T5351] usb 2-1: Product: syz [ 347.447341][ T5351] usb 2-1: Manufacturer: syz [ 347.482632][ T5351] usb 2-1: SerialNumber: syz [ 347.584407][ T5351] usb 2-1: config 0 descriptor?? [ 347.676179][ T6773] udevd[6773]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 347.899470][ T5351] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 347.957194][ T5351] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 348.023683][ T5351] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 348.129016][ T5351] usb 2-1: USB disconnect, device number 35 [ 348.218025][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1335'. [ 348.313701][ T5908] udevd[5908]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 348.534863][ T5351] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 348.602186][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 348.644331][ T9530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.758729][ T5351] usb 2-1: unable to get BOS descriptor or descriptor too short [ 348.814007][ T9533] syzkaller0: entered promiscuous mode [ 348.826210][ T5351] usb 2-1: config 114 has an invalid interface number: 240 but max is 0 [ 348.872837][ T9533] syzkaller0: entered allmulticast mode [ 348.894176][ T5351] usb 2-1: config 114 has no interface number 0 [ 348.951532][ T5351] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 348.966608][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 349.018504][ T9536] binder: 9534:9536 ioctl c0306201 200000000080 returned -14 [ 349.050639][ T5351] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 349.072465][ T9539] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 349.151997][ T5351] usb 2-1: config 114 interface 240 altsetting 232 endpoint 0x8A has invalid wMaxPacketSize 0 [ 349.235177][ T5351] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 0 [ 349.310592][ T5351] usb 2-1: config 114 interface 240 has no altsetting 0 [ 349.380125][ T5351] usb 2-1: string descriptor 0 read error: -22 [ 349.420382][ T5351] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 349.500273][ T5351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.535668][ T5908] udevd[5908]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 349.599160][ T9518] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 349.667748][ T5351] ir_usb 2-1:114.240: IR Dongle converter detected [ 349.843629][ T9553] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1347'. [ 350.844774][ T5351] usb 2-1: IRDA class descriptor not found, device not bound [ 350.869944][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 351.537362][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1351'. [ 351.546965][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 351.624559][ T9566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1352'. [ 351.930944][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 351.993636][ T5351] usb 2-1: USB disconnect, device number 36 [ 352.131060][ T5629] IPVS: starting estimator thread 0... [ 352.137592][ T9574] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 352.176886][ T29] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 352.295473][ T6773] udevd[6773]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 352.313545][ T9575] IPVS: using max 35 ests per chain, 84000 per kthread [ 352.323909][ T9577] syzkaller0: entered promiscuous mode [ 352.359164][ T9577] syzkaller0: entered allmulticast mode [ 352.404992][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 352.432150][ T29] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 352.487447][ T29] usb 4-1: config 0 has no interface number 0 [ 352.517853][ T29] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 352.623337][ T29] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 352.635829][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 352.675224][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.733998][ T29] usb 4-1: Product: syz [ 352.767973][ T29] usb 4-1: Manufacturer: syz [ 352.810130][ T29] usb 4-1: SerialNumber: syz [ 352.861099][ T29] usb 4-1: config 0 descriptor?? [ 352.962824][ T29] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 353.047652][ T29] em28xx 4-1:0.132: Video interface 132 found: [ 353.157111][ T5908] udevd[5908]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 353.352203][ T29] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 353.535474][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 353.673292][ T9599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1368'. [ 353.794022][ T29] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 353.875989][ T29] em28xx 4-1:0.132: board has no eeprom [ 353.996861][ T29] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 354.062418][ T29] em28xx 4-1:0.132: analog set to bulk mode. [ 354.108735][ T5859] em28xx 4-1:0.132: Registering V4L2 extension [ 354.181573][ T29] usb 4-1: USB disconnect, device number 22 [ 354.239823][ T29] em28xx 4-1:0.132: Disconnecting em28xx [ 354.429694][ T9607] JFS: discard option not supported on device [ 354.437174][ T9607] Mount JFS Failure: -5 [ 354.443002][ T9607] jfs_mount failed w/return code = -5 [ 354.505940][ T5351] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 354.713295][ T5351] usb 2-1: unable to get BOS descriptor or descriptor too short [ 354.763295][ T5351] usb 2-1: config 114 has an invalid interface number: 240 but max is 0 [ 354.824055][ T5351] usb 2-1: config 114 has no interface number 0 [ 354.873545][ T5351] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 354.893418][ T9620] syzkaller0: entered promiscuous mode [ 354.929654][ T5859] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 354.945909][ T9620] syzkaller0: entered allmulticast mode [ 354.980045][ T5351] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 354.999727][ T5859] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 356.020161][ T5351] usb 2-1: config 114 interface 240 altsetting 232 endpoint 0x8A has invalid wMaxPacketSize 0 [ 356.032313][ T5859] em28xx 4-1:0.132: No AC97 audio processor [ 356.161485][ T5351] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 0 [ 356.235629][ T5351] usb 2-1: config 114 interface 240 has no altsetting 0 [ 356.309188][ T5351] usb 2-1: string descriptor 0 read error: -22 [ 356.331057][ T5351] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 356.359192][ T5859] usb 4-1: Decoder not found [ 356.383844][ T5351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.398485][ T5859] em28xx 4-1:0.132: failed to create media graph [ 356.438201][ T5859] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 356.479072][ T9609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 356.571417][ T5351] ir_usb 2-1:114.240: IR Dongle converter detected [ 356.630264][ T5859] em28xx 4-1:0.132: Remote control support is not available for this card. [ 356.687567][ T29] em28xx 4-1:0.132: Closing input extension [ 356.709391][ T9630] fuse: Unknown parameter 'grou00000000000000000000' [ 356.739634][ T5351] usb 2-1: IRDA class descriptor not found, device not bound [ 356.964010][ T5351] usb 2-1: USB disconnect, device number 37 [ 357.240959][ T29] em28xx 4-1:0.132: Freeing device [ 357.471874][ T9643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1383'. [ 357.916766][ T9646] loop1: detected capacity change from 0 to 1024 [ 358.050958][ T9646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.245036][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/245.tmp-b7:1' failed: Read-only file system [ 358.383878][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 358.517537][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.556466][ T5859] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 358.628296][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/245.tmp-b7:1' failed: Read-only file system [ 358.698524][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/245.tmp-b7:1' failed: Read-only file system [ 358.720479][ T9660] syzkaller0: entered promiscuous mode [ 358.734352][ T9660] syzkaller0: entered allmulticast mode [ 358.740366][ T5859] usb 4-1: Using ep0 maxpacket: 16 [ 358.752798][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 358.792111][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 358.830902][ T5859] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 358.849186][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.877919][ T5859] usb 4-1: Product: syz [ 358.893240][ T5859] usb 4-1: Manufacturer: syz [ 358.919500][ T5859] usb 4-1: SerialNumber: syz [ 358.938114][ T5859] usb 4-1: config 0 descriptor?? [ 359.222735][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 359.266794][ T9663] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1391'. [ 359.401205][ T9663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.454457][ T9663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.507537][ T9663] bond0 (unregistering): Released all slaves [ 359.684088][ T9675] qrtr: Invalid version 0 [ 359.704557][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 359.958119][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 360.051018][ T9673] syzkaller0: entered promiscuous mode [ 360.092442][ T6773] udevd[6773]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 360.104035][ T9673] syzkaller0: entered allmulticast mode [ 360.630409][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 360.708213][ T9694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1398'. [ 360.885075][ T29] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 361.102043][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 361.154324][ T29] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 361.218280][ T29] usb 5-1: config 114 has no interface number 0 [ 361.261320][ T29] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 361.329295][ T29] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 361.343701][ T9706] syzkaller0: entered promiscuous mode [ 361.373390][ T9706] syzkaller0: entered allmulticast mode [ 361.397398][ T29] usb 5-1: config 114 interface 240 altsetting 232 endpoint 0x8A has invalid wMaxPacketSize 0 [ 361.441449][ T5859] usb 4-1: USB disconnect, device number 23 [ 361.492661][ T29] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 0 [ 361.579924][ T29] usb 5-1: config 114 interface 240 has no altsetting 0 [ 361.652115][ T29] usb 5-1: string descriptor 0 read error: -22 [ 361.673304][ T29] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 361.721674][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.791014][ T9691] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 361.846466][ T29] ir_usb 5-1:114.240: IR Dongle converter detected [ 362.062928][ T29] usb 5-1: IRDA class descriptor not found, device not bound [ 362.271842][ T29] usb 5-1: USB disconnect, device number 26 [ 363.914177][ T9721] bridge1: port 1(erspan0) entered disabled state [ 363.968281][ T29] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 364.080024][ T9721] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.087486][ T9721] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.175113][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 364.492350][ T29] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 364.546248][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.608074][ T29] usb 4-1: Product: syz [ 364.651109][ T29] usb 4-1: Manufacturer: syz [ 364.662235][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 364.721093][ T29] usb 4-1: SerialNumber: syz [ 364.777210][ T29] usb 4-1: config 0 descriptor?? [ 365.078631][ T29] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 365.106169][ T5629] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 365.202951][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 365.225097][ T9721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.337203][ T5629] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.347897][ T9721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.404562][ T5629] usb 5-1: config 0 has no interfaces? [ 365.446435][ T5629] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 365.524255][ T5629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.549372][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 365.600386][ T5629] usb 5-1: config 0 descriptor?? [ 365.648239][ T9750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.682870][ T29] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 365.848079][ T5351] usb 5-1: USB disconnect, device number 27 [ 365.873345][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 365.995017][ T9721] vlan2: left allmulticast mode [ 366.008982][ T9721] bridge1: left allmulticast mode [ 366.065048][ T1049] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.119294][ T9731] syzkaller0: entered promiscuous mode [ 366.150836][ T9731] syzkaller0: entered allmulticast mode [ 366.387154][ T5351] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 366.435937][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.492164][ T9753] syzkaller0: entered promiscuous mode [ 366.512910][ T9753] syzkaller0: entered allmulticast mode [ 366.568574][ T5351] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.579961][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.637869][ T5351] usb 5-1: config 0 has no interfaces? [ 366.647623][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.689572][ T5351] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 366.824101][ T5351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.882291][ T29] usb 4-1: USB disconnect, device number 24 [ 368.873194][ T5351] usb 5-1: config 0 descriptor?? [ 369.028574][ T5351] usb 5-1: can't set config #0, error -71 [ 369.105703][ T5351] usb 5-1: USB disconnect, device number 28 [ 369.112753][ T9772] loop3: detected capacity change from 0 to 512 [ 369.218783][ T9772] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1422: iget: bad i_size value: 38620345925642 [ 369.314142][ T9778] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1424'. [ 