last executing test programs: 14m40.302163063s ago: executing program 32 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x7c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x80) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_open_procfs(0x0, 0x0) 14m31.007962031s ago: executing program 2 (id=823): openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) 14m31.006633921s ago: executing program 2 (id=826): r0 = syz_usb_connect$uac1(0x3, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 14m28.890881482s ago: executing program 2 (id=830): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8afcdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295cbf30390c4566dba8ff971c6d212f4b", 0x81}], 0x1}}], 0x2, 0x4008) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/213, 0xd5}], 0x1}, 0x42) 14m28.746000204s ago: executing program 2 (id=832): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xc694}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) write$uinput_user_dev(r2, &(0x7f0000001200)={'syz0\x00', {0x8, 0x5, 0x8, 0x4}, 0x40, [0x4, 0x82, 0xc0000000, 0xffff7fff, 0x9, 0x4, 0xa140, 0xca1a, 0x38000000, 0x8, 0x8, 0x200007f, 0x1, 0x6, 0xf, 0x0, 0x339, 0x8, 0x2, 0x8, 0x1ff, 0x9459, 0x8, 0x6, 0x48ee, 0xefa, 0x7, 0xffffffd5, 0x80000001, 0xfffffc01, 0xc, 0xfff, 0x5, 0x8, 0xffffffc0, 0x7fff, 0xfff, 0xfffffff8, 0x3ea, 0xfffffff9, 0x6f20, 0x3, 0x7, 0x0, 0xfffffffe, 0x893c, 0x8, 0x9, 0x6, 0x10000, 0xa, 0x6, 0x7fffffff, 0x6, 0x3, 0x7198, 0x0, 0x1, 0x3c861ad9, 0xfffffffb, 0x80000001, 0x10000, 0x7f, 0x8], [0x2, 0x80000000, 0x0, 0x1, 0x8, 0x2, 0x80, 0x400, 0x3, 0x80000001, 0x7, 0x0, 0x2, 0xfff, 0x10001, 0x79, 0x8, 0x8, 0xcf7, 0x0, 0x5, 0xa4, 0x2, 0x9, 0xa7, 0xfffeffff, 0x5, 0x0, 0x2, 0x9, 0x8, 0x9, 0xe, 0x6, 0x6, 0x9, 0x1, 0x5, 0x0, 0x101, 0x81, 0xffffffff, 0x6, 0x7, 0xec, 0xfffffffa, 0xff, 0xe4, 0xd, 0xffffff00, 0x40, 0xdb9, 0x1000, 0x2, 0x3, 0x802, 0x8, 0x8, 0xf, 0x3, 0x7, 0x7, 0x40, 0xd], [0x3, 0x2, 0x7, 0x4, 0x947e, 0x8, 0x9, 0x400, 0x3, 0x2, 0xc, 0x4, 0x9, 0x1, 0x1, 0x5, 0x1, 0x9, 0x5, 0x3, 0x1, 0x3, 0xd, 0x0, 0x7ff, 0xff, 0x80000000, 0x0, 0x1, 0x200, 0x4, 0x831a, 0x3, 0x196, 0x6, 0x6, 0x6, 0x3, 0x7, 0x7, 0x9, 0x8, 0x101, 0x1, 0x36a397fe, 0x4, 0x6, 0x6, 0x4, 0x800, 0x6, 0x401, 0xd0, 0x10001, 0x9, 0xb8c6, 0x5, 0x6, 0x9, 0x3, 0x7a0c, 0x5, 0x4, 0x6], [0x9a, 0x7c, 0xa, 0x80, 0x0, 0xffffe7bd, 0x1, 0x28b, 0x6, 0x8, 0x1, 0x8, 0x6, 0x0, 0xde5, 0x6, 0x10, 0x6, 0x5, 0x9, 0x2, 0x3, 0x7ff, 0x8, 0x7, 0x5, 0xffffdfa3, 0x6, 0xef, 0x5, 0x5, 0x6, 0x81, 0x9, 0xea83, 0x8, 0x3, 0x7ff, 0x5, 0x1d7c, 0x7, 0xff, 0x8, 0x101, 0x2, 0x9, 0x2, 0x796b10f5, 0x1, 0x5, 0x4, 0x47c164f6, 0x1, 0x1, 0x7f, 0x0, 0xc45, 0x9, 0x80000000, 0x8, 0x3, 0x12, 0x400, 0x1]}, 0x45c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000000080)="74a9c99f857d984e53", 0x9) sendfile(r6, r5, 0x0, 0x3ffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 14m24.029848314s ago: executing program 2 (id=839): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) 14m21.805770617s ago: executing program 2 (id=844): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 14m21.331807614s ago: executing program 33 (id=844): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 14m7.462771969s ago: executing program 0 (id=874): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000640)={[{@lazytime}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@barrier_val}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@dioread_lock}, {@data_err_ignore}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x9b, 0x4fc, &(0x7f0000000140)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b0000000003000500000000000200000000000000000000000000000001001800"], 0x60}, 0x1, 0x7}, 0x0) 14m6.396106595s ago: executing program 1 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007e000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = getpid() r5 = getpid() kcmp(r4, r5, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 14m6.090969939s ago: executing program 0 (id=876): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x725e65a6, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) 14m5.509726938s ago: executing program 0 (id=878): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x40084146, &(0x7f0000000080)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xc40e2, &(0x7f0000000300)=ANY=[@ANYBLOB="6d6f74653d30303030303030303030303030303030303030303030372c7569643d657b10c18ef515502760000a2711fda414d999cc09700c85352c105bcedef0afad9690621d88972b3f18b62078ee5622d725e0272908d9507e2aacf34cafc68a2cf04c0834ee79f08d60905a9ee9861d85b8100bd3", @ANYRESHEX=r5, @ANYBLOB=',\x00']) 14m5.095776624s ago: executing program 1 (id=879): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x26) r1 = socket$inet6(0xa, 0x80002, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x40202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$proc_mixer(r3, &(0x7f0000000840)=ANY=[@ANYBLOB='LINE1 \'Master'], 0x178) dup3(r4, r3, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 14m4.447429973s ago: executing program 0 (id=880): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xc694}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) write$uinput_user_dev(r3, &(0x7f0000001200)={'syz0\x00', {0x8, 0x5, 0x8, 0x4}, 0x40, [0x4, 0x82, 0xc0000000, 0xffff7fff, 0x9, 0x4, 0xa140, 0xca1a, 0x38000000, 0x8, 0x8, 0x200007f, 0x1, 0x6, 0xf, 0x0, 0x339, 0x8, 0x2, 0x8, 0x1ff, 0x9459, 0x8, 0x6, 0x48ee, 0xefa, 0x7, 0xffffffd5, 0x80000001, 0xfffffc01, 0xc, 0xfff, 0x5, 0x8, 0xffffffc0, 0x7fff, 0xfff, 0xfffffff8, 0x3ea, 0xfffffff9, 0x6f20, 0x3, 0x7, 0x0, 0xfffffffe, 0x893c, 0x8, 0x9, 0x6, 0x10000, 0xa, 0x6, 0x7fffffff, 0x6, 0x3, 0x7198, 0x0, 0x1, 0x3c861ad9, 0xfffffffb, 0x80000001, 0x10000, 0x7f, 0x8], [0x2, 0x80000000, 0x0, 0x1, 0x8, 0x2, 0x80, 0x400, 0x3, 0x80000001, 0x7, 0x0, 0x2, 0xfff, 0x10001, 0x79, 0x8, 0x8, 0xcf7, 0x0, 0x5, 0xa4, 0x2, 0x9, 0xa7, 0xfffeffff, 0x5, 0x0, 0x2, 0x9, 0x8, 0x9, 0xe, 0x6, 0x6, 0x9, 0x1, 0x5, 0x0, 0x101, 0x81, 0xffffffff, 0x6, 0x7, 0xec, 0xfffffffa, 0xff, 0xe4, 0xd, 0xffffff00, 0x40, 0xdb9, 0x1000, 0x2, 0x3, 0x802, 0x8, 0x8, 0xf, 0x3, 0x7, 0x7, 0x40, 0xd], [0x3, 0x2, 0x7, 0x4, 0x947e, 0x8, 0x9, 0x400, 0x3, 0x2, 0xc, 0x4, 0x9, 0x1, 0x1, 0x5, 0x1, 0x9, 0x5, 0x3, 0x1, 0x3, 0xd, 0x0, 0x7ff, 0xff, 0x80000000, 0x0, 0x1, 0x200, 0x4, 0x831a, 0x3, 0x196, 0x6, 0x6, 0x6, 0x3, 0x7, 0x7, 0x9, 0x8, 0x101, 0x1, 0x36a397fe, 0x4, 0x6, 0x6, 0x4, 0x800, 0x6, 0x401, 0xd0, 0x10001, 0x9, 0xb8c6, 0x5, 0x6, 0x9, 0x3, 0x7a0c, 0x5, 0x4, 0x6], [0x9a, 0x7c, 0xa, 0x80, 0x0, 0xffffe7bd, 0x1, 0x28b, 0x6, 0x8, 0x1, 0x8, 0x6, 0x0, 0xde5, 0x6, 0x10, 0x6, 0x5, 0x9, 0x2, 0x3, 0x7ff, 0x8, 0x7, 0x5, 0xffffdfa3, 0x6, 0xef, 0x5, 0x5, 0x6, 0x81, 0x9, 0xea83, 0x8, 0x3, 0x7ff, 0x5, 0x1d7c, 0x7, 0xff, 0x8, 0x101, 0x2, 0x9, 0x2, 0x796b10f5, 0x1, 0x5, 0x4, 0x47c164f6, 0x1, 0x1, 0x7f, 0x0, 0xc45, 0x9, 0x80000000, 0x8, 0x3, 0x12, 0x400, 0x1]}, 0x45c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000000080)="74a9c99f857d984e53", 0x9) sendfile(r7, r6, 0x0, 0x3ffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 14m1.437869338s ago: executing program 0 (id=883): syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) socket$xdp(0x2c, 0x3, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) 13m59.458462837s ago: executing program 1 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007e000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = getpid() r5 = getpid() kcmp(r4, r5, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 13m58.387197063s ago: executing program 1 (id=891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xc694}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) write$uinput_user_dev(r4, &(0x7f0000001200)={'syz0\x00', {0x8, 0x5, 0x8, 0x4}, 0x40, [0x4, 0x82, 0xc0000000, 0xffff7fff, 0x9, 0x4, 0xa140, 0xca1a, 0x38000000, 0x8, 0x8, 0x200007f, 0x1, 0x6, 0xf, 0x0, 0x339, 0x8, 0x2, 0x8, 0x1ff, 0x9459, 0x8, 0x6, 0x48ee, 0xefa, 0x7, 0xffffffd5, 0x80000001, 0xfffffc01, 0xc, 0xfff, 0x5, 0x8, 0xffffffc0, 0x7fff, 0xfff, 0xfffffff8, 0x3ea, 0xfffffff9, 0x6f20, 0x3, 0x7, 0x0, 0xfffffffe, 0x893c, 0x8, 0x9, 0x6, 0x10000, 0xa, 0x6, 0x7fffffff, 0x6, 0x3, 0x7198, 0x0, 0x1, 0x3c861ad9, 0xfffffffb, 0x80000001, 0x10000, 0x7f, 0x8], [0x2, 0x80000000, 0x0, 0x1, 0x8, 0x2, 0x80, 0x400, 0x3, 0x80000001, 0x7, 0x0, 0x2, 0xfff, 0x10001, 0x79, 0x8, 0x8, 0xcf7, 0x0, 0x5, 0xa4, 0x2, 0x9, 0xa7, 0xfffeffff, 0x5, 0x0, 0x2, 0x9, 0x8, 0x9, 0xe, 0x6, 0x6, 0x9, 0x1, 0x5, 0x0, 0x101, 0x81, 0xffffffff, 0x6, 0x7, 0xec, 0xfffffffa, 0xff, 0xe4, 0xd, 0xffffff00, 0x40, 0xdb9, 0x1000, 0x2, 0x3, 0x802, 0x8, 0x8, 0xf, 0x3, 0x7, 0x7, 0x40, 0xd], [0x3, 0x2, 0x7, 0x4, 0x947e, 0x8, 0x9, 0x400, 0x3, 0x2, 0xc, 0x4, 0x9, 0x1, 0x1, 0x5, 0x1, 0x9, 0x5, 0x3, 0x1, 0x3, 0xd, 0x0, 0x7ff, 0xff, 0x80000000, 0x0, 0x1, 0x200, 0x4, 0x831a, 0x3, 0x196, 0x6, 0x6, 0x6, 0x3, 0x7, 0x7, 0x9, 0x8, 0x101, 0x1, 0x36a397fe, 0x4, 0x6, 0x6, 0x4, 0x800, 0x6, 0x401, 0xd0, 0x10001, 0x9, 0xb8c6, 0x5, 0x6, 0x9, 0x3, 0x7a0c, 0x5, 0x4, 0x6], [0x9a, 0x7c, 0xa, 0x80, 0x0, 0xffffe7bd, 0x1, 0x28b, 0x6, 0x8, 0x1, 0x8, 0x6, 0x0, 0xde5, 0x6, 0x10, 0x6, 0x5, 0x9, 0x2, 0x3, 0x7ff, 0x8, 0x7, 0x5, 0xffffdfa3, 0x6, 0xef, 0x5, 0x5, 0x6, 0x81, 0x9, 0xea83, 0x8, 0x3, 0x7ff, 0x5, 0x1d7c, 0x7, 0xff, 0x8, 0x101, 0x2, 0x9, 0x2, 0x796b10f5, 0x1, 0x5, 0x4, 0x47c164f6, 0x1, 0x1, 0x7f, 0x0, 0xc45, 0x9, 0x80000000, 0x8, 0x3, 0x12, 0x400, 0x1]}, 0x45c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000000080)="74a9c99f857d984e53", 0x9) sendfile(r8, r7, 0x0, 0x3ffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 13m57.784187762s ago: executing program 0 (id=892): syz_mount_image$ext4(&(0x7f0000000a40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000430, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4f8, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) munmap(&(0x7f0000b1f000/0x3000)=nil, 0x3000) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x401}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 13m57.094233202s ago: executing program 34 (id=892): syz_mount_image$ext4(&(0x7f0000000a40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000430, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4f8, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) munmap(&(0x7f0000b1f000/0x3000)=nil, 0x3000) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x401}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 13m55.293744879s ago: executing program 1 (id=898): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f00), 0x0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7, 0x3a, '\\\x05\x00\x00\x00ller\x00', 0x3a, 'Sy\x00[\xea\xe1lq\x00\x00\x00\x002#', 0x3a, './file0', 0x3a, [0x43]}, 0x40) 13m50.592521838s ago: executing program 1 (id=905): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_submit(r1, 0x1, &(0x7f0000000080)=[0x0]) 13m49.865175949s ago: executing program 35 (id=905): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_submit(r1, 0x1, &(0x7f0000000080)=[0x0]) 10m56.276518114s ago: executing program 8 (id=1349): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x4, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0086c43, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x40, 0x0) 10m54.814324356s ago: executing program 8 (id=1352): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x90, @loopback}], 0x48) 10m54.564204029s ago: executing program 8 (id=1354): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200400, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$eJzs3U2MG1cBAOA33vUmm6TEKQldktAm/LTlp7vNZgk/ETRVcyFqKm6VKi5RmpaINCBSCVpVIsmJG62qcIUiTuVQAUJqLyjqiUslGolLT4UDB6IgVeIAhcRove95xy92x/uTtb3+Punt85s39nszOzMez8x7LwBjq9b6u7AwU4Rw5a1Xj//j/r9PL055pD1Ho/V3spSqhxCKmJ7MPu/9iaX45gcvne4WF2G+9TelwxM32u/dHkK4GA6Eq6ER9l659so784+fvHTi8sF3Xz96/c4sPQAAjJdvXz26sOevf96368M37j0WtrSnp/PzRkzviOf9x+KJfzr/r4XOdFEKZVPZfJMx1LL5JrrMVy6nns032aP8qexz6+38fR3zbakof6I0rdtywyhL23EjFLXZjnStNju79Js8tH7XTxWz58+ee+bCgCoKrLt/3RdCOCCsNDSbzZ+0VuAQ1EUQVhuaOwd9BAJYkt8vvM3F/MrC2rQ/bbK/8m88Wuv+flgHG739K3+0yv/1JUcc1s9m3ZrScqX9aEdM5/cR8ueXVrr/p8/L70fU+6xnr/sIo3J/oVc9Jza4HqvVq/75drFZfSPGaT18M8sv7z/5/3RU/sdAd//eqOv/r00P/FrnYjgwBHXY1KE+BHUQ+g7NQR+AgKG1/NzckmaU8vPn+vL8LRX5Wyvypyvyt1Xkb6/Ih3H2++d/Fl4uln/n57/pV3o9LF1nuyvGH1thffLrkSstP3/ud6XWWn7+PDEMszdPPXnmq08/dW3p+f+ivf3fitv7gZhuxH3rapwhXS/Mr6u3n/1vdJZT6zHf3Vl97rpt/uZSibs75yt2L39OKB1nbqvHTOf7dvaab3/nfI1svukYtmb1zc9PtmXvS+cf6bia1tdktrz1bDmmsnqk48quGOf1gNVI22Ov5//T9jkT6sUzZ8+deTim03b6p4n6lsXph8of+puNqTuwNv22/5kJne1/drSn12vl48LO5elF+bjQyKbPLyXbt8nT9MMxnb7nvjsx3Zo+e/r7555e74WHMXfhhRe/d+rcuTM/9CK9mLZavPCi6sixWZ8chPEx9/xzP5i78MKLD5197tSzZ549c/7wkSOH5+ePfO3wwlzrvH6ufHYPbCbLX/qDrgkAAAAAAAAAAADQrx+dOH7tL29/5b2l9v/L7f9S+//05G9q///TrP1/3k4+tQpI7QB3dclvjbv3Zmc9prL56jF8PKvv7qycPdn7PhHj9jh+sf1/am+f9+ua6nNPNj3vvzfNl3UncFt/KVNZHyTt8QJjg/1Px/TlGP8qwAAV090nx7iqf+u0raf+KfRLMZrS/y1tDakfk9T+u1e/Tun4v2sD6sj624jmhINeRqC7fw79+J+lM/GB1+UjQ7M5+DqsPQz/ehbWMTSbRvEAhsOgx/9M1z1TfP6P39q6GNJsNx7tPF7m/ZfCWgz7+JPK31zjf7bHv+vr+Neld/WOfp77H13hP7+4/l6p2LC33+NvvvypH+jd1WWWfRjLT8v/QOiv/OZrWfn5DaE+/Tcrf1uf5d+2/PtXV/7/YvlptT34mX7LX6pxUeusR37dON3/y68bJzez5U99e654+Vc5UOOtWD6Ms97jzPY7gu1wGpXxf3vJn8P4ckynA2F6ziH/Rl5p/dPzFel7YE/2+UXF99uojFPcy7iP//v1GFftD2n837Q9Nrqka6V0vcu6HfVtBTab94f+/t+IhYtDUAdhSMNwjIFdDs1mc6AdeetFfLAGvf4Hffd50OUPev1Xycf/zc/h8/F/a9kPiHz83/z9+fi/eX4+vl6en4//m6/PfPzfPP+e7HPzK9gzFfmfrMjfW5G/bzl/ulv+/or3f6oi/2BF/r0V+fdV5N9dkT9Rkf/ZivzPVeTfX5H/YEX+5yvyN7tWe5TSTjVuyw/jLG+fZ/+H8ZHu//Ta/3dX5AOj6+dvHHrsqd99p7HU/n+q/Xst3cc7FtP1+Nv5xzGd3/cOpfRi3tsx/bcsf9ivd8A4yfvPyL/fH6jIB0ZXes7L/g1jqOjeY09+v61Xv1W9zvMZLV+I8Rdj/KUYPxTj2RjPxfhQjOc3qH7cGY/99g9HXy6Wf+/vzPL7fZ48bw+U9xN1uM/65NcHVvo8e96P30qttfxVNgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYmFrr78LCTBHClbdePf7kybNzi1Meac/RaP2dLKXq7feF8HCMJ2L8y/ji5gcvnS7Ht2JchPlQhKI9PTxxo13S9hDCxXAgXA2NsPfKtVfemX/85KUTlw+++/rR63duDQAAAMDm9/8AAAD//6ZSGwg=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @generic={0x66, 0x8, 0x0, 0x0, 0x1000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20}, @exit, @printk={@x, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioperm(0x3ff, 0xfffffffffffffffc, 0x10000000000001) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x6, 0x10, 0x1, 0x10, 0xfd}, 0x13) 10m52.751472346s ago: executing program 8 (id=1357): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 10m51.294333748s ago: executing program 8 (id=1363): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000004c0)={0x40, 0x17, 0x7, "9899f082f5b1a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m48.860253964s ago: executing program 8 (id=1370): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x5, &(0x7f0000000240)=0x0) io_submit(r0, 0x0, 0x0) 10m47.75816484s ago: executing program 36 (id=1370): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x5, &(0x7f0000000240)=0x0) io_submit(r0, 0x0, 0x0) 5m4.56522467s ago: executing program 6 (id=2275): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x634, &(0x7f0000000480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 5m2.904450514s ago: executing program 6 (id=2277): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000b40)={'#! ', '', [{0x20, '\xfd\xff\xaa.\xf6\x9a\xbdO\xf7\b\x8dn>\x1cKU\x85\r\x93lM\x01&\xd6\x03\xf6\xfb\xddWY\x96N\t\xd6\x8e+\x1aa\a\xda\xa9*\xaf3\x02&\x8c\xe0%\xe9\x90\xb8k\xdb\xd6:\x02v\x8f\x9f\xaa\xf9\xa6&\xfc\xc4v\xc3\xc7x;\x88\xf4)L+\b\x0ff\xff\xff\xff\xff\xff\xff\xff\x7fT\x83\xf6(\xa4\x93\xachj\xc8*\xc2\x00\x1d\xc6\xd8\xd0\x89\x9bF&\xd2.\xaa\xfd\x16_\xe2\x1f\a\x18\xae\t\x8eDhh\xdfi\xfc\x16\x83\xe3\xbb=\xbf\xa3\xcb\x87\x16\x8a\xbf\x1f\xea\x9c\xb0\x1ad\xb5\x85\x85}\x0f_\xba-n\x87\x7f\xff\xab6\xc6\xac\xeeD\x14%x\xa34\x1dTU\xa9\xfb\xd0T\xb0\xc6\xebm\xbe!>I\x1f9\x9eX%U{!\xbc\xf6\xb6\x9a\x10\xfdXho\x87h\x18\xea\x8bQ\xc1WY(\xf3~\x0e5\x93h\x1a:^n\xe5\xe4\xa9\xc9\x91a\t\x80\xae\xa1\xea_7\xa1\x00gY\xd7GP\xe8\xed\x8f\xb7\xcbSA\x8aO \xaf{\xe4|\"\x8c\x9c\xa0\x92\xf0]+\x1b\xfd\xe2\xdb\x18\xd07bz\f\xf2-\xbc\xd4\x04\xf7\xe4\x1a\xbb\x10hq\xcf*\xb3e\xa076\n\xcd\x10\xd3\xc4\xd9k\xa2\xda\x8bT\x1d\xf5w\x03\x99\xc4N\xb8\xd3\x11\xeb\'3\xe4\xe0\x95%\xf3\xa1H\x8c\xd0\x198\xdfb\riy\x95vZ\xa1\xe5\x89\xb6&\x1e\xf9\x06\x1a=\x81\xc3\"\xf2\xf7.\xc0\xdbH\x02\xe6\xf9\xc6~\xc0\xbb\xe9H\xf8!\x83J\xa0\xe5\xe7\xc3|R\xd1.\x18\x9f\xeb\xb3\xf3\xfbU~\x9d\xc9\xf3\x15)\xd0Te\x0fc\v/A\x05-\x0f\xd6tO\xba\xe3\xf7\xf6j!\xa24\nm\x8as\xba\xf8\xde \xb5\xa7\x95\xa1\x1f\xd7\x7f\x8f\xd8#\n\xa9\xc6c\xe4\xd7%\xfb\xb6\xd7\xc1\xdc\xf9]\xa4\xa9@\'\x9cJ\xa2\xcf\xbfj\xee\xe3aY!