last executing test programs: 2m50.652492109s ago: executing program 3 (id=709): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r3, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f00000000c0)) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 2m49.519698524s ago: executing program 3 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) 2m48.483588697s ago: executing program 3 (id=717): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket(0x40000000015, 0x5, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 2m45.561067032s ago: executing program 3 (id=724): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 2m43.724155792s ago: executing program 3 (id=727): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x808880, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) 2m43.568534986s ago: executing program 1 (id=730): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=@framed={{0x76, 0xa, 0x0, 0x0, 0xfffffffc, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xc70}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f02b, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f510000fc020000000000000000000000000001fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e960ca1c758b83498283eb4e2618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2"], 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff5, 0x7ffa, 0x4, 0x0, 0x2, {0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xb, 0x6, 0x1, 0xc000, 0x0, 0x0, 0x0, 0x0, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x2, 0xf0, 0x3}, 0xff}, 0x18) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r4, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000001401"], 0x10}, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 2m41.506457771s ago: executing program 3 (id=733): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0x252, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450002440002000000119078000000000000000000004e20023090780400000007740000fdffffffffffffff9c67524ed6ed152d4f775bbc411126513b67aaf3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01909186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c139057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb931"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000021000000000000549e290e6e208f1539a700"/38], 0x50) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e00000000"], 0x0, 0x96, 0x0, 0x3}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402) fsmount(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r0, 0xffffffffffffffff, 0x0) 2m41.407038183s ago: executing program 1 (id=734): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000040)={0x0, &(0x7f0000000340)}) 2m41.269389216s ago: executing program 1 (id=736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040010) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x1dc, 0xf8f7, 0x1, 0x3, 0xfff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x608, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x28}], 0x1}, 0x4) 2m40.499097003s ago: executing program 1 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) 2m38.308587402s ago: executing program 1 (id=741): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x808880, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) 2m37.174006277s ago: executing program 1 (id=744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x106f) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x80000300, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r6, &(0x7f0000000280)={r5, r5, 0x5}) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 2m25.877161297s ago: executing program 32 (id=733): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0x252, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000021000000000000549e290e6e208f1539a700"/38], 0x50) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e00000000"], 0x0, 0x96, 0x0, 0x3}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402) fsmount(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r0, 0xffffffffffffffff, 0x0) 2m22.115214879s ago: executing program 33 (id=744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x106f) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x80000300, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r6, &(0x7f0000000280)={r5, r5, 0x5}) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 21.25029244s ago: executing program 4 (id=1073): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xd, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b9", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x64, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x64}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={0x0, 0x2, 0xf}, 0x1) syz_usb_connect(0x3, 0x4a, 0x0, 0x0) 15.013254008s ago: executing program 4 (id=1078): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) fgetxattr(r0, 0x0, &(0x7f0000000440)=""/4096, 0x1000) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14.858247731s ago: executing program 2 (id=1080): openat$dir(0xffffffffffffff9c, 0x0, 0x119041, 0x82) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$eJzs2E9rXFUYB+D33kxi2sZOqi6sm4oVWpBO/rWhqZvWhSAIFgquVAx2koZMmpJJ0WSV4lIXLgQVEbQbFyLNQuhGNCD4AXRjv4IgKrpwIYzcySQN6SSNdeKh6fPAyZxz37n5vWeGucydAB5YTxZ/soi+iBiMiHLreB4RPc1Zb8TS6vNujCxfKkYWjcaFX7PitLg+snxp7X9lrccD0TwljkfEc89n8ejbd+bWFxanx2u16lxrPTA/c2WgvrB4YmpmfLI6Wb08PHz61NjJodHRsY7tdWggXvvuq7MvL527+uXgK7PTRb99rdrGfXRS1uZYKSJe3Y2wBLpa++nacCwrJWwIAIBtFd/zH4mIp5rf4crRFbe/vJXj1rdJmwMAAAA6onGkAQAAAOxxqX9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/tBoZNEAAAAA9rTUvz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB/uT6yfGlt/J+5v5yLiP7V/ButsVopxVLzsTe6I2L/H1mUNpyXRcRgB/KXrkXE4+32nzXz+6O3udqcn0fE+cT5r3cgHx5kK8X152y7z1++fv2JNp+/0upp/9na9e/GHde/2/ldW1z/ruww4/MfX3p3y/xrEU+U2uVn6/nZFvlLO8z/5sXDH21Va3wWcSza52/MGpifuTJQX1g8MTUzPlmdrF4eHj59auzk0Ojo2MDEVK06uPq3bcYnX7zz/Xb7379Vfhbbvv7v7XD/Rw89+/Wn2+QfP7r9+9/u9S96Wt5h/u8/HPx7q1qRf3GL/d/t/V/ZYf4LN8/f3OFTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYI/KI6Issr6zP87xSiTgQEY/F/rw2W59/ZmL26uWLRS2iP7rzialadTAiyqvrrFgPNee318Ob1iMRcSgi3i/va64rb8zWLqbePAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOsORERfZHklIvKI+LOc55VK6q4AAACAjutP3QAAAACw69z/AwAAwN7n/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddujIyq0sIpbO7GuOQk+r1p20M2C35akbAJLpSt0AkEwpdQNAMu7xgewu9d57qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw9xw7vHIri4ilM/uao9DTqnUn7QzYbXnqBoBkulI3ACRTSt0AkIx7fCC7S733HioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7D19zZHllYjIm/M8r1QiHo6I/ujOJqZq1cGIOBgRP5W7HyrWQ6mbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOPqC4vT47Vadc7ExMRkfZL6ygQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAr1hcXp8VqtOldP3QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABp5T9nEVGMY+Wn+zZXe7K/ys3HiHjz4wsfvDU+Pz83VBz/bf34/Iet48Mp+gcAAAA2W7tPX7uPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Kn6wuL0eK1WndvFSeo9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zj8BAAD//5GsoMo=") r0 = socket$kcm(0x23, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f00000000c0)={0x3, 0x7}) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) listen(r0, 0x10000) 13.438144293s ago: executing program 5 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xcc0, 0x0, @val=@iter={0x0}}, 0x20) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)={0x14, 0x42, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x440c4}, 0x0) 12.861092015s ago: executing program 2 (id=1085): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xc70}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f02b, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff5, 0x7ffa, 0x4, 0x0, 0x2, {0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xb, 0x6, 0x1, 0xc000, 0x0, 0x0, 0x0, 0x0, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x2, 0xf0, 0x3}, 0xff}, 0x18) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r4, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000001401"], 0x10}, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 12.847161746s ago: executing program 0 (id=1086): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xd, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b9", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x64, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x64}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={0x0, 0x2, 0xf}, 0x1) syz_usb_connect(0x3, 0x4a, 0x0, 0x0) 12.513023453s ago: executing program 5 (id=1087): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='.\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0) syz_io_uring_setup(0x7b67, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0xb) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x2000, 0x0) syz_usbip_server_init(0x5) r2 = socket(0x8000000010, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48000) write(r2, &(0x7f00000002c0), 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="4c494e45202743442043617074757265272030303030303030303030303030303030303030300a5350454139a64b9f73cba0e2a22bf149324b455220274344204361707475726527203030303030303030fced707a3dbe9ee53030"], 0xbb) close(r3) 10.369265031s ago: executing program 4 (id=1088): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440), 0x0, 0x10) close(0x3) 9.93851801s ago: executing program 4 (id=1089): io_setup(0x45, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x7fffffffffffffff, 0x4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x40010020) sendmmsg(r2, &(0x7f00000030c0), 0x0, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x40000002) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00'}) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) 9.094471239s ago: executing program 5 (id=1090): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x103100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) close(0x3) statx(r4, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r5 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0xee00, 0xffffffffffffffff) 7.322341638s ago: executing program 0 (id=1091): socket$kcm(0xa, 0x3, 0x3a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x15, 0x1, 0x8, &(0x7f0000002ec0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f00000005c0)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x14400, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000080)={0x28}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r6, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x2, 0x1, {0x2, @pix_mp={0xffff6909, 0x80000000, 0x33565348, 0x5, 0x8, [{0x9, 0x9}, {0x2008, 0xf5}, {0x802, 0x80007b}, {0x5, 0x6}, {0xf66, 0x9f2}, {0x100008, 0x10000}, {0x55, 0x2}, {0x7}], 0x4, 0x4, 0x7, 0x2}}}) socket$nl_route(0x10, 0x3, 0x0) 7.027185975s ago: executing program 2 (id=1092): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000002a000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, 0x0, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x66) socket$nl_route(0x10, 0x3, 0x0) 6.30388285s ago: executing program 0 (id=1093): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@binder={0x73622a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 4.719017755s ago: executing program 5 (id=1094): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket(0x40000000015, 0x5, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 4.679497467s ago: executing program 2 (id=1095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xcc0, 0x0, @val=@iter={0x0}}, 0x20) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)={0x14, 0x42, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x440c4}, 0x0) 4.640296347s ago: executing program 4 (id=1096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) fgetxattr(r0, 0x0, &(0x7f0000000440)=""/4096, 0x1000) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f575"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.590308549s ago: executing program 0 (id=1097): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) close(0x3) 3.606930651s ago: executing program 2 (id=1098): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='.\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0) syz_io_uring_setup(0x7b67, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0xb) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x2000, 0x0) syz_usbip_server_init(0x5) r2 = socket(0x8000000010, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48000) write(r2, &(0x7f00000002c0), 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="4c494e45202743442043617074757265272030303030303030303030303030303030303030300a5350454139a64b9f73cba0e2a22bf149324b455220274344204361707475726527203030303030303030fced707a3dbe9ee5303030300a564f4c55"], 0xbb) close(r3) 3.591695991s ago: executing program 0 (id=1099): msgctl$MSG_INFO(0xffffffffffffffff, 0xc, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0xca, 0xac5) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) ftruncate(0xffffffffffffffff, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x0) 3.567312621s ago: executing program 5 (id=1100): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xc70}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f02b, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff5, 0x7ffa, 0x4, 0x0, 0x2, {0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xb, 0x6, 0x1, 0xc000, 0x0, 0x0, 0x0, 0x0, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x2, 0xf0, 0x3}, 0xff}, 0x18) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r4, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000001401"], 0x10}, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 2.191225031s ago: executing program 0 (id=1101): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {0x1, 0x3}, [{0x2, 0x2}, {}, {0x2, 0x7}, {}, {0x2, 0x7}], {}, [{0x8, 0x3}, {0x8, 0x1}, {0x8, 0x4}], {0x10, 0x5}}, 0x64, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 1.830587659s ago: executing program 2 (id=1102): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x103100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) close(0x3) statx(r4, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r5 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0xee00, 0xffffffffffffffff) 920.66µs ago: executing program 5 (id=1103): r0 = openat$capi20(0xffffff9c, &(0x7f0000000000), 0x800842, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000040)=0x486a5694) r1 = socket$inet6(0xa, 0x80003, 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x400, 0x1) r2 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x90, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_ACT={0x34, 0x7, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xffd, 0x3, 0x8058f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xe}}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x48840) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 0s ago: executing program 4 (id=1104): io_setup(0x45, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x7fffffffffffffff, 0x4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x40010020) sendmmsg(r2, &(0x7f00000030c0), 0x0, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x40000002) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00'}) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) kernel console output (not intermixed with test programs): ta ratio 0 [ 191.949706][ T6798] BTRFS info (device loop1): enabling ssd optimizations [ 191.990020][ T6798] BTRFS info (device loop1): using spread ssd allocation scheme [ 192.000846][ T6798] BTRFS info (device loop1): using free space tree [ 192.028216][ T6808] loop9: detected capacity change from 0 to 524287936 [ 192.074669][ T59] team0 (unregistering): Port device team_slave_1 removed [ 192.167717][ T59] team0 (unregistering): Port device team_slave_0 removed [ 192.460200][ T6798] BTRFS info (device loop1): auto enabling async discard [ 192.657702][ T6798] BTRFS info (device loop1): rebuilding free space tree [ 193.106012][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.187598][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.526798][ T27] audit: type=1800 audit(1783045810.831:3): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.293" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 193.774385][ T2976] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 193.785740][ T5773] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.809908][ T59] bond0 (unregistering): Released all slaves [ 194.067392][ T6825] pim6reg: entered allmulticast mode [ 194.076279][ T6828] pim6reg: left allmulticast mode [ 194.254261][ T6836] loop1: detected capacity change from 0 to 1024 [ 194.516220][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.522655][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.688288][ T6848] loop3: detected capacity change from 0 to 1024 [ 196.924539][ T6849] loop1: detected capacity change from 0 to 32768 [ 197.104133][ T6855] loop3: detected capacity change from 0 to 4096 [ 197.178170][ T6843] read_mapping_page failed! [ 197.183094][ T6843] ERROR: (device loop1): txCommit: [ 197.183094][ T6843] [ 197.393409][ T6855] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 197.478138][ T6644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 197.501004][ T6855] ntfs3: loop3: Failed to load $Extend (-22). [ 197.529773][ T6644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 197.545545][ T6855] ntfs3: loop3: Failed to initialize $Extend. [ 197.617084][ T6644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 197.659057][ T6644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.784801][ T6869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.174553][ T6644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.319564][ T6644] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.413165][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.420393][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.456597][ T6874] loop3: detected capacity change from 0 to 1024 [ 199.503427][ T6876] loop0: detected capacity change from 0 to 512 [ 199.522405][ T6876] EXT4-fs: Ignoring removed bh option [ 199.529644][ T6876] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.581839][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.589070][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.659454][ T6876] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 199.719457][ T6876] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 199.740183][ T6876] EXT4-fs (loop0): orphan cleanup on readonly fs [ 199.783578][ T6876] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 199.827144][ T6876] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 199.884060][ T6876] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.307: Failed to acquire dquot type 1 [ 199.918150][ T6876] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.307: Invalid block bitmap block 0 in block_group 0 [ 199.965111][ T6876] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.307: Invalid block bitmap block 0 in block_group 0 [ 200.030961][ T6876] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.307: Invalid block bitmap block 0 in block_group 0 [ 200.289784][ T6876] Quota error (device loop0): write_blk: dquota write failed [ 200.335215][ T6876] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 200.370603][ T6876] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.307: Failed to acquire dquot type 1 [ 200.408319][ T6876] Quota error (device loop0): write_blk: dquota write failed [ 200.477725][ T6876] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 200.524622][ T6876] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.307: Failed to acquire dquot type 1 [ 200.574642][ T6876] EXT4-fs (loop0): 1 orphan inode deleted [ 200.842631][ T6644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.857914][ T6876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.895312][ T6904] loop3: detected capacity change from 0 to 1024 [ 200.985408][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.998101][ T6644] veth0_vlan: entered promiscuous mode [ 201.099923][ T6644] veth1_vlan: entered promiscuous mode [ 201.263467][ T6912] loop0: detected capacity change from 0 to 256 [ 201.297188][ T6644] veth0_macvtap: entered promiscuous mode [ 201.343807][ T6912] FAT-fs (loop0): Directory bread(block 64) failed [ 201.354674][ T6644] veth1_macvtap: entered promiscuous mode [ 201.370720][ T6912] FAT-fs (loop0): Directory bread(block 65) failed [ 201.437693][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.449105][ T6912] FAT-fs (loop0): Directory bread(block 66) failed [ 201.475731][ T6912] FAT-fs (loop0): Directory bread(block 67) failed [ 201.504373][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.516699][ T6912] FAT-fs (loop0): Directory bread(block 68) failed [ 201.521795][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.523277][ T6912] FAT-fs (loop0): Directory bread(block 69) failed [ 201.563881][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.570368][ T6912] FAT-fs (loop0): Directory bread(block 70) failed [ 201.591687][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.592087][ T6912] FAT-fs (loop0): Directory bread(block 71) failed [ 201.619759][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.647194][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.654674][ T6912] FAT-fs (loop0): Directory bread(block 72) failed [ 201.688880][ T6912] FAT-fs (loop0): Directory bread(block 73) failed [ 201.696345][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 201.702680][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.702712][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 201.715856][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 201.729623][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.739993][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.751224][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.761396][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.773005][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.792458][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.848176][ T6644] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.911935][ T6644] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.923650][ T6644] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.934239][ T6644] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.430344][ T6933] loop0: detected capacity change from 0 to 1024 [ 202.497912][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.553580][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.615878][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.623710][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.756921][ T6956] loop2: detected capacity change from 0 to 128 [ 204.609226][ T27] audit: type=1800 audit(1783045821.921:4): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.323" name="file1" dev="loop2" ino=1048603 res=0 errno=0 [ 204.680190][ T6956] syz.2.323: attempt to access beyond end of device [ 204.680190][ T6956] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 204.903780][ T6968] syzkaller1: entered promiscuous mode [ 204.930790][ T6968] syzkaller1: entered allmulticast mode [ 206.473861][ T6991] loop0: detected capacity change from 0 to 1024 [ 206.970043][ T5839] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 207.847916][ T5839] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 207.892551][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.152673][ T5839] usb 4-1: config 0 descriptor?? [ 209.266627][ T6995] batman_adv: batadv0: Adding interface: macvtap1 [ 209.319544][ T6995] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.376745][ T6995] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 209.569297][ T6997] batman_adv: batadv0: Removing interface: macvtap1 [ 209.668939][ T5839] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 209.678189][ T5839] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 209.686976][ T5839] [drm:udl_init] *ERROR* Selecting channel failed [ 209.718375][ T5839] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 209.726310][ T5839] [drm] Initialized udl on minor 2 [ 209.736645][ T5839] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 209.753972][ T5839] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 209.769558][ T5761] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 209.784628][ T5761] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 209.796302][ T5839] usb 4-1: USB disconnect, device number 2 [ 211.013781][ T7040] netlink: 'syz.1.340': attribute type 14 has an invalid length. [ 211.037984][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 212.004327][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.343'. [ 213.675919][ T5811] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 213.706301][ T5839] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 213.868857][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 213.878987][ T5811] usb 3-1: not running at top speed; connect to a high speed hub [ 213.910048][ T5811] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 213.934497][ T5811] usb 3-1: string descriptor 0 read error: -22 [ 213.943051][ T5811] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 213.964175][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.989002][ T7072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.006864][ T5811] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 214.012326][ T7072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.025814][ T5811] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 214.046908][ T5811] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 214.080369][ T5811] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 214.082707][ T5839] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.120353][ T5839] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 214.136189][ T5839] usb 2-1: can't read configurations, error -71 [ 214.221539][ T5811] usb 3-1: found format II with max.bitrate = 0, frame size=7 [ 214.233866][ T5811] usb 3-1: found format II with max.bitrate = 0, frame size=7 [ 214.458325][ T5811] usb 3-1: USB disconnect, device number 2 [ 216.471333][ T7105] loop0: detected capacity change from 0 to 4096 [ 216.527072][ T7111] loop2: detected capacity change from 0 to 1024 [ 217.630536][ T7105] EXT4-fs: Ignoring removed i_version option [ 217.637617][ T7105] EXT4-fs: Ignoring removed oldalloc option [ 217.694194][ T7121] loop3: detected capacity change from 0 to 1024 [ 217.827759][ T7105] EXT4-fs (loop0): Test dummy encryption mode enabled [ 218.488800][ T7105] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 219.415664][ T7138] loop3: detected capacity change from 0 to 32768 [ 219.424137][ T7138] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.368 (7138) [ 220.100262][ T7138] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.158046][ T5839] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 220.167222][ T7138] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 220.200585][ T7138] BTRFS info (device loop3): force clearing of disk cache [ 220.215752][ T7138] BTRFS info (device loop3): metadata ratio 0 [ 220.222056][ T7138] BTRFS info (device loop3): enabling ssd optimizations [ 220.266801][ T7138] BTRFS info (device loop3): using spread ssd allocation scheme [ 220.293813][ T7138] BTRFS info (device loop3): using free space tree [ 221.331330][ T7166] syz.2.377 uses obsolete (PF_INET,SOCK_PACKET) [ 221.377989][ T7138] BTRFS info (device loop3): auto enabling async discard [ 221.391561][ T7138] BTRFS info (device loop3): rebuilding free space tree [ 221.782630][ T7177] loop0: detected capacity change from 0 to 1024 [ 222.024220][ T2976] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 222.173117][ T27] audit: type=1800 audit(1783045839.481:5): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.368" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 222.602728][ T5771] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 223.157272][ T7197] block device autoloading is deprecated and will be removed. [ 223.374736][ T7201] warning: `syz.0.385' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 223.445992][ T7203] loop3: detected capacity change from 0 to 1024 [ 225.416077][ T5761] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 225.688677][ T5761] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 225.742387][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.969707][ T5761] usb 3-1: config 0 descriptor?? [ 226.025562][ T7214] loop3: detected capacity change from 0 to 32768 [ 226.067897][ T7214] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 scanned by syz.3.391 (7214) [ 226.100501][ T7237] loop1: detected capacity change from 0 to 1024 [ 226.115211][ T2976] wlan1: Trigger new scan to find an IBSS to join [ 226.140684][ T7214] BTRFS info (device loop3): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 226.151356][ T7214] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 226.177315][ T7214] BTRFS info (device loop3): using free space tree [ 226.222624][ T7224] batman_adv: batadv0: Adding interface: macvtap1 [ 226.229921][ T7224] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.257762][ T7224] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 226.296387][ T7242] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 226.461001][ T7224] batman_adv: batadv0: Removing interface: macvtap1 [ 226.485772][ T7214] BTRFS info (device loop3): enabling ssd optimizations [ 226.495173][ T7214] BTRFS info (device loop3): auto enabling async discard [ 226.548457][ T7247] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 226.975902][ T5771] BTRFS info (device loop3): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 227.592604][ T5761] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 227.665698][ T5761] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 227.673960][ T5761] [drm:udl_init] *ERROR* Selecting channel failed [ 227.715366][ T5761] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 227.723617][ T5761] [drm] Initialized udl on minor 2 [ 227.732049][ T5761] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 227.752071][ T5761] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 227.763550][ T969] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 227.799970][ T5761] usb 3-1: USB disconnect, device number 3 [ 227.807337][ T969] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 227.815368][ T969] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 228.024875][ T7273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.405'. [ 229.199530][ T7284] loop2: detected capacity change from 0 to 1024 [ 230.171160][ T7293] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 231.040857][ T7301] loop2: detected capacity change from 0 to 256 [ 231.137516][ T3457] wlan1: Trigger new scan to find an IBSS to join [ 231.368217][ T7316] loop1: detected capacity change from 0 to 1024 [ 231.565107][ T7318] loop1: detected capacity change from 0 to 1024 [ 231.958059][ T7309] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.964879][ T7309] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 231.991696][ T7309] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.999227][ T7309] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 232.014561][ T7309] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.021496][ T7309] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 232.031300][ T7309] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.038407][ T7309] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 232.067700][ T7309] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 232.118153][ T11] wlan1: Creating new IBSS network, BSSID 4e:5d:27:b7:e4:cb [ 