369.337440][ T9772] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 369.341311][ T9772] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1422: couldn't read orphan inode 15 (err -117) [ 369.350634][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 369.350657][ C0] EXT4-fs (loop3): initial error at time 1785732968: ext4_orphan_get:1399: inode 15 [ 369.350687][ C0] EXT4-fs (loop3): last error at time 1785732968: ext4_orphan_get:1399: inode 15 [ 369.501861][ T9778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.556448][ T6654] udevd[6654]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 369.607532][ T6043] udevd[6043]: symlink '../../loop3' '/dev/disk/by-diskseq/247.tmp-b7:3' failed: Read-only file system [ 369.681804][ T9778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.732770][ T6043] udevd[6043]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 369.762301][ T9778] bond0 (unregistering): Released all slaves [ 369.770028][ T9772] loop3: lost filesystem error report for type 5 error -117 [ 369.789286][ T9772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.841067][ T6773] udevd[6773]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 370.041145][ T9791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1413'. [ 370.052925][ T6043] udevd[6043]: symlink '../../loop3' '/dev/disk/by-diskseq/247.tmp-b7:3' failed: Read-only file system [ 370.291151][ T6043] udevd[6043]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 370.708130][ T9793] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1422: bg 0: block 5: invalid block bitmap [ 370.731427][ T9793] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1696 with error 28 [ 370.744145][ T9793] EXT4-fs (loop3): This should not happen!! Data will be lost [ 370.744145][ T9793] [ 370.753868][ T9793] EXT4-fs (loop3): Total free blocks count 0 [ 370.759975][ T9793] EXT4-fs (loop3): Free/Dirty block details [ 370.765925][ T9793] EXT4-fs (loop3): free_blocks=0 [ 370.770849][ T9793] EXT4-fs (loop3): dirty_blocks=1700 [ 370.776246][ T9793] EXT4-fs (loop3): Block reservation details [ 370.782233][ T9793] EXT4-fs (loop3): i_reserved_data_blocks=1700 [ 370.826807][ T9792] EXT4-fs (loop3): shut down requested (0) [ 371.023457][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/244.tmp-b7:0' failed: Read-only file system [ 371.180530][ T9799] loop0: detected capacity change from 0 to 512 [ 371.255426][ T9799] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1431: iget: bad i_size value: 38620345925642 [ 371.331136][ T9803] syzkaller0: entered promiscuous mode [ 371.362174][ T9799] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 371.363325][ T9799] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1431: couldn't read orphan inode 15 (err -117) [ 371.372710][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 371.372744][ C0] EXT4-fs (loop0): initial error at time 1785732970: ext4_orphan_get:1399: inode 15 [ 371.372775][ C0] EXT4-fs (loop0): last error at time 1785732970: ext4_orphan_get:1399: inode 15 [ 371.437143][ T9803] syzkaller0: entered allmulticast mode [ 371.476463][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/248.tmp-b7:0' failed: Read-only file system [ 371.566323][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 371.648259][ T9810] loop4: detected capacity change from 0 to 2048 [ 371.681641][ T9799] loop0: lost filesystem error report for type 5 error -117 [ 371.716277][ T9799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.742153][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/248.tmp-b7:0' failed: Read-only file system [ 371.785013][ T9810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.860484][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 371.888290][ T6773] udevd[6773]: symlink '../../loop4' '/dev/disk/by-diskseq/249.tmp-b7:4' failed: Read-only file system [ 372.710487][ T7668] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:10: bg 0: block 5: invalid block bitmap [ 372.883029][ T7668] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 372.992589][ T7668] EXT4-fs (loop0): This should not happen!! Data will be lost [ 372.992589][ T7668] [ 373.038502][ T181] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 373.269829][ T7668] EXT4-fs (loop0): Total free blocks count 0 [ 374.278893][ T7668] EXT4-fs (loop0): Free/Dirty block details [ 375.033486][ T6043] udevd[6043]: symlink '../../loop3' '/dev/disk/by-diskseq/250.tmp-b7:3' failed: Read-only file system [ 375.078394][ T181] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 375.092976][ T7668] EXT4-fs (loop0): free_blocks=0 [ 375.129768][ T7668] EXT4-fs (loop0): dirty_blocks=16000 [ 375.170350][ T7668] EXT4-fs (loop0): Block reservation details [ 375.188766][ T181] EXT4-fs (loop4): This should not happen!! Data will be lost [ 375.188766][ T181] [ 375.241704][ T7668] EXT4-fs (loop0): i_reserved_data_blocks=16000 [ 375.280500][ T181] EXT4-fs (loop4): Total free blocks count 0 [ 375.327691][ T181] EXT4-fs (loop4): Free/Dirty block details [ 375.340897][ T9828] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1442'. [ 375.391464][ T181] EXT4-fs (loop4): free_blocks=4096 [ 375.411773][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 375.438983][ T181] EXT4-fs (loop4): dirty_blocks=288 [ 375.445698][ T9830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1443'. [ 375.487019][ T181] EXT4-fs (loop4): Block reservation details [ 375.521316][ T6773] udevd[6773]: symlink '../../loop3' '/dev/disk/by-diskseq/250.tmp-b7:3' failed: Read-only file system [ 375.634387][ T181] EXT4-fs (loop4): i_reserved_data_blocks=18 [ 375.651245][ T9828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.672895][ T13] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 375.694227][ T7668] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 260 with error 28 [ 375.739004][ T9828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.803197][ T9828] bond0 (unregistering): Released all slaves [ 375.816100][ T5624] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 375.852206][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 376.164336][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 376.280053][ T6043] udevd[6043]: symlink '../../loop4' '/dev/disk/by-diskseq/249.tmp-b7:4' failed: Read-only file system [ 376.312622][ T9843] serio: Serial port ptm0 [ 376.318112][ T5623] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 376.359676][ T9846] loop5: detected capacity change from 0 to 512 [ 376.374462][ T6773] udevd[6773]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 377.528260][ T6043] udevd[6043]: symlink '../../loop4' '/dev/disk/by-diskseq/249.tmp-b7:4' failed: Read-only file system [ 378.162751][ T9849] overlayfs: workdir and upperdir must be separate subtrees [ 378.195590][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.367442][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.633399][ T9846] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1450: iget: bad i_size value: 38620345925642 [ 378.737363][ T5908] udevd[5908]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 378.778727][ T6043] udevd[6043]: symlink '../../loop4' '/dev/disk/by-diskseq/251.tmp-b7:4' failed: Read-only file system [ 378.808244][ T9846] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 378.814679][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 378.830359][ C0] EXT4-fs (loop5): initial error at time 1785732978: ext4_orphan_get:1399: inode 15 [ 378.839808][ C0] EXT4-fs (loop5): last error at time 1785732978: ext4_orphan_get:1399: inode 15 [ 378.869019][ T9846] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1450: couldn't read orphan inode 15 (err -117) [ 378.970494][ T9846] loop5: lost filesystem error report for type 5 error -117 [ 378.974016][ T9846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.160052][ T9859] loop4: detected capacity change from 0 to 2048 [ 380.173519][ T6773] udevd[6773]: symlink '../../loop5' '/dev/disk/by-diskseq/252.tmp-b7:5' failed: Read-only file system [ 380.960735][ T5629] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 381.049784][ T9859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.072296][ T6043] udevd[6043]: symlink '../../loop4' '/dev/disk/by-diskseq/253.tmp-b7:4' failed: Read-only file system [ 381.111079][ T6773] udevd[6773]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 381.226638][ T5629] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 381.241268][ T6038] udevd[6038]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 381.281851][ T6043] udevd[6043]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 381.299022][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.320820][ T5629] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.438753][ T5629] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 381.528287][ T5629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.541944][ T6773] udevd[6773]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 381.560549][ T6043] udevd[6043]: symlink '../../loop4' '/dev/disk/by-diskseq/253.tmp-b7:4' failed: Read-only file system [ 381.627817][ T181] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 381.682455][ T6773] udevd[6773]: symlink '../../loop5' '/dev/disk/by-diskseq/252.tmp-b7:5' failed: Read-only file system [ 381.788874][ T6043] udevd[6043]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 381.841137][ T181] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 381.873020][ T5629] usb 4-1: usb_control_msg returned -32 [ 381.910001][ T6773] udevd[6773]: symlink '../../loop5' '/dev/disk/by-diskseq/252.tmp-b7:5' failed: Read-only file system [ 381.921783][ T5629] usbtmc 4-1:16.0: can't read capabilities [ 381.941290][ T181] EXT4-fs (loop4): This should not happen!! Data will be lost [ 381.941290][ T181] [ 382.004394][ T181] EXT4-fs (loop4): Total free blocks count 0 [ 382.047246][ T181] EXT4-fs (loop4): Free/Dirty block details [ 382.081483][ T181] EXT4-fs (loop4): free_blocks=4096 [ 382.113997][ T181] EXT4-fs (loop4): dirty_blocks=256 [ 382.137250][ T181] EXT4-fs (loop4): Block reservation details [ 382.157677][ T181] EXT4-fs (loop4): i_reserved_data_blocks=16 [ 382.178353][ T181] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 234 with error 28 [ 382.262903][ T5624] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 382.453748][ T5623] EXT4-fs: 15 callbacks suppressed [ 382.453767][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.598185][ T9888] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1459'. [ 382.650500][ T9889] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1462'. [ 382.680979][ T9891] fuse: Unknown parameter 'fd0x0000000000000003' [ 382.815954][ T9894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.142232][ T5629] usb 4-1: USB disconnect, device number 25 [ 386.209567][ T9913] loop5: detected capacity change from 0 to 512 [ 386.253477][ T9916] fuse: Bad value for 'group_id' [ 386.292879][ T9913] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1469: iget: bad i_size value: 38620345925642 [ 386.330317][ T9916] fuse: Bad value for 'group_id' [ 386.402685][ T9913] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 386.404680][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 386.420314][ C0] EXT4-fs (loop5): initial error at time 1785732985: ext4_orphan_get:1399: inode 15 [ 386.429733][ C0] EXT4-fs (loop5): last error at time 1785732985: ext4_orphan_get:1399: inode 15 [ 386.442802][ T9913] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1469: couldn't read orphan inode 15 (err -117) [ 386.549095][ T9913] loop5: lost filesystem error report for type 5 error -117 [ 386.550948][ T9913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.661722][ T9925] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1476'. [ 387.370035][ T9931] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1469: bg 0: block 5: invalid block bitmap [ 387.393641][ T5629] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 387.402766][ T9931] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1684 with error 28 [ 387.416715][ T9931] EXT4-fs (loop5): This should not happen!! Data will be lost [ 387.416715][ T9931] [ 387.426658][ T9931] EXT4-fs (loop5): Total free blocks count 0 [ 387.432654][ T9931] EXT4-fs (loop5): Free/Dirty block details [ 387.438613][ T9931] EXT4-fs (loop5): free_blocks=0 [ 387.443548][ T9931] EXT4-fs (loop5): dirty_blocks=1684 [ 387.448969][ T9931] EXT4-fs (loop5): Block reservation details [ 387.455010][ T9931] EXT4-fs (loop5): i_reserved_data_blocks=1684 [ 387.497524][ T9931] EXT4-fs (loop5): shut down requested (0) [ 387.548307][ T6043] udevd[6043]: symlink '../../loop4' '/dev/disk/by-diskseq/255.tmp-b7:4' failed: Read-only file system [ 387.636107][ T6654] udevd[6654]: symlink '../../loop0' '/dev/disk/by-diskseq/256.tmp-b7:0' failed: Read-only file system [ 387.649447][ T5744] udevd[5744]: symlink '../../loop3' '/dev/disk/by-diskseq/250.tmp-b7:3' failed: Read-only file system [ 387.680148][ T5743] udevd[5743]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 387.705723][ T5629] usb 5-1: config index 0 descriptor too short (expected 1572, got 36) [ 387.747189][ T6773] udevd[6773]: symlink '../../loop5' '/dev/disk/by-diskseq/254.tmp-b7:5' failed: Read-only file system [ 387.778641][ T5629] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.803455][ T6043] udevd[6043]: symlink '../../loop4' '/dev/disk/by-diskseq/255.tmp-b7:4' failed: Read-only file system [ 387.862733][ T5908] udevd[5908]: symlink '../../loop3' '/dev/disk/by-diskseq/250.tmp-b7:3' failed: Read-only file system [ 387.877419][ T6038] udevd[6038]: symlink '../../loop0' '/dev/disk/by-diskseq/256.tmp-b7:0' failed: Read-only file system [ 387.897127][ T6773] udevd[6773]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 387.912840][ T6654] udevd[6654]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 387.944576][ T5629] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 