last executing test programs: 13.482118114s ago: executing program 0 (id=134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 12.43853496s ago: executing program 0 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80) getresuid(&(0x7f0000000a40), &(0x7f0000000a80), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) setregid(r5, 0x0) sendmsg$nl_route(r3, 0x0, 0x84000) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00']}) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) 10.088111869s ago: executing program 0 (id=140): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740), 0x0, 0x8851) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000001d711849000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.588783411s ago: executing program 2 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x20003) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) unshare(0x26020480) r4 = timerfd_create(0x8, 0x80800) timerfd_settime(r4, 0x0, &(0x7f00000004c0), 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007980)=[{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000003640)}], 0x1, 0x0, 0x0, 0x20000800}], 0x1, 0x22000081) socket$nl_route(0x10, 0x3, 0x0) r5 = semget(0x1, 0x4, 0x39c) semop(r5, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}], 0x1) semop(r5, &(0x7f0000000200)=[{0x1, 0xbbdd, 0x1000}, {0x1, 0x2, 0x800}], 0x2) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000140)=[0x7fff]) 7.569785711s ago: executing program 1 (id=144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 7.362636756s ago: executing program 0 (id=145): setns(0xc9, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89ee, &(0x7f0000000040)=0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89ef, 0x0) 7.065495804s ago: executing program 0 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) timer_create(0x6, &(0x7f0000000200)={0x0, 0x32, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$admmidi(0x0, 0x2, 0x242c3) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000000)={0x4, 0x3, 0x2}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffeb1, &(0x7f0000000780)={&(0x7f00000004c0)=@bridge_setlink={0x0, 0x13, 0x800, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0xe000, 0x800}, [@IFLA_EVENT={0x0, 0x2c, 0x9}, @IFLA_ALT_IFNAME={0x0, 0x35, 'veth0_to_hsr\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa004}, 0x4010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000000800010057cb279ec79f3a0e4557879d557da685e9ab"], 0x20}}, 0x4000000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000"/66], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x8d1) 6.41140397s ago: executing program 1 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="9bbf54613447920367fff229978a5fcad5a4cf0ff3ca457672211e34bc8e3e3d5a7b900fe042c17910d5193c305c8aca693dc50a0e075ca99c81217567895b2c33b0844b211b01567032458cd1736dfb68b543e18cd12009742aa830ceec82f597ab673c117e39bfdd14beeb12de391b2a0ebfc8d6d143848361278cd1c70b07b879b3dfabbce73d08e1238c3ec2451b3ccebd479332f16f18ec780421739d5ad0f591246e7c4df79b3f47403bed", 0xae}, {&(0x7f0000000140)="e19909081d61", 0x6}], 0x2, 0x3, 0x9) 6.280121613s ago: executing program 1 (id=148): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) io_setup(0x8, &(0x7f0000001d80)=0x0) io_pgetevents(r5, 0x3, 0x3, &(0x7f0000001dc0)=[{}, {}, {}], &(0x7f0000001e40), 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) fcntl$getflags(r1, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r6, 0xc138fd01, &(0x7f0000000000)="040000000000000000000000380100"/38) write(r6, &(0x7f0000000138), 0x0) 6.279667733s ago: executing program 2 (id=149): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 5.287331388s ago: executing program 2 (id=150): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101840, 0x92) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.083905063s ago: executing program 1 (id=151): r0 = userfaultfd(0x80801) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b//\\\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b/\xe5A\x18\xa4\xeeC\x06\x8d\xf6\xba\x88\xe1\xb6\xdc:U,\x91\xae\x1c\x81}k`\x14\'\v\x8b\xc5\x1fs68R\xf4\xf1.\xe9U\xf4dY\x9f\fH]\x00`\x93sh\xedX\xf2\xcb\xb0\x1c\x83\xe4f\xe9\xaao\x13\xf3\x81\xf0>(AKf\x83\x92\xb5\xa0Z\xaa\xa5N\xa9\xf0q.\xd5*&c\x1a\x8e\x02\xe6\xd29\xf1!\a&\xe7k\xda\x93w\xb2\xa2\xefm\xdf$\"\xee\xc7\xe3.\x1f\xe6\xba\xae\x83s\xc8\xaco\x17\x14!N\xfd\xca\xac^L\xd4\xe1N\xc7\xf6\x98\xa7}\xaeH\xed\\Q\xf5\xf4\xcf\xf8\xa3Yv n\xf5\xfc/\xa7\xc6\x93\';\x04\xd6Y=Hf\x82h\xdfe\xb0j\x8a~6\xee>\xbf\xc5\'$\x1f;\f+\xa8[x\xd4\x95N\xb3\x1a\xbb$0\x8c\xb4x\xd5\xbf\x17\xdch#'}, 0xf4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, &(0x7f0000000280)}) setitimer(0x1, 0x0, 0x0) 4.156499496s ago: executing program 2 (id=152): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") syz_emit_vhci(0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(0x0, 0x80000) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r3 = open$dir(&(0x7f0000000100)='./file1\x00', 0x656202, 0x41) fspick(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x64}}, {@lazytime}, {@data_journal}, {@noload}, {@oldalloc}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") 4.056383639s ago: executing program 1 (id=153): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10080700, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x125, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 3.225824509s ago: executing program 3 (id=154): setns(0xc9, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89ee, &(0x7f0000000040)=0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89ef, 0x0) 3.142432451s ago: executing program 2 (id=155): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(&(0x7f0000000240)='./file0\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) connect$netlink(r2, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.057967853s ago: executing program 3 (id=156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.596781105s ago: executing program 3 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="9bbf54613447920367fff229978a5fcad5a4cf0ff3ca457672211e34bc8e3e3d5a7b900fe042c17910d5193c305c8aca693dc50a0e075ca99c81217567895b2c33b0844b211b01567032458cd1736dfb68b543e18cd12009742aa830ceec82f597ab673c117e39bfdd14beeb12de391b2a0ebfc8d6d143848361278cd1c70b07b879b3dfabbce73d08e1238c3ec2451b3ccebd479332f16f18ec780421739d5ad0f591246e7c4df79b3f47403bed", 0xae}, {&(0x7f0000000140)="e19909081d61", 0x6}], 0x2, 0x3, 0x9) 2.368068801s ago: executing program 3 (id=158): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x2}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000540)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 2.260989583s ago: executing program 3 (id=159): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) io_setup(0x8, &(0x7f0000001d80)=0x0) io_pgetevents(r5, 0x3, 0x3, &(0x7f0000001dc0)=[{}, {}, {}], &(0x7f0000001e40), 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) fcntl$getflags(r1, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r6, 0xc138fd01, &(0x7f0000000000)="040000000000000000000000380100"/38) write(r6, &(0x7f0000000138), 0x0) 1.367120215s ago: executing program 0 (id=160): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x6}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1, 