\xc22\x17\xbc\xee\x9f\"(\xf0\x01\x98\x11\x05^h\xefv\xd2\xc0DW\xf1()\xff'}, {}]}, 0x1e7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x70}}, 0x0) close(r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) fspick(r0, 0x0, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=@getchain={0x2c, 0x66, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe8}, {0xa, 0x7}, {0x7}}, [{0x8, 0xb, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000044}, 0x40) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)="cca02c98403767483463566bca672e9cb026ab8722e913a109b2b33071968cbb730a19eae62dd0f3b36372136fdc14551028bb2f9f9d0f3ff924e2c6590261876a7e1a69ac774779f3b416f11d20999ca0e4b9c1543732f99ce1b0c4688592eef985e3f086c302192d6a62df0e9b1b58f74b8b0c006f67434e6304a547dce855f20bc50d938dc5dcf49a9363e0e0c6dbd991b399be8603bd40851ed808580da1211605d22bb17169a2da1be01e00000000000000000000000000000000000000000045a85656b53d", 0xc8}, {&(0x7f00000006c0)="9e5139ba6f09278b6d148376c3e54c668c07be7b435b67a4ecbff6d40359063bf69bfff351f9ca467035476b8aa460537f9780cb549bc32a0f74ac94a30aa2540318c7cf68305c55c54ab385d031869f1628a1691f36cfa38d49770780a320", 0x5f}], 0x2}, 0x40c4) r5 = accept(r2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 5m1.114785329s ago: executing program 6 (id=2282): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m0.924261772s ago: executing program 6 (id=2283): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x10, 0x4, 0xc, 0xfffffffe, 0x0, 0x1, 0x1, '\x00', r1, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x20, 0x600) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x80000, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x10, 0xffffffffffffffff, 0xb091f000) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, 0x0, 0x84) 5m0.382165049s ago: executing program 6 (id=2286): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) syz_emit_ethernet(0x11e, &(0x7f0000000c40)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @icmp={{0x19, 0x4, 0x1, 0x1, 0x110, 0x66, 0x0, 0x7, 0x1, 0x0, @loopback, @rand_addr=0x64010101, {[@lsrr={0x83, 0xb, 0xbb, [@private=0xa010100, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x5c, 0x3, 0x5, [{@loopback, 0x3}, {@local, 0x7}, {@empty}, {@loopback, 0x4}, {@multicast1, 0x3e3b9646}, {@multicast1, 0x5}, {@empty, 0xe}]}, @rr={0x7, 0x7, 0x52, [@loopback]}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0xfa, 0x0, {0x27, 0x4, 0x3, 0x4, 0x9, 0x65, 0x100, 0x10, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, {[@generic={0x83, 0x3, "98"}, @end, @lsrr={0x83, 0x7, 0x40, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x5e, 0xffffffffffffffff, [{0x7, 0x12, "83b84c3affa3055c95733a476d6b0981"}, {0x2, 0x2}, {0x2, 0x6, "bce00dca"}, {0x2, 0x11, "15d6df31c5c4c04b0e0f0ac24d7709"}, {0x5, 0x2}, {0x2, 0xe, "72c24e8c51a6f55a53ebf003"}, {0x5, 0xb, "030ef83e2634022068"}, {0x0, 0x12, "d6f5d1e3f23b5ccc172da601290cf4cf"}]}, @rr={0x7, 0x7, 0x10, [@local]}, @lsrr={0x83, 0xf, 0xf9, [@loopback, @dev={0xac, 0x14, 0x14, 0x23}, @loopback]}, @generic={0x94, 0x2}]}}, "16a7bc83daf7f8ff"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)) getgroups(0x4, &(0x7f0000000840)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee01]) 4m59.489783252s ago: executing program 6 (id=2288): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) eventfd2(0x9, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="9ecec648a9e28ac4b28485f9e58b27254396b5bd87725b537207c8b41a95843819edf69b46938926ad85f3a0cfc6c03a64d5d93276b22032"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8], 0x3c}}, 0x0) 4m58.689974523s ago: executing program 37 (id=2288): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) eventfd2(0x9, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="9ecec648a9e28ac4b28485f9e58b27254396b5bd87725b537207c8b41a95843819edf69b46938926ad85f3a0cfc6c03a64d5d93276b22032"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8], 0x3c}}, 0x0) 10.053793298s ago: executing program 3 (id=3009): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x41) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x400, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 9.493774806s ago: executing program 3 (id=3013): bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 9.004377763s ago: executing program 4 (id=3014): pipe2$9p(&(0x7f0000001940), 0x800) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) 8.781599556s ago: executing program 5 (id=3016): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES16=r1, @ANYBLOB="e8ac5bcdebf412ddd74920a1483f07cded9a1cb6a0c854a4cec4c52ed224f1085e15bbd2e54035b847f96847525f961d41b62d064a5228e6a73a19729afc5257a8d7fb94398b7d18159bf6181968615058922818da0d76ab441633ccc3be9f5c273ae01b7bc79522cc14fab787ba14cb03e4a472227b82bba59d82aa00b29e89dfd7022498cc97b0d4d38fb40619521457419843c142c0cd159c16d3cb6db1c01dcc23e820a03ff7ba0389ec431f676333aae3c0a6d100cc4f842bccf189b5838f64c52b1f0587e0bf1bbf3e1c1ee3c98e9db93637274b25", @ANYRES8=r1, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x5, 0x7f) openat$ptmx(0xffffffffffffff9c, 0x0, 0x446000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x89) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="f8", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff63, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 8.640762478s ago: executing program 3 (id=3018): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c50f80b0000000"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)={0x10000000}) 7.394156946s ago: executing program 5 (id=3019): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0xb8}}, 0x0) 7.220370148s ago: executing program 9 (id=3021): ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) unshare(0x26020480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, 0x20000, 0x0, 0x4000007, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x2000, {0x1, 0x0, 0x0, 0x0, 0x5}}}}]}, 0x78}}, 0x4080) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 7.037846931s ago: executing program 5 (id=3022): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.073811465s ago: executing program 5 (id=3023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000340), 0x14) 6.001864406s ago: executing program 4 (id=3024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x59}]}, 0x34}}, 0x0) 5.241607136s ago: executing program 7 (id=3025): r0 = socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000280), 0x1, 0x102) write$P9_RREMOVE(r5, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = dup(r7) connect$bt_rfcomm(r8, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0xc, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0x487, 0x2, 0x0, 0xfffffff9}}, {0x4}}]}]}, 0x68}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x6, 0x8000, 0xffffffffffffffff, 0x0}]) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) 4.093581722s ago: executing program 9 (id=3026): r0 = syz_open_dev$video(0x0, 0x9, 0x40400) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) read(r0, 0x0, 0x0) 4.025339793s ago: executing program 4 (id=3027): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) llistxattr(&(0x7f00000018c0)='./file0\x00', 0x0, 0x0) 3.794407357s ago: executing program 7 (id=3028): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) 3.793936017s ago: executing program 3 (id=3029): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES16=r1, @ANYBLOB="e8ac5bcdebf412ddd74920a1483f07cded9a1cb6a0c854a4cec4c52ed224f1085e15bbd2e54035b847f96847525f961d41b62d064a5228e6a73a19729afc5257a8d7fb94398b7d18159bf6181968615058922818da0d76ab441633ccc3be9f5c273ae01b7bc79522cc14fab787ba14cb03e4a472227b82bba59d82aa00b29e89dfd7022498cc97b0d4d38fb40619521457419843c142c0cd159c16d3cb6db1c01dcc23e820a03ff7ba0389ec431f676333aae3c0a6d100cc4f842bccf189b5838f64c52b1f0587e0bf1bbf3e1c1ee3c98e9db93637274b25", @ANYRES8=r1, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x5, 0x7f) openat$ptmx(0xffffffffffffff9c, 0x0, 0x446000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x89) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="f8", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff63, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 3.52419272s ago: executing program 7 (id=3030): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00') 3.508491701s ago: executing program 9 (id=3031): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setaffinity(r0, 0x8, &(0x7f0000000000)) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, 0x3}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) epoll_create1(0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x521) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) 3.505361321s ago: executing program 4 (id=3032): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, 0x0, 0x0, 0x5412, 0x8000000, 0x0) 2.399565427s ago: executing program 9 (id=3033): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.301818908s ago: executing program 7 (id=3034): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 2.228807439s ago: executing program 5 (id=3035): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000280)={@ptr={0x73622a85, 0x0, 0x0, 0x0, 0x0, 0x80000000004}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.218570369s ago: executing program 3 (id=3036): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x86, &(0x7f0000000bc0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "020810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb807f04442be993894b35a336eeca6f"}}}}}}}, 0x0) 2.12373288s ago: executing program 9 (id=3037): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000bc0)={0x2, 0x0, [{0x40000001, 0x400, 0x7f, 0x8, 0x8}, {0xd, 0x5, 0x2, 0x4, 0x8}]}) 2.065820821s ago: executing program 4 (id=3038): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x0, 0x0, 0x9, 0x1, 0x457, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) 1.237345803s ago: executing program 7 (id=3039): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) 1.237137453s ago: executing program 3 (id=3040): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c50f80b0000000"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)={0x10000000}) 1.194476464s ago: executing program 5 (id=3041): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00') getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 885.670738ms ago: executing program 4 (id=3042): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) llistxattr(&(0x7f00000018c0)='./file0\x00', 0x0, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 530.684293ms ago: executing program 9 (id=3043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) syz_emit_ethernet(0x32e, &(0x7f0000002640)=ANY=[@ANYBLOB="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"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setresuid(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="380100001a00010000f70000fddbdf25fc02580000f4ffffffffffffff0000000000000000000000000000000000000040080006000300030000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003300000000000000000000000000ffffe0000002fffffffffffffffffdffffffffffffff000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00010000000000000000004800010073686132353600"/237], 0x138}}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) unshare(0x22020600) move_mount(0xffffffffffffff9c, 0x0, r6, 0x0, 0x256) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xce, 0x29, 0x1, {0x7fff, [{{0x2, 0x3}, 0x6, 0x10, 0x7, './file1'}, {{0x0, 0x2, 0x5}, 0x810, 0x4, 0x10, './file0/../file1'}, {{0x10, 0x3}, 0x1, 0x7, 0x7, './file1'}, {{0x2, 0x4, 0x1}, 0x5, 0x10, 0x7, './file0'}, {{0x40, 0x0, 0x2}, 0x80000000, 0x1, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x1, 0x96, 0x7, './file1'}]}}, 0xce) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 0s ago: executing program 7 (id=3044): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000b40)={'#! ', '', [{0x20, '\xfd\xff\xaa.\xf6\x9a\xbdO\xf7\b\x8dn>\x1cKU\x85\r\x93lM\x01&\xd6\x03\xf6\xfb\xddWY\x96N\t\xd6\x8e+\x1aa\a\xda\xa9*\xaf3\x02&\x8c\xe0%\xe9\x90\xb8k\xdb\xd6:\x02v\x8f\x9f\xaa\xf9\xa6&\xfc\xc4v\xc3\xc7x;\x88\xf4)L+\b\x0ff\xff\xff\xff\xff\xff\xff\xff\x7fT\x83\xf6(\xa4\x93\xachj\xc8*\xc2\x00\x1d\xc6\xd8\xd0\x89\x9bF&\xd2.\xaa\xfd\x16_\xe2\x1f\a\x18\xae\t\x8eDhh\xdfi\xfc\x16\x83\xe3\xbb=\xbf\xa3\xcb\x87\x16\x8a\xbf\x1f\xea\x9c\xb0\x1ad\xb5\x85\x85}\x0f_\xba-n\x87\x7f\xff\xab6\xc6\xac\xeeD\x14%x\xa34\x1dTU\xa9\xfb\xd0T\xb0\xc6\xebm\xbe!>I\x1f9\x9eX%U{!\xbc\xf6\xb6\x9a\x10\xfdXho\x87h\x18\xea\x8bQ\xc1WY(\xf3~\x0e5\x93h\x1a:^n\xe5\xe4\xa9\xc9\x91a\t\x80\xae\xa1\xea_7\xa1\x00gY\xd7GP\xe8\xed\x8f\xb7\xcbSA\x8aO \xaf{\xe4|\"\x8c\x9c\xa0\x92\xf0]+\x1b\xfd\xe2\xdb\x18\xd07bz\f\xf2-\xbc\xd4\x04\xf7\xe4\x1a\xbb\x10hq\xcf*\xb3e\xa076\n\xcd\x10\xd3\xc4\xd9k\xa2\xda\x8bT\x1d\xf5w\x03\x99\xc4N\xb8\xd3\x11\xeb\'3\xe4\xe0\x95%\xf3\xa1H\x8c\xd0\x198\xdfb\riy\x95vZ\xa1\xe5\x89\xb6&\x1e\xf9\x06\x1a=\x81\xc3\"\xf2\xf7.\xc0\xdbH\x02\xe6\xf9\xc6~\xc0\xbb\xe9H\xf8!\x83J\xa0\xe5\xe7\xc3|R\xd1.\x18\x9f\xeb\xb3\xf3\xfbU~\x9d\xc9\xf3\x15)\xd0Te\x0fc\v/A\x05-\x0f\xd6tO\xba\xe3\xf7\xf6j!\xa24\nm\x8as\xba\xf8\xde \xb5\xa7\x95\xa1\x1f\xd7\x7f\x8f\xd8#\n\xa9\xc6c\xe4\xd7%\xfb\xb6\xd7\xc1\xdc\xf9]\xa4\xa9@\'\x9cJ\xa2\xcf\xbfj\xee\xe3aY!\xc22\x17\xbc\xee\x9f\"(\xf0\x01\x98\x11\x05^h\xefv\xd2\xc0DW\xf1()\xff'}, {}]}, 0x1e7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x70}}, 0x0) close(r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) fspick(r0, 0x0, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x44000044}, 0x40) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)="cca02c98403767483463566bca672e9cb026ab8722e913a109b2b33071968cbb730a19eae62dd0f3b36372136fdc14551028bb2f9f9d0f3ff924e2c6590261876a7e1a69ac774779f3b416f11d20999ca0e4b9c1543732f99ce1b0c4688592eef985e3f086c302192d6a62df0e9b1b58f74b8b0c006f67434e6304a547dce855f20bc50d938dc5dcf49a9363e0e0c6dbd991b399be8603bd40851ed808580da1211605d22bb17169a2da1be01e00000000000000000000000000000000000000000045a85656b53d", 0xc8}, {&(0x7f00000006c0)="9e5139ba6f09278b6d148376c3e54c668c07be7b435b67a4ecbff6d40359063bf69bfff351f9ca467035476b8aa460537f9780cb549bc32a0f74ac94a30aa2540318c7cf68305c55c54ab385d031869f1628a1691f36cfa38d49770780a320", 0x5f}], 0x2}, 0x40c4) r5 = accept(r2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) kernel console output (not intermixed with test programs): : comm syz.7.1856: Failed to acquire dquot type 0 [ 824.301207][T11772] EXT4-fs (loop7): 1 truncate cleaned up [ 824.355571][T11772] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 824.774163][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.203920][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 825.500370][T11791] loop7: detected capacity change from 0 to 16 [ 825.507120][T11791] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 825.514544][T11791] cramfs: bad root offset 8388684 [ 825.558201][ T8459] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 827.725002][T11787] loop9: detected capacity change from 0 to 32768 [ 827.869435][T11787] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 scanned by syz.9.1857 (11787) [ 828.895203][T11787] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 828.951604][T11787] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 828.960693][T11787] BTRFS info (device loop9): enabling auto defrag [ 828.967548][T11787] BTRFS info (device loop9): doing ref verification [ 828.974341][T11787] BTRFS info (device loop9): use no compression [ 828.981072][T11787] BTRFS info (device loop9): force clearing of disk cache [ 828.997486][T11787] BTRFS info (device loop9): setting nodatacow, compression disabled [ 829.012782][T11787] BTRFS info (device loop9): disabling free space tree [ 829.168382][T11834] netlink: 'syz.7.1863': attribute type 1 has an invalid length. [ 829.247650][ T4529] kworker/dying (4529) used greatest stack depth: 20320 bytes left [ 829.261321][ T4714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.270121][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.894464][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.907661][ T4528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.543506][ T4528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.552477][T11787] BTRFS error (device loop9): open_ctree failed: -12 [ 830.913756][T11866] loop6: detected capacity change from 0 to 512 [ 830.956140][T11864] loop9: detected capacity change from 0 to 1024 [ 830.975576][T11866] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 831.242590][T11866] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 831.317638][T11866] Quota error (device loop6): write_blk: dquota write failed [ 831.325287][T11866] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 831.385427][T11866] EXT4-fs error (device loop6): ext4_acquire_dquot:6814: comm syz.6.1869: Failed to acquire dquot type 0 [ 831.416894][T11879] loop7: detected capacity change from 0 to 16 [ 831.423741][T11879] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 831.437811][T11879] cramfs: bad root offset 8388684 [ 831.515328][T11866] EXT4-fs (loop6): 1 truncate cleaned up [ 831.579936][T11866] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 832.808550][ T7388] EXT4-fs (loop6): unmounting filesystem. [ 832.961280][T11894] netlink: 'syz.7.1875': attribute type 1 has an invalid length. [ 833.729364][ T4483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.117842][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.125998][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.648920][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.657103][ T4873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.728005][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.798890][T11928] loop5: detected capacity change from 0 to 16 [ 835.805921][T11928] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 835.909064][T11928] cramfs: bad root offset 8388684 [ 836.546899][T11935] loop9: detected capacity change from 0 to 512 [ 837.001189][T11935] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 837.044755][T11935] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 837.369816][ T9724] EXT4-fs (loop9): unmounting filesystem. [ 837.388766][T11951] netlink: 'syz.5.1890': attribute type 1 has an invalid length. [ 838.039025][T11956] loop9: detected capacity change from 0 to 1024 [ 838.097350][ T8459] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 838.129389][T11952] bond1: (slave gretap1): making interface the new active one [ 838.163260][T11952] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 839.488409][ T4873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.096404][T11979] loop5: detected capacity change from 0 to 2048 [ 840.712712][T11979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 840.768092][ T4873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.202274][T11989] overlayfs: missing 'lowerdir' [ 841.324439][T11992] loop9: detected capacity change from 0 to 16 [ 841.334385][T11992] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 841.343428][T11992] cramfs: bad root offset 8388684 [ 841.410402][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.421633][ T4483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.430145][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.535715][ T4714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.613267][ T4714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.775221][T12029] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 844.786887][T12029] ubi: mtd0 is already attached to ubi31 [ 845.775590][T12055] fuse: Unknown parameter '0x0000000000000004' [ 846.532568][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.544569][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.189354][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.230575][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.727963][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.848546][T12096] loop7: detected capacity change from 0 to 512 [ 849.900515][T12096] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 849.985868][T12096] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 850.092191][T12096] Quota error (device loop7): write_blk: dquota write failed [ 850.143103][T12096] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 850.217361][T12096] EXT4-fs error (device loop7): ext4_acquire_dquot:6814: comm syz.7.1925: Failed to acquire dquot type 0 [ 850.364323][T12096] EXT4-fs (loop7): 1 truncate cleaned up [ 850.377352][ T4304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.489472][T12096] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 851.819861][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 852.208993][ T4528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.436013][ T4528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.552297][T12127] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 852.713572][T12135] netlink: 'syz.7.1931': attribute type 1 has an invalid length. [ 852.905708][T12138] 8021q: adding VLAN 0 to HW filter on device bond4 [ 852.927844][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.937984][T12138] bond3: (slave bond4): making interface the new active one [ 852.978011][T12138] bond3: (slave bond4): Enslaving as an active interface with an up link [ 853.879174][T12153] loop6: detected capacity change from 0 to 128 [ 854.059021][T12153] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 854.097507][T12153] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 854.107459][T12160] loop7: detected