232.239907][ T7326] loop3: detected capacity change from 0 to 256 [ 232.695706][ T5761] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 233.302484][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 233.305688][ T5761] usb 1-1: device descriptor read/64, error -71 [ 233.575665][ T5761] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 234.015763][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 234.021901][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 234.095779][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 234.654619][ T7345] loop2: detected capacity change from 0 to 1024 [ 234.816418][ T5761] usb 1-1: device descriptor read/64, error -71 [ 234.912604][ T7354] loop2: detected capacity change from 0 to 1024 [ 234.956295][ T5761] usb usb1-port1: attempt power cycle [ 234.963340][ T7357] Illegal XDP return value 4294967294 on prog (id 25) dev syz_tun, expect packet loss! [ 234.992762][ T7358] loop3: detected capacity change from 0 to 512 [ 235.111614][ T7358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.162305][ T7358] ext4 filesystem being mounted at /131/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.197159][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 235.375813][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 235.520983][ T27] audit: type=1804 audit(1783045852.631:6): pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.433" name="/newroot/28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=2 res=1 errno=0 [ 235.796719][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.037068][ T7371] loop2: detected capacity change from 0 to 1024 [ 236.096340][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 236.102422][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 236.175694][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 237.060069][ T3482] wlan1: Trigger new scan to find an IBSS to join [ 237.076523][ T7386] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 237.264808][ T7396] loop0: detected capacity change from 0 to 16 [ 237.309380][ T7396] erofs: (device loop0): mounted with root inode @ nid 36. [ 237.392739][ T7398] netlink: 96 bytes leftover after parsing attributes in process `syz.1.452'. [ 237.746142][ T7399] netlink: 3 bytes leftover after parsing attributes in process `syz.0.444'. [ 238.052506][ T7399] 0ªX¹¦À: renamed from caif0 [ 238.259998][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 238.284630][ T7399] 0ªX¹¦À: entered allmulticast mode [ 238.290255][ T7399] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 238.783981][ T7400] dvmrp31: entered allmulticast mode [ 239.384514][ T7419] loop1: detected capacity change from 0 to 512 [ 239.529718][ T7421] loop0: detected capacity change from 0 to 1024 [ 239.606027][ T5865] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 239.775800][ T5865] usb 3-1: device descriptor read/64, error -71 [ 240.652049][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'. [ 240.656142][ T7431] loop1: detected capacity change from 0 to 256 [ 240.699779][ T7431] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 240.833067][ T27] audit: type=1800 audit(1783045858.131:7): pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.455" name="file2" dev="loop1" ino=1048606 res=0 errno=0 [ 240.856645][ T5865] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 240.901440][ T7433] fuse: Bad value for 'group_id' [ 241.026513][ T5865] usb 3-1: device descriptor read/64, error -71 [ 241.177030][ T5865] usb usb3-port1: attempt power cycle [ 241.325790][ T5811] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 241.585754][ T5811] usb 2-1: Using ep0 maxpacket: 16 [ 241.591173][ T5865] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 241.607441][ T5811] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 241.619430][ T5811] usb 2-1: config 0 has no interface number 0 [ 241.626663][ T5811] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 241.649515][ T5865] usb 3-1: device descriptor read/8, error -71 [ 241.656555][ T5811] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 241.686183][ T7448] loop3: detected capacity change from 0 to 1024 [ 241.699448][ T5811] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 241.716321][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.746520][ T5811] usb 2-1: Product: syz [ 241.750746][ T5811] usb 2-1: Manufacturer: syz [ 241.755363][ T5811] usb 2-1: SerialNumber: syz [ 241.763146][ T5811] usb 2-1: config 0 descriptor?? [ 241.773281][ T7436] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 241.781177][ T7436] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 241.936011][ T5865] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 242.019631][ T5865] usb 3-1: device descriptor read/8, error -71 [ 242.097950][ T1134] wlan1: Trigger new scan to find an IBSS to join [ 242.124814][ T7436] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 242.169514][ T7436] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 242.212084][ T5865] usb usb3-port1: unable to enumerate USB device [ 242.554308][ T5811] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 242.960924][ T7461] fuse: Bad value for 'group_id' [ 243.111647][ T1024] wlan1: Creating new IBSS network, BSSID 12:c0:74:92:56:19 [ 244.108182][ T7457] loop3: detected capacity change from 0 to 32768 [ 244.177004][ T5811] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 244.208107][ T7478] loop0: detected capacity change from 0 to 1024 [ 244.226411][ T5811] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 244.227802][ T7457] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 244.306443][ T5811] asix: probe of 2-1:0.34 failed with error -71 [ 244.348894][ T5811] usb 2-1: USB disconnect, device number 4 [ 244.432398][ T7457] XFS (loop3): Ending clean mount [ 244.672451][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 245.035718][ T5865] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 245.186221][ T5865] usb 1-1: device descriptor read/64, error -71 [ 245.486075][ T5865] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 245.715817][ T5865] usb 1-1: device descriptor read/64, error -71 [ 246.057318][ T5865] usb usb1-port1: attempt power cycle [ 246.429630][ T7506] fuse: Bad value for 'group_id' [ 246.469900][ T5865] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 246.513857][ T5865] usb 1-1: device descriptor read/8, error -71 [ 246.711187][ T7510] loop2: detected capacity change from 0 to 1024 [ 246.875891][ T5865] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 246.968613][ T5865] usb 1-1: device descriptor read/8, error -71 [ 247.418108][ T7514] loop1: detected capacity change from 0 to 1024 [ 247.456265][ T5865] usb usb1-port1: unable to enumerate USB device [ 247.522350][ T7516] autofs4:pid:7516:autofs_fill_super: called with bogus options [ 247.569426][ T7516] loop2: detected capacity change from 0 to 512 [ 247.575333][ T7518] loop3: detected capacity change from 0 to 1024 [ 247.581911][ T7516] EXT4-fs: Ignoring removed bh option [ 247.599178][ T7516] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.628910][ T7516] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 247.660309][ T7516] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 247.681462][ T7516] EXT4-fs (loop2): orphan cleanup on readonly fs [ 247.708230][ T7516] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 247.718222][ T7516] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 247.728901][ T7516] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.488: Failed to acquire dquot type 1 [ 247.773659][ T7516] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.488: Invalid block bitmap block 0 in block_group 0 [ 247.814344][ T7516] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.488: Invalid block bitmap block 0 in block_group 0 [ 247.834260][ T7516] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.488: Invalid block bitmap block 0 in block_group 0 [ 247.854315][ T7516] Quota error (device loop2): write_blk: dquota write failed [ 247.862683][ T7516] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 247.886458][ T7516] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.488: Failed to acquire dquot type 1 [ 247.934707][ T7516] Quota error (device loop2): write_blk: dquota write failed [ 248.021620][ T7516] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 248.133662][ T27] audit: type=1804 audit(1783045865.351:8): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.480" name="/newroot/140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=2 res=1 errno=0 [ 248.272345][ T7516] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.488: Failed to acquire dquot type 1 [ 248.457068][ T7516] EXT4-fs (loop2): 1 orphan inode deleted [ 248.500469][ T7516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 248.711629][ T6644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.337782][ T7550] loop2: detected capacity change from 0 to 1024 [ 252.360072][ T7565] autofs4:pid:7565:autofs_fill_super: called with bogus options [ 252.382236][ T7565] loop2: detected capacity change from 0 to 512 [ 252.395846][ T5865] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 252.406749][ T7565] EXT4-fs: Ignoring removed bh option [ 252.412186][ T7565] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.433914][ T7565] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 252.459027][ T7565] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 252.494625][ T7565] EXT4-fs (loop2): orphan cleanup on readonly fs [ 252.523592][ T7565] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 252.544435][ T7565] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 252.565494][ T7565] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.496: Failed to acquire dquot type 1 [ 252.615716][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.649108][ T7565] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.496: Invalid block bitmap block 0 in block_group 0 [ 252.742069][ T7565] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.496: Invalid block bitmap block 0 in block_group 0 [ 252.825022][ T7565] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.496: Invalid block bitmap block 0 in block_group 0 [ 252.915095][ T7565] Quota error (device loop2): write_blk: dquota write failed [ 252.934901][ T7565] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 253.018014][ T7565] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.496: Failed to acquire dquot type 1 [ 253.125000][ T7565] Quota error (device loop2): write_blk: dquota write failed [ 253.144809][ T7565] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 253.155999][ T7565] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.496: Failed to acquire dquot type 1 [ 253.232532][ T7565] EXT4-fs (loop2): 1 orphan inode deleted [ 253.279870][ T7565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.627555][ T5865] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 253.636787][ T5865] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.646192][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.676815][ T5865] usb 2-1: config 0 descriptor?? [ 253.757314][ T6644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.115898][ T7583] loop2: detected capacity change from 0 to 1024 [ 254.742704][ T7586] loop0: detected capacity change from 0 to 64 [ 255.822291][ T172] usb 2-1: USB disconnect, device number 5 [ 255.934122][ T7598] autofs4:pid:7598:autofs_fill_super: called with bogus options [ 255.946124][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.952514][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.952852][ T7598] loop1: detected capacity change from 0 to 512 [ 255.966811][ T7598] EXT4-fs: Ignoring removed bh option [ 255.972255][ T7598] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.007175][ T7598] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 256.148356][ T7598] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 256.267205][ T7598] EXT4-fs (loop1): orphan cleanup on readonly fs [ 256.414906][ T7598] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 256.558192][ T7598] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 256.806514][ T7607] loop3: detected capacity change from 0 to 32768 [ 256.916454][ T7598] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.508: Failed to acquire dquot type 1 [ 256.998212][ T7598] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.508: Invalid block bitmap block 0 in block_group 0 [ 257.040703][ T7607] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 257.067631][ T7598] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.508: Invalid block bitmap block 0 in block_group 0 [ 257.120164][ T7607] XFS (loop3): Ending clean mount [ 257.141526][ T7607] XFS (loop3): Quotacheck needed: Please wait. [ 257.170041][ T7598] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.508: Invalid block bitmap block 0 in block_group 0 [ 257.230157][ T7607] XFS (loop3): Quotacheck: Done. [ 257.275806][ T7598] Quota error (device loop1): write_blk: dquota write failed [ 257.366969][ T7598] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 257.384633][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 257.395840][ T7598] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.508: Failed to acquire dquot type 1 [ 257.448824][ T7598] Quota error (device loop1): write_blk: dquota write failed [ 257.473056][ T7598] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 257.525781][ T7598] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.508: Failed to acquire dquot type 1 [ 257.602351][ T7598] EXT4-fs (loop1): 1 orphan inode deleted [ 257.643206][ T7624] Zero length message leads to an empty skb [ 257.717950][ T7598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 258.571925][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.955100][ T7633] loop3: detected capacity change from 0 to 1024 [ 259.055791][ T5865] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 260.919922][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.945821][ T5865] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 260.955498][ T5865] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.962778][ T7635] loop1: detected capacity change from 0 to 1024 [ 260.964819][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.990774][ T5865] usb 3-1: config 0 descriptor?? [ 261.378126][ T7647] loop3: detected capacity change from 0 to 512 [ 262.737454][ T7650] 9pnet_fd: Insufficient options for proto=fd [ 262.811002][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 262.852430][ T969] usb 3-1: USB disconnect, device number 8 [ 263.075330][ T7656] autofs4:pid:7656:autofs_fill_super: called with bogus options [ 263.117771][ T7656] loop2: detected capacity change from 0 to 512 [ 263.134848][ T7656] EXT4-fs: Ignoring removed bh option [ 263.150032][ T7656] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.345865][ T7656] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 263.647815][ T7656] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 263.781695][ T7656] EXT4-fs (loop2): orphan cleanup on readonly fs [ 263.972392][ T7656] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 264.120005][ T7656] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 264.233708][ T7656] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.523: Failed to acquire dquot type 1 [ 264.338792][ T7656] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.523: Invalid block bitmap block 0 in block_group 0 [ 265.150415][ T7656] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.523: Invalid block bitmap block 0 in block_group 0 [ 265.223753][ T7656] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.523: Invalid block bitmap block 0 in block_group 0 [ 265.268782][ T7669] loop1: detected capacity change from 0 to 1024 [ 