0x2, &(0x7f0000000480)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000700)={0x0, 0x4}) r4 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) write$char_usb(r4, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7}) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) r5 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) socket(0x2d, 0x2, 0x0) shmctl$IPC_RMID(r5, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r8, @ANYBLOB="79a9"], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) r9 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r9, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r7, 0xffffffffffffffff, 0x0) preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b00010000"], 0x0) 1.175987031s ago: executing program 3 (id=161): syz_usb_connect(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)='o', 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x16, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e00000027bd70000000000004000900a800000001d78771b90bd8a3b4914783c5432d69ca5b9538a90000000300060000000000020000000000000100000000000000000200010001000000000003fd00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = epoll_create1(0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) r9 = accept4(r8, 0x0, 0x0, 0x800) fcntl$dupfd(r7, 0x406, r6) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f00000022c0)={0x4002}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000002280)={0xa000000a}) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r5, 0x8}, &(0x7f00000000c0)=0x8) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/address_bits', 0x169a82, 0x0) sendfile(r12, r12, 0x0, 0x7) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={r11, 0x1e, "811ce2babefcbab222828244ca25304d766d31a143973c685f938c4cbd80"}, &(0x7f0000000140)=0x26) socket$inet_mptcp(0x2, 0x1, 0x106) 1.128245582s ago: executing program 1 (id=162): syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r3, 0x4b52, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 2 (id=163): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000080)='\xff\x00l\x1e\xa0 1 [ 76.661408][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.671078][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.674609][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.682308][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.692745][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.701278][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.703690][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.711426][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.724467][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.724734][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.733099][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.739769][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.754247][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.755980][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.762636][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.769825][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.787242][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.793371][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.794919][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.808736][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.816290][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.824355][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.832661][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.291640][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 77.334149][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 77.376837][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 77.478600][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 77.539842][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.547832][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.555371][ T5772] bridge_slave_0: entered allmulticast mode [ 77.562487][ T5772] bridge_slave_0: entered promiscuous mode [ 77.598091][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.605506][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.613048][ T5772] bridge_slave_1: entered allmulticast mode [ 77.620587][ T5772] bridge_slave_1: entered promiscuous mode [ 77.630103][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.639854][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.647432][ T5774] bridge_slave_0: entered allmulticast mode [ 77.656067][ T5774] bridge_slave_0: entered promiscuous mode [ 77.689425][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.696882][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.704319][ T5774] bridge_slave_1: entered allmulticast mode [ 77.711137][ T5774] bridge_slave_1: entered promiscuous mode [ 77.743430][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.751021][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.758390][ T5773] bridge_slave_0: entered allmulticast mode [ 77.765604][ T5773] bridge_slave_0: entered promiscuous mode [ 77.809595][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.818317][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.825664][ T5771] bridge_slave_0: entered allmulticast mode [ 77.833654][ T5771] bridge_slave_0: entered promiscuous mode [ 77.846696][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.857136][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.867389][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.876111][ T5773] bridge_slave_1: entered allmulticast mode [ 77.883982][ T5773] bridge_slave_1: entered promiscuous mode [ 77.896922][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.907628][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.917005][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.926055][ T5771] bridge_slave_1: entered allmulticast mode [ 77.933512][ T5771] bridge_slave_1: entered promiscuous mode [ 77.944646][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.967324][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.008710][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.049766][ T5772] team0: Port device team_slave_0 added [ 78.057877][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.080230][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.096389][ T5772] team0: Port device team_slave_1 added [ 78.123437][ T5774] team0: Port device team_slave_0 added [ 78.134833][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.161774][ T5774] team0: Port device team_slave_1 added [ 78.177722][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.184968][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.211358][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.225754][ T5773] team0: Port device team_slave_0 added [ 78.266348][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.273447][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.299635][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.320260][ T5773] team0: Port device team_slave_1 added [ 78.329855][ T5771] team0: Port device team_slave_0 added [ 78.348450][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.355631][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.381791][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.395740][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.403123][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.429473][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.483716][ T5771] team0: Port device team_slave_1 added [ 78.524701][ T5772] hsr_slave_0: entered promiscuous mode [ 78.531137][ T5772] hsr_slave_1: entered promiscuous mode [ 78.554316][ T5774] hsr_slave_0: entered promiscuous mode [ 78.561280][ T5774] hsr_slave_1: entered promiscuous mode [ 78.567898][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.575844][ T5774] Cannot create hsr debugfs directory [ 78.582450][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.591041][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.617375][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.648456][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.655573][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.682650][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.694894][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.701861][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.728561][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.756120][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.763422][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.789482][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.822168][ T5778] Bluetooth: hci2: command tx timeout [ 78.892526][ T5778] Bluetooth: hci0: command tx timeout [ 78.893412][ T5784] Bluetooth: hci3: command tx timeout [ 78.898240][ T5778] Bluetooth: hci1: command tx timeout [ 78.948480][ T5771] hsr_slave_0: entered promiscuous mode [ 78.955195][ T5771] hsr_slave_1: entered promiscuous mode [ 78.961696][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.970196][ T5771] Cannot create hsr debugfs directory [ 79.030399][ T5773] hsr_slave_0: entered promiscuous mode [ 79.036908][ T5773] hsr_slave_1: entered promiscuous mode [ 79.045906][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.053781][ T5773] Cannot create hsr debugfs directory [ 79.322279][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.337844][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.359776][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.376936][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.445122][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.460636][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.477322][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.487726][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.566137][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.577522][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.594962][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.609937][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.717679][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.730070][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.750640][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.760706][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.817460][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.868431][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.899181][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.918412][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.926409][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.959869][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.967253][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.018340][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.029200][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.088339][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.095715][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.111025][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.134588][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.142248][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.187719][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.196072][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.257017][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.280111][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.295275][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.303311][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.371054][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.421959][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.430044][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.455120][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.462873][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.560646][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.705319][ T5772] veth0_vlan: entered promiscuous mode [ 80.739471][ T5772] veth1_vlan: entered promiscuous mode [ 80.844514][ T5772] veth0_macvtap: entered promiscuous mode [ 80.867904][ T5772] veth1_macvtap: entered promiscuous mode [ 80.881469][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.892291][ T5778] Bluetooth: hci2: command tx timeout [ 80.910264][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.969286][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.972537][ T5778] Bluetooth: hci1: command tx timeout [ 80.982362][ T5786] Bluetooth: hci3: command tx timeout [ 80.983799][ T5784] Bluetooth: hci0: command tx timeout [ 81.014528][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.060475][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.070626][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.080376][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.089385][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.160006][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.180556][ T5774] veth0_vlan: entered promiscuous mode [ 81.200304][ T5773] veth0_vlan: entered promiscuous mode [ 81.222126][ T5773] veth1_vlan: entered promiscuous mode [ 81.257043][ T5774] veth1_vlan: entered promiscuous mode [ 81.326185][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.336262][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.399917][ T5771] veth0_vlan: entered promiscuous mode [ 81.409320][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.419034][ T5773] veth0_macvtap: entered promiscuous mode [ 81.427157][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.434623][ T5774] veth0_macvtap: entered promiscuous mode [ 81.439058][ T5774] veth1_macvtap: entered promiscuous mode [ 81.460615][ T5773] veth1_macvtap: entered promiscuous mode [ 81.484853][ T5771] veth1_vlan: entered promiscuous mode [ 81.506070][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.522983][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.535589][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.573424][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.590860][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.606463][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.627564][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.652843][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.667552][ T5838] syz.2.3[5838]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.667745][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.685591][ T5838] loop2: detected capacity change from 0 to 512 [ 