387.992396][ T9937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.013432][ T5629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.080537][ T5629] usb 5-1: Product: syz [ 388.109902][ T5629] usb 5-1: Manufacturer: syz [ 388.152238][ T5629] usb 5-1: SerialNumber: syz [ 388.279431][ T5629] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input11 [ 388.574822][ T5629] usb 5-1: USB disconnect, device number 29 [ 389.215598][ T5635] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 389.356434][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1487'. [ 389.448239][ T5635] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.502506][ T5635] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.606374][ T5635] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 389.697546][ T5635] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.787260][ T9962] fuse: Bad value for 'group_id' [ 389.830089][ T9962] fuse: Bad value for 'group_id' [ 389.992221][ T5635] usb 1-1: usb_control_msg returned -32 [ 390.035508][ T5635] usbtmc 1-1:16.0: can't read capabilities [ 390.224141][ T9967] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1491'. [ 391.378363][ T9985] loop3: detected capacity change from 0 to 512 [ 391.461256][ T9985] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1497: iget: bad i_size value: 38620345925642 [ 391.567876][ T9985] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 391.568423][ T9985] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1497: couldn't read orphan inode 15 (err -117) [ 391.577774][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 391.577798][ C0] EXT4-fs (loop3): initial error at time 1785732990: ext4_orphan_get:1399: inode 15 [ 391.577828][ C0] EXT4-fs (loop3): last error at time 1785732990: ext4_orphan_get:1399: inode 15 [ 392.187671][ T9995] NILFS (nullb0): couldn't find nilfs on the device [ 392.338571][ T5351] usb 1-1: USB disconnect, device number 49 [ 392.609542][ T9985] loop3: lost filesystem error report for type 5 error -117 [ 392.659420][ T9985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.753235][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'. [ 392.847422][ T6773] udevd[6773]: symlink '../../loop0' '/dev/disk/by-diskseq/256.tmp-b7:0' failed: Read-only file system [ 393.058698][T10007] loop5: detected capacity change from 0 to 128 [ 393.493633][T10009] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1497: bg 0: block 5: invalid block bitmap [ 393.519740][T10009] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1716 with error 28 [ 393.532398][T10009] EXT4-fs (loop3): This should not happen!! Data will be lost [ 393.532398][T10009] [ 393.542093][T10009] EXT4-fs (loop3): Total free blocks count 0 [ 393.548299][T10009] EXT4-fs (loop3): Free/Dirty block details [ 393.554199][T10009] EXT4-fs (loop3): free_blocks=0 [ 393.560537][T10009] EXT4-fs (loop3): dirty_blocks=1720 [ 393.565900][T10009] EXT4-fs (loop3): Block reservation details [ 393.571880][T10009] EXT4-fs (loop3): i_reserved_data_blocks=1720 [ 393.606296][ T5629] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 393.614046][ T5351] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 393.629137][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1716 with max blocks 4 with error 28 [ 393.645424][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 393.738114][T10007] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 393.791941][ T6654] udevd[6654]: symlink '../../loop5' '/dev/disk/by-diskseq/258.tmp-b7:5' failed: Read-only file system [ 393.806859][ T6043] udevd[6043]: symlink '../../loop0' '/dev/disk/by-diskseq/256.tmp-b7:0' failed: Read-only file system [ 393.835189][ T5351] usb 2-1: Using ep0 maxpacket: 8 [ 393.841379][ T5629] usb 3-1: Using ep0 maxpacket: 16 [ 393.879506][ T5351] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 393.890616][ T5629] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 393.907023][T10007] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 393.927262][ T6654] udevd[6654]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 393.947966][ T6773] udevd[6773]: symlink '../../loop4' '/dev/disk/by-diskseq/255.tmp-b7:4' failed: Read-only file system [ 393.966534][ T5351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.981047][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.015258][ T5351] usb 2-1: Product: syz [ 394.024081][ T5629] usb 3-1: Product: syz [ 394.051544][ T5351] usb 2-1: Manufacturer: syz [ 394.063513][ T5629] usb 3-1: Manufacturer: syz [ 394.102471][ T5351] usb 2-1: SerialNumber: syz [ 394.114074][ T5629] usb 3-1: SerialNumber: syz [ 394.159011][ T6043] udevd[6043]: symlink '../../loop5' '/dev/disk/by-diskseq/260.tmp-b7:5' failed: Read-only file system [ 394.188067][ T5351] usb 2-1: config 0 descriptor?? [ 394.198200][ T5629] usb 3-1: config 0 descriptor?? [ 394.251274][ T5629] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 394.334184][ T6043] udevd[6043]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 394.368311][ T6038] udevd[6038]: symlink '../../loop4' '/dev/disk/by-diskseq/255.tmp-b7:4' failed: Read-only file system [ 394.416288][ T5622] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 394.429352][ T6654] udevd[6654]: symlink '../../loop0' '/dev/disk/by-diskseq/256.tmp-b7:0' failed: Read-only file system [ 394.485728][ T5351] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 394.657740][T10021] 9p: Bad value for 'rfdno' [ 395.035070][ T29] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 395.244727][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 395.262954][ T29] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 395.302330][ T29] usb 6-1: config 0 has no interface number 0 [ 395.346173][ T29] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.423658][ T29] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 395.476861][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.493279][ T5629] usb 3-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 395.537634][ T29] usb 6-1: Product: syz [ 395.566700][ T29] usb 6-1: Manufacturer: syz [ 395.600543][ T29] usb 6-1: SerialNumber: syz [ 395.658375][ T29] usb 6-1: config 0 descriptor?? [ 395.713592][ T5635] usb 3-1: USB disconnect, device number 43 [ 395.758456][ T29] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 395.815902][ T29] em28xx 6-1:0.132: Video interface 132 found: [ 395.841401][ T5635] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 395.917568][ T5635] ssu100 3-1:0.0: device disconnected [ 396.001135][ T5351] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 396.075024][ T5629] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 396.111883][ T5351] usb 2-1: USB disconnect, device number 38 [ 396.141965][ T29] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 396.313673][ T5629] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 396.402030][ T5629] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.526219][ T5629] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 396.587588][ T29] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 396.952932][ T5629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.991880][ T29] em28xx 6-1:0.132: board has no eeprom [ 397.115324][ T29] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 397.190434][ T29] em28xx 6-1:0.132: analog set to bulk mode. [ 397.238957][ T5629] usb 4-1: usb_control_msg returned -32 [ 397.264126][ T5635] em28xx 6-1:0.132: Registering V4L2 extension [ 397.298044][ T29] usb 6-1: USB disconnect, device number 32 [ 397.310711][ T5629] usbtmc 4-1:16.0: can't read capabilities [ 397.371946][ T29] em28xx 6-1:0.132: Disconnecting em28xx [ 398.119297][ T5908] udevd[5908]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 398.431825][ T5635] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 398.495493][ T5635] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 400.662633][ T5635] em28xx 6-1:0.132: No AC97 audio processor [ 400.760887][ T6773] udevd[6773]: symlink '../../loop4' '/dev/disk/by-diskseq/255.tmp-b7:4' failed: Read-only file system [ 400.907830][ T5629] usb 4-1: USB disconnect, device number 26 [ 400.920462][ T5635] usb 6-1: Decoder not found [ 400.970376][ T6773] udevd[6773]: symlink '../../loop5' '/dev/disk/by-diskseq/261.tmp-b7:5' failed: Read-only file system [ 400.987222][ T6038] udevd[6038]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 401.050889][ T5635] em28xx 6-1:0.132: failed to create media graph [ 401.120261][ T5635] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 401.193754][ T5635] em28xx 6-1:0.132: Remote control support is not available for this card. [ 401.268074][ T29] em28xx 6-1:0.132: Closing input extension [ 401.396571][ T29] em28xx 6-1:0.132: Freeing device [ 401.415855][T10092] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 401.473790][ T5908] udevd[5908]: symlink '../../loop3' '/dev/disk/by-diskseq/262.tmp-b7:3' failed: Read-only file system [ 401.489721][ T6038] udevd[6038]: symlink '../../loop0' '/dev/disk/by-diskseq/256.tmp-b7:0' failed: Read-only file system [ 401.574766][ T5635] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 401.584864][ T5629] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 401.712865][ T6357] udevd[6357]: symlink '../../loop4' '/dev/disk/by-diskseq/255.tmp-b7:4' failed: Read-only file system [ 401.764987][ T29] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 402.005459][ T5743] udevd[5743]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 402.158014][ T6773] udevd[6773]: symlink '../../loop5' '/dev/disk/by-diskseq/261.tmp-b7:5' failed: Read-only file system [ 402.177933][ T5635] usb 5-1: Using ep0 maxpacket: 16 [ 402.184906][ T5629] usb 4-1: Using ep0 maxpacket: 16 [ 402.230652][ T5635] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.268867][ T5908] udevd[5908]: symlink '../../loop0' '/dev/disk/by-diskseq/256.tmp-b7:0' failed: Read-only file system [ 402.288938][ T5629] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 402.336579][ T5635] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 402.366040][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.425210][ T5635] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 402.447563][ T5629] usb 4-1: Product: syz [ 402.530831][ T5629] usb 4-1: Manufacturer: syz [ 402.560166][ T5635] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 402.583409][ T5629] usb 4-1: SerialNumber: syz [ 402.645213][ T5629] usb 4-1: config 0 descriptor?? [ 402.651657][ T5635] usb 5-1: SerialNumber: syz [ 402.710255][ T5629] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 402.731016][ T5635] usb 5-1: 0:2 : does not exist [ 402.797012][ T5635] usb 5-1: unit 5 not found! [ 402.927423][T10106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.269578][T10104] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 403.327863][ T5908] udevd[5908]: symlink '../../loop5' '/dev/disk/by-diskseq/261.tmp-b7:5' failed: Read-only file system [ 403.396894][T10104] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 403.468453][T10104] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 403.533153][T10104] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 403.604953][ T5635] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 403.697931][T10104] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 403.789056][ T5635] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.841079][ T5635] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.922174][ T5635] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 403.963311][ T5629] usb 4-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 403.986162][ T5635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.121417][ T5629] usb 4-1: USB disconnect, device number 27 [ 404.183390][ T5629] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 404.241877][T10126] Bluetooth: MGMT ver 1.23 [ 404.278140][ T5629] ssu100 4-1:0.0: device disconnected [ 404.288178][ T5635] usb 6-1: usb_control_msg returned -32 [ 404.330861][ T5635] usbtmc 6-1:16.0: can't read capabilities [ 404.428326][ T6773] udevd[6773]: symlink '../../loop0' '/dev/disk/by-diskseq/256.tmp-b7:0' failed: Read-only file system [ 406.545837][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 406.551972][ T5644] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 406.586285][ T5908] udevd[5908]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 406.885065][ T5629] usb 5-1: USB disconnect, device number 30 [ 407.901305][ T5351] usb 6-1: USB disconnect, device number 34 [ 408.665886][ T6043] udevd[6043]: symlink '../../loop3' '/dev/disk/by-diskseq/262.tmp-b7:3' failed: Read-only file system [ 409.355219][T10152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.369184][T10153] serio: Serial port ptm0 [ 411.324316][T10158] overlayfs: workdir and upperdir must be separate subtrees [ 412.467354][ T6043] udevd[6043]: symlink '../../loop5' '/dev/disk/by-diskseq/261.tmp-b7:5' failed: Read-only file system [ 412.669699][T10168] loop5: detected capacity change from 0 to 512 [ 412.766563][T10168] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1558: iget: bad i_size value: 38620345925642 [ 413.011039][T10168] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 413.011435][T10168] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1558: couldn't read orphan inode 15 (err -117) [ 413.020641][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 413.020657][ C0] EXT4-fs (loop5): initial error at time 1785733012: ext4_orphan_get:1399: inode 15 [ 413.020686][ C0] EXT4-fs (loop5): last error at time 1785733012: ext4_orphan_get:1399: inode 15 [ 414.765902][ T5351] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 414.821845][ T6357] udevd[6357]: symlink '../../loop3' '/dev/disk/by-diskseq/262.tmp-b7:3' failed: Read-only file system [ 414.833708][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 414.864040][ T6038] udevd[6038]: symlink '../../loop0' '/dev/disk/by-diskseq/256.tmp-b7:0' failed: Read-only file system [ 414.876044][ T5908] udevd[5908]: symlink '../../loop4' '/dev/disk/by-diskseq/255.tmp-b7:4' failed: Read-only file system [ 414.973165][ T6773] udevd[6773]: symlink '../../loop4' '/dev/disk/by-diskseq/255.tmp-b7:4' failed: Read-only file system [ 414.999068][ T5744] udevd[5744]: symlink '../../loop5' '/dev/disk/by-diskseq/261.tmp-b7:5' failed: Read-only file system [ 415.017630][ T6043] udevd[6043]: symlink '../../loop1' '/dev/disk/by-diskseq/246.tmp-b7:1' failed: Read-only file system [ 415.043481][ T5908] udevd[5908]: symlink '../../loop0' '/dev/disk/by-diskseq/256.tmp-b7:0' failed: Read-only file system [ 415.109421][ T5351] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 415.126656][ T5744] udevd[5744]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 415.153478][T10168] loop5: lost filesystem error report for type 5 error -117 [ 415.155094][ T5629] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 415.177124][ T5351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.199358][T10168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.225631][ T6038] udevd[6038]: symlink '../../loop3' '/dev/disk/by-diskseq/262.tmp-b7:3' failed: Read-only file system [ 415.264023][ T5351] usb 1-1: Product: syz [ 415.300932][ T5351] usb 1-1: Manufacturer: syz [ 415.332309][ T5351] usb 1-1: SerialNumber: syz [ 415.544991][ T5629] usb 5-1: Using ep0 maxpacket: 32 [ 415.554691][ T5629] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 415.577705][ T5858] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 415.990724][T10188] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1558: bg 0: block 5: invalid block bitmap [ 416.014039][T10188] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1700 with error 28 [ 416.026648][T10188] EXT4-fs (loop5): This should not happen!! Data will be lost [ 416.026648][T10188] [ 416.036385][T10188] EXT4-fs (loop5): Total free blocks count 0 [ 416.042394][T10188] EXT4-fs (loop5): Free/Dirty block details [ 416.048344][T10188] EXT4-fs (loop5): free_blocks=0 [ 416.053276][T10188] EXT4-fs (loop5): dirty_blocks=1700 [ 416.058709][T10188] EXT4-fs (loop5): Block reservation details [ 416.065039][T10188] EXT4-fs (loop5): i_reserved_data_blocks=1700 [ 416.108316][T10188] EXT4-fs (loop5): shut down requested (0) [ 416.168173][ T5629] usb 5-1: config 0 has no interface number 0 [ 416.235268][ T5629] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 417.950440][ T5858] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 429.386896][ C0] sched: DL replenish lagged too much [ 442.384470][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.989032][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.127471][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 523.126779][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 549.974816][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 549.981822][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10181/1:b..l [ 549.990444][ C0] rcu: (detected by 0, t=10502 jiffies, g=99769, q=775 ncpus=1) [ 549.998188][ C0] task:syz.4.1563 state:R running task stack:26856 pid:10181 tgid:10180 ppid:5624 task_flags:0x40044c flags:0x00080002 [ 550.013722][ C0] Call Trace: [ 550.017032][ C0] [ 550.019970][ C0] __schedule+0x17d9/0x56c0 [ 550.024480][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.030121][ C0] ? irqentry_exit+0x218/0x8f0 [ 550.034880][ C0] ? trace_irq_disable+0x3b/0x140 [ 550.039917][ C0] ? __pfx___schedule+0x10/0x10 [ 550.044773][ C0] preempt_schedule_irq+0x4d/0xa0 [ 550.049795][ C0] irqentry_exit+0x14f/0x8f0 [ 550.054393][ C0] ? trace_irq_disable+0x3b/0x140 [ 550.059420][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 550.065394][ C0] RIP: 0010:preempt_schedule_thunk+0x1/0x40 [ 550.071280][ C0] Code: 93 00 48 c7 c0 80 5a e0 8b e9 26 d2 dc ff cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <48> 89 e5 57 56 52 51 50 41 50 41 51 41 52 41 53 e8 1a fb 9e 0a 41 [ 550.090907][ C0] RSP: 0018:ffffc90005b4f380 EFLAGS: 00000246 [ 550.096986][ C0] RAX: 0000000000000000 RBX: ffff8880351e3180 RCX: 0000000000000000 [ 550.104957][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 550.112920][ C0] RBP: ffffc90005b4f690 R08: ffff8880351e3183 R09: 1ffff11006a3c630 [ 550.120890][ C0] R10: dffffc0000000000 R11: ffffed1006a3c631 R12: dffffc0000000000 [ 550.128847][ C0] R13: 00007f548dffb000 R14: 0000000000000000 R15: 0000000000000000 [ 550.136829][ C0] _raw_spin_unlock+0x3f/0x50 [ 550.141507][ C0] __zap_vma_range+0x4084/0x4f10 [ 550.146493][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 550.151788][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.157403][ C0] ? mas_find+0xab1/0xcf0 [ 550.161742][ C0] ? unmap_vmas+0x1b9/0x550 [ 550.166243][ C0] unmap_vmas+0x390/0x550 [ 550.170572][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 550.175426][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.181048][ C0] exit_mmap+0x293/0x9f0 [ 550.185280][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 550.190048][ C0] ? __pfx_exit_aio+0x10/0x10 [ 550.194719][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.200352][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 550.206009][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.211670][ C0] ? uprobe_clear_state+0x2ac/0x3e0 [ 550.216876][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.222521][ C0] __mmput+0x118/0x420 [ 550.226581][ C0] exit_mm+0x221/0x2d0 [ 550.230649][ C0] do_exit+0x6cd/0x2360 [ 550.234814][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.240435][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.246068][ C0] ? __pfx_do_exit+0x10/0x10 [ 550.250659][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 550.255671][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.261316][ C0] do_group_exit+0x22d/0x2f0 [ 550.265890][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 550.271080][ C0] get_signal+0x121b/0x12c0 [ 550.275617][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 550.281154][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 550.287305][ C0] ? __fget_files+0x2a/0x420 [ 550.291895][ C0] exit_to_user_mode_loop+0x104/0x730 [ 550.297281][ C0] ? rcu_is_watching+0x15/0xb0 [ 550.302026][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.308072][ C0] do_syscall_64+0x353/0x580 [ 550.312650][ C0] ? trace_irq_disable+0x3b/0x140 [ 550.317666][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.323544][ C0] RIP: 0033:0x7f548e99dcab [ 550.327941][ C0] RSP: 002b:00007f548f825f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 550.336338][ C0] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f548e99dcab [ 550.344295][ C0] RDX: 00007f548f826fd0 RSI: 0000000080085502 RDI: 0000000000000003 [ 550.352253][ C0] RBP: 00007f548f826fd0 R08: 000000000000001b R09: 00007f548f825fc8 [ 550.360205][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 550.368185][ C0] R13: 0000000800000000 R14: 000000000000001b R15: 