capacity change from 0 to 512 [ 854.115977][T12160] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 854.194553][T12160] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 854.353661][T12160] Quota error (device loop7): write_blk: dquota write failed [ 854.361336][T12160] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 854.371282][T12160] EXT4-fs error (device loop7): ext4_acquire_dquot:6814: comm syz.7.1941: Failed to acquire dquot type 0 [ 854.414577][T12160] EXT4-fs (loop7): 1 truncate cleaned up [ 854.447352][T12160] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 855.121150][ T7388] EXT4-fs (loop6): unmounting filesystem. [ 855.492149][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.142143][ T4338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.339155][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 856.595189][T12186] loop6: detected capacity change from 0 to 4096 [ 856.673702][T12195] loop9: detected capacity change from 0 to 1024 [ 857.129632][T12202] netlink: 'syz.7.1951': attribute type 1 has an invalid length. [ 857.379547][T12207] 8021q: adding VLAN 0 to HW filter on device bond6 [ 857.429189][T12207] bond5: (slave bond6): making interface the new active one [ 857.437009][T12207] bond5: (slave bond6): Enslaving as an active interface with an up link [ 858.058852][ T4873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.072837][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.547658][T12222] netlink: 'syz.7.1955': attribute type 1 has an invalid length. [ 858.708054][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.063542][T12231] fuse: Bad value for 'fd' [ 859.913272][T12238] loop5: detected capacity change from 0 to 16 [ 859.924721][T12238] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 859.942169][T12238] cramfs: bad root offset 8388684 [ 860.530746][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.035274][T12255] overlayfs: failed to clone upperpath [ 861.295145][T12253] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 861.304048][T12253] ubi: mtd0 is already attached to ubi31 [ 861.976443][ T8202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.919671][T12276] loop7: detected capacity change from 0 to 128 [ 863.135843][T12276] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 863.206050][T12276] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 864.018147][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.029138][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.447736][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.485649][T12288] loop5: detected capacity change from 0 to 1024 [ 864.509238][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 865.736087][ T8202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.553104][ T4714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.006046][T12311] overlayfs: failed to clone upperpath [ 867.210496][T12315] loop9: detected capacity change from 0 to 1024 [ 867.662107][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.978136][T12338] fuse: Bad value for 'fd' [ 869.008199][ T8223] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 869.268295][ T8223] usb 7-1: config 0 has no interfaces? [ 869.298663][ T8223] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 869.537481][ T8223] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.569770][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.608614][ T8223] usb 7-1: config 0 descriptor?? [ 869.833593][ T8223] usb 7-1: USB disconnect, device number 10 [ 870.208186][ T4714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.216918][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.947673][T12359] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 870.957371][T12359] ubi: mtd0 is already attached to ubi31 [ 871.624349][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.749381][T12365] loop5: detected capacity change from 0 to 16 [ 871.759173][T12365] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 871.780008][T12365] cramfs: bad root offset 8388684 [ 872.226543][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'. [ 872.777960][ T8202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.879035][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.092462][T12362] loop7: detected capacity change from 0 to 32768 [ 873.136438][T12383] overlayfs: failed to clone upperpath [ 873.517580][T12362] XFS (loop7): Mounting V5 Filesystem [ 873.583171][T12362] XFS (loop7): Ending clean mount [ 873.734876][T12362] syz.7.1990 (12362) used greatest stack depth: 20288 bytes left [ 873.768279][ T7617] XFS (loop7): Unmounting Filesystem [ 875.334881][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.344609][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.887413][T11273] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 875.946291][T12426] loop9: detected capacity change from 0 to 16 [ 875.956791][T12426] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 875.966046][T12426] cramfs: bad root offset 8388684 [ 875.969842][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.970242][ T4304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.289174][T11273] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 876.764233][T11273] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 876.774340][T11273] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 876.783606][T11273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.802680][T12415] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 877.058226][T11273] usb 6-1: USB disconnect, device number 10 [ 877.248148][ T4528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.541263][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.549955][ T4461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.960606][T12480] overlayfs: failed to get inode (-116) [ 879.007696][T12480] overlayfs: failed to look up (bus) for ino (-116) [ 879.088102][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2018'. [ 879.134321][T12483] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 879.436313][T12488] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 879.445946][T12488] ubi: mtd0 is already attached to ubi31 [ 881.088147][ T4338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.114044][ T4528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.759535][ T4338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.826616][T12509] netlink: 'syz.5.2028': attribute type 1 has an invalid length. [ 881.911438][T12512] fuse: Unknown parameter '0x0000000000000004' [ 882.191359][T12516] loop6: detected capacity change from 0 to 32768 [ 882.198735][T12516] XFS: ikeep mount option is deprecated. [ 882.223568][T12516] XFS (loop6): Mounting V5 Filesystem [ 882.433423][T12516] XFS (loop6): Ending clean mount [ 882.452714][T12516] XFS (loop6): Quotacheck needed: Please wait. [ 882.715827][T12536] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 882.725597][T12536] ubi: mtd0 is already attached to ubi31 [ 883.395195][ T4873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.416124][T12516] XFS (loop6): Quotacheck: Done. [ 883.653013][T12537] overlayfs: missing 'lowerdir' [ 884.140792][ T7388] XFS (loop6): Unmounting Filesystem [ 884.288554][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.298065][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.776522][T12559] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 884.851270][T12565] netlink: 277 bytes leftover after parsing attributes in process `syz.9.2041'. [ 885.003563][T12569] fuse: Unknown parameter '0x0000000000000004' [ 885.035109][T12571] netlink: 'syz.4.2042': attribute type 1 has an invalid length. [ 885.701900][T12589] loop9: detected capacity change from 0 to 64 [ 887.007692][ T4528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.016257][ T4528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.628121][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.845678][T12607] overlayfs: failed to get inode (-116) [ 887.886573][T12607] overlayfs: failed to look up (bus) for ino (-116) [ 888.768182][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.047801][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.060676][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.130841][ T4304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.689584][ T4304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.942054][T12663] loop7: detected capacity change from 0 to 1024 [ 892.999467][ T4304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.524020][T12663] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 893.641646][T12663] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 893.703109][T12663] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 893.928501][T12679] loop9: detected capacity change from 0 to 256 [ 893.944141][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 894.004610][T12679] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 894.144214][T12683] loop6: detected capacity change from 0 to 128 [ 894.223434][T12683] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 894.264315][T12683] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 894.731268][ T4304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.749299][ T7388] EXT4-fs (loop6): unmounting filesystem. [ 895.807951][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.816798][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.201796][T12713] netlink: 'syz.6.2082': attribute type 1 has an invalid length. [ 897.256072][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2082'. [ 897.742516][ T6435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.851676][T12732] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2085'. [ 897.988496][T12735] kAFS: Can only specify source 'none' with -o dyn [ 898.021943][T12735] ipt_CLUSTERIP: Please specify destination IP [ 898.047929][ T4304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.166259][T12740] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 899.212444][ T8202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.734872][T12756] loop7: detected capacity change from 0 to 128 [ 899.925446][T12756] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 899.939804][T12756] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 900.998479][ T4304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.071566][T12771] usb usb1: usbfs: process 12771 (syz.9.2093) did not claim interface 1 before use [ 901.085245][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 901.641731][ T4873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.650390][ T8202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.810522][T12802] netlink: 'syz.6.2101': attribute type 1 has an invalid length. [ 902.908651][T12806] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2101'. [ 903.487781][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.496364][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.641003][T12820] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2104'. [ 903.710391][T12823] loop9: detected capacity change from 0 to 16 [ 903.720194][T12823] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 903.747340][T12823] cramfs: bad root offset 8388684 [ 903.919853][T12821] loop6: detected capacity change from 0 to 512 [ 903.921949][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2104'. [ 904.348841][T12821] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 904.387368][T12821] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 905.099215][ T7388] EXT4-fs (loop6): unmounting filesystem. [ 905.246301][T12842] loop9: detected capacity change from 0 to 1024 [ 906.076900][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.700769][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.327879][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.355265][ T8202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.452760][T12868] netlink: 'syz.4.2116': attribute type 1 has an invalid length. [ 907.594594][T12873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2116'. [ 907.667765][ T4712] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 907.859224][ T4712] usb 7-1: config 0 has no interfaces? [ 907.869599][ T4712] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 907.916286][ T4712] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.991665][ T4712] usb 7-1: config 0 descriptor?? [ 908.161988][T12888] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 908.705004][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.248355][ T4873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.614978][T12901] loop9: detected capacity change from 0 to 1024 [ 911.082823][ T4712] usb 7-1: USB disconnect, device number 11 [ 911.653835][T12930] netlink: 'syz.7.2130': attribute type 1 has an invalid length. [ 911.812207][ T4714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.227438][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2130'. [ 912.236966][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2130'. [ 912.985261][ T4714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.089514][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.101597][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.502961][T12942] loop7: detected capacity change from 0 to 8192 [ 913.560231][T12942] loop7: p1 p2[DM] p4 [ 913.569371][T12942] loop7: p1 size 196608 extends beyond EOD, truncated [ 913.601749][T12942] loop7: p2 start 4292936063 is beyond EOD, truncated [ 913.650539][T12942] loop7: p4 size 50331648 extends beyond EOD, truncated [ 913.696765][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2133'. [ 913.807668][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.371855][ T4714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.672010][ T8459] udevd[8459]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 914.689808][ T8023] udevd[8023]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 914.817788][ T32] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 915.008553][ T32] usb 7-1: Using ep0 maxpacket: 32 [ 915.016004][ T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.074621][ T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.093786][ T32] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 915.104695][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.134719][ T32] usb 7-1: config 0 descriptor?? [ 915.335584][T12982] netlink: 'syz.9.2143': attribute type 1 has an invalid length. [ 915.349381][T12965] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2138'. [ 915.434317][T12984] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2143'. [ 915.479837][T12984] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2143'. [ 915.571635][ T32] usbhid 7-1:0.0: can't add hid device: -71 [ 915.583372][ T32] usbhid: probe of 7-1:0.0 failed with error -71 [ 915.625507][ T32] usb 7-1: USB disconnect, device number 12 [ 917.567934][ T4497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.967148][T13026] netlink: 'syz.7.2154': attribute type 1 has an invalid length. [ 918.844743][ T4483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.967834][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.976175][ T8202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.037418][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2154'. [ 919.059752][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2154'. [ 919.497168][ T4461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.607816][T11859] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 919.859961][T11859] usb 6-1: Using ep0 maxpacket: 32 [ 919.906221][T11859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.001753][T11859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.062598][T11859] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 920.117324][T11859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.128260][ T4304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.428339][T11859] usb 6-1: config 0 descriptor?? [ 920.639789][T13042] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2158'. [ 920.866829][T11859] usbhid 6-1:0.0: can't add hid device: -71 [ 920.875404][T11859] usbhid: probe of 6-1:0.0 failed with error -71 [ 920.966877][T11859] usb 6-1: USB disconnect, device number 11 [ 921.481338][T13069] loop7: detected capacity change from 0 to 1024 [ 921.716892][T13076] fuse: Unknown parameter '0x0000000000000004' [ 923.264119][ T4497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.608358][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.617100][ T4304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.626486][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.275562][ T4461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.303383][ T4483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.715068][T13114] loop9: detected capacity change from 0 to 64 [ 926.788532][T13114] hfs: unable to open extent tree [ 926.805975][T13114] hfs: can't find a HFS filesystem on dev loop9 [ 927.838700][T13120] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 928.090341][T13132] fuse: Unknown parameter '0x0000000000000004' [ 929.069928][T13140] loop9: detected capacity change from 0 to 1024 [ 929.946987][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.956375][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.622491][ T4528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.645665][ T8202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.657723][ T8202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.666357][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.814332][T13162] input: syz1 as /devices/virtual/input/input30 [ 934.963969][T13193] loop5: detected capacity change from 0 to 16 [ 934.974759][T13193] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 935.695902][T13193] cramfs: bad root offset 8388684 [ 935.731510][ T8202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.788712][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.754307][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.762975][ T8202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.773158][ T4497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.788448][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.797004][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.712177][T13224] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 941.076326][T13237] loop5: detected capacity change from 0 to 1024 [ 942.046131][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.051385][T13257] fuse: Unknown parameter '0x0000000000000004' [ 943.245076][ T4497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.253828][ T4528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.264292][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.857578][ T8202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.866476][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.921510][T13284] loop6: detected capacity change from 0 to 512 [ 947.450177][T13310] fuse: Unknown parameter '0x0000000000000004' [ 950.088513][ T8202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.103546][ T4483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.112178][ T4304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.131788][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.139952][ T4528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.930839][T13341] loop5: detected capacity change from 0 to 512 [ 955.381378][T13357] loop9: detected capacity change from 0 to 16 [ 955.421719][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.432409][ T4528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.441547][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.501234][T13357] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 955.517896][T13357] cramfs: bad root offset 8388684 [ 955.971951][ T4338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.045169][ T4338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.053698][T13369] loop5: detected capacity change from 0 to 128 [ 956.108244][T13369] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 956.126261][T13369] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 956.150812][T13366] loop9: detected capacity change from 0 to 2048 [ 956.252901][T13366] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 957.170654][ T4528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.290341][ T7189] EXT4-fs (loop5): unmounting filesystem. [ 958.035362][T13385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.044004][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.691906][T13394] overlayfs: missing 'lowerdir' [ 959.773677][T13405] netlink: 'syz.7.2255': attribute type 1 has an invalid length. [ 960.783319][ T4528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.885797][T13419] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 960.895497][T13419] ubi: mtd0 is already attached to ubi31 [ 961.344327][ T4528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.354176][ T8202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.465236][T13421] loop5: detected capacity change from 0 to 512 [ 961.607091][ T4263] Bluetooth: hci2: Malformed LE Event: 0x1b [ 961.607716][T13421] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 961.730081][ T4483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.738798][ T4338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.903099][T13421] EXT4-fs (loop5): orphan cleanup on readonly fs [ 962.058179][T13421] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 962.456740][T13421] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 962.554276][T13429] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 962.887268][T13421] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #16: comm syz.5.2259: iget: immutable or append flags not allowed on symlinks [ 963.009287][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.078497][T13421] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2259: couldn't read orphan inode 16 (err -117) [ 963.144087][T13421] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 963.676002][ T7189] EXT4-fs (loop5): unmounting filesystem. [ 963.977747][T13458] loop5: detected capacity change from 0 to 1024 [ 966.212243][ T4497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.585904][T13479] loop6: detected capacity change from 0 to 1024 [ 966.828004][T13481] loop5: detected capacity change from 0 to 1024 [ 966.848249][ T4483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.856889][ T4483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.575574][ T4497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.587654][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.430087][ T46] hfsplus: b-tree write err: -5, ino 3 [ 968.459702][ T7189] hfsplus: node 4:3 still has 1 user(s)! [ 968.547122][T13493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.555987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.772733][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.447666][T13498] netlink: 'syz.7.2280': attribute type 1 has an invalid length. [ 970.040428][ T4712] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 970.447320][ T4712] usb 6-1: Using ep0 maxpacket: 32 [ 970.454329][ T4712] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.469978][ T4712] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.484723][ T4712] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 970.494214][ T4712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.557871][ T4712] usb 6-1: config 0 descriptor?? [ 970.829987][T13518] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2284'. [ 971.721531][ T4712] usbhid 6-1:0.0: can't add hid device: -71 [ 971.739633][ T4712] usbhid: probe of 6-1:0.0 failed with error -71 [ 971.773371][ T4712] usb 6-1: USB disconnect, device number 12 [ 971.936629][T13541] loop9: detected capacity change from 0 to 1024 [ 971.968475][ T4483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.623074][ T4497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.633039][ T4714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.806408][ T4461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.888023][ T4461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.278837][T13562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 974.290668][T13562] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 974.300014][T13562] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 974.308025][T13562] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 974.316198][T13562] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 974.326322][T13562] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 974.564804][ T4873] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.665159][T13566] netlink: 'syz.9.2295': attribute type 1 has an invalid length. [ 974.927980][ T4873] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.079190][ T4873] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.244525][ T4873] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.816132][T13560] chnl_net:caif_netlink_parms(): no params data found [ 976.369322][ T4263] Bluetooth: hci4: command 0x0409 tx timeout [ 978.447398][ T4263] Bluetooth: hci4: command 0x041b tx timeout [ 979.645911][T13631] loop9: detected capacity change from 0 to 1024 [ 980.587371][ T4263] Bluetooth: hci4: command 0x040f tx timeout [ 980.803064][T13650] loop7: detected capacity change from 0 to 1024 [ 981.756468][T13645] netlink: 'syz.4.2306': attribute type 1 has an invalid length. [ 981.793815][T13560] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.837970][T13560] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.877636][T13560] device bridge_slave_0 entered promiscuous mode [ 981.977410][T13560] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.984571][T13560] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.000297][T13560] device bridge_slave_1 entered promiscuous mode [ 982.306046][T13560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.336844][T13560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.574647][T13560] team0: Port device team_slave_0 added [ 982.611381][ T4263] Bluetooth: hci4: command 0x0419 tx timeout [ 982.618039][T13560] team0: Port device team_slave_1 added [ 983.833077][T13682] loop7: detected capacity change from 0 to 128 [ 983.953494][T13682] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 983.977702][T13682] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 985.306192][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 985.325794][T13560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.341977][T13560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.533854][T13560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.631835][T13700] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 985.641661][T13700] ubi: mtd0 is already attached to ubi31 [ 986.278206][T13560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.304868][T13560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.344561][T13560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.472670][T13706] netlink: 'syz.4.2318': attribute type 1 has an invalid length. [ 986.587976][ T4873] device hsr_slave_0 left promiscuous mode [ 986.603772][ T4873] device hsr_slave_1 left promiscuous mode [ 986.621762][ T4873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.635969][ T4873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.644700][ T4873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.659221][ T4873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.725982][ T4873] device bridge_slave_1 left promiscuous mode [ 986.739433][ T4873] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.824034][ T4873] device bridge_slave_0 left promiscuous mode [ 986.843618][ T4873] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.333340][ T4873] device veth1_macvtap left promiscuous mode [ 988.342988][ T4873] device veth0_macvtap left promiscuous mode [ 988.352776][ T4873] device veth1_vlan left promiscuous mode [ 988.364223][ T4873] device veth0_vlan left promiscuous mode [ 989.167857][ T4873] bond6 (unregistering): Released all slaves [ 989.277717][ T4873] bond5 (unregistering): Released all slaves [ 989.720418][T13733] loop7: detected capacity change from 0 to 128 [ 989.756416][ T4873] bond3 (unregistering): (slave bond4): Releasing backup interface [ 989.756428][T13733] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 989.761287][T13733] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 989.788141][ T4873] bond4 (unregistering): Released all slaves [ 990.024443][ T4873] bond3 (unregistering): Released all slaves [ 990.746386][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 990.746927][ T4873] bond1 (unregistering): (slave bond2): Releasing backup interface [ 990.793955][ T4873] bond2 (unregistering): Released all slaves [ 991.066895][ T4873] bond1 (unregistering): Released all slaves [ 992.052554][ T4873] team0 (unregistering): Port device team_slave_1 removed [ 992.114761][ T4873] team0 (unregistering): Port device team_slave_0 removed [ 992.139962][T13744] loop7: detected capacity change from 0 to 1024 [ 992.208427][ T4873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.306587][ T4873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.156021][ T4873] bond0 (unregistering): Released all slaves [ 993.294829][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2318'. [ 993.559901][T13560] device hsr_slave_0 entered promiscuous mode [ 993.593856][T13560] device hsr_slave_1 entered promiscuous mode [ 993.613693][T13560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 993.628187][T13560] Cannot create hsr debugfs directory [ 994.190301][T13760] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 994.200794][T13760] ubi: mtd0 is already attached to ubi31 [ 998.248380][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.373795][T13787] loop9: detected capacity change from 0 to 1024 [ 998.903686][T13791] netlink: 'syz.5.2337': attribute type 1 has an invalid length. [ 999.105880][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2337'. [ 999.863297][T13816] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1000.165906][T13819] loop7: detected capacity change from 0 to 1024 [ 1003.646384][T13560] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1003.680045][T13560] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1003.723359][T13560] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1003.750352][T13560] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1003.851654][T13851] netlink: 'syz.9.2351': attribute type 1 has an invalid length. [ 1003.956355][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2351'. [ 1004.186173][T13560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.204839][T13560] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.533496][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1004.694742][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1004.925269][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1004.934281][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1004.968590][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.975819][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.006670][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1005.021661][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1005.032677][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.039858][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.054364][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1005.063751][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1005.223379][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1005.270798][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1005.299262][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1005.361624][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1005.579461][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1005.640872][T13879] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1005.650388][T13879] ubi: mtd0 is already attached to ubi31 [ 1006.362469][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1006.589374][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1006.614619][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1006.666083][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1007.722933][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1007.950441][T13560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1008.687291][ T4263] Bluetooth: hci4: command 0x0405 tx timeout [ 1009.749123][T13913] netlink: 'syz.5.2362': attribute type 1 has an invalid length. [ 1009.875877][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1009.907513][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1009.928027][T13560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.078910][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1010.113761][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1010.184489][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1010.225758][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1010.274829][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1010.315822][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1010.338495][T13560] device veth0_vlan entered promiscuous mode [ 1010.393882][T13560] device veth1_vlan entered promiscuous mode [ 1010.466745][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1010.484732][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1010.509501][T13927] fuse: Unknown parameter '0x0000000000000004' [ 1010.516633][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1010.543725][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1010.574224][T13560] device veth0_macvtap entered promiscuous mode [ 1010.597871][T13560] device veth1_macvtap entered promiscuous mode [ 1010.632551][T13560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.673792][T13560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.697485][T13560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.718875][T13560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.737237][T13560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.764622][T13560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.775261][T13560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.802202][T13560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.814032][T13560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.825453][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1010.836890][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1010.855958][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1010.865196][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1010.999493][T13560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.031649][T13560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.251790][T13560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.451700][T13560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.655188][T13560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.847401][T13560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.887432][T13560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.898356][T13560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.277071][T13560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.420685][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1013.841381][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1013.856924][T13560] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.874008][T13560] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.907922][T13560] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.916746][T13560] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.248038][ T4714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.357434][ T4714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.373173][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1014.392842][ T4714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.403528][ T4714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.428306][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1014.614604][T13970] netlink: 'syz.5.2373': attribute type 1 has an invalid length. [ 1015.002796][T13983] loop3: detected capacity change from 0 to 1024 [ 1015.769054][T13987] fuse: Unknown parameter '0x0000000000000004' [ 1016.056311][T13995] loop9: detected capacity change from 0 to 1024 [ 1020.451864][T14038] netlink: 'syz.5.2387': attribute type 1 has an invalid length. [ 1020.766231][T14049] fuse: Unknown parameter '0x0000000000000004' [ 1020.813108][T14050] loop3: detected capacity change from 0 to 1024 [ 1024.334945][T14099] netlink: 'syz.5.2402': attribute type 1 has an invalid length. [ 1025.800040][T14119] loop3: detected capacity change from 0 to 2048 [ 1026.120997][T14119] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1027.077768][T14127] overlayfs: missing 'lowerdir' [ 1027.585139][T14139] loop3: detected capacity change from 0 to 1024 [ 1027.755406][T14145] loop5: detected capacity change from 0 to 512 [ 1027.802180][T14149] netlink: 'syz.9.2415': attribute type 1 has an invalid length. [ 1028.227114][T14145] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1028.440967][T14145] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.045804][ T7189] EXT4-fs (loop5): unmounting filesystem. [ 1031.351678][T14188] loop5: detected capacity change from 0 to 2048 [ 1031.557614][T14188] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1031.863489][T14188] overlayfs: missing 'lowerdir' [ 1031.966250][T14198] loop9: detected capacity change from 0 to 1024 [ 1032.276743][T14203] loop5: detected capacity change from 0 to 1024 [ 1032.651731][T14209] netlink: 'syz.3.2428': attribute type 1 has an invalid length. [ 1033.849116][T14220] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2430'. [ 1036.547860][T14234] fuse: Unknown