81.697858][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.710408][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.726880][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.740653][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.750157][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.759595][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.783499][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.797008][ T5838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.804298][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.820971][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.831738][ T5838] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.832109][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.863540][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.890710][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.915808][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.929871][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.941584][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.000491][ T5771] veth0_macvtap: entered promiscuous mode [ 82.035915][ T5771] veth1_macvtap: entered promiscuous mode [ 82.118849][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.130001][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.140563][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.157831][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.167806][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.178368][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.196114][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.829078][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.876624][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.916751][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.937806][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.950206][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.965826][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.979156][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.013342][ T5784] Bluetooth: hci2: command tx timeout [ 83.053274][ T5778] Bluetooth: hci3: command tx timeout [ 83.058796][ T5784] Bluetooth: hci1: command tx timeout [ 83.064533][ T5778] Bluetooth: hci0: command tx timeout [ 83.686656][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.701619][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.726053][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.735443][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.746127][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.805406][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.841949][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.894453][ T5851] netlink: zone id is out of range [ 83.917566][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.945233][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.978939][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.990648][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.071596][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.092337][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.130689][ T5853] loop2: detected capacity change from 0 to 2048 [ 84.188314][ T5853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.202039][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.209892][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.285233][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.317038][ T5857] syzkaller0: entered promiscuous mode [ 84.323614][ T5857] syzkaller0: entered allmulticast mode [ 84.447524][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.676515][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 84.769245][ T5866] block2mtd: parameter too long [ 84.995624][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.211599][ T5876] loop1: detected capacity change from 0 to 2048 [ 85.363227][ T5878] loop3: detected capacity change from 0 to 256 [ 85.492454][ T5784] Bluetooth: hci2: command tx timeout [ 85.550304][ T5784] Bluetooth: hci3: command tx timeout [ 85.647100][ T5778] Bluetooth: hci1: command tx timeout [ 85.682912][ T5786] Bluetooth: hci0: command tx timeout [ 86.880113][ T5873] sched: RT throttling activated [ 87.890530][ T9] cfg80211: failed to load regulatory.db [ 89.030313][ T5876] EXT4-fs: error -4 creating inode table initialization thread [ 89.038512][ T5876] EXT4-fs (loop1): mount failed [ 89.309035][ T5883] loop0: detected capacity change from 0 to 128 [ 89.374224][ T5883] ======================================================= [ 89.374224][ T5883] WARNING: The mand mount option has been deprecated and [ 89.374224][ T5883] and is ignored by this kernel. Remove the mand [ 89.374224][ T5883] option from the mount to silence this warning. [ 89.374224][ T5883] ======================================================= [ 89.813627][ T5883] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.934893][ T5883] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.712743][ T5897] syzkaller0: entered promiscuous mode [ 90.743280][ T5897] syzkaller0: entered allmulticast mode [ 90.781554][ T5899] loop1: detected capacity change from 0 to 1024 [ 90.808874][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.904696][ T5899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.807584][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.985737][ T5919] syzkaller0: entered promiscuous mode [ 92.000041][ T5919] syzkaller0: entered allmulticast mode [ 92.216194][ T5924] loop3: detected capacity change from 0 to 2048 [ 94.939189][ T5926] loop2: detected capacity change from 0 to 1024 [ 95.901420][ T5924] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 95.924716][ T5926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.336493][ T5932] loop3: detected capacity change from 0 to 128 [ 96.386334][ T5932] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 96.402805][ T5926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.416919][ T5932] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.492448][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.191789][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.337336][ T5943] loop0: detected capacity change from 0 to 1024 [ 97.427610][ T5943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.514956][ T5777] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.615204][ T5948] netlink: 256 bytes leftover after parsing attributes in process `syz.3.32'. [ 97.806896][ T5777] usb 3-1: Using ep0 maxpacket: 32 [ 97.837036][ T5777] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 97.858665][ T5777] usb 3-1: config 0 has no interface number 0 [ 97.887110][ T5777] usb 3-1: config 0 interface 12 has no altsetting 0 [ 97.922589][ T5777] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 97.960784][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.000044][ T5777] usb 3-1: Product: syz [ 98.016515][ T5777] usb 3-1: Manufacturer: syz [ 98.021308][ T5777] usb 3-1: SerialNumber: syz [ 98.134195][ T5953] syz.3.33 uses obsolete (PF_INET,SOCK_PACKET) [ 98.707342][ T5777] usb 3-1: config 0 descriptor?? [ 98.859131][ T5955] autofs4:pid:5955:autofs_fill_super: called with bogus options [ 98.884361][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.653803][ T5974] loop3: detected capacity change from 0 to 4096 [ 100.675493][ T5974] EXT4-fs: inline encryption