267.298412][ T7656] Quota error (device loop2): write_blk: dquota write failed [ 267.330299][ T7656] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 267.341745][ T7656] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.523: Failed to acquire dquot type 1 [ 267.359711][ T7656] Quota error (device loop2): write_blk: dquota write failed [ 267.377320][ T7656] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 267.420956][ T7656] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.523: Failed to acquire dquot type 1 [ 267.490721][ T7671] loop3: detected capacity change from 0 to 1024 [ 267.511246][ T7656] EXT4-fs (loop2): 1 orphan inode deleted [ 267.543038][ T7656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.735010][ T7677] loop1: detected capacity change from 0 to 4096 [ 267.747576][ T6644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.785026][ T7677] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 267.875875][ T172] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 268.006685][ T7679] loop3: detected capacity change from 0 to 4096 [ 268.011442][ T7681] loop2: detected capacity change from 0 to 256 [ 268.029706][ T7679] EXT4-fs: inline encryption not supported [ 268.076303][ T172] usb 1-1: Using ep0 maxpacket: 16 [ 268.102650][ T7679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.102801][ T172] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 268.143605][ T7681] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 268.174034][ T172] usb 1-1: config 0 has no interface number 0 [ 268.180748][ T7679] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 268.201149][ T7679] System zones: 0-5 [ 268.216385][ T172] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 268.234652][ T7679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.236897][ T172] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 268.262460][ T172] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 268.275647][ T172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.275723][ T27] audit: type=1800 audit(1783045885.561:9): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.533" name="file1" dev="loop2" ino=1048610 res=0 errno=0 [ 268.283660][ T172] usb 1-1: Product: syz [ 268.283675][ T172] usb 1-1: Manufacturer: syz [ 268.283690][ T172] usb 1-1: SerialNumber: syz [ 268.286710][ T172] usb 1-1: config 0 descriptor?? [ 268.310067][ T7681] exFAT-fs (loop2): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 268.318331][ T7675] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.352338][ T7681] exFAT-fs (loop2): Filesystem has been set read-only [ 268.369183][ T7675] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.403082][ T7685] exFAT-fs (loop2): hint_cluster is invalid (521), rewind to the first cluster [ 268.455001][ T7685] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000208) [ 268.472695][ T7685] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805a1aa1e0 iblock : 9, err : -5) [ 268.495019][ T7685] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000208) [ 268.504366][ T7685] syz.2.533: attempt to access beyond end of device [ 268.504366][ T7685] loop2: rw=2049, sector=4280, nr_sectors = 8 limit=256 [ 268.653866][ T7675] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.676605][ T7675] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 269.284720][ T172] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 269.321874][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.078925][ T7695] loop3: detected capacity change from 0 to 2048 [ 270.211295][ T7695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.370697][ T7695] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.547530][ T172] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 271.627832][ T172] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 271.672322][ T172] asix: probe of 1-1:0.34 failed with error -71 [ 271.726131][ T172] usb 1-1: USB disconnect, device number 10 [ 271.781386][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.008558][ T7713] loop3: detected capacity change from 0 to 1024 [ 273.869376][ T1024] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 273.929574][ T7715] autofs4:pid:7715:autofs_fill_super: called with bogus options [ 273.953041][ T7715] loop0: detected capacity change from 0 to 512 [ 274.023284][ T7715] EXT4-fs: Ignoring removed bh option [ 274.051053][ T7715] EXT4-fs: Ignoring removed mblk_io_submit option [ 274.239965][ T7715] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 275.036928][ T7715] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 275.045306][ T7715] EXT4-fs (loop0): orphan cleanup on readonly fs [ 275.250384][ T7715] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 275.586375][ T7731] pim6reg: entered allmulticast mode [ 275.602725][ T7731] pim6reg: left allmulticast mode [ 275.905750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 276.381918][ T7715] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 276.614905][ T7715] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.541: Failed to acquire dquot type 1 [ 276.759099][ T7735] loop2: detected capacity change from 0 to 64 [ 277.091786][ T7715] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.541: Invalid block bitmap block 0 in block_group 0 [ 277.225827][ T7715] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.541: Invalid block bitmap block 0 in block_group 0 [ 277.311103][ T5845] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 277.674900][ T7715] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.541: Invalid block bitmap block 0 in block_group 0 [ 277.795922][ T7715] Quota error (device loop0): write_blk: dquota write failed [ 277.803835][ T7715] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 277.956024][ T7715] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.541: Failed to acquire dquot type 1 [ 278.084050][ T7715] Quota error (device loop0): write_blk: dquota write failed [ 278.129528][ T7715] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 278.326170][ T7798] loop1: detected capacity change from 0 to 32768 [ 278.368859][ T7715] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.541: Failed to acquire dquot type 1 [ 278.438959][ T7798] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 278.440272][ T7715] EXT4-fs (loop0): 1 orphan inode deleted [ 278.465772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 278.504320][ T7715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 278.742389][ T7798] XFS (loop1): Ending clean mount [ 278.761207][ T7798] XFS (loop1): Quotacheck needed: Please wait. [ 278.864207][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.869713][ T7798] XFS (loop1): Quotacheck: Done. [ 280.138113][ T7813] smc: net device xfrm0 applied user defined pnetid SYZ0 [ 280.162558][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 283.006402][ T7844] autofs4:pid:7844:autofs_fill_super: called with bogus options [ 283.024017][ T7844] loop2: detected capacity change from 0 to 512 [ 283.033051][ T7844] EXT4-fs: Ignoring removed bh option [ 283.045134][ T7844] EXT4-fs: Ignoring removed mblk_io_submit option [ 283.084070][ T7844] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 283.089354][ T7846] loop0: detected capacity change from 0 to 64 [ 283.163152][ T7844] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 283.201731][ T7844] EXT4-fs (loop2): orphan cleanup on readonly fs [ 283.229265][ T7844] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 283.296288][ T7844] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 283.393079][ T7844] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.556: Failed to acquire dquot type 1 [ 283.433870][ T7844] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.556: Invalid block bitmap block 0 in block_group 0 [ 283.472539][ T7844] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.556: Invalid block bitmap block 0 in block_group 0 [ 283.510681][ T7844] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.556: Invalid block bitmap block 0 in block_group 0 [ 283.536429][ T7844] Quota error (device loop2): write_blk: dquota write failed [ 283.555837][ T7844] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 283.590576][ T7844] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.556: Failed to acquire dquot type 1 [ 283.643130][ T7844] Quota error (device loop2): write_blk: dquota write failed [ 283.665923][ T7844] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 283.684067][ T7844] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.556: Failed to acquire dquot type 1 [ 283.723965][ T7844] EXT4-fs (loop2): 1 orphan inode deleted [ 283.729957][ T7855] loop3: detected capacity change from 0 to 2048 [ 283.747610][ T7844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.833528][ T7863] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.937525][ T6644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.695702][ T172] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 284.885803][ T172] usb 3-1: Using ep0 maxpacket: 8 [ 284.939011][ T172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 285.187164][ T172] usb 3-1: config 86 has an invalid interface number: 78 but max is 0 [ 285.197466][ T172] usb 3-1: config 86 has no interface number 0 [ 285.203847][ T172] usb 3-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024 [ 285.303647][ T172] usb 3-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1023 [ 285.409960][ T172] usb 3-1: config 86 interface 78 has no altsetting 0 [ 285.695117][ T172] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 285.704947][ T172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.729809][ T172] usb 3-1: Product: syz [ 285.734010][ T172] usb 3-1: Manufacturer: syz [ 285.739369][ T172] usb 3-1: SerialNumber: syz [ 285.764094][ T7872] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 285.775499][ T7872] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 286.017797][ T172] kvaser_usb 3-1:86.78: Cannot get software info, error -71 [ 286.046138][ T172] kvaser_usb: probe of 3-1:86.78 failed with error -71 [ 286.076669][ T172] usb 3-1: USB disconnect, device number 9 [ 286.279664][ T7889] loop0: detected capacity change from 0 to 512 [ 286.289075][ T7889] EXT4-fs: Ignoring removed bh option [ 286.294520][ T7889] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.337429][ T7889] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 286.352948][ T7889] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 286.363467][ T7889] EXT4-fs (loop0): orphan cleanup on readonly fs [ 286.375062][ T7889] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 286.385383][ T7889] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 286.400304][ T7889] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.574: Failed to acquire dquot type 1 [ 286.419540][ T7889] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.574: Invalid block bitmap block 0 in block_group 0 [ 286.457349][ T7889] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.574: Invalid block bitmap block 0 in block_group 0 [ 286.491017][ T7889] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.574: Invalid block bitmap block 0 in block_group 0 [ 286.534394][ T7889] Quota error (device loop0): write_blk: dquota write failed [ 286.594905][ T7889] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 286.651390][ T7889] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.574: Failed to acquire dquot type 1 [ 286.823648][ T7889] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.574: Failed to acquire dquot type 1 [ 287.554804][ T7896] loop3: detected capacity change from 0 to 32768 [ 287.786522][ T7889] EXT4-fs (loop0): 1 orphan inode deleted [ 288.489854][ T7896] [ 288.489854][ T7896] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.489854][ T7896] [ 288.600819][ T7896] ERROR: (device loop3): diWrite: ixpxd invalid [ 288.600819][ T7896] [ 288.613223][ T7896] ERROR: (device loop3): txCommit: [ 288.613223][ T7896] [ 288.705756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 288.993071][ T7889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.007395][ T7900] loop2: detected capacity change from 0 to 1024 [ 289.031331][ T5771] [ 289.031331][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.031331][ T5771] [ 289.042034][ T5771] [ 289.042034][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.042034][ T5771] [ 289.300866][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.498930][ T7909] loop0: detected capacity change from 0 to 64 [ 291.265904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 291.420109][ T7924] loop0: detected capacity change from 0 to 1024 [ 291.615017][ T7922] loop2: detected capacity change from 0 to 2048 [ 291.671016][ T7931] loop0: detected capacity change from 0 to 512 [ 291.720690][ T7931] EXT4-fs: Ignoring removed bh option [ 291.788238][ T7931] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.809644][ T7934] loop1: detected capacity change from 0 to 1024 [ 291.982794][ T7931] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 292.096750][ T7935] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.267673][ T7931] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 292.431876][ T7931] EXT4-fs (loop0): orphan cleanup on readonly fs [ 292.556193][ T7931] __quota_error: 2 callbacks suppressed [ 292.556209][ T7931] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 292.621851][ T7931] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 292.632276][ T7931] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.588: Failed to acquire dquot type 1 [ 292.649070][ T7931] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.588: Invalid block bitmap block 0 in block_group 0 [ 292.676412][ T7931] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.588: Invalid block bitmap block 0 in block_group 0 [ 292.690637][ T7931] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.588: Invalid block bitmap block 0 in block_group 0 [ 292.707406][ T7931] Quota error (device loop0): write_blk: dquota write failed [ 292.714923][ T7931] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 292.750759][ T7931] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.588: Failed to acquire dquot type 1 [ 292.794619][ T7931] Quota error (device loop0): write_blk: dquota write failed [ 292.808462][ T7931] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 292.837448][ T7931] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.588: Failed to acquire dquot type 1 [ 292.882963][ T7931] EXT4-fs (loop0): 1 orphan inode deleted [ 292.899063][ T7931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 293.002423][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.832395][ T7948] loop2: detected capacity change from 0 to 64 [ 294.248743][ T7786] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 296.000543][ T7975] loop1: detected capacity change from 0 to 512 [ 296.026524][ T7975] EXT4-fs: Ignoring removed bh option [ 296.054621][ T7975] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.056642][ T7972] loop0: detected capacity change from 0 to 2048 [ 296.077290][ T7975] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 296.215803][ T7980] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.252348][ T7975] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 296.316133][ T7975] EXT4-fs (loop1): orphan cleanup on readonly fs [ 296.324978][ T7975] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 296.410528][ T7975] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 296.588655][ T7975] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.603: Failed to acquire dquot type 1 [ 296.951003][ T7975] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.603: Invalid block bitmap block 0 in block_group 0 [ 297.025330][ T7975] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.603: Invalid block bitmap block 0 in block_group 0 [ 297.041400][ T7975] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.603: Invalid block bitmap block 0 in block_group 0 [ 297.070500][ T7975] Quota error (device loop1): write_blk: dquota write failed [ 297.081098][ T7975] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 297.103268][ T7975] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.603: Failed to acquire dquot type 1 [ 297.145763][ T7975] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.603: Failed to acquire dquot type 1 [ 297.970671][ T7975] EXT4-fs (loop1): 1 orphan inode deleted [ 297.979495][ T7975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.074665][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.934437][ T8016] loop1: detected capacity change from 0 to 512 [ 300.983226][ T8016] EXT4-fs: Ignoring removed bh option [ 301.021723][ T8016] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.058156][ T8016] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 302.096133][ T8016] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 302.104479][ T8016] EXT4-fs (loop1): orphan cleanup on readonly fs [ 302.112582][ T8016] __quota_error: 2 callbacks suppressed [ 302.112597][ T8016] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 302.145936][ T8016] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 302.170794][ T8026] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 302.177660][ T8026] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 302.188713][ T8026] vhci_hcd vhci_hcd.0: Device attached [ 302.190497][ T8028] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 302.195209][ T8016] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.617: Failed to acquire dquot type 1 [ 302.300636][ T8029] vhci_hcd: connection closed [ 302.508374][ T7788] vhci_hcd: stop threads [ 302.553882][ T8016] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.617: Invalid block bitmap block 0 in block_group 0 [ 302.707582][ T7788] vhci_hcd: release socket [ 302.716215][ T5865] usb 40-1: SetAddress Request (2) to port 0 [ 302.799208][ T5865] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 302.799633][ T7788] vhci_hcd: disconnect device [ 302.834943][ T8016] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.617: Invalid block bitmap block 0 in block_group 0 [ 303.024882][ T8035] loop2: detected capacity change from 0 to 512 [ 303.026866][ T8016] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.617: Invalid block bitmap block 0 in block_group 0 [ 303.099099][ T8016] Quota error (device loop1): write_blk: dquota write failed [ 303.107714][ T8016] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 303.117918][ T8016] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.617: Failed to acquire dquot type 1 [ 303.297322][ T8016] Quota error (device loop1): write_blk: dquota write failed [ 303.304984][ T8016] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 303.323893][ T8016] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.617: Failed to acquire dquot type 1 [ 303.341270][ T8016] EXT4-fs (loop1): 1 orphan inode deleted [ 303.362575][ T8016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 305.453160][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.802188][ T8063] loop0: detected capacity change from 0 to 256 [ 306.805730][ T172] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 307.056587][ T172] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 307.084347][ T172] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 307.125001][ T172] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 307.211150][ T172] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 307.256275][ T7790] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 307.338274][ T172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 307.436839][ T172] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 307.646612][ T172] usb 4-1: string descriptor 0 read error: -22 [ 307.888686][ T172] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 308.560547][ T5865] usb 40-1: device descriptor read/8, error -110 [ 308.571485][ T172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.588010][ T172] usb 4-1: config 0 descriptor?? [ 308.595269][ T172] hub 4-1:0.0: bad descriptor, ignoring hub [ 308.625713][ T172] hub: probe of 4-1:0.0 failed with error -5 [ 308.978816][ T5845] usb 4-1: USB disconnect, device number 4 [ 309.209575][ T5865] usb usb40-port1: attempt power cycle [ 310.042662][ T8099] loop2: detected capacity change from 0 to 1024 [ 310.288214][ T5865] usb usb40-port1: unable to enumerate USB device [ 312.364461][ T8104] pim6reg: entered allmulticast mode [ 312.380335][ T8104] pim6reg: left allmulticast mode [ 313.927189][ T8108] Cannot find add_set index 0 as target [ 314.986795][ T8121] autofs4:pid:8121:autofs_fill_super: called with bogus options [ 316.099447][ T8124] loop9: detected capacity change from 0 to 524287936 [ 317.117456][ T8128] loop2: detected capacity change from 0 to 32768 [ 317.318352][ T8128] read_mapping_page failed! [ 317.323024][ T8128] ERROR: (device loop2): txCommit: [ 317.323024][ T8128] [ 318.301969][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.308466][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 318.315458][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.013193][ T8162] pim6reg: entered allmulticast mode [ 322.048442][ T8161] pim6reg: left allmulticast mode [ 325.584401][ T8185] loop1: detected capacity change from 0 to 256 [ 327.105727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 327.282250][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 327.575730][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 329.410635][ T8204] loop3: detected capacity change from 0 to 128 [ 329.527607][ T27] audit: type=1800 audit(1783045946.841:10): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.671" name="file1" dev="loop3" ino=1048611 res=0 errno=0 [ 329.559247][ T8204] syz.3.671: attempt to access beyond end of device [ 329.559247][ T8204] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 329.782375][ T8207] pim6reg: entered allmulticast mode [ 329.826417][ T8207] pim6reg: left allmulticast mode [ 329.971138][ T8212] loop0: detected capacity change from 0 to 1024 [ 332.235290][ T8219] syzkaller0: entered promiscuous mode [ 332.243775][ T8219] syzkaller0: entered allmulticast mode [ 333.469045][ T8231] loop2: detected capacity change from 0 to 64 [ 333.546059][ T8233] loop3: detected capacity change from 0 to 512 [ 333.553379][ T8233] EXT4-fs: Ignoring removed bh option [ 333.609896][ T8233] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.627469][ T8233] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 333.665398][ T8233] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 333.679094][ T8233] EXT4-fs (loop3): orphan cleanup on readonly fs [ 333.691217][ T8233] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 334.530762][ T8233] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 334.540726][ T8233] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.681: Failed to acquire dquot type 1 [ 334.618038][ T8233] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.681: Invalid block bitmap block 0 in block_group 0 [ 334.699494][ T8233] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.681: Invalid block bitmap block 0 in block_group 0 [ 335.074659][ T8247] loop0: detected capacity change from 0 to 1024 [ 335.636655][ T8233] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.681: Invalid block bitmap block 0 in block_group 0 [ 335.778721][ T8233] Quota error (device loop3): write_blk: dquota write failed [ 335.886426][ T8233] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 335.896879][ T8233] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.681: Failed to acquire dquot type 1 [ 335.916017][ T8233] Quota error (device loop3): write_blk: dquota write failed [ 335.924855][ T8233] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 335.935234][ T8233] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.681: Failed to acquire dquot type 1 [ 335.964619][ T8248] pim6reg: entered allmulticast mode [ 335.998540][ T8233] EXT4-fs (loop3): 1 orphan inode deleted [ 336.005279][ T8238] pim6reg: left allmulticast mode [ 336.010539][ T8250] loop2: detected capacity change from 0 to 64 [ 336.034420][ T8233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 336.202115][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.829709][ T8262] loop1: detected capacity change from 0 to 128 [ 337.876566][ T8262] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.902178][ T8262] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 338.043813][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 338.054073][ T8270] syzkaller0: entered promiscuous mode [ 338.060274][ T8270] syzkaller0: entered allmulticast mode [ 338.905771][ T7756] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 339.053010][ T8280] loop2: detected capacity change from 0 to 512 [ 339.061044][ T8280] EXT4-fs: Ignoring removed bh option [ 339.081951][ T8280] EXT4-fs: Ignoring removed mblk_io_submit option [ 339.693670][ T8280] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 339.799105][ T8280] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 339.810425][ T8285] loop0: detected capacity change from 0 to 64 [ 339.838638][ T8280] EXT4-fs (loop2): orphan cleanup on readonly fs [ 339.848975][ T8280] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 339.859624][ T8280] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 339.871358][ T8280] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.697: Failed to acquire dquot type 1 [ 339.939092][ T8280] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.697: Invalid block bitmap block 0 in block_group 0 [ 340.210869][ T8280] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.697: Invalid block bitmap block 0 in block_group 0 [ 340.449518][ T8280] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.697: Invalid block bitmap block 0 in block_group 0 [ 340.685346][ T8280] Quota error (device loop2): write_blk: dquota write failed [ 340.725895][ T8280] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 340.761862][ T8280] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.697: Failed to acquire dquot type 1 [ 340.789784][ T8280] Quota error (device loop2): write_blk: dquota write failed [ 340.797809][ T8280] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 340.808743][ T8280] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.697: Failed to acquire dquot type 1 [ 340.868473][ T8280] EXT4-fs (loop2): 1 orphan inode deleted [ 341.062086][ T8280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.716132][ T6644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.842058][ T8302] pim6reg: entered allmulticast mode [ 341.899829][ T8300] pim6reg: left allmulticast mode [ 342.026071][ T8304] fuse: Invalid rootmode [ 342.082465][ T8306] loop2: detected capacity change from 0 to 128 [ 342.132334][ T8306] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.173192][ T8306] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 342.234015][ T6644] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.164492][ T8326] loop1: detected capacity change from 0 to 512 [ 345.178847][ T8326] EXT4-fs: Ignoring removed bh option [ 345.184472][ T8326] EXT4-fs: Ignoring removed mblk_io_submit option [ 345.392075][ T8326] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 345.675414][ T8326] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 345.813861][ T8326] EXT4-fs (loop1): orphan cleanup on readonly fs [ 345.972912][ T8326] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 346.034339][ T8326] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 346.042842][ T8334] fuse: Bad value for 'rootmode' [ 346.046649][ T8326] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.711: Failed to acquire dquot type 1 [ 346.066995][ T8326] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.711: Invalid block bitmap block 0 in block_group 0 [ 346.104220][ T8326] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.711: Invalid block bitmap block 0 in block_group 0 [ 346.149384][ T8326] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.711: Invalid block bitmap block 0 in block_group 0 [ 346.169961][ T8326] Quota error (device loop1): write_blk: dquota write failed [ 346.228142][ T8326] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 346.280091][ T8326] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.711: Failed to acquire dquot type 1 [ 346.324416][ T8326] Quota error (device loop1): write_blk: dquota write failed [ 346.347535][ T8326] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 346.362689][ T8326] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.711: Failed to acquire dquot type 1 [ 346.395211][ T8326] EXT4-fs (loop1): 1 orphan inode deleted [ 346.484794][ T8326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.765971][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.776540][ T8345] pim6reg: entered allmulticast mode [ 346.839047][ T8337] pim6reg: left allmulticast mode [ 351.065074][ T8369] loop3: detected capacity change from 0 to 512 [ 351.092323][ T8369] EXT4-fs: Ignoring removed bh option [ 351.112152][ T8369] EXT4-fs: Ignoring removed mblk_io_submit option [ 351.144889][ T8373] fuse: Bad value for 'rootmode' [ 351.168369][ T8369] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 351.302947][ T8369] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 351.356169][ T8369] EXT4-fs (loop3): orphan cleanup on readonly fs [ 351.379229][ T8369] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 351.389208][ T8369] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 351.399184][ T8369] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.727: Failed to acquire dquot type 1 [ 351.415743][ T8369] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.727: Invalid block bitmap block 0 in block_group 0 [ 352.016273][ T8369] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.727: Invalid block bitmap block 0 in block_group 0 [ 352.087226][ T8369] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.727: Invalid block bitmap block 0 in block_group 0 [ 352.401400][ T8369] Quota error (device loop3): write_blk: dquota write failed [ 352.462019][ T8369] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 352.521739][ T8369] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.727: Failed to acquire dquot type 1 [ 352.836616][ T8369] Quota error (device loop3): write_blk: dquota write failed [ 352.844168][ T8369] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 352.863941][ T8389] pim6reg: entered allmulticast mode [ 352.876431][ T8369] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.727: Failed to acquire dquot type 1 [ 352.888438][ T8385] pim6reg: left allmulticast mode [ 352.894166][ T8369] EXT4-fs (loop3): 1 orphan inode deleted [ 353.033678][ T8369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 353.212439][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.262028][ T8403] fuse: Bad value for 'rootmode' [ 356.643780][ T8410] loop1: detected capacity change from 0 to 512 [ 356.663822][ T8410] EXT4-fs: Ignoring removed bh option [ 356.784157][ T8410] EXT4-fs: Ignoring removed mblk_io_submit option [ 356.797025][ T8410] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 356.818268][ T8410] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 356.839563][ T8410] EXT4-fs (loop1): orphan cleanup on readonly fs [ 356.855204][ T8410] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 356.873173][ T8410] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 356.884571][ T8410] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.741: Failed to acquire dquot type 1 [ 356.907014][ T8410] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.741: Invalid block bitmap block 0 in block_group 0 [ 356.929465][ T8410] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.741: Invalid block bitmap block 0 in block_group 0 [ 356.947800][ T8410] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.741: Invalid block bitmap block 0 in block_group 0 [ 356.980917][ T8410] Quota error (device loop1): write_blk: dquota write failed [ 356.999329][ T8410] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 357.054271][ T8410] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.741: Failed to acquire dquot type 1 [ 357.106880][ T8410] Quota error (device loop1): write_blk: dquota write failed [ 357.140685][ T8410] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 357.158485][ T8416] loop2: detected capacity change from 0 to 64 [ 357.179285][ T8410] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.741: Failed to acquire dquot type 1 [ 357.250706][ T8410] EXT4-fs (loop1): 1 orphan inode deleted [ 357.280319][ T8410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 357.583348][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.251907][ T8422] pim6reg: entered allmulticast mode [ 358.533410][ T8419] pim6reg: left allmulticast mode [ 358.791569][ T8428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.748'. [ 359.715441][ T7786] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 362.023690][ T8451] pim6reg: entered allmulticast mode [ 362.041951][ T8448] pim6reg: left allmulticast mode [ 364.872195][ T8481] pim6reg: entered allmulticast mode [ 364.894891][ T8481] pim6reg: left allmulticast mode [ 365.124728][ T8490] loop2: detected capacity change from 0 to 4096 [ 365.179132][ T8492] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 365.502742][ T8500] loop2: detected capacity change from 0 to 64 [ 367.233425][ T8511] loop2: detected capacity change from 0 to 64 [ 367.304664][ T8509] pim6reg: entered allmulticast mode [ 367.320776][ T8509] pim6reg: left allmulticast mode [ 370.187119][ T8536] syzkaller0: entered promiscuous mode [ 370.192648][ T8536] syzkaller0: entered allmulticast mode [ 370.348420][ T8538] pim6reg: entered allmulticast mode [ 370.354036][ T8539] pim6reg: left allmulticast mode [ 370.597563][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.622554][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.632404][ T3450] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 370.644502][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.653403][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.675112][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 370.686522][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.764818][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.930855][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.947635][ T5839] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 371.064178][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.086997][ T8542] chnl_net:caif_netlink_parms(): no params data found [ 371.141505][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.152722][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.162719][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 371.176250][ T5839] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.185392][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.200451][ T5839] usb 3-1: config 0 descriptor?? [ 371.211049][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.236508][ T8542] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.244123][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.256272][ T8542] bridge_slave_0: entered allmulticast mode [ 371.263547][ T8542] bridge_slave_0: entered promiscuous mode [ 371.274057][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.281799][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.289396][ T8542] bridge_slave_1: entered allmulticast mode [ 371.301008][ T8542] bridge_slave_1: entered promiscuous mode [ 371.347253][ T8542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.359915][ T8542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.409345][ T8542] team0: Port device team_slave_0 added [ 371.446613][ T8542] team0: Port device team_slave_1 added [ 371.496242][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.503261][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.536975][ T8542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.574731][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.581927][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.612118][ T8542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.617636][ T5839] usbhid 3-1:0.0: can't add hid device: -71 [ 371.636988][ T5839] usbhid: probe of 3-1:0.0 failed with error -71 [ 371.748519][ T5839] usb 3-1: USB disconnect, device number 10 [ 371.839010][ T8542] hsr_slave_0: entered promiscuous mode [ 371.846629][ T8542] hsr_slave_1: entered promiscuous mode [ 371.853406][ T8542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.862304][ T8542] Cannot create hsr debugfs directory [ 372.168388][ T11] smc: removing net device xfrm0 with user defined pnetid SYZ0 [ 372.461754][ T8542] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 372.544926][ T8542] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 372.737287][ T51] Bluetooth: hci2: command tx timeout [ 373.603664][ T8542] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.308147][ T8542] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 374.541888][ T8597] syzkaller0: entered promiscuous mode [ 374.565772][ T8597] syzkaller0: entered allmulticast mode [ 374.638210][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.651518][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.661400][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.720989][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.730884][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 374.738091][ T8609] pim6reg: entered allmulticast mode [ 374.752556][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.818635][ T5776] Bluetooth: hci2: command tx timeout [ 374.880398][ T8609] pim6reg: left allmulticast mode [ 375.035868][ T11] hsr_slave_0: left promiscuous mode [ 375.099038][ T11] hsr_slave_1: left promiscuous mode [ 375.115188][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.130684][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.197037][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.273120][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.350880][ T11] bridge_slave_1: left allmulticast mode [ 375.414343][ T11] bridge_slave_1: left promiscuous mode [ 375.473931][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.602271][ T11] bridge_slave_0: left allmulticast mode [ 375.679503][ T11] bridge_slave_0: left promiscuous mode [ 375.763658][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.926847][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 376.049704][ T11] veth1_macvtap: left promiscuous mode [ 376.057083][ T11] veth0_macvtap: left promiscuous mode [ 376.062781][ T11] veth1_vlan: left promiscuous mode [ 376.068699][ T11] veth0_vlan: left promiscuous mode [ 376.186926][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.235012][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.252127][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.274356][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.284320][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.289579][ T8633] loop2: detected capacity change from 0 to 2048 [ 376.312164][ T8] usb 1-1: config 0 descriptor?? [ 376.357781][ T8633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.378011][ T8633] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.823753][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 376.833199][ T5776] Bluetooth: hci3: command tx timeout [ 376.885446][ T8] usbhid: probe of 1-1:0.0 failed with error -71 [ 376.897298][ T5776] Bluetooth: hci2: command tx timeout [ 377.049064][ T8] usb 1-1: USB disconnect, device number 11 [ 377.303803][ T6644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.838256][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.849763][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.895701][ T5776] Bluetooth: hci3: command tx timeout [ 378.985344][ T5776] Bluetooth: hci2: command tx timeout [ 379.443570][ T11] team0 (unregistering): Port device team_slave_1 removed [ 379.502887][ T11] team0 (unregistering): Port device team_slave_0 removed [ 379.553966][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.630393][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.493283][ T11] bond0 (unregistering): Released all slaves [ 380.976913][ T5776] Bluetooth: hci3: command tx timeout [ 380.995074][ T8648] pim6reg: entered allmulticast mode [ 381.001008][ T8651] pim6reg: left allmulticast mode [ 383.056883][ T5776] Bluetooth: hci3: command tx timeout [ 383.525330][ T8542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.564790][ T11] IPVS: stop unused estimator thread 0... [ 383.719131][ T8542] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.780258][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.787493][ T7769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.816865][ T7776] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.824132][ T7776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.912353][ T8607] chnl_net:caif_netlink_parms(): no params data found [ 384.250838][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.260875][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.269570][ T8607] bridge_slave_0: entered allmulticast mode [ 384.341094][ T8607] bridge_slave_0: entered promiscuous mode [ 384.366554][ T8721] pim6reg: entered allmulticast mode [ 384.378406][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.394864][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.403721][ T8607] bridge_slave_1: entered allmulticast mode [ 384.423235][ T8607] bridge_slave_1: entered promiscuous mode [ 384.482988][ T8721] pim6reg: left allmulticast mode [ 384.635268][ T8607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.783246][ T8729] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 384.789914][ T8729] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 384.798392][ T8729] vhci_hcd vhci_hcd.0: Device attached [ 384.999561][ T8607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.196064][ T8] usb 38-1: SetAddress Request (2) to port 0 [ 385.250312][ T8] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 385.502301][ T8730] vhci_hcd: connection reset by peer [ 386.044023][ T11] vhci_hcd: stop threads [ 386.062182][ T11] vhci_hcd: release socket [ 386.102421][ T11] vhci_hcd: disconnect device [ 386.232909][ T8607] team0: Port device team_slave_0 added [ 386.279559][ T8542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.318991][ T8607] team0: Port device team_slave_1 added [ 386.396683][ T8741] syzkaller0: entered promiscuous mode [ 386.417011][ T8741] syzkaller0: entered allmulticast mode [ 386.432802][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.442595][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.476130][ T8607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.489909][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.498693][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.525045][ T8607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.915377][ T8607] hsr_slave_0: entered promiscuous mode [ 386.940281][ T8607] hsr_slave_1: entered promiscuous mode [ 386.954442][ T8607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.982530][ T8607] Cannot create hsr debugfs directory [ 387.316363][ T8542] veth0_vlan: entered promiscuous mode [ 387.360771][ T8542] veth1_vlan: entered promiscuous mode [ 387.514735][ T8542] veth0_macvtap: entered promiscuous mode [ 387.552456][ T8542] veth1_macvtap: entered promiscuous mode [ 387.584017][ T8607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 387.599501][ T8607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 387.666597][ T8774] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 387.673169][ T8774] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 387.683676][ T8774] vhci_hcd vhci_hcd.0: Device attached [ 387.705992][ T5839] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 387.755213][ T8607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 387.913245][ T8607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 387.977584][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 388.020952][ T5839] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 388.129907][ T5839] usb 1-1: config 0 has no interface number 0 [ 388.176286][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.278702][ T5839] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 388.329511][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.382806][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.407644][ T8775] vhci_hcd: connection closed [ 388.421013][ T7769] vhci_hcd: stop threads [ 388.462985][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.488065][ T5839] usb 1-1: Product: syz [ 388.510700][ T7769] vhci_hcd: release socket [ 388.532456][ T5839] usb 1-1: Manufacturer: syz [ 388.559605][ T7769] vhci_hcd: disconnect device [ 388.584192][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.609138][ T5839] usb 1-1: SerialNumber: syz [ 388.714485][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.743104][ T5839] usb 1-1: config 0 descriptor?? [ 388.866330][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.886856][ T5839] smsc95xx v2.0.0 [ 388.947324][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.959399][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.970056][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.980475][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.992300][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.002460][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.012980][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.024575][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.052334][ T8542] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.075996][ T8542] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.084751][ T8542] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.114501][ T8542] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.244363][ T5839] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 389.946206][ T5839] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 390.217878][ T5839] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 390.266065][ T5839] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 390.307523][ T5839] usb 1-1: USB disconnect, device number 12 [ 390.321111][ T7756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.374047][ T7756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.503313][ T8] usb 38-1: device descriptor read/8, error -110 [ 390.527683][ T7756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.556617][ T8607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.567692][ T7756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.613567][ T8607] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.671247][ T7780] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.678560][ T7780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.747299][ T7780] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.754533][ T7780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.997051][ T8] usb usb38-port1: attempt power cycle [ 391.262093][ T3450] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 391.781145][ T8] usb usb38-port1: unable to enumerate USB device [ 392.164028][ T8607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.235746][ T8842] loop0: detected capacity change from 0 to 64 [ 