00007f548ea5386a [ 550.376160][ C0] [ 550.379191][ C0] rcu: rcu_preempt kthread starved for 438 jiffies! g99769 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 550.390207][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 550.400175][ C0] rcu: RCU grace-period kthread stack dump: [ 550.406043][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 550.419528][ C0] Call Trace: [ 550.422791][ C0] [ 550.425707][ C0] __schedule+0x17d9/0x56c0 [ 550.430204][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.435820][ C0] ? __lock_acquire+0x683/0x2cf0 [ 550.440757][ C0] ? irqentry_exit+0x218/0x8f0 [ 550.445515][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.451207][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 550.456434][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.462070][ C0] ? __pfx___schedule+0x10/0x10 [ 550.466906][ C0] ? schedule+0x90/0x2b0 [ 550.471136][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.476753][ C0] ? schedule+0x90/0x2b0 [ 550.480991][ C0] schedule+0x164/0x2b0 [ 550.485135][ C0] schedule_timeout+0x152/0x2c0 [ 550.489966][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 550.495321][ C0] ? __pfx_process_timeout+0x10/0x10 [ 550.500595][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.506209][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 550.512004][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.517617][ C0] ? prepare_to_swait_event+0x322/0x350 [ 550.523146][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 550.528000][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.533628][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 550.538835][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 550.544628][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.550246][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.555863][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 550.562007][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 550.567297][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 550.572484][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 550.578274][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 550.582858][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 550.588063][ C0] ? __kthread_parkme+0x71/0x1f0 [ 550.592990][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.598605][ C0] ? __kthread_parkme+0x196/0x1f0 [ 550.603634][ C0] kthread+0x388/0x470 [ 550.607694][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 550.612878][ C0] ? __pfx_kthread+0x10/0x10 [ 550.617455][ C0] ret_from_fork+0x514/0xb70 [ 550.622038][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 550.627224][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.632839][ C0] ? __switch_to+0xc89/0x1420 [ 550.637530][ C0] ? __pfx_kthread+0x10/0x10 [ 550.642116][ C0] ret_from_fork_asm+0x1a/0x30 [ 550.646878][ C0] [ 550.649876][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 550.656176][ C0] CPU: 0 UID: 0 PID: 3221 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 550.667453][ C0] Tainted: [L]=SOFTLOCKUP [ 550.671753][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 550.681787][ C0] Workqueue: bat_events batadv_dat_purge [ 550.687421][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 550.693818][ C0] Code: f7 e8 8d 7b cf f5 f7 c3 00 02 00 00 74 05 e8 a0 60 fb f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 24 91 c0 f5 65 8b 05 1d 61 99 07 85 c0 74 18 5b 41 5e e9 ec 51 [ 550.713404][ C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00000206 [ 550.719454][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 0000000080000101 [ 550.727401][ C0] RDX: 0000000000000002 RSI: ffffffff8e22f108 RDI: 0000000000000001 [ 550.735362][ C0] RBP: ffffc90000007e10 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 550.743312][ C0] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000246 [ 550.751348][ C0] R13: dffffc0000000000 R14: ffff8880251e0000 R15: ffff88802988e410 [ 550.759310][ C0] FS: 0000000000000000(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 550.768219][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.774793][ C0] CR2: 00007fa80c5ed158 CR3: 0000000058936000 CR4: 0000000000350ef0 [ 550.782745][ C0] Call Trace: [ 550.786004][ C0] [ 550.788824][ C0] dummy_timer+0x497b/0x4cf0 [ 550.793414][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.799045][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.804669][ C0] ? __lock_acquire+0x683/0x2cf0 [ 550.809605][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 550.814968][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 550.819899][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 550.825688][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 550.830606][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 550.835814][ C0] hrtimer_run_softirq+0x17a/0x240 [ 550.840917][ C0] handle_softirqs+0x225/0x840 [ 550.845672][ C0] ? __irq_exit_rcu+0xca/0x220 [ 550.850425][ C0] __irq_exit_rcu+0xca/0x220 [ 550.854997][ C0] irq_exit_rcu+0x9/0x30 [ 550.859219][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 550.864855][ C0] [ 550.867765][ C0] [ 550.870674][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 550.876653][ C0] RIP: 0010:batadv_dat_purge+0x2f2/0x3c0 [ 550.882287][ C0] Code: e8 93 54 2d f6 48 8b 7c 24 20 e8 69 2f 3a 00 48 8b 44 24 10 80 3c 28 00 48 8b 5c 24 18 74 08 48 89 df e8 91 ed 9a f6 4c 8b 23 <49> 8d 5c 24 10 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 75 1c 48 8b [ 550.901882][ C0] RSP: 0018:ffffc9000d91fa78 EFLAGS: 00000246 [ 550.907958][ C0] RAX: 1ffff1100efe1ae5 RBX: ffff888077f0d728 RCX: 0000000000000046 [ 550.915938][ C0] RDX: 0000000000000006 RSI: ffffffff8e22f108 RDI: ffffffff8c4bdd80 [ 550.923891][ C0] RBP: dffffc0000000000 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 550.931866][ C0] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: ffff8880537dc7c0 [ 550.939840][ C0] R13: ffff888032d55df0 R14: ffff888077f0d728 R15: 0000000000000000 [ 550.947812][ C0] ? batadv_dat_purge+0x2d7/0x3c0 [ 550.952858][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 550.958569][ C0] process_scheduled_works+0xa8e/0x14e0 [ 550.964146][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 550.970132][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 550.975145][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.980766][ C0] ? assign_work+0x3af/0x5d0 [ 550.985343][ C0] rescuer_thread+0x7b6/0x10b0 [ 550.990099][ C0] ? rescuer_thread+0xb8/0x10b0 [ 550.994970][ C0] kthread+0x388/0x470 [ 550.999037][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 551.004219][ C0] ? __pfx_kthread+0x10/0x10 [ 551.008802][ C0] ret_from_fork+0x514/0xb70 [ 551.013404][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 551.018528][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.024145][ C0] ? __switch_to+0xc89/0x1420 [ 551.028813][ C0] ? __pfx_kthread+0x10/0x10 [ 551.033409][ C0] ret_from_fork_asm+0x1a/0x30 [ 551.038189][ C0]