not supported [ 100.705096][ T5974] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.731511][ T5974] EXT4-fs (loop3): Test dummy encryption mode enabled [ 100.781174][ T5974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.673232][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.789496][ T5777] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 101.992267][ T5777] f81534 3-1:0.12: f81534_find_config_idx: read failed: -32 [ 102.000217][ T5777] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 102.008091][ T5777] f81534: probe of 3-1:0.12 failed with error -32 [ 102.906509][ T5777] usb 3-1: USB disconnect, device number 2 [ 103.067564][ T6013] Zero length message leads to an empty skb [ 104.722680][ T6013] syzkaller0: entered promiscuous mode [ 104.757149][ T6013] syzkaller0: entered allmulticast mode [ 105.810663][ T27] audit: type=1326 audit(1786087392.904:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8e79e0d9 code=0x7ffc0000 [ 105.846353][ T27] audit: type=1326 audit(1786087392.934:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7efc8e79e0d9 code=0x7ffc0000 [ 105.870027][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.880917][ T27] audit: type=1326 audit(1786087392.934:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8e79e0d9 code=0x7ffc0000 [ 105.905062][ T27] audit: type=1326 audit(1786087392.934:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8e79e0d9 code=0x7ffc0000 [ 105.941838][ T27] audit: type=1326 audit(1786087392.934:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7efc8e79e0d9 code=0x7ffc0000 [ 105.971204][ T27] audit: type=1326 audit(1786087392.934:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8e79e0d9 code=0x7ffc0000 [ 106.012873][ T27] audit: type=1326 audit(1786087392.934:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8e79e0d9 code=0x7ffc0000 [ 106.036644][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.080639][ T27] audit: type=1326 audit(1786087392.934:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc8e79e0d9 code=0x7ffc0000 [ 106.104301][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.122795][ T27] audit: type=1326 audit(1786087392.934:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8e79e0d9 code=0x7ffc0000 [ 106.149505][ T27] audit: type=1326 audit(1786087392.934:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8e79e0d9 code=0x7ffc0000 [ 107.368684][ T6044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.532340][ T5777] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.744185][ T5777] usb 1-1: Using ep0 maxpacket: 32 [ 108.769295][ T5777] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 108.992139][ T5777] usb 1-1: config 0 has no interface number 0 [ 108.998336][ T5777] usb 1-1: config 0 interface 12 has no altsetting 0 [ 109.021287][ T5777] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 109.108268][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.271169][ T5777] usb 1-1: Product: syz [ 109.336399][ T5777] usb 1-1: Manufacturer: syz [ 109.403776][ T5777] usb 1-1: SerialNumber: syz [ 109.564177][ T5777] usb 1-1: config 0 descriptor?? [ 109.666879][ T6069] syzkaller0: entered promiscuous mode [ 109.678023][ T6069] syzkaller0: entered allmulticast mode [ 109.933544][ T6073] capability: warning: `syz.3.55' uses 32-bit capabilities (legacy support in use) [ 110.121193][ T6071] slcan: can't register candev [ 110.126693][ T6071] Falling back ldisc for ttyS3. [ 110.420366][ T6079] loop1: detected capacity change from 0 to 2048 [ 110.526399][ T6079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.559978][ T6079] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 112.729377][ T5777] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 112.903511][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.932656][ T5777] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 112.940607][ T5777] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 112.949467][ T5777] f81534: probe of 1-1:0.12 failed with error -71 [ 112.961319][ T5777] usb 1-1: USB disconnect, device number 2 [ 113.566443][ T6105] loop0: detected capacity change from 0 to 1024 [ 113.657097][ T6105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.716991][ T6107] syzkaller0: entered promiscuous mode [ 113.723787][ T6107] syzkaller0: entered allmulticast mode [ 113.975622][ T6119] loop3: detected capacity change from 0 to 128 [ 114.013996][ T6119] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 114.110381][ T6119] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.410852][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.431331][ T6124] syzkaller0: entered promiscuous mode [ 114.438254][ T6124] syzkaller0: entered allmulticast mode [ 114.804868][ T6135] can0: slcan on ttyS3. [ 114.848902][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.055480][ T6142] can0 (unregistered): slcan off ttyS3. [ 115.323646][ T28] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.562031][ T28] usb 2-1: Using ep0 maxpacket: 32 [ 115.612068][ T28] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 115.620223][ T28] usb 2-1: config 0 has no interface number 0 [ 115.684514][ T28] usb 2-1: config 0 interface 12 has no altsetting 0 [ 116.460109][ T28] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 116.469567][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.477770][ T28] usb 2-1: Product: syz [ 116.482083][ T28] usb 2-1: Manufacturer: syz [ 116.486890][ T28] usb 2-1: SerialNumber: syz [ 116.495769][ T28] usb 2-1: config 0 descriptor?? [ 117.648777][ T6190] syzkaller0: entered promiscuous mode [ 117.718862][ T6190] syzkaller0: entered allmulticast mode [ 117.939310][ T6202] loop3: detected capacity change from 0 to 128 [ 118.017552][ T6202] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 118.032968][ T6202] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.454647][ T6215] can0: slcan on ttyS3. [ 118.513056][ T6215] can0 (unregistered): slcan off ttyS3. [ 118.787040][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.014505][ T28] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 119.022676][ T28] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 119.031804][ T28] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 119.039777][ T28] f81534: probe of 2-1:0.12 failed with error -71 [ 119.059621][ T28] usb 2-1: USB disconnect, device number 2 [ 120.898540][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'. [ 121.080812][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 121.090075][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 121.104602][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 122.593287][ T6276] can0: slcan on ttyS3. [ 122.659098][ T6276] can0 (unregistered): slcan off ttyS3. [ 122.702186][ T5815] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.331986][ T5815] usb 4-1: Using ep0 maxpacket: 32 [ 123.357794][ T5815] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 123.826442][ T5815] usb 4-1: config 0 has no interface number 0 [ 123.864242][ T5815] usb 4-1: config 0 interface 12 has no altsetting 0 [ 123.908553][ T5815] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 123.940075][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.951770][ T5815] usb 4-1: Product: syz [ 123.958612][ T5815] usb 4-1: Manufacturer: syz [ 123.964491][ T5815] usb 4-1: SerialNumber: syz [ 123.975557][ T5815] usb 4-1: config 0 descriptor?? [ 124.389651][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 124.996875][ T6295] syzkaller0: entered promiscuous mode [ 125.004059][ T6295] syzkaller0: entered allmulticast mode [ 125.012717][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 125.599925][ T6310] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.615538][ T6310] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 125.672711][ T6310] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 125.696795][ T6310] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.703155][ T6310] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.710605][ T6310] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.778966][ T6310] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.789881][ T6310] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 125.840451][ T6310] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 125.908233][ T6310] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.914777][ T6310] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 125.924823][ T6310] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.211448][ T6318] syzkaller0: entered promiscuous mode [ 126.222597][ T6318] syzkaller0: entered allmulticast mode [ 126.242047][ T5777] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 126.328987][ T5815] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 126.365588][ T5815] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 126.448245][ T5815] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 126.466997][ T5777] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 126.479702][ T5815] f81534: probe of 4-1:0.12 failed with error -71 [ 126.529893][ T5777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.544807][ T5815] usb 4-1: USB disconnect, device number 2 [ 126.592189][ T6324] loop0: detected capacity change from 0 to 1024 [ 126.602076][ T5777] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.628990][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.645853][ T5777] usb 3-1: Product: syz [ 126.686859][ T5777] usb 3-1: Manufacturer: syz [ 126.699433][ T6324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.882319][ T5777] usb 3-1: SerialNumber: syz [ 126.896498][ T5777] usb 3-1: config 0 descriptor?? [ 126.914111][ T5777] usb 3-1: selecting invalid altsetting 0 [ 127.202945][ T5815] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 127.306426][ T6308] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.324733][ T6308] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.333917][ T6308] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.352686][ T789] usb 3-1: USB disconnect, device number 3 [ 127.382412][ T5815] usb 4-1: device descriptor read/64, error -71 [ 127.722103][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.772998][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.852136][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.893089][ T5815] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 127.931993][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.081915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 128.111908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 128.364406][ T5815] usb 4-1: device descriptor read/64, error -71 [ 128.777202][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.024889][ T5815] usb usb4-port1: attempt power cycle [ 129.264915][ T6343] loop0: detected capacity change from 0 to 128 [ 130.898745][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.898818][ T5778] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.911347][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.922082][ T5784] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.013150][ T5815] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 131.581689][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'. [ 132.100714][ T6343] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 132.640536][ T6343] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.728659][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 132.889844][ T6351] syzkaller0: entered promiscuous mode [ 132.897600][ T6351] syzkaller0: entered allmulticast mode [ 132.976383][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.982672][ T5784] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.986294][ T5778] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.052418][ T5778] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.139793][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.151078][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.174873][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.241908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 133.348041][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 133.357115][ T6357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.567053][ T6365] loop2: detected capacity change from 0 to 2048 [ 135.585828][ T6365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.619066][ T6365] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 136.608698][ T5815] usb 4-1: device descriptor read/8, error -110 [ 136.651167][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.664181][ T6357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.973805][ T5815] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 137.031700][ T6375] loop1: detected capacity change from 0 to 2048 [ 137.116376][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'. [ 137.172847][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 137.236758][ T5815] usb 4-1: device not accepting address 6, error -71 [ 137.244230][ T5815] usb usb4-port1: unable to enumerate USB device [ 137.288473][ T6375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.752708][ T6375] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.000507][ T6375] fs-verity: sha512 using implementation "sha512-avx2" [ 138.042506][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.111587][ T6393] netlink: 32 bytes leftover after parsing attributes in process `syz.3.122'. [ 138.122817][ T6395] syzkaller0: entered promiscuous mode [ 138.128347][ T6395] syzkaller0: entered allmulticast mode [ 138.195225][ T5881] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.209734][ T6397] netlink: 'syz.1.125': attribute type 1 has an invalid length. [ 138.242733][ T6397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.402013][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 138.482381][ T6402] can0: slcan on ttyS3. [ 138.500300][ T5881] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 138.540885][ T5881] usb 1-1: config 0 has no interface number 0 [ 138.563036][ T6402] can0 (unregistered): slcan off ttyS3. [ 138.590291][ T6397] vlan2: entered allmulticast mode [ 138.597081][ T6397] bond1: entered allmulticast mode [ 138.648328][ T5881] usb 1-1: config 0 interface 12 has no altsetting 0 [ 138.661122][ T5881] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 138.682928][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.690985][ T5881] usb 1-1: Product: syz [ 138.711940][ T5881] usb 1-1: Manufacturer: syz [ 138.716280][ T6397] bond1: (slave geneve2): making interface the new active one [ 138.722097][ T5881] usb 1-1: SerialNumber: syz [ 138.740753][ T6397] geneve2: entered allmulticast mode [ 138.756714][ T5881] usb 1-1: config 0 descriptor?? [ 138.768343][ T6397] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 138.862309][ T6409] loop2: detected capacity change from 0 to 2048 [ 139.231915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.371908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.481893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.581899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.641921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.691906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 141.045821][ T6409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.080305][ T6409] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 141.132825][ T6397] syz.1.125 (6397) used greatest stack depth: 19544 bytes left [ 141.713422][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.547007][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 142.595335][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 142.968862][ T5881] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 143.599454][ T5881] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 143.606969][ T5881] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 143.615068][ T5881] f81534: probe of 1-1:0.12 failed with error -71 [ 143.626145][ T5881] usb 1-1: USB disconnect, device number 3 [ 143.660264][ T6434] netlink: 76 bytes leftover after parsing attributes in process `syz.1.133'. [ 143.754311][ T6432] syzkaller0: entered promiscuous mode [ 143.766416][ T6432] syzkaller0: entered allmulticast mode [ 143.992087][ T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 144.228313][ T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.334753][ T6446] loop0: detected capacity change from 0 to 2048 [ 144.446742][ T6446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.486767][ T6446] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 144.563366][ T28] usb 2-1: config 0 has no interfaces? [ 144.705299][ T28] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 144.879915][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.060140][ T28] usb 2-1: Product: syz [ 145.082022][ T28] usb 2-1: Manufacturer: syz [ 145.102914][ T28] usb 2-1: SerialNumber: syz [ 145.119749][ T28] usb 2-1: config 0 descriptor?? [ 145.639680][ T6454] loop3: detected capacity change from 0 to 2048 [ 146.330303][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.427515][ T6454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.462438][ T6454] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 147.016031][ T6458] loop0: detected capacity change from 0 to 1024 [ 147.035356][ T6458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.080452][ T6459] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 147.134114][ T6458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.888728][ T6466] loop2: detected capacity change from 0 to 1024 [ 147.927207][ T6466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.977460][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.842150][ T5815] usb 2-1: USB disconnect, device number 3 [ 149.003662][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.052694][ T6475] syzkaller0: entered promiscuous mode [ 149.058226][ T6475] syzkaller0: entered allmulticast mode [ 149.064174][ T28] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 149.118242][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.362071][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 149.368991][ T28] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 149.377690][ T28] usb 4-1: config 0 has no interface number 0 [ 149.391966][ T28] usb 4-1: config 0 interface 12 has no altsetting 0 [ 150.074317][ T28] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 150.090841][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.172044][ T28] usb 4-1: Product: syz [ 150.176287][ T28] usb 4-1: Manufacturer: syz [ 150.180917][ T28] usb 4-1: SerialNumber: syz [ 150.205424][ T28] usb 4-1: config 0 descriptor?? [ 151.621391][ T6506] syz.1.151 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 152.375828][ T6510] loop2: detected capacity change from 0 to 1024 [ 152.435755][ T6510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.701676][ T28] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 153.279760][ T28] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 153.287967][ T28] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 153.296984][ T28] f81534: probe of 4-1:0.12 failed with error -71 [ 153.310369][ T28] usb 4-1: USB disconnect, device number 7 [ 153.438525][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.597759][ T6525] syzkaller0: entered promiscuous mode [ 153.611806][ T6525] syzkaller0: entered allmulticast mode [ 153.658947][ T6528] loop2: detected capacity change from 0 to 2048 [ 153.726487][ T6528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.768965][ T6528] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.143542][ T6536] hsr0: entered promiscuous mode [ 155.712119][ T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 155.955687][ T23] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8 has an invalid bInterval 0, changing to 4 [ 155.989240][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.015171][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.049332][ T23] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.076421][ T23] usb 1-1: Product: syz [ 156.093863][ T23] usb 1-1: Manufacturer: syz [ 156.101132][ T23] usb 1-1: SerialNumber: syz [ 156.119542][ T23] usb 1-1: config 0 descriptor?? [ 156.143185][ T23] usb 1-1: selecting invalid altsetting 0 [ 156.473732][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.563254][ T23] usb 1-1: USB disconnect, device number 4 [ 156.732953][ C1] [ 156.735344][ C1] ================================ [ 156.740450][ C1] WARNING: inconsistent lock state [ 156.745556][ C1] syzkaller #0 Not tainted [ 156.749958][ C1] -------------------------------- [ 156.755052][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 156.761899][ C1] ksoftirqd/1/22 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 156.768124][ C1] ffff888078cec130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 156.777430][ C1] {SOFTIRQ-ON-W} state was registered at: [ 156.783124][ C1] lock_acquire+0x19e/0x420 [ 156.787701][ C1] lock_sock_nested+0x48/0x100 [ 156.792543][ C1] x25_bind+0x20a/0x460 [ 156.796814][ C1] __sys_bind+0x2f0/0x3f0 [ 156.801233][ C1] __x64_sys_bind+0x7a/0x90 [ 156.805811][ C1] do_syscall_64+0x55/0xb0 [ 156.810300][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.816283][ C1] irq event stamp: 652810 [ 156.820593][ C1] hardirqs last enabled at (652810): [] __local_bh_enable_ip+0x13a/0x1c0 [ 156.830666][ C1] hardirqs last disabled at (652809): [] __local_bh_enable_ip+0xdb/0x1c0 [ 156.840684][ C1] softirqs last enabled at (652752): [] run_ksoftirqd+0xa8/0x100 [ 156.850066][ C1] softirqs last disabled at (652757): [] run_ksoftirqd+0xa8/0x100 [ 156.859443][ C1] [ 156.859443][ C1] other info that might help us debug this: [ 156.867487][ C1] Possible unsafe locking scenario: [ 156.867487][ C1] [ 156.874921][ C1] CPU0 [ 156.878207][ C1] ---- [ 156.881471][ C1] lock(sk_lock-AF_X25); [ 