393.293734][ T8846] syzkaller0: entered promiscuous mode [ 393.299462][ T8846] syzkaller0: entered allmulticast mode [ 396.400058][ T8875] pim6reg: entered allmulticast mode [ 396.477586][ T8875] pim6reg: left allmulticast mode [ 397.915669][ T8887] syzkaller0: entered promiscuous mode [ 397.921205][ T8887] syzkaller0: entered allmulticast mode [ 397.937745][ T8607] veth0_vlan: entered promiscuous mode [ 397.947255][ T8890] loop0: detected capacity change from 0 to 64 [ 398.057503][ T8607] veth1_vlan: entered promiscuous mode [ 398.197008][ T8607] veth0_macvtap: entered promiscuous mode [ 398.248213][ T8607] veth1_macvtap: entered promiscuous mode [ 398.319101][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.360924][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.390886][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.416140][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.441582][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.473941][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.516071][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.600337][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.781298][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.925173][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'. [ 399.353898][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.390085][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.400787][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.415661][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.430525][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.451304][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.475661][ T8607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.493477][ T8607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.611492][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.626412][ T8607] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.640603][ T8607] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.656167][ T8607] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.666590][ T8607] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.758076][ T8915] pim6reg: entered allmulticast mode [ 399.891161][ T7782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.902531][ T8915] pim6reg: left allmulticast mode [ 399.933433][ T7782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.868451][ T7776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.911040][ T7776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.373080][ T8942] loop2: detected capacity change from 0 to 64 [ 401.547285][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.862'. [ 401.756415][ T7792] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 402.704320][ T8954] pim6reg: entered allmulticast mode [ 402.724708][ T8954] pim6reg: left allmulticast mode [ 404.117448][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.873'. [ 405.489173][ T8989] loop0: detected capacity change from 0 to 64 [ 406.898050][ T8982] loop2: detected capacity change from 0 to 40427 [ 407.211587][ T8982] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 407.220137][ T8982] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 407.753620][ T8982] F2FS-fs (loop2): invalid crc value [ 407.930845][ T8982] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-4) [ 410.534837][ T9002] pim6reg: entered allmulticast mode [ 410.558835][ T9002] pim6reg: left allmulticast mode [ 412.671063][ T9030] loop2: detected capacity change from 0 to 64 [ 415.087243][ T9055] pim6reg: entered allmulticast mode [ 415.095474][ T9055] pim6reg: left allmulticast mode [ 415.409716][ T9063] syzkaller0: entered promiscuous mode [ 415.436349][ T9063] syzkaller0: entered allmulticast mode [ 416.722806][ T9080] loop5: detected capacity change from 0 to 256 [ 416.784148][ T9080] FAT-fs (loop5): Directory bread(block 64) failed [ 416.790917][ T9080] FAT-fs (loop5): Directory bread(block 65) failed [ 416.797908][ T9080] FAT-fs (loop5): Directory bread(block 66) failed [ 416.804553][ T9080] FAT-fs (loop5): Directory bread(block 67) failed [ 416.812092][ T9080] FAT-fs (loop5): Directory bread(block 68) failed [ 416.818803][ T9080] FAT-fs (loop5): Directory bread(block 69) failed [ 416.825510][ T9080] FAT-fs (loop5): Directory bread(block 70) failed [ 416.832134][ T9080] FAT-fs (loop5): Directory bread(block 71) failed [ 416.838882][ T9080] FAT-fs (loop5): Directory bread(block 72) failed [ 416.845431][ T9080] FAT-fs (loop5): Directory bread(block 73) failed [ 416.922342][ T9084] loop0: detected capacity change from 0 to 512 [ 417.663231][ T9084] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.900: inode has both inline data and extents flags [ 417.873795][ T9084] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.900: couldn't read orphan inode 15 (err -117) [ 417.941991][ T9090] tipc: Started in network mode [ 417.947321][ T9084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.975847][ T9090] tipc: Node identity 2e80350620f2, cluster identity 4711 [ 418.039985][ T9090] tipc: Enabled bearer , priority 0 [ 418.532509][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.580224][ T9101] loop5: detected capacity change from 0 to 4096 [ 418.606085][ T9101] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 418.688243][ T9095] syzkaller0: entered promiscuous mode [ 418.694237][ T9095] syzkaller0: entered allmulticast mode [ 418.714263][ T9095] tipc: Resetting bearer [ 418.812176][ T9087] tipc: Resetting bearer [ 419.020773][ T9110] loop2: detected capacity change from 0 to 4096 [ 419.049040][ T9110] ntfs: (device loop2): parse_options(): Unrecognized mount option show_sys€fides. [ 420.005781][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 420.239005][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.250084][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.276239][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 420.298756][ T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 420.334065][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.365144][ T8] usb 6-1: config 0 descriptor?? [ 421.408649][ T8] usbhid 6-1:0.0: can't add hid device: -71 [ 421.414729][ T8] usbhid: probe of 6-1:0.0 failed with error -71 [ 421.429746][ T8] usb 6-1: USB disconnect, device number 2 [ 422.633183][ T1134] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 423.094675][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 423.321307][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 423.347166][ T23] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 423.355455][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 423.381749][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 423.402559][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 423.431663][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.445124][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 423.490169][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.741063][ T23] usb 3-1: usb_control_msg returned -32 [ 423.746948][ T23] usbtmc 3-1:16.0: can't read capabilities [ 423.967306][ T9134] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 423.988347][ T23] usb 3-1: USB disconnect, device number 11 [ 424.888007][ T9087] tipc: Disabling bearer [ 424.912640][ T9108] pim6reg: entered allmulticast mode [ 424.919713][ T9111] pim6reg: left allmulticast mode [ 425.127282][ T172] tipc: Node number set to 242365702 [ 426.880365][ T9176] fuse: Unknown parameter '0x0000000000000003' [ 426.935257][ T9181] loop4: detected capacity change from 0 to 128 [ 427.032830][ T9183] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 427.032903][ T9183] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 427.033305][ T9183] vhci_hcd vhci_hcd.0: Device attached [ 427.056013][ T9183] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—' [ 427.056064][ T9183] ALSA: mixer_oss: invalid OSS volume 'Ÿ(' [ 427.159205][ T9181] omfs: sysblock number (f784317bf884317b) is out of range [ 427.209641][ T9182] mmap: syz.2.930 (9182) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 427.493020][ T23] usb 34-1: SetAddress Request (2) to port 0 [ 427.493702][ T23] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 427.743020][ T9184] vhci_hcd: connection reset by peer [ 427.778819][ T7780] vhci_hcd: stop threads [ 427.778912][ T7780] vhci_hcd: release socket [ 427.779106][ T7780] vhci_hcd: disconnect device [ 428.395949][ T9180] tty tty2: ldisc open failed (-12), clearing slot 1 [ 428.405763][ T9190] pim6reg: entered allmulticast mode [ 428.413261][ T9190] pim6reg: left allmulticast mode [ 431.425926][ T8787] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 432.362879][ T9229] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 432.369480][ T9229] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 432.423442][ T9229] vhci_hcd vhci_hcd.0: Device attached [ 432.427278][ T8787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.445326][ T8787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.455965][ T8787] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.469475][ T8787] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.479831][ T8787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.523167][ T9237] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—' [ 432.532130][ T8787] usb 5-1: config 0 descriptor?? [ 432.576541][ T23] usb 34-1: device descriptor read/8, error -110 [ 432.608959][ T9237] ALSA: mixer_oss: invalid OSS volume 'Ÿ(' [ 432.732007][ T9233] vhci_hcd: connection closed [ 432.742566][ T7780] vhci_hcd: stop threads [ 432.751947][ T8792] usb 38-1: SetAddress Request (6) to port 0 [ 432.768648][ T8792] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 432.833305][ T7780] vhci_hcd: release socket [ 432.838641][ T7780] vhci_hcd: disconnect device [ 432.934701][ T9242] pim6reg: entered allmulticast mode [ 432.950739][ T8792] usb 38-1: enqueue for inactive port 0 [ 432.964936][ T9242] pim6reg: left allmulticast mode [ 432.978560][ T8787] usbhid 5-1:0.0: can't add hid device: -71 [ 432.995732][ T8787] usbhid: probe of 5-1:0.0 failed with error -71 [ 433.007527][ T8787] usb 5-1: USB disconnect, device number 2 [ 433.078126][ T23] usb usb34-port1: attempt power cycle [ 433.629879][ T8792] usb usb38-port1: attempt power cycle [ 433.838334][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 434.429986][ T8792] usb usb38-port1: unable to enumerate USB device [ 434.576700][ T23] usb usb34-port1: unable to enumerate USB device [ 435.392631][ T9270] loop4: detected capacity change from 0 to 2048 [ 436.537567][ T9270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.550284][ T9270] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.791825][ T8542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.058173][ T9286] pim6reg: entered allmulticast mode [ 437.070072][ T9280] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 437.084860][ T9286] pim6reg: left allmulticast mode [ 437.467667][ T9299] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 437.474234][ T9299] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 437.482231][ T9299] vhci_hcd vhci_hcd.0: Device attached [ 437.498301][ T9299] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—' [ 437.506884][ T9299] ALSA: mixer_oss: invalid OSS volume 'Ÿ(' [ 437.852090][ T9280] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 437.994968][ T8787] usb 38-1: SetAddress Request (10) to port 0 [ 438.020627][ T9280] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 438.124439][ T8787] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 438.154462][ T9280] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 438.195982][ T9300] vhci_hcd: connection closed [ 438.233404][ T11] vhci_hcd: stop threads [ 438.280058][ T9280] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 438.418293][ T11] vhci_hcd: release socket [ 438.543078][ T11] vhci_hcd: disconnect device [ 438.614479][ T9280] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 438.861740][ T9280] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 438.869973][ T9280] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 438.886292][ T9280] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 439.305873][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 439.311791][ T172] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 439.657658][ T172] usb 3-1: Using ep0 maxpacket: 16 [ 440.095706][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 440.148402][ T172] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.211413][ T172] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.262948][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.269631][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout [ 440.368781][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.490117][ T172] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.503322][ T172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.534872][ T172] usb 3-1: Product: syz [ 440.545257][ T172] usb 3-1: Manufacturer: syz [ 440.558968][ T172] usb 3-1: SerialNumber: syz [ 440.895782][ T5776] Bluetooth: hci3: command 0x0c1a tx timeout [ 441.210126][ T9331] loop4: detected capacity change from 0 to 40427 [ 441.251079][ T9331] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 441.258970][ T9331] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 441.446287][ T9331] F2FS-fs (loop4): invalid crc value [ 442.305902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 442.335671][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout [ 442.496100][ T172] usb 3-1: 0:2 : does not exist [ 442.578206][ T172] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 442.579206][ T9331] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 443.174479][ T5776] Bluetooth: hci3: command 0x0c1a tx timeout [ 443.233134][ T172] usb 3-1: USB disconnect, device number 12 [ 443.324556][ T9349] pim6reg: entered allmulticast mode [ 443.334584][ T9349] pim6reg: left allmulticast mode [ 443.358877][ T6119] udevd[6119]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.385420][ T8787] usb 38-1: device descriptor read/8, error -110 [ 443.862256][ T8787] usb usb38-port1: attempt power cycle [ 444.457640][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout [ 445.061212][ T9373] syzkaller0: entered promiscuous mode [ 445.069414][ T8787] usb usb38-port1: unable to enumerate USB device [ 445.075728][ T9373] syzkaller0: entered allmulticast mode [ 445.216751][ T5776] Bluetooth: hci3: command 0x0c1a tx timeout [ 446.543213][ T9400] pim6reg: entered allmulticast mode [ 446.549087][ T9402] pim6reg: left allmulticast mode [ 448.767505][ T9430] loop0: detected capacity change from 0 to 32768 [ 448.781286][ T9430] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.982 (9430) [ 448.829193][ T9430] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 448.839585][ T9430] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 448.849295][ T9430] BTRFS info (device loop0): using free space tree [ 449.019308][ T9430] BTRFS info (device loop0): enabling ssd optimizations [ 449.026350][ T9430] BTRFS info (device loop0): auto enabling async discard [ 449.150862][ T9430] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 449.552772][ T6119] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop0 scanned by udevd (6119) [ 450.236380][ T9465] loop5: detected capacity change from 0 to 64 [ 450.677545][ T9422] loop4: detected capacity change from 0 to 32768 [ 451.328966][ T9422] workqueue: Failed to create a rescuer kthread for wq "gfs2-delete/syz:syz": -EINTR [ 451.473652][ T9477] pim6reg: entered allmulticast mode [ 451.500914][ T9477] pim6reg: left allmulticast mode [ 453.661501][ T7782] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 454.895881][ T9489] syzkaller0: entered promiscuous mode [ 454.912447][ T9489] syzkaller0: entered allmulticast mode [ 458.231508][ T9514] netlink: 'syz.2.998': attribute type 20 has an invalid length. [ 458.345270][ T9518] loop4: detected capacity change from 0 to 2048 [ 458.413393][ T9518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.771629][ T9518] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.230493][ T9527] loop0: detected capacity change from 0 to 64 [ 460.734656][ T9528] loop5: detected capacity change from 0 to 40427 [ 460.762421][ T9528] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 460.770386][ T9528] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 460.814583][ T9528] F2FS-fs (loop5): invalid crc value [ 461.075282][ T8542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.297611][ T9535] loop2: detected capacity change from 0 to 1024 [ 461.602994][ T9535] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 462.059147][ T9528] F2FS-fs (loop5): Found nat_bits in checkpoint [ 462.797545][ T9535] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #3: block 1: comm syz.2.1002: lblock 1 mapped to illegal pblock 1 (length 1) [ 462.845334][ T9528] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 462.854614][ T9528] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 462.861863][ T9535] Quota error (device loop2): write_blk: dquota write failed [ 462.944981][ T9535] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 463.066029][ T9535] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1002: Failed to acquire dquot type 0 [ 463.183759][ T9535] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.1002: Freeing blocks not in datazone - block = 0, count = 4096 [ 463.324283][ T9535] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1002: Invalid inode bitmap blk 0 in block_group 0 [ 463.372739][ T7776] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 463.457246][ T9535] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 463.489687][ T9535] EXT4-fs (loop2): 1 orphan inode deleted [ 463.517467][ T7776] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 463.537686][ T9535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.576365][ T7776] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:19: Failed to release dquot type 0 [ 463.752101][ T6644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.141932][ T3450] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 465.418534][ T9571] loop2: detected capacity change from 0 to 32768 [ 465.470479][ T9571] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1009 (9571) [ 465.486876][ T9571] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 465.497325][ T9571] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 465.506387][ T9571] BTRFS info (device loop2): turning on sync discard [ 465.513138][ T9571] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 465.523197][ T9571] BTRFS info (device loop2): use zstd compression, level 3 [ 465.530518][ T9571] BTRFS info (device loop2): turning on async discard [ 465.537890][ T9571] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 465.549006][ T9571] BTRFS info (device loop2): trying to use backup root at mount time [ 465.558115][ T9571] BTRFS info (device loop2): enabling auto defrag [ 465.564678][ T9571] BTRFS info (device loop2): using free space tree [ 465.650382][ T1024] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 465.727364][ T9571] BTRFS error (device loop2): failed to load root extent [ 465.734539][ T9571] BTRFS warning (device loop2): try to load backup roots slot 1 [ 465.742635][ T1134] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 465.797057][ T9571] BTRFS warning (device loop2): couldn't read tree root [ 465.804100][ T9571] BTRFS warning (device loop2): try to load backup roots slot 2 [ 465.812923][ T9599] loop4: detected capacity change from 0 to 2048 [ 465.817332][ T1134] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 466.067704][ T9571] BTRFS warning (device loop2): couldn't read tree root [ 466.074752][ T9571] BTRFS warning (device loop2): try to load backup roots slot 3 [ 466.115373][ T9599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.186864][ T9571] BTRFS info (device loop2): enabling ssd optimizations [ 466.197108][ T9571] BTRFS info (device loop2): rebuilding free space tree [ 466.223250][ T9571] BTRFS info (device loop2): checking UUID tree [ 466.240851][ T9599] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.502457][ T8542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.818216][ T6644] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 468.172964][ T6119] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (6119) [ 468.238324][ T9628] loop4: detected capacity change from 0 to 64 [ 470.465928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 471.864510][ T9655] loop5: detected capacity change from 0 to 2048 [ 471.888065][ T9657] loop0: detected capacity change from 0 to 4096 [ 471.928165][ T9655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.953897][ T9655] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.249026][ T9665] loop4: detected capacity change from 0 to 64 [ 473.398241][ T8607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.165491][ T9681] pim6reg: entered allmulticast mode [ 474.180256][ T9681] pim6reg: left allmulticast mode [ 475.585921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 479.089835][ T9708] loop0: detected capacity change from 0 to 2048 [ 480.181138][ T9708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.203913][ T9708] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.625185][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.666332][ T9765] loop4: detected capacity change from 0 to 2048 [ 485.025187][ T7782] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 485.505971][ T9765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.575833][ T9765] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.788291][ T8542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.750951][ T9784] smc: net device xfrm0 applied user defined pnetid SYZ0 [ 489.801323][ T9789] binder_alloc: 9788: binder_alloc_buf, no vma [ 491.798390][ T9806] loop5: detected capacity change from 0 to 2048 [ 491.879078][ T9806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.949329][ T9806] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.490969][ T8607] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.209557][ T9830] binder: BINDER_SET_CONTEXT_MGR already set [ 494.246410][ T9830] binder: 9829:9830 ioctl 4018620d 200000004a80 returned -16 [ 496.374008][ T7769] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 496.866679][ T9842] pim6reg: entered allmulticast mode [ 496.882304][ T9842] pim6reg: left allmulticast mode [ 498.402685][ T9847] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 499.972250][ T9855] loop2: detected capacity change from 0 to 2048 [ 499.995811][ T8792] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 500.019050][ T9855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.079330][ T9855] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.187304][ T8792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.888649][ T8792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.899185][ T8792] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 500.912922][ T8792] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 500.923421][ T8792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.938247][ T8792] usb 5-1: config 0 descriptor?? [ 501.501483][ T8792] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 501.514817][ T8792] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 501.522797][ T8792] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 501.530871][ T8792] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 501.541528][ T8792] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 501.551601][ T8792] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 501.708879][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.805171][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.816586][ T8792] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 501.828588][ T8792] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 501.866221][ T6644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.887931][ T8792] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 501.910240][ T8792] usb 5-1: USB disconnect, device number 3 [ 502.483427][ T9873] fido_id[9873]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 504.808625][ T9886] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 504.815239][ T9886] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 504.828302][ T9886] vhci_hcd vhci_hcd.0: Device attached [ 504.841912][ T9886] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 505.595809][ T9890] vhci_hcd: connection closed [ 505.984393][ T9895] pim6reg: entered allmulticast mode [ 506.005468][ T9895] pim6reg: left allmulticast mode [ 507.332998][ T7786] vhci_hcd: stop threads [ 507.354558][ T7786] vhci_hcd: release socket [ 507.410667][ T7786] vhci_hcd: disconnect device [ 507.475794][ T8787] usb 44-1: enqueue for inactive port 0 [ 508.000239][ T8787] usb usb44-port1: attempt power cycle [ 509.042417][ T8787] usb usb44-port1: unable to enumerate USB device [ 510.505761][ T8787] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 510.794156][ T8787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.834492][ T8787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.874620][ T8787] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 511.165909][ T8787] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 511.175017][ T8787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.247935][ T8787] usb 5-1: config 0 descriptor?? [ 512.166521][ T9930] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 512.174596][ T9930] ALSA: mixer_oss: invalid OSS volume 'VOLU2¸=' [ 512.309929][ T9928] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 512.316500][ T9928] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 512.324383][ T9928] vhci_hcd vhci_hcd.0: Device attached [ 512.376337][ T8787] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 512.391772][ T9929] vhci_hcd: connection closed [ 512.409331][ T7786] vhci_hcd: stop threads [ 512.880244][ T8787] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 512.897671][ T7786] vhci_hcd: release socket [ 512.902149][ T7786] vhci_hcd: disconnect device [ 512.934174][ T8787] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 512.991669][ T8787] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 513.314297][ T9936] pim6reg: entered allmulticast mode [ 513.329391][ T9936] pim6reg: left allmulticast mode [ 513.614540][ T8787] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 513.772335][ T8787] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 514.632000][ T8787] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 514.697758][ T48] ------------[ cut here ]------------ [ 514.704733][ T48] WARNING: CPU: 1 PID: 48 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830 [ 514.714590][ T48] Modules linked in: [ 514.718745][ T48] CPU: 1 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 514.726372][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 514.736736][ T48] Workqueue: iou_exit io_ring_exit_work [ 514.742351][ T48] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 514.748474][ T48] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 ff 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 d1 d8 03 f7 e9 b1 fd ff ff e8 c7 d8 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 514.768495][ T48] RSP: 0018:ffffc90000b8fa40 EFLAGS: 00010293 [ 514.774604][ T48] RAX: ffffffff8a830c89 RBX: ffff88805c0ba000 RCX: ffff88801da51e00 [ 514.782751][ T48] RDX: 0000000000000000 RSI: fffffffffffffff8 RDI: 0000000000000000 [ 514.790885][ T48] RBP: ffffc90000b8fbb0 R08: ffffc90000b8f9c7 R09: 1ffff92000171f38 [ 514.798927][ T48] R10: dffffc0000000000 R11: fffff52000171f39 R12: dffffc0000000000 [ 514.807951][ T48] R13: 000000010000530c R14: 0000000100005314 R15: ffff88805c0ba510 [ 514.816497][ T48] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 514.825459][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.832218][ T48] CR2: 000055558a64ea38 CR3: 000000007452d000 CR4: 00000000003506e0 [ 514.840486][ T48] Call Trace: [ 514.843850][ T48] [ 514.846917][ T48] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 514.852893][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.858355][ T48] ? process_scheduled_works+0x975/0x1600 [ 514.864163][ T48] ? process_scheduled_works+0x975/0x1600 [ 514.870266][ T48] process_scheduled_works+0xa60/0x1600 [ 514.875947][ T48] ? worker_attach_to_pool+0x370/0x370 [ 514.881617][ T48] ? assign_work+0x3cc/0x5d0 [ 514.886522][ T48] worker_thread+0xa5e/0xfe0 [ 514.891186][ T48] kthread+0x2fa/0x390 [ 514.895293][ T48] ? pr_cont_work+0x550/0x550 [ 514.900239][ T48] ? kthread_blkcg+0xd0/0xd0 [ 514.904955][ T48] ret_from_fork+0x48/0x80 [ 514.910429][ T48] ? kthread_blkcg+0xd0/0xd0 [ 514.915057][ T48] ret_from_fork_asm+0x11/0x20 [ 514.920109][ T48] [ 514.923154][ T48] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 514.930447][ T48] CPU: 1 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 514.937848][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 514.947923][ T48] Workqueue: iou_exit io_ring_exit_work [ 514.953506][ T48] Call Trace: [ 514.956810][ T48] [ 514.959772][ T48] dump_stack_lvl+0x18c/0x250 [ 514.964529][ T48] ? show_regs_print_info+0x20/0x20 [ 514.969847][ T48] ? load_image+0x420/0x420 [ 514.974421][ T48] panic+0x2ca/0x720 [ 514.978353][ T48] ? bpf_jit_dump+0xd0/0xd0 [ 514.982899][ T48] ? ret_from_fork_asm+0x11/0x20 [ 514.988134][ T48] __warn+0x2e0/0x470 [ 514.992160][ T48] ? io_ring_exit_work+0x3b9/0x830 [ 514.997308][ T48] ? io_ring_exit_work+0x3b9/0x830 [ 515.002452][ T48] report_bug+0x2be/0x4f0 [ 515.006894][ T48] ? io_ring_exit_work+0x3b9/0x830 [ 515.012027][ T48] ? io_ring_exit_work+0x3b9/0x830 [ 515.017148][ T48] ? io_ring_exit_work+0x3bb/0x830 [ 515.022348][ T48] handle_bug+0xcf/0x120 [ 515.026611][ T48] exc_invalid_op+0x1a/0x50 [ 515.031112][ T48] asm_exc_invalid_op+0x1a/0x20 [ 515.036059][ T48] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 515.041780][ T48] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 ff 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 d1 d8 03 f7 e9 b1 fd ff ff e8 c7 d8 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 515.061402][ T48] RSP: 0018:ffffc90000b8fa40 EFLAGS: 00010293 [ 515.067473][ T48] RAX: ffffffff8a830c89 RBX: ffff88805c0ba000 RCX: ffff88801da51e00 [ 515.075441][ T48] RDX: 0000000000000000 RSI: fffffffffffffff8 RDI: 0000000000000000 [ 515.083501][ T48] RBP: ffffc90000b8fbb0 R08: ffffc90000b8f9c7 R09: 1ffff92000171f38 [ 515.091470][ T48] R10: dffffc0000000000 R11: fffff52000171f39 R12: dffffc0000000000 [ 515.099445][ T48] R13: 000000010000530c R14: 0000000100005314 R15: ffff88805c0ba510 [ 515.107419][ T48] ? io_ring_exit_work+0x3b9/0x830 [ 515.112636][ T48] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 515.118469][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.123945][ T48] ? process_scheduled_works+0x975/0x1600 [ 515.129675][ T48] ? process_scheduled_works+0x975/0x1600 [ 515.135402][ T48] process_scheduled_works+0xa60/0x1600 [ 515.141053][ T48] ? worker_attach_to_pool+0x370/0x370 [ 515.146521][ T48] ? assign_work+0x3cc/0x5d0 [ 515.151207][ T48] worker_thread+0xa5e/0xfe0 [ 515.155815][ T48] kthread+0x2fa/0x390 [ 515.159962][ T48] ? pr_cont_work+0x550/0x550 [ 515.164637][ T48] ? kthread_blkcg+0xd0/0xd0 [ 515.169219][ T48] ret_from_fork+0x48/0x80 [ 515.173804][ T48] ? kthread_blkcg+0xd0/0xd0 [ 515.178399][ T48] ret_from_fork_asm+0x11/0x20 [ 515.183174][ T48] [ 515.186476][ T48] Kernel Offset: disabled [ 515.190956][ T48] Rebooting in 86400 seconds..