parameter '0x0000000000000004' [ 1037.019239][T14246] loop5: detected capacity change from 0 to 2048 [ 1037.052988][T14251] loop3: detected capacity change from 0 to 1024 [ 1037.121817][T14246] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1038.665133][T14262] overlayfs: missing 'lowerdir' [ 1039.875820][T14264] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1040.386983][T14266] loop3: detected capacity change from 0 to 1024 [ 1040.472102][T14267] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2442'. [ 1040.506675][T14275] loop9: detected capacity change from 0 to 1024 [ 1043.788728][T14306] netlink: 'syz.5.2450': attribute type 1 has an invalid length. [ 1043.867443][T14306] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2450'. [ 1045.005194][T14318] loop5: detected capacity change from 0 to 512 [ 1045.126845][T14318] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1045.181612][T14318] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.381254][T14329] fuse: Bad value for 'fd' [ 1045.390849][T14329] fuse: Unknown parameter '0x0000000000000004' [ 1045.725889][ T7189] EXT4-fs (loop5): unmounting filesystem. [ 1045.817134][T14337] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1045.826739][T14337] ubi: mtd0 is already attached to ubi31 [ 1046.854754][T14351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2459'. [ 1047.658058][T14345] loop7: detected capacity change from 0 to 2048 [ 1048.798302][T14345] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1048.935339][T14366] netlink: 'syz.5.2464': attribute type 1 has an invalid length. [ 1049.427728][T14368] overlayfs: missing 'lowerdir' [ 1049.486819][T14371] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2464'. [ 1049.526887][T14375] loop9: detected capacity change from 0 to 1024 [ 1051.478115][T14388] fuse: Unknown parameter '0x0000000000000004' [ 1051.816871][T14390] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1051.825832][T14390] ubi: mtd0 is already attached to ubi31 [ 1052.498088][T14399] loop9: detected capacity change from 0 to 1024 [ 1052.505223][T14399] EXT4-fs: Ignoring removed i_version option [ 1052.522485][T14399] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:477: comm syz.9.2471: Invalid block bitmap block 0 in block_group 0 [ 1052.541519][T14399] Quota error (device loop9): write_blk: dquota write failed [ 1052.549076][T14399] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1052.559157][T14399] EXT4-fs error (device loop9): ext4_acquire_dquot:6814: comm syz.9.2471: Failed to acquire dquot type 0 [ 1052.574379][T14399] EXT4-fs error (device loop9): ext4_free_blocks:6210: comm syz.9.2471: Freeing blocks not in datazone - block = 0, count = 4096 [ 1052.590223][T14399] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.2471: Invalid inode bitmap blk 0 in block_group 0 [ 1052.610838][T14399] EXT4-fs error (device loop9) in ext4_free_inode:362: Corrupt filesystem [ 1052.628962][ T75] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-8 [ 1052.638132][T14399] EXT4-fs (loop9): 1 orphan inode deleted [ 1052.643940][T14399] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1052.653120][ T75] EXT4-fs error (device loop9): ext4_release_dquot:6850: comm kworker/u4:4: Failed to release dquot type 0 [ 1052.687542][T14399] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 1052.695164][T14399] EXT4-fs error (device loop9): ext4_search_dir:1549: inode #2: block 16: comm syz.9.2471: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1052.726545][T14409] loop7: detected capacity change from 0 to 1024 [ 1052.874121][ T9724] EXT4-fs (loop9): unmounting filesystem. [ 1053.086237][ T75] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-8 [ 1053.095605][ T75] EXT4-fs error (device loop9): ext4_release_dquot:6850: comm kworker/u4:4: Failed to release dquot type 0 [ 1053.280278][T14417] loop5: detected capacity change from 0 to 1024 [ 1054.033102][T14422] loop7: detected capacity change from 0 to 2048 [ 1054.226621][T14422] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1054.578908][T14432] overlayfs: missing 'lowerdir' [ 1054.631378][T14436] netlink: 'syz.5.2480': attribute type 1 has an invalid length. [ 1054.662131][T14436] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2480'. [ 1055.035411][T14449] loop3: detected capacity change from 0 to 512 [ 1055.621522][T14449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1055.833392][T14450] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1055.842317][T14450] ubi: mtd0 is already attached to ubi31 [ 1056.187416][T14449] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1057.049148][T13560] EXT4-fs (loop3): unmounting filesystem. [ 1058.433073][T14490] netlink: 'syz.3.2494': attribute type 1 has an invalid length. [ 1058.476836][T11272] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1058.583220][T14494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2494'. [ 1058.660149][T14500] loop9: detected capacity change from 0 to 1024 [ 1058.667254][T11272] usb 6-1: Using ep0 maxpacket: 32 [ 1058.695585][T11272] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.719440][T11272] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.752689][T11272] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1058.789289][T14497] bond1: (slave gretap1): making interface the new active one [ 1058.829059][T11272] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.889253][T14497] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1059.033587][T14507] fuse: Unknown parameter '0x0000000000000004' [ 1059.070228][T11272] usb 6-1: config 0 descriptor?? [ 1059.312253][T14485] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2493'. [ 1059.661029][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.885500][T14513] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1059.894375][T14513] ubi: mtd0 is already attached to ubi31 [ 1060.122799][T11272] usbhid 6-1:0.0: can't add hid device: -71 [ 1060.142086][T11272] usbhid: probe of 6-1:0.0 failed with error -71 [ 1060.228219][T14522] loop7: detected capacity change from 0 to 512 [ 1060.235542][T11272] usb 6-1: USB disconnect, device number 13 [ 1060.316398][T14524] loop9: detected capacity change from 0 to 1024 [ 1060.345053][T14522] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1060.391912][T14522] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.795418][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 1060.807539][T14535] loop3: detected capacity change from 0 to 1024 [ 1061.724971][T14551] loop5: detected capacity change from 0 to 1024 [ 1061.900206][T14559] netlink: 'syz.7.2509': attribute type 1 has an invalid length. [ 1062.201231][T14569] loop9: detected capacity change from 0 to 1024 [ 1062.217632][T14565] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2509'. [ 1063.415785][T14585] loop3: detected capacity change from 0 to 2048 [ 1064.194069][T14585] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1064.628639][T14598] overlayfs: missing 'lowerdir' [ 1066.621166][T14620] loop3: detected capacity change from 0 to 1024 [ 1066.998847][T14628] netlink: 'syz.9.2525': attribute type 1 has an invalid length. [ 1067.059763][T14628] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2525'. [ 1069.203456][T14657] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2531'. [ 1069.252648][T14652] loop3: detected capacity change from 0 to 2048 [ 1069.514940][T14656] loop7: detected capacity change from 0 to 1024 [ 1069.801846][T14652] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1070.319020][T14664] overlayfs: missing 'lowerdir' [ 1070.612226][T14668] loop9: detected capacity change from 0 to 1024 [ 1071.422160][T14673] loop5: detected capacity change from 0 to 1024 [ 1071.753520][T14679] loop3: detected capacity change from 0 to 1024 [ 1071.762283][T14680] loop7: detected capacity change from 0 to 512 [ 1072.375369][T14680] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1072.408383][T14680] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.658855][T14693] netlink: 'syz.9.2540': attribute type 1 has an invalid length. [ 1072.842452][T14701] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2540'. [ 1074.358701][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 1074.499763][T14712] loop9: detected capacity change from 0 to 1024 [ 1074.733021][T14716] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2545'. [ 1077.856788][T14741] loop9: detected capacity change from 0 to 1024 [ 1077.911784][T14743] loop5: detected capacity change from 0 to 1024 [ 1078.461547][T14752] loop7: detected capacity change from 0 to 512 [ 1078.515860][T14752] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1078.556504][T14752] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.005504][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 1080.017562][ T4250] bridge0: port 3(syz_tun) entered disabled state [ 1080.204469][ T4250] device syz_tun left promiscuous mode [ 1080.232350][ T4250] bridge0: port 3(syz_tun) entered disabled state [ 1080.268361][T14773] loop5: detected capacity change from 0 to 128 [ 1080.423301][T14773] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1080.484115][T14773] ext4 filesystem being mounted at /387/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.570666][ T4269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1081.234860][T13562] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1081.244062][T13562] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1081.260568][T13562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1081.271824][T13562] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1081.447417][T13562] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1081.556752][ T75] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.615129][ T7189] EXT4-fs (loop5): unmounting filesystem. [ 1081.986757][T14790] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2560'. [ 1082.600579][ T75] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.618588][T14795] loop5: detected capacity change from 0 to 1024 [ 1082.976617][ T75] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.352335][ T75] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.556777][T14802] loop7: detected capacity change from 0 to 1024 [ 1083.567472][ T4263] Bluetooth: hci1: command 0x0409 tx timeout [ 1083.937043][T14807] loop5: detected capacity change from 0 to 1024 [ 1085.358141][T14819] loop9: detected capacity change from 0 to 512 [ 1085.524876][T14780] chnl_net:caif_netlink_parms(): no params data found [ 1085.799049][ T4263] Bluetooth: hci1: command 0x041b tx timeout [ 1086.572686][T14835] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2571'. [ 1086.773504][T14838] loop5: detected capacity change from 0 to 128 [ 1086.787638][T14819] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1086.796802][T14819] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.904383][T13562] Bluetooth: hci1: command 0x040f tx timeout [ 1087.975800][ T9724] EXT4-fs (loop9): unmounting filesystem. [ 1087.995194][ T75] device ip6gretap0 left promiscuous mode [ 1088.063088][T14780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.110670][T14780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.119982][T14780] device bridge_slave_0 entered promiscuous mode [ 1088.165176][T14856] loop9: detected capacity change from 0 to 1024 [ 1088.192141][T14780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.210983][T14780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.260214][T14780] device bridge_slave_1 entered promiscuous mode [ 1088.333630][ T4301] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1088.514081][T14780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.577465][ T4301] usb 4-1: Using ep0 maxpacket: 32 [ 1088.584678][ T4301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.611334][T14780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.630894][ T4301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.671817][ T4301] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1088.702320][ T4301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.740753][ T4301] usb 4-1: config 0 descriptor?? [ 1088.798525][T14780] team0: Port device team_slave_0 added [ 1088.835468][T14780] team0: Port device team_slave_1 added [ 1088.957070][T14780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.965129][T14852] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2573'. [ 1088.989903][T14780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.101620][T14780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.195626][T14860] loop5: detected capacity change from 0 to 32768 [ 1089.216890][T14780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.262206][T14780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.289937][T14780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.361157][T14860] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 1089.501819][T14876] loop9: detected capacity change from 0 to 1024 [ 1089.515566][ T7189] ocfs2: Unmounting device (7,5) on (node local) [ 1089.606128][T14780] device hsr_slave_0 entered promiscuous mode [ 1089.806480][T14780] device hsr_slave_1 entered promiscuous mode [ 1089.832278][T14780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1089.875700][T14780] Cannot create hsr debugfs directory [ 1089.967539][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 1091.042699][ T4301] usbhid 4-1:0.0: can't add hid device: -71 [ 1091.057651][ T4301] usbhid: probe of 4-1:0.0 failed with error -71 [ 1091.065824][ T4301] usb 4-1: USB disconnect, device number 7 [ 1091.498577][T14892] loop5: detected capacity change from 0 to 1024 [ 1091.505737][T14892] EXT4-fs: Ignoring removed i_version option [ 1091.703134][T14892] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.2579: Invalid block bitmap block 0 in block_group 0 [ 1091.721017][T14892] Quota error (device loop5): write_blk: dquota write failed [ 1091.728526][T14892] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1091.738541][T14892] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.2579: Failed to acquire dquot type 0 [ 1091.756650][T14892] EXT4-fs error (device loop5): ext4_free_blocks:6210: comm syz.5.2579: Freeing blocks not in datazone - block = 0, count = 4096 [ 1092.017558][T14892] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.2579: Invalid inode bitmap blk 0 in block_group 0 [ 1092.030588][T14892] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 1092.039647][T14892] EXT4-fs (loop5): 1 orphan inode deleted [ 1092.045447][T14892] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1092.071228][ T4873] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 1092.071640][T14892] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 1092.089221][T14892] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #2: block 16: comm syz.5.2579: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1092.146672][ T4873] EXT4-fs error (device loop5): ext4_release_dquot:6850: comm kworker/u4:20: Failed to release dquot type 0 [ 1092.419882][ T75] device bridge0 left promiscuous mode [ 1092.456713][ T7189] EXT4-fs (loop5): unmounting filesystem. [ 1092.466074][ T75] device hsr_slave_0 left promiscuous mode [ 1092.478409][ T11] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 1092.488920][ T75] device hsr_slave_1 left promiscuous mode [ 1092.511416][ T11] EXT4-fs error (device loop5): ext4_release_dquot:6850: comm kworker/u4:1: Failed to release dquot type 0 [ 1092.542845][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1092.557380][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.566203][T14906] loop3: detected capacity change from 0 to 512 [ 1092.604633][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1092.635150][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.676892][T14906] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1092.743682][T14906] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.761892][ T75] device bridge_slave_1 left promiscuous mode [ 1092.774157][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.816118][ T75] device bridge_slave_0 left promiscuous mode [ 1092.837016][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.979790][T13560] EXT4-fs (loop3): unmounting filesystem. [ 1092.987645][ T75] device veth1_macvtap left promiscuous mode [ 1093.000545][ T75] device veth0_macvtap left promiscuous mode [ 1093.013560][ T75] device veth1_vlan left promiscuous mode [ 1093.028113][ T75] device veth0_vlan left promiscuous mode [ 1093.416269][ T75] bond15 (unregistering): Released all slaves [ 1093.436343][T14908] loop9: detected capacity change from 0 to 32768 [ 1093.455899][ T75] bond14 (unregistering): Released all slaves [ 1093.502569][ T75] bond13 (unregistering): Released all slaves [ 1093.518099][ T75] bond12 (unregistering): Released all slaves [ 1093.535949][T14908] XFS (loop9): Mounting V5 Filesystem [ 1093.536862][ T75] bond11 (unregistering): Released all slaves [ 1093.728011][T14908] XFS (loop9): Ending clean mount [ 1093.742736][T14908] XFS (loop9): Quotacheck needed: Please wait. [ 1093.863197][T14908] XFS (loop9): Quotacheck: Done. [ 1093.973024][ T9724] XFS (loop9): Unmounting Filesystem [ 1094.341608][T14926] loop3: detected capacity change from 0 to 32768 [ 1094.392644][ T75] bond9 (unregistering): (slave bond10): Releasing backup interface [ 1094.417345][T14926] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1094.442878][T14926] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1094.455796][ T75] bond10 (unregistering): Released all slaves [ 1094.499325][T14926] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1094.520401][T14926] BTRFS info (device loop3): max_inline at 0 [ 1094.547428][T14926] BTRFS info (device loop3): enabling disk space caching [ 1094.554542][T14926] BTRFS info (device loop3): turning off barriers [ 1094.595678][T14926] BTRFS info (device loop3): doing ref verification [ 1094.602710][T14926] BTRFS info (device loop3): force clearing of disk cache [ 1094.617669][T14926] BTRFS info (device loop3): enabling ssd optimizations [ 1094.635055][T14926] BTRFS info (device loop3): max_inline at 4096 [ 1094.666161][T14926] BTRFS info (device loop3): disk space caching is enabled [ 1095.065975][ T75] bond9 (unregistering): Released all slaves [ 1095.130239][T14926] BTRFS info (device loop3): rebuilding free space tree [ 1095.356235][T14926] BTRFS info (device loop3): disabling free space tree [ 1095.363840][T14926] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1095.376240][T14926] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1095.516646][ T75] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1095.546701][ T75] bond8 (unregistering): Released all slaves [ 1095.579101][T13560] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1096.439243][ T75] bond7 (unregistering): Released all slaves [ 1096.705807][ T75] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1096.716261][ T75] bond6 (unregistering): Released all slaves [ 1096.730638][ T75] bond5 (unregistering): Released all slaves [ 1096.744571][ T75] bond4 (unregistering): Released all slaves [ 1096.789685][ T75] bond3 (unregistering): Released all slaves [ 1096.871589][T15009] loop3: detected capacity change from 0 to 2048 [ 1096.945930][T15009] loop3: p1 < > p2 < > p3 p4 < > [ 1096.954783][T15009] loop3: partition table partially beyond EOD, truncated [ 1096.975306][T15009] loop3: p1 start 2305 is beyond EOD, truncated [ 1096.981821][T15009] loop3: p2 start 4294902784 is beyond EOD, truncated [ 1096.990649][T15009] loop3: p3 start 3724543488 is beyond EOD, truncated [ 1097.016610][ T3623] loop3: p1 < > p2 < > p3 p4 < > [ 1097.021979][ T3623] loop3: partition table partially beyond EOD, truncated [ 1097.029564][ T3623] loop3: p1 start 2305 is beyond EOD, truncated [ 1097.035858][ T3623] loop3: p2 start 4294902784 is beyond EOD, truncated [ 1097.043019][ T3623] loop3: p3 start 3724543488 is beyond EOD, truncated [ 1097.166253][ T75] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1097.178157][ T75] bond2 (unregistering): Released all slaves [ 1097.211292][ T75] bond1 (unregistering): Released all slaves [ 1097.533658][T11272] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1097.540247][T15013] loop9: detected capacity change from 0 to 1024 [ 1097.567697][T13562] Bluetooth: hci4: command 0x0406 tx timeout [ 1097.767463][T11272] usb 4-1: Using ep0 maxpacket: 32 [ 1097.780893][T11272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.803970][T11272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.815753][T11272] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1097.825764][T11272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.845578][T11272] usb 4-1: config 0 descriptor?? [ 1098.012444][ T75] team0 (unregistering): Port device team_slave_1 removed [ 1098.067952][T15011] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2593'. [ 1098.080937][ T75] team0 (unregistering): Port device team_slave_0 removed [ 1098.163331][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.232511][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.187525][ T75] bond0 (unregistering): Released all slaves [ 1099.308560][T14916] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2584'. [ 1099.327399][T14916] netlink: 'syz.5.2584': attribute type 7 has an invalid length. [ 1099.335261][T14916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2584'. [ 1099.353526][T14916] device gretap0 entered promiscuous mode [ 1099.363527][T14916] device gretap0 left promiscuous mode [ 1099.519376][T15029] loop7: detected capacity change from 0 to 512 [ 1099.671976][T15029] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1099.690425][T15029] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.775599][T11272] usbhid 4-1:0.0: can't add hid device: -71 [ 1099.793539][T11272] usbhid: probe of 4-1:0.0 failed with error -71 [ 1099.847701][T11272] usb 4-1: USB disconnect, device number 8 [ 1100.121951][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 1100.221332][T15043] netlink: 176 bytes leftover after parsing attributes in process `syz.9.2597'. [ 1101.141507][T14780] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1101.189552][T14780] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1101.243579][T14780] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1101.295519][T15056] fuse: Bad value for 'fd' [ 1101.309264][T14780] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1102.740401][T15069] loop9: detected capacity change from 0 to 1024 [ 1102.898711][T14780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.380072][T14780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.439550][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1103.478005][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1103.652002][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1103.738209][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1103.762957][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.770159][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.807629][T13562] Bluetooth: hci1: command 0x0405 tx timeout [ 1103.983389][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1104.065013][T15088] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1104.074794][T15088] ubi: mtd0 is already attached to ubi31 [ 1104.798815][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1104.833944][T15092] loop5: detected capacity change from 0 to 512 [ 1104.841021][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.848203][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.880231][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1104.904867][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1104.914111][T15092] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1104.927940][T15092] ext4 filesystem being mounted at /399/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.955860][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1105.006609][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1105.024017][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1105.033211][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1105.059245][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1105.085121][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1105.097260][ T4712] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1105.182500][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1105.198084][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1105.214692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1105.249630][ T7189] EXT4-fs (loop5): unmounting filesystem. [ 1105.259093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1105.286709][T14780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1105.327261][ T4712] usb 10-1: Using ep0 maxpacket: 32 [ 1105.334419][ T4712] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.382659][ T4712] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.454965][T15107] fuse: Bad value for 'fd' [ 1105.579499][ T4712] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1105.589295][ T4712] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.607055][ T4712] usb 10-1: config 0 descriptor?? [ 1105.635318][T15108] loop5: detected capacity change from 0 to 2048 [ 1105.704791][T15111] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2611'. [ 1105.933078][T15091] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2610'. [ 1106.113862][T15108] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1106.468707][T15108] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1106.581635][T15108] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 1 with error 28 [ 1106.594464][T15108] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1106.594464][T15108] [ 1106.639645][T15108] EXT4-fs (loop5): Total free blocks count 0 [ 1106.645730][T15108] EXT4-fs (loop5): Free/Dirty block details [ 1106.702698][T15108] EXT4-fs (loop5): free_blocks=2415919104 [ 1106.763058][T15108] EXT4-fs (loop5): dirty_blocks=16 [ 1106.782424][T15108] EXT4-fs (loop5): Block reservation details [ 1106.788773][T15108] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1106.795643][ T4712] usbhid 10-1:0.0: can't add hid device: -71 [ 1106.803035][ T4712] usbhid: probe of 10-1:0.0 failed with error -71 [ 1106.816302][ T4712] usb 10-1: USB disconnect, device number 6 [ 1107.668521][ T4377] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1107.726868][T15130] loop9: detected capacity change from 0 to 1024 [ 1109.029031][T15147] Cannot find add_set index 0 as target [ 1109.782701][T15152] loop7: detected capacity change from 0 to 512 [ 1109.936848][T15152] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1109.954429][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1109.956675][T15152] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1109.987517][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1109.991392][T15164] fuse: Bad value for 'fd' [ 1110.002484][T14780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.433260][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 1110.829283][T15160] ceph: No mds server is up or the cluster is laggy [ 1111.463532][T15183] loop9: detected capacity change from 0 to 1024 [ 1111.539011][T15183] EXT4-fs (loop9): can't mount with data_err=abort, fs mounted w/o journal [ 1111.714712][T15187] loop5: detected capacity change from 0 to 1024 [ 1111.942085][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2626'. [ 1112.691946][T15187] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1112.930762][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1113.101517][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1113.142237][ T7189] EXT4-fs (loop5): unmounting filesystem. [ 1113.353256][T15210] netlink: 176 bytes leftover after parsing attributes in process `syz.9.2630'. [ 1113.881485][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1113.900076][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1113.930901][T14780] device veth0_vlan entered promiscuous mode [ 1113.983286][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1114.012011][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1114.053111][T14780] device veth1_vlan entered promiscuous mode [ 1114.142538][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1114.169913][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1114.211829][T14780] device veth0_macvtap entered promiscuous mode [ 1114.230678][T14780] device veth1_macvtap entered promiscuous mode [ 1114.281372][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.333297][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.370138][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.386727][T15229] loop3: detected capacity change from 0 to 512 [ 1114.440686][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.454617][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.471290][T15229] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1114.485414][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.498157][T15229] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1114.508866][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.541146][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.563510][T14780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.576123][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1114.592901][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1114.602460][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1114.616832][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1114.629919][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.642995][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.654393][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.679918][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.695891][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.720419][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.773246][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.803893][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.888812][T15238] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2636'. [ 1115.650470][T14780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.446389][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1116.832857][T15240] loop9: detected capacity change from 0 to 32768 [ 1117.218892][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1117.464900][T14780] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.488352][T14780] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.550676][T14780] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.584246][T14780] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.760123][T13560] EXT4-fs (loop3): unmounting filesystem. [ 1118.120453][T15244] device bridge0 left promiscuous mode [ 1118.689045][T15252] loop3: detected capacity change from 0 to 1024 [ 1119.389149][T15263] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2642'. [ 1119.736253][ T8202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.753379][ T8202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.946685][T15258] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1119.955761][T15258] ubi: mtd0 is already attached to ubi31 [ 1120.791800][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1120.820199][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2645'. [ 1121.090684][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.861553][T15282] loop7: detected capacity change from 0 to 512 [ 1121.952010][ T75] Bluetooth: hci5: Frame reassembly failed (-84) [ 1122.030943][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.097437][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.135499][T15282] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1122.168499][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1122.197363][T15282] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.123651][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 1123.324316][T15301] loop4: detected capacity change from 0 to 1024 [ 1123.348842][T15303] loop7: detected capacity change from 0 to 128 [ 1123.391932][T15303] EXT4-fs: Ignoring removed nobh option [ 1123.427233][ T5604] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1124.156799][ T4263] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1124.167468][ T4263] Bluetooth: hci3: Malformed LE Event: 0x1b [ 1124.562346][T15308] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1124.570964][T15303] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1124.615695][ T5604] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1124.635438][T15303] ext4 filesystem being mounted at /304/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1124.659689][ T5604] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1124.806050][ T5604] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1124.816215][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.826682][ T5604] usb 4-1: Product: syz [ 1124.873698][ T5604] usb 4-1: Manufacturer: syz [ 1124.902674][ T5604] usb 4-1: SerialNumber: syz [ 1124.967951][ T5604] usb 4-1: config 0 descriptor?? [ 1125.290043][ T5604] usb 4-1: selecting invalid altsetting 0 [ 1125.375731][T15321] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2656'. [ 1126.056424][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 1128.141502][T15346] loop5: detected capacity change from 0 to 512 [ 1128.958047][T15346] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1128.994965][T15346] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1129.064388][T15355] device team0 entered promiscuous mode [ 1129.176916][T15355] device team_slave_0 entered promiscuous mode [ 1129.225137][T15355] device team_slave_1 entered promiscuous mode [ 1129.249123][T15355] device bond0 entered promiscuous mode [ 1129.277600][T15355] device bond_slave_0 entered promiscuous mode [ 1129.300584][ T5604] usb 4-1: USB disconnect, device number 9 [ 1129.359319][T15355] device bond_slave_1 entered promiscuous mode [ 1129.502945][ T7189] EXT4-fs (loop5): unmounting filesystem. [ 1129.506778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 1131.377968][T15374] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2669'. [ 1131.679687][T13562] Bluetooth: hci4: Malformed LE Event: 0x1b [ 1132.363880][T15380] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1134.328894][T15408] loop7: detected capacity change from 0 to 512 [ 1134.386255][T15407] loop5: detected capacity change from 0 to 2048 [ 1134.411903][T15408] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1134.440652][T15408] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1134.470855][T15407] loop5: p1 < > p3 [ 1134.496548][T15407] loop5: p3 size 134217728 extends beyond EOD, truncated [ 1134.928156][ T8023] udevd[8023]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1134.951033][ T8459] udevd[8459]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1135.238820][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 1136.562864][T13562] Bluetooth: hci2: Malformed LE Event: 0x1b [ 1136.646935][T15441] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2683'. [ 1137.406872][T15437] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1137.891479][T15455] loop3: detected capacity change from 0 to 1024 [ 1139.337562][T15462] loop9: detected capacity change from 0 to 512 [ 1140.879806][T15466] loop7: detected capacity change from 0 to 2048 [ 1140.913988][T15466] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1141.349985][T15466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1141.804055][T15471] loop5: detected capacity change from 0 to 512 [ 1142.261885][T15462] fscrypt: Error allocating hmac(sha512): -2 [ 1142.350940][T15471] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1142.431393][T15471] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1142.871706][ T7189] EXT4-fs (loop5): unmounting filesystem. [ 1143.480827][T15501] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2697'. [ 1144.257907][T13562] Bluetooth: hci1: Malformed LE Event: 0x1b [ 1146.164647][T15518] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1146.173636][T15518] ubi: mtd0 is already attached to ubi31 [ 1147.628914][T15531] loop7: detected capacity change from 0 to 1024 [ 1147.723917][T15538] fuse: Bad value for 'fd' [ 1147.731503][ T4709] hfsplus: b-tree write err: -5, ino 4 [ 1147.792167][T15540] loop3: detected capacity change from 0 to 512 [ 1148.139589][T15551] loop5: detected capacity change from 0 to 256 [ 1148.303887][T15551] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1148.379310][T15558] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2711'. [ 1149.258331][T15540] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1149.314534][T15540] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1149.385974][ T26] audit: type=1800 audit(1750160708.887:367): pid=15560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2712" name="file1" dev="loop5" ino=1048679 res=0 errno=0 [ 1149.436075][T15551] exFAT-fs (loop5): hint_cluster is invalid (17) [ 1149.755895][ T26] audit: type=1800 audit(1750160708.987:368): pid=15560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2712" name="file1" dev="loop5" ino=1048679 res=0 errno=0 [ 1150.496400][ T26] audit: type=1800 audit(1750160709.997:369): pid=15566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2715" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1150.526851][T15566] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1150.714413][T13560] EXT4-fs (loop3): unmounting filesystem. [ 1150.724413][T15566] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1150.819065][T15566] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1151.775071][T15566] syz.9.2715 (15566) used greatest stack depth: 20200 bytes left [ 1152.000107][T15594] loop3: detected capacity change