156.885789][ C1] [ 156.889227][ C1] lock(sk_lock-AF_X25); [ 156.893719][ C1] [ 156.893719][ C1] *** DEADLOCK *** [ 156.893719][ C1] [ 156.901848][ C1] 1 lock held by ksoftirqd/1/22: [ 156.906775][ C1] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x34/0x230 [ 156.916780][ C1] [ 156.916780][ C1] stack backtrace: [ 156.922674][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 156.929966][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.940025][ C1] Call Trace: [ 156.943292][ C1] [ 156.946214][ C1] dump_stack_lvl+0x18c/0x250 [ 156.950886][ C1] ? show_regs_print_info+0x20/0x20 [ 156.956079][ C1] ? ret_from_fork_asm+0x11/0x20 [ 156.961012][ C1] valid_state+0x13b/0x1d0 [ 156.965422][ C1] mark_lock_irq+0xad/0x900 [ 156.969920][ C1] ? stack_trace_save+0xaa/0x100 [ 156.974853][ C1] ? save_trace+0xcd0/0xcd0 [ 156.979345][ C1] ? mark_lock+0x94/0x320 [ 156.983667][ C1] ? save_trace+0x5d/0xcd0 [ 156.988077][ C1] mark_lock+0x208/0x320 [ 156.992313][ C1] __lock_acquire+0xcfc/0x7d80 [ 156.997079][ C1] ? verify_lock_unused+0x140/0x140 [ 157.002272][ C1] ? verify_lock_unused+0x140/0x140 [ 157.007465][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 157.013458][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 157.018478][ C1] ? lock_chain_count+0x20/0x20 [ 157.023323][ C1] lock_acquire+0x19e/0x420 [ 157.027816][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 157.032927][ C1] ? read_lock_is_recursive+0x20/0x20 [ 157.038292][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 157.043655][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 157.048867][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 157.054228][ C1] ? _local_bh_enable+0xa0/0xa0 [ 157.059097][ C1] lock_sock_nested+0x48/0x100 [ 157.063884][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 157.069022][ C1] x25_kill_by_neigh+0x10d/0x250 [ 157.073969][ C1] x25_lapb_receive_frame+0x1a7/0xef0 [ 157.079361][ C1] ? netif_receive_skb_core+0x34/0x230 [ 157.084838][ C1] ? netif_receive_skb_core+0x34/0x230 [ 157.090321][ C1] ? x25_device_event+0x280/0x280 [ 157.095351][ C1] netif_receive_skb_core+0x16a/0x230 [ 157.100730][ C1] lapbeth_napi_poll+0x42/0x80 [ 157.105490][ C1] __napi_poll+0xbb/0x460 [ 157.109824][ C1] net_rx_action+0x65f/0xcc0 [ 157.114413][ C1] ? net_tx_action+0x950/0x950 [ 157.119167][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 157.125142][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 157.130420][ C1] ? lock_chain_count+0x20/0x20 [ 157.135264][ C1] handle_softirqs+0x27d/0x820 [ 157.140051][ C1] ? run_ksoftirqd+0xa8/0x100 [ 157.144725][ C1] ? do_softirq+0x1a0/0x1a0 [ 157.149222][ C1] run_ksoftirqd+0xa8/0x100 [ 157.153717][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 157.158906][ C1] ? takeover_tasklets+0x770/0x770 [ 157.164011][ C1] ? takeover_tasklets+0x770/0x770 [ 157.169112][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 157.174319][ C1] smpboot_thread_fn+0x651/0x9f0 [ 157.179260][ C1] ? smpboot_thread_fn+0x4d/0x9f0 [ 157.184303][ C1] kthread+0x2fa/0x390 [ 157.188415][ C1] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 157.194835][ C1] ? kthread_blkcg+0xd0/0xd0 [ 157.199431][ C1] ret_from_fork+0x48/0x80 [ 157.203846][ C1] ? kthread_blkcg+0xd0/0xd0 [ 157.208428][ C1] ret_from_fork_asm+0x11/0x20 [ 157.213191][ C1] [ 157.216261][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3546 [ 157.225096][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 22, name: ksoftirqd/1 [ 157.234071][ C1] preempt_count: 100, expected: 0 [ 157.239106][ C1] RCU nest depth: 1, expected: 0 [ 157.244077][ C1] INFO: lockdep is turned off. [ 157.248822][ C1] Preemption disabled at: [ 157.248828][ C1] [] handle_softirqs+0x101/0x820 [ 157.259707][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 157.266977][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.277033][ C1] Call Trace: [ 157.280308][ C1] [ 157.283234][ C1] dump_stack_lvl+0x18c/0x250 [ 157.287910][ C1] ? show_regs_print_info+0x20/0x20 [ 157.293098][ C1] ? load_image+0x420/0x420 [ 157.297609][ C1] ? handle_softirqs+0x101/0x820 [ 157.302543][ C1] __might_resched+0x48d/0x5f0 [ 157.307301][ C1] ? handle_softirqs+0x101/0x820 [ 157.312243][ C1] ? __might_sleep+0xe0/0xe0 [ 157.316894][ C1] ? read_lock_is_recursive+0x20/0x20 [ 157.322271][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 157.327629][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 157.332812][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 157.338178][ C1] ? _local_bh_enable+0xa0/0xa0 [ 157.343017][ C1] lock_sock_nested+0x5d/0x100 [ 157.347768][ C1] x25_kill_by_neigh+0x10d/0x250 [ 157.352696][ C1] x25_lapb_receive_frame+0x1a7/0xef0 [ 157.358059][ C1] ? netif_receive_skb_core+0x34/0x230 [ 157.363522][ C1] ? netif_receive_skb_core+0x34/0x230 [ 157.369002][ C1] ? x25_device_event+0x280/0x280 [ 157.374010][ C1] netif_receive_skb_core+0x16a/0x230 [ 157.379380][ C1] lapbeth_napi_poll+0x42/0x80 [ 157.384146][ C1] __napi_poll+0xbb/0x460 [ 157.388481][ C1] net_rx_action+0x65f/0xcc0 [ 157.393334][ C1] ? net_tx_action+0x950/0x950 [ 157.398091][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 157.404085][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 157.409363][ C1] ? lock_chain_count+0x20/0x20 [ 157.414206][ C1] handle_softirqs+0x27d/0x820 [ 157.418964][ C1] ? run_ksoftirqd+0xa8/0x100 [ 157.423627][ C1] ? do_softirq+0x1a0/0x1a0 [ 157.428149][ C1] run_ksoftirqd+0xa8/0x100 [ 157.432643][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 157.437826][ C1] ? takeover_tasklets+0x770/0x770 [ 157.442937][ C1] ? takeover_tasklets+0x770/0x770 [ 157.448036][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 157.453235][ C1] smpboot_thread_fn+0x651/0x9f0 [ 157.458180][ C1] ? smpboot_thread_fn+0x4d/0x9f0 [ 157.463224][ C1] kthread+0x2fa/0x390 [ 157.467292][ C1] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 157.473702][ C1] ? kthread_blkcg+0xd0/0xd0 [ 157.478279][ C1] ret_from_fork+0x48/0x80 [ 157.482684][ C1] ? kthread_blkcg+0xd0/0xd0 [ 157.487276][ C1] ret_from_fork_asm+0x11/0x20 [ 157.492030][ C1] [ 157.591929][ T28] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 157.722020][ T23] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 157.737940][ T5778] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 158.000782][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 158.013410][ T28] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 158.021602][ T28] usb 3-1: config 0 has no interface number 0 [ 158.030560][ T28] usb 3-1: config 0 interface 12 has no altsetting 0 [ 158.039641][ T28] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 158.050011][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.058606][ T28] usb 3-1: Product: syz [ 158.063960][ T28] usb 3-1: Manufacturer: syz [ 158.068673][ T28] usb 3-1: SerialNumber: syz [ 158.083997][ T28] usb 3-1: config 0 descriptor?? [ 158.206286][ T23] usb 1-1: device descriptor read/all, error -71 [ 159.591323][ T28] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 159.600125][ T28] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 159.607529][ T28] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 159.616974][ T28] f81534: probe of 3-1:0.12 failed with error -71 [ 159.626033][ T28] usb 3-1: USB disconnect, device number 4