from 0 to 256 [ 1152.079154][T15594] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e2c, utbl_chksum : 0xe619d30d) [ 1152.474969][T15603] netlink: 176 bytes leftover after parsing attributes in process `syz.9.2724'. [ 1153.496909][T15615] loop9: detected capacity change from 0 to 512 [ 1153.760583][T15615] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1153.813316][T15615] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.829521][T15588] loop7: detected capacity change from 0 to 32768 [ 1154.225488][T15588] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.2720 (15588) [ 1154.613401][T15588] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1154.724175][T15588] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1154.733988][T15588] BTRFS info (device loop7): using free space tree [ 1154.778184][ T9724] EXT4-fs (loop9): unmounting filesystem. [ 1155.476031][T13562] Bluetooth: hci1: Malformed LE Event: 0x1b [ 1155.819322][T15588] BTRFS error (device loop7): open_ctree failed: -12 [ 1156.303323][ T8023] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by udevd (8023) [ 1157.778792][T15682] loop5: detected capacity change from 0 to 1024 [ 1157.847198][T15683] netlink: 176 bytes leftover after parsing attributes in process `syz.9.2738'. [ 1158.337277][T15393] hfsplus: b-tree write err: -5, ino 3 [ 1158.495004][T15689] loop3: detected capacity change from 0 to 1024 [ 1158.893104][T15701] loop7: detected capacity change from 0 to 512 [ 1160.457048][T15701] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.2743: inode #1: comm syz.7.2743: iget: illegal inode # [ 1160.487485][T15701] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.2743: error while reading EA inode 1 err=-117 [ 1160.564872][T15701] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.2743: inode #1: comm syz.7.2743: iget: illegal inode # [ 1160.647994][T15701] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.2743: error while reading EA inode 1 err=-117 [ 1160.854456][T15701] EXT4-fs (loop7): 1 orphan inode deleted [ 1160.873700][T15701] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1161.017063][T15701] EXT4-fs (loop7): unmounting filesystem. [ 1161.434915][T15731] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2750'. [ 1162.899037][T13562] Bluetooth: hci2: Malformed LE Event: 0x1b [ 1163.821503][T15749] loop9: detected capacity change from 0 to 512 [ 1163.829498][T15749] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1163.903045][T15749] EXT4-fs (loop9): 1 truncate cleaned up [ 1163.920374][T15749] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1166.419394][ T9724] EXT4-fs (loop9): unmounting filesystem. [ 1167.202329][T15783] ubi: mtd0 is already attached to ubi31 [ 1167.856944][T15787] netlink: 176 bytes leftover after parsing attributes in process `syz.9.2762'. [ 1168.994772][T15795] loop9: detected capacity change from 0 to 1024 [ 1170.187691][T13562] Bluetooth: hci2: Malformed LE Event: 0x1b [ 1172.191659][T15820] loop4: detected capacity change from 0 to 1024 [ 1174.182998][T15840] netlink: 176 bytes leftover after parsing attributes in process `syz.9.2774'. [ 1174.664892][T15844] loop3: detected capacity change from 0 to 1024 [ 1175.612993][T13562] Bluetooth: hci1: Malformed LE Event: 0x1b [ 1177.363239][T15869] loop4: detected capacity change from 0 to 128 [ 1177.621223][T15869] syz.4.2784: attempt to access beyond end of device [ 1177.621223][T15869] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 1180.440019][T13562] Bluetooth: hci4: Malformed LE Event: 0x1b [ 1182.530022][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.385958][T15933] IPVS: stopping backup sync thread 11429 ... [ 1184.557380][T11269] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1184.651346][T15948] netlink: 'syz.3.2803': attribute type 4 has an invalid length. [ 1184.774541][T11269] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1184.809520][T11269] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.847391][T11269] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1184.877368][T11269] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1184.885824][T11269] usb 10-1: Manufacturer: syz [ 1185.304328][T11269] usb 10-1: config 0 descriptor?? [ 1186.559091][T11269] rc_core: IR keymap rc-hauppauge not found [ 1186.565052][T11269] Registered IR keymap rc-empty [ 1186.666408][T13562] Bluetooth: hci3: Malformed LE Event: 0x1b [ 1186.828966][T11269] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1186.841494][T11269] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input31 [ 1186.886896][ C0] igorplugusb 10-1:0.0: Error: urb status = -32 [ 1186.988838][T14977] usb 10-1: USB disconnect, device number 7 [ 1187.304440][T15980] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1187.313522][T15980] ubi: mtd0 is already attached to ubi31 [ 1188.187200][ T4301] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1190.807398][ T4301] usb 10-1: Using ep0 maxpacket: 32 [ 1191.684123][T16012] loop3: detected capacity change from 0 to 32768 [ 1192.773059][ T4301] usb 10-1: device descriptor read/all, error -71 [ 1196.631363][T16050] loop4: detected capacity change from 0 to 65536 [ 1196.859126][T16050] XFS (loop4): Mounting V5 Filesystem [ 1197.083777][T16050] XFS (loop4): Ending clean mount [ 1200.409041][T14780] XFS (loop4): Unmounting Filesystem [ 1200.709414][T16081] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1200.718982][T16081] ubi: mtd0 is already attached to ubi31 [ 1201.918144][ T4301] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1202.107407][ T4301] usb 4-1: Using ep0 maxpacket: 16 [ 1202.150829][ T4301] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.861019][ T4301] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1202.890672][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.920021][T16106] loop4: detected capacity change from 0 to 64 [ 1202.947370][ T4301] usb 4-1: Product: syz [ 1202.961835][ T4301] usb 4-1: Manufacturer: syz [ 1202.976756][ T4301] usb 4-1: SerialNumber: syz [ 1203.222854][T16118] loop9: detected capacity change from 0 to 1024 [ 1203.228694][ T4301] garmin_gps 4-1:8.0: Garmin GPS usb/tty converter detected [ 1203.257202][ T4712] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1203.266426][ T4301] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1203.302156][ T4301] garmin_gps: probe of ttyUSB0 failed with error -22 [ 1203.349315][ T4301] usb 4-1: USB disconnect, device number 10 [ 1203.432479][ T4301] garmin_gps 4-1:8.0: device disconnected [ 1203.467532][ T4712] usb 6-1: Using ep0 maxpacket: 16 [ 1203.484925][ T4712] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1203.557527][ T4712] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1204.107170][ T4712] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1204.202329][ T4712] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1204.261896][ T4712] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1204.321981][ T4712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.362398][ T4712] usb 6-1: Product: syz [ 1204.373495][ T4712] usb 6-1: Manufacturer: syz [ 1204.383896][ T4712] usb 6-1: SerialNumber: syz [ 1204.652124][T16135] vivid-000: ================= START STATUS ================= [ 1204.662961][T16135] vivid-000: Generate PTS: true [ 1204.668771][T16135] vivid-000: Generate SCR: true [ 1204.673849][T16135] tpg source WxH: 720x576 (Y'CbCr) [ 1204.679338][T16135] tpg field: 4 [ 1204.682855][T16135] tpg crop: 720x576@0x0 [ 1204.687194][T16135] tpg compose: 720x576@0x0 [ 1204.691784][T16135] tpg colorspace: 1 [ 1204.696050][T16135] tpg transfer function: 0/2 [ 1204.700930][T16135] tpg Y'CbCr encoding: 0/1 [ 1204.714725][T16135] tpg quantization: 0/2 [ 1204.719083][T16135] tpg RGB range: 0/2 [ 1204.723119][T16135] vivid-000: ================== END STATUS ================== [ 1205.097284][ T4263] Bluetooth: hci1: command 0x0406 tx timeout [ 1205.401429][ T4712] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1205.815075][T16123] loop7: detected capacity change from 0 to 32768 [ 1206.228068][T15665] usb 6-1: USB disconnect, device number 14 [ 1206.280658][T15665] usblp0: removed [ 1206.454164][ T4263] Bluetooth: hci1: Malformed LE Event: 0x1b [ 1207.317856][T16153] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1207.832590][T16167] loop9: detected capacity change from 0 to 1024 [ 1208.049503][T16176] binder: 16169:16176 ioctl c0306201 0 returned -14 [ 1209.839961][T16176] o2cb: This node has not been configured. [ 1209.846411][T16176] o2cb: Cluster check failed. Fix errors before retrying. [ 1209.854027][T16176] (syz.3.2858,16176,1):user_dlm_register:674 ERROR: status = -22 [ 1209.862034][T16176] (syz.3.2858,16176,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1212.526318][T16210] loop5: detected capacity change from 0 to 1024 [ 1212.572019][T16214] fuse: Bad value for 'group_id' [ 1213.075160][ T26] audit: type=1326 audit(1750160772.577:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16201 comm="syz.4.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274918e929 code=0x7fc00000 [ 1214.979836][T16247] loop3: detected capacity change from 0 to 128 [ 1215.004502][T16247] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1215.018705][T16247] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1215.029630][T16229] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1215.301460][ T4263] Bluetooth: hci2: Malformed LE Event: 0x1b [ 1216.147898][T16259] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1216.515962][T13560] EXT4-fs (loop3): unmounting filesystem. [ 1217.503656][T16272] loop5: detected capacity change from 0 to 32768 [ 1217.521167][T16272] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2885 (16272) [ 1217.597332][T16272] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1217.607601][T16272] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1217.616347][T16272] BTRFS info (device loop5): turning on sync discard [ 1217.623155][T16272] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1217.631317][T16272] BTRFS info (device loop5): turning off barriers [ 1217.637977][T16272] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1217.648649][T16272] BTRFS info (device loop5): trying to use backup root at mount time [ 1217.656771][T16272] BTRFS info (device loop5): metadata ratio 3 [ 1217.662885][T16272] BTRFS info (device loop5): enabling auto defrag [ 1217.669385][T16272] BTRFS info (device loop5): max_inline at 0 [ 1217.675384][T16272] BTRFS info (device loop5): using free space tree [ 1217.895631][T16287] fuse: Bad value for 'group_id' [ 1219.305576][ T4483] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1219.365831][T16272] BTRFS error (device loop5): failed to load root extent [ 1219.373202][T16272] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1219.381799][ T4709] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1219.440348][T16272] BTRFS warning (device loop5): couldn't read tree root [ 1219.447626][T16272] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1219.488069][T16272] BTRFS error (device loop5): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 1219.499850][T16272] BTRFS warning (device loop5): couldn't read tree root [ 1219.506851][T16272] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1219.533842][T16272] BTRFS error (device loop5): open_ctree failed: -22 [ 1219.642300][ T8023] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (8023) [ 1219.654496][T16312] loop4: detected capacity change from 0 to 1024 [ 1219.676413][T16309] loop9: detected capacity change from 0 to 2048 [ 1219.713667][T16309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1220.154594][T16320] overlayfs: missing 'lowerdir' [ 1221.670723][T16336] hub 6-0:1.0: USB hub found [ 1221.685793][T16336] hub 6-0:1.0: 1 port detected [ 1222.710866][T16345] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1223.256095][T16359] fuse: Bad value for 'group_id' [ 1224.450046][T16366] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1224.460899][T16366] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1224.488776][T16366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1224.496759][T16366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1224.988027][T16366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1225.432947][T16385] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1225.442522][T16385] ubi: mtd0 is already attached to ubi31 [ 1227.294042][T16391] loop5: detected capacity change from 0 to 32768 [ 1227.334662][T16392] loop7: detected capacity change from 0 to 512 [ 1227.344991][T16392] EXT4-fs: Ignoring removed nobh option [ 1227.476019][T16392] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1227.747615][ T26] audit: type=1800 audit(1750160787.247:371): pid=16392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2911" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1227.990136][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 1229.346379][T16410] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2914'. [ 1229.667434][ T32] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1229.887454][ T32] usb 6-1: Using ep0 maxpacket: 8 [ 1229.901492][ T32] usb 6-1: config 0 has an invalid interface number: 211 but max is 0 [ 1230.037238][ T32] usb 6-1: config 0 has no interface number 0 [ 1230.063090][ T32] usb 6-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1230.087453][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.167707][ T32] usb 6-1: Product: syz [ 1230.171943][ T32] usb 6-1: Manufacturer: syz [ 1230.176572][ T32] usb 6-1: SerialNumber: syz [ 1230.222693][ T32] usb 6-1: config 0 descriptor?? [ 1230.250086][ T32] option 6-1:0.211: GSM modem (1-port) converter detected [ 1230.472524][T16413] loop3: detected capacity change from 0 to 4096 [ 1230.759784][T16413] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1231.348310][T16422] autofs4:pid:16422:autofs_fill_super: called with bogus options [ 1232.179295][T11267] usb 6-1: USB disconnect, device number 15 [ 1232.186294][T11267] option 6-1:0.211: device disconnected [ 1232.761446][T16440] loop7: detected capacity change from 0 to 512 [ 1232.842795][T16440] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1232.907541][T16440] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 1232.925864][T16440] System zones: 1-12 [ 1233.059428][T16440] EXT4-fs (loop7): 1 truncate cleaned up [ 1233.065157][T16440] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1234.423175][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 1235.098958][T16438] loop5: detected capacity change from 0 to 32768 [ 1235.236210][T16474] autofs4:pid:16474:autofs_fill_super: called with bogus options [ 1235.270783][T16472] loop4: detected capacity change from 0 to 1024 [ 1235.412677][T16438] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1236.326900][ T7189] ocfs2: Unmounting device (7,5) on (node local) [ 1239.963317][T16541] autofs4:pid:16541:autofs_fill_super: called with bogus options [ 1240.094553][T16546] loop4: detected capacity change from 0 to 4096 [ 1240.194076][T16549] loop9: detected capacity change from 0 to 128 [ 1240.207798][T16549] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1240.229411][T16549] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1240.317454][T16546] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1240.862160][T15393] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1243.547236][T11273] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1243.574310][T16577] loop9: detected capacity change from 0 to 1024 [ 1243.775317][T11273] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1243.876946][T11273] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.971340][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.988586][T11273] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1244.056172][T11273] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1244.107287][T11273] usb 6-1: Manufacturer: syz [ 1244.149439][T11273] usb 6-1: config 0 descriptor?? [ 1244.735349][T16571] loop3: detected capacity change from 0 to 32768 [ 1245.127182][T11273] rc_core: IR keymap rc-hauppauge not found [ 1245.133160][T11273] Registered IR keymap rc-empty [ 1245.861692][T11273] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1245.873300][T11273] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input32 [ 1246.036438][T14977] usb 6-1: USB disconnect, device number 16 [ 1246.468121][T16579] loop7: detected capacity change from 0 to 32768 [ 1246.520618][T16579] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1246.557475][T16579] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1246.602261][T16579] BTRFS info (device loop7): using free space tree [ 1246.707657][T16579] BTRFS error (device loop7): open_ctree failed: -12 [ 1246.940327][T16630] tmpfs: Unknown parameter 'indo64' [ 1247.010905][ T8023] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by udevd (8023) [ 1249.360444][T16648] loop7: detected capacity change from 0 to 32768 [ 1249.517612][T16648] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1250.212347][T16648] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1250.255307][T16648] BTRFS info (device loop7): using free space tree [ 1252.446280][T16722] loop5: detected capacity change from 0 to 1024 [ 1254.576654][T16648] BTRFS error (device loop7): open_ctree failed: -12 [ 1254.577144][ T8459] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by udevd (8459) [ 1255.037339][T16748] loop4: detected capacity change from 0 to 1024 [ 1255.094534][T16748] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1255.245929][T16748] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1255.348216][T16761] loop3: detected capacity change from 0 to 1024 [ 1256.229332][T16771] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1256.236754][T16771] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1256.272604][T14780] EXT4-fs (loop4): unmounting filesystem. [ 1256.347050][T16781] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1256.396502][T16775] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(10) [ 1256.403187][T16775] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1256.557324][ T5597] vhci_hcd: vhci_device speed not set [ 1256.574071][T16771] vhci_hcd vhci_hcd.0: Device attached [ 1256.617333][T16775] vhci_hcd vhci_hcd.0: Device attached [ 1256.627253][ T5597] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 1256.635063][T16786] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(15) [ 1256.641710][T16786] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1256.658236][T16782] loop3: detected capacity change from 0 to 4096 [ 1256.667340][T16781] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(18) [ 1256.674000][T16781] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1256.707421][T16782] ntfs3: Unknown parameter 'windows_names' [ 1256.767312][ T5595] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1256.825012][T16781] vhci_hcd vhci_hcd.0: Device attached [ 1256.845687][T16775] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1256.887229][T16771] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1256.893829][T16771] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1256.897295][T16786] vhci_hcd vhci_hcd.0: Device attached [ 1256.967955][ T5595] usb 5-1: no configurations [ 1256.972626][ T5595] usb 5-1: can't read configurations, error -22 [ 1257.017538][T16771] vhci_hcd vhci_hcd.0: Device attached [ 1257.048748][T16795] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1257.096036][T16771] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1257.131356][T16789] vhci_hcd: connection closed [ 1257.147191][ T5595] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1257.159708][ T4684] vhci_hcd: stop threads [ 1257.165836][ T4684] vhci_hcd: release socket [ 1257.171405][T16788] vhci_hcd: connection closed [ 1257.172975][T16792] vhci_hcd: connection closed [ 1257.178839][T16777] vhci_hcd: connection closed [ 1257.184114][T16776] vhci_hcd: connection reset by peer [ 1257.209718][ T4684] vhci_hcd: disconnect device [ 1257.224435][ T4684] vhci_hcd: stop threads [ 1257.231110][ T4684] vhci_hcd: release socket [ 1257.243308][ T4684] vhci_hcd: disconnect device [ 1257.257575][ T4684] vhci_hcd: stop threads [ 1257.261875][ T4684] vhci_hcd: release socket [ 1257.276818][ T4684] vhci_hcd: disconnect device [ 1257.296301][ T4684] vhci_hcd: stop threads [ 1257.317583][ T4684] vhci_hcd: release socket [ 1257.332510][ T4684] vhci_hcd: disconnect device [ 1257.362956][ T4684] vhci_hcd: stop threads [ 1257.383421][ T5595] usb 5-1: no configurations [ 1257.389867][ T5595] usb 5-1: can't read configurations, error -22 [ 1257.392196][T16766] loop5: detected capacity change from 0 to 32768 [ 1257.398568][ T4684] vhci_hcd: release socket [ 1257.424255][ T5595] usb usb5-port1: attempt power cycle [ 1257.432781][ T4684] vhci_hcd: disconnect device [ 1257.539767][T16766] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 1257.562818][T16804] fuse: Unknown parameter 'grou00000000000000000000' [ 1257.847316][ T5595] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1257.916083][ T7189] ocfs2: Unmounting device (7,5) on (node local) [ 1257.928447][ T5595] usb 5-1: no configurations [ 1257.933198][ T5595] usb 5-1: can't read configurations, error -22 [ 1258.073919][T16812] loop9: detected capacity change from 0 to 2048 [ 1258.117249][ T5595] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1258.150264][ T5595] usb 5-1: no configurations [ 1258.151660][T16812] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1258.154917][ T5595] usb 5-1: can't read configurations, error -22 [ 1258.155098][ T5595] usb usb5-port1: unable to enumerate USB device [ 1260.103203][T16836] loop7: detected capacity change from 0 to 512 [ 1260.212995][T16836] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1260.389078][T16836] EXT4-fs (loop7): 1 truncate cleaned up [ 1260.394804][T16836] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1260.476456][T16846] loop4: detected capacity change from 0 to 16 [ 1260.585044][T16846] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1261.033749][ T7617] EXT4-fs (loop7): unmounting filesystem. [ 1261.713112][T16863] 9pnet_fd: Insufficient options for proto=fd [ 1261.807400][ T5597] vhci_hcd: vhci_device speed not set [ 1261.897302][T14995] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1262.178861][T14995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.337041][T14995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.492915][T14995] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1262.676060][T14995] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1262.823424][T14995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.004036][T14995] usb 5-1: config 0 descriptor?? [ 1263.237301][ T32] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1263.417940][ T32] usb 4-1: no configurations [ 1263.460817][T15665] usb usb52-port1: attempt power cycle [ 1263.542453][T14995] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 1263.551144][ T32] usb 4-1: can't read configurations, error -22 [ 1263.587362][T16889] loop9: detected capacity change from 0 to 512 [ 1263.617604][T16889] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1263.710952][T16889] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1263.730939][T16889] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.3021: bg 0: block 248: padding at end of block bitmap is not set [ 1263.750673][T16889] Quota error (device loop9): write_blk: dquota write failed [ 1263.758599][T16889] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1263.768744][T16889] EXT4-fs error (device loop9): ext4_acquire_dquot:6814: comm syz.9.3021: Failed to acquire dquot type 1 [ 1263.791040][T16889] EXT4-fs (loop9): 1 truncate cleaned up [ 1263.856813][T16889] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1264.149718][T15665] usb usb52-port1: unable to enumerate USB device [ 1264.984455][T14995] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 1265.116138][T14995] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1265.152605][T14995] usb 5-1: USB disconnect, device number 12 [ 1265.159049][ T32] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1265.359026][ T32] usb 4-1: no configurations [ 1265.363992][ T32] usb 4-1: can't read configurations, error -22 [ 1265.409784][ T32] usb usb4-port1: attempt power cycle [ 1266.473796][ T32] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1266.486484][ T9724] EXT4-fs (loop9): unmounting filesystem. [ 1266.747015][T16918] 9pnet_fd: Insufficient options for proto=fd [ 1266.907222][ T32] usb 4-1: device not accepting address 13, error -71 [ 1267.024040][T16907] fido_id[16907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1267.140689][T16932] loop4: detected capacity change from 0 to 128 [ 1267.360534][T16932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1267.435321][T16939] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1267.444843][T16939] ubi: mtd0 is already attached to ubi31 [ 1268.097634][T16932] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1269.178542][T14780] EXT4-fs (loop4): unmounting filesystem. [ 1269.793132][T16966] loop5: detected capacity change from 0 to 1024 [ 1269.803470][T16966] EXT4-fs: Ignoring removed i_version option [ 1270.450539][T16966] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.3041: Invalid block bitmap block 0 in block_group 0 [ 1270.464575][T16966] Quota error (device loop5): write_blk: dquota write failed [ 1270.472311][T16966] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1270.482712][T16966] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.3041: Failed to acquire dquot type 0 [ 1270.500626][T16966] EXT4-fs error (device loop5): ext4_free_blocks:6210: comm syz.5.3041: Freeing blocks not in datazone - block = 0, count = 4096 [ 1270.515061][T16966] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.3041: Invalid inode bitmap blk 0 in block_group 0 [ 1270.528100][T11267] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1270.538543][T16966] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 1270.547662][T16966] EXT4-fs (loop5): 1 orphan inode deleted [ 1270.553448][T16966] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1270.577328][T16965] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 1270.584943][T16965] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #2: block 16: comm syz.5.3041: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1270.601093][ T4461] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 1270.628935][ T4461] EXT4-fs error (device loop5): ext4_release_dquot:6850: comm kworker/u4:10: Failed to release dquot type 0 [ 1270.941050][T16974] overlayfs: failed to resolve './file1': -2 [ 1271.484989][T11267] usb 4-1: no configurations [ 1271.489980][ C0] ------------[ cut here ]------------ [ 1271.490101][ C0] refcount_t: addition on 0; use-after-free. [ 1271.490604][ C0] WARNING: CPU: 0 PID: 11267 at lib/refcount.c:25 refcount_warn_saturate+0xff/0x1a0 [ 1271.490660][ C0] Modules linked in: [ 1271.490688][ C0] CPU: 0 PID: 11267 Comm: kworker/0:5 Not tainted 6.1.141-syzkaller #0 [ 1271.490713][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1271.490728][ C0] Workqueue: usb_hub_wq hub_event [ 1271.490757][ C0] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 1271.490790][ C0] Code: 09 01 48 c7 c7 a0 d2 be 8a e8 ad 30 45 fd 0f 0b eb e0 e8 f4 1d 79 fd c6 05 fa 72 e2 09 01 48 c7 c7 e0 d1 be 8a e8 91 30 45 fd <0f> 0b eb c4 e8 d8 1d 79 fd c6 05 df 72 e2 09 01 48 c7 c7 40 d2 be [ 1271.490812][ C0] RSP: 0018:ffffc90000007828 EFLAGS: 00010246 [ 1271.490834][ C0] RAX: b6a54ec9388acb00 RBX: 0000000000000002 RCX: ffff888030509dc0 [ 1271.490852][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1271.490868][ C0] RBP: ffffc90000007990 R08: dffffc0000000000 R09: ffffed10171c4f34 [ 1271.490886][ C0] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: ffff88805a693880 [ 1271.490904][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff8880558efc48 [ 1271.490922][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1271.490942][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1271.490960][ C0] CR2: 00007fc92908f368 CR3: 00000000264e5000 CR4: 00000000003506f0 [ 1271.490980][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1271.490995][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1271.491011][ C0] Call Trace: [ 1271.491019][ C0] [ 1271.491031][ C0] tipc_crypto_xmit+0x17a9/0x2300 [ 1271.491086][ C0] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 1271.491131][ C0] tipc_bearer_xmit_skb+0x242/0x3f0 [ 1271.491167][ C0] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 1271.491201][ C0] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 1271.491245][ C0] tipc_disc_timeout+0x568/0x6b0 [ 1271.491277][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 1271.491319][ C0] call_timer_fn+0x1a0/0x670 [ 1271.491342][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 1271.491374][ C0] ? call_timer_fn+0xc1/0x670 [ 1271.491395][ C0] ? __run_timers+0x7c0/0x7c0 [ 1271.491424][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1271.491455][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1271.491475][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 1271.491503][ C0] __run_timers+0x525/0x7c0 [ 1271.491537][ C0] ? detach_timer+0x350/0x350 [ 1271.491565][ C0] ? lock_chain_count+0x20/0x20 [ 1271.491601][ C0] run_timer_softirq+0x63/0xf0 [ 1271.491636][ C0] handle_softirqs+0x2a1/0x920 [ 1271.491677][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 1271.491716][ C0] ? do_softirq+0x200/0x200 [ 1271.491753][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1271.491790][ C0] __irq_exit_rcu+0x12f/0x220 [ 1271.491824][ C0] ? irq_exit_rcu+0x20/0x20 [ 1271.491868][ C0] irq_exit_rcu+0x5/0x20 [ 1271.491898][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1271.491933][ C0] [ 1271.491941][ C0] [ 1271.491951][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1271.491974][ C0] RIP: 0010:console_emit_next_record+0xab0/0xc90 [ 1271.492009][ C0] Code: 86 6c 1a 00 4d 85 ff 75 16 e8 7c 6c 1a 00 eb 15 e8 75 6c 1a 00 e8 20 27 a9 08 4d 85 ff 74 ea e8 66 6c 1a 00 fb 48 8b 5c 24 48 <48> c7 84 24 80 00 00 00 0e 36 e0 45 4a c7 04 2b 00 00 00 00 4a c7 [ 1271.492029][ C0] RSP: 0018:ffffc900051dee60 EFLAGS: 00000283 [ 1271.492050][ C0] RAX: ffffffff81666a0a RBX: 1ffff92000a3bddc RCX: 0000000000100000 [ 1271.492068][ C0] RDX: ffffc9001a74a000 RSI: 00000000000041d8 RDI: 00000000000041d9 [ 1271.492085][ C0] RBP: ffffc900051df0a0 R08: dffffc0000000000 R09: fffffbfff2117049 [ 1271.492103][ C0] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: ffffffff8166678d [ 1271.492121][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000200 [ 1271.492140][ C0] ? console_emit_next_record+0x82d/0xc90 [ 1271.492177][ C0] ? console_emit_next_record+0xaaa/0xc90 [ 1271.492224][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 1271.492258][ C0] ? info_print_prefix+0x300/0x300 [ 1271.492300][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1271.492341][ C0] ? __down_trylock_console_sem+0xeb/0x1e0 [ 1271.492384][ C0] ? __down_trylock_console_sem+0x184/0x1e0 [ 1271.492415][ C0] ? dev_vprintk_emit+0x32d/0x3d3 [ 1271.492445][ C0] ? widen_string+0x3b/0x2b0 [ 1271.492467][ C0] ? string+0x26d/0x2b0 [ 1271.492491][ C0] ? dev_vprintk_emit+0x32d/0x3d3 [ 1271.492521][ C0] ? console_trylock+0x160/0x160 [ 1271.492555][ C0] console_unlock+0x223/0x630 [ 1271.492589][ C0] ? dev_vprintk_emit+0x32d/0x3d3 [ 1271.492621][ C0] vprintk_emit+0x489/0x680 [ 1271.492659][ C0] ? printk_sprint+0x460/0x460 [ 1271.492690][ C0] ? vscnprintf+0x80/0x80 [ 1271.492709][ C0] ? ret_from_fork+0x1f/0x30 [ 1271.492753][ C0] dev_vprintk_emit+0x32d/0x3d3 [ 1271.492787][ C0] ? _dev_info+0x14e/0x14e [ 1271.492824][ C0] ? mark_lock+0x94/0x320 [ 1271.492859][ C0] dev_printk_emit+0xdd/0x11d [ 1271.492894][ C0] ? mark_lock+0x94/0x320 [ 1271.492925][ C0] ? dev_vprintk_emit+0x3d3/0x3d3 [ 1271.492957][ C0] ? __lock_acquire+0x13c0/0x7c50 [ 1271.492992][ C0] ? __dev_printk+0x131/0x190 [ 1271.493024][ C0] _dev_err+0x107/0x14e [ 1271.493060][ C0] ? _dev_crit+0x14e/0x14e [ 1271.493095][ C0] ? mark_lock+0x94/0x320 [ 1271.493123][ C0] ? verify_lock_unused+0x140/0x140 [ 1271.493154][ C0] ? verify_lock_unused+0x140/0x140 [ 1271.493182][ C0] ? __lock_acquire+0x13c0/0x7c50 [ 1271.493214][ C0] usb_get_configuration+0x49cf/0x4cb0 [ 1271.493261][ C0] ? trace_rpm_return_int_rcuidle+0x1e/0x1f0 [ 1271.493301][ C0] ? rpm_resume+0xb63/0x1a20 [ 1271.493346][ C0] ? mark_lock+0x94/0x320 [ 1271.493384][ C0] ? usb_destroy_configuration+0x660/0x660 [ 1271.493415][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1271.493449][ C0] ? lock_chain_count+0x20/0x20 [ 1271.493476][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1271.493508][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1271.493537][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 1271.493565][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1271.493597][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1271.493622][ C0] usb_new_device+0x146/0x1620 [ 1271.493661][ C0] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1271.493689][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1271.493719][ C0] ? mutex_unlock+0x10/0x10 [ 1271.493745][ C0] ? lock_chain_count+0x20/0x20 [ 1271.493772][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 1271.493803][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 1271.493839][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1271.493871][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1271.493895][ C0] hub_event+0x2b02/0x5210 [ 1271.493968][ C0] ? led_work+0x6e0/0x6e0 [ 1271.493990][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1271.494019][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1271.494051][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1271.494084][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1271.494120][ C0] ? process_one_work+0x7a1/0x1160 [ 1271.494145][ C0] process_one_work+0x898/0x1160 [ 1271.494186][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1271.494217][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 1271.494249][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1271.494281][ C0] ? kthread_data+0x4b/0xc0 [ 1271.494318][ C0] worker_thread+0xaa2/0x1250 [ 1271.494378][ C0] kthread+0x29d/0x330 [ 1271.494408][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1271.494433][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1271.494467][ C0] ret_from_fork+0x1f/0x30 [ 1271.494511][ C0] [ 1271.494530][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1271.494542][ C0] CPU: 0 PID: 11267 Comm: kworker/0:5 Not tainted 6.1.141-syzkaller #0 [ 1271.494564][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1271.494578][ C0] Workqueue: usb_hub_wq hub_event [ 1271.494599][ C0] Call Trace: [ 1271.494607][ C0] [ 1271.494615][ C0] dump_stack_lvl+0x168/0x22e [ 1271.494644][ C0] ? memcpy+0x3c/0x60 [ 1271.494668][ C0] ? show_regs_print_info+0x12/0x12 [ 1271.494697][ C0] ? load_image+0x3b0/0x3b0 [ 1271.494733][ C0] panic+0x2c9/0x710 [ 1271.494758][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1271.494787][ C0] ? ret_from_fork+0x1f/0x30 [ 1271.494821][ C0] __warn+0x2f8/0x4f0 [ 1271.494839][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 1271.494870][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 1271.494899][ C0] report_bug+0x2ba/0x4f0 [ 1271.494927][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 1271.494962][ C0] handle_bug+0x3a/0x70 [ 1271.494989][ C0] exc_invalid_op+0x16/0x40 [ 1271.495019][ C0] asm_exc_invalid_op+0x16/0x20 [ 1271.495038][ C0] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 1271.495068][ C0] Code: 09 01 48 c7 c7 a0 d2 be 8a e8 ad 30 45 fd 0f 0b eb e0 e8 f4 1d 79 fd c6 05 fa 72 e2 09 01 48 c7 c7 e0 d1 be 8a e8 91 30 45 fd <0f> 0b eb c4 e8 d8 1d 79 fd c6 05 df 72 e2 09 01 48 c7 c7 40 d2 be [ 1271.495086][ C0] RSP: 0018:ffffc90000007828 EFLAGS: 00010246 [ 1271.495105][ C0] RAX: b6a54ec9388acb00 RBX: 0000000000000002 RCX: ffff888030509dc0 [ 1271.495122][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1271.495136][ C0] RBP: ffffc90000007990 R08: dffffc0000000000 R09: ffffed10171c4f34 [ 1271.495153][ C0] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: ffff88805a693880 [ 1271.495171][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff8880558efc48 [ 1271.495203][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 1271.495232][ C0] tipc_crypto_xmit+0x17a9/0x2300 [ 1271.495284][ C0] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 1271.495328][ C0] tipc_bearer_xmit_skb+0x242/0x3f0 [ 1271.495367][ C0] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 1271.495400][ C0] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 1271.495443][ C0] tipc_disc_timeout+0x568/0x6b0 [ 1271.495474][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 1271.495515][ C0] call_timer_fn+0x1a0/0x670 [ 1271.495537][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 1271.495560][ C0] ? call_timer_fn+0xc1/0x670 [ 1271.495581][ C0] ? __run_timers+0x7c0/0x7c0 [ 1271.495610][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1271.495641][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1271.495660][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 1271.495687][ C0] __run_timers+0x525/0x7c0 [ 1271.495720][ C0] ? detach_timer+0x350/0x350 [ 1271.495748][ C0] ? lock_chain_count+0x20/0x20 [ 1271.495783][ C0] run_timer_softirq+0x63/0xf0 [ 1271.495833][ C0] handle_softirqs+0x2a1/0x920 [ 1271.495872][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 1271.495910][ C0] ? do_softirq+0x200/0x200 [ 1271.495947][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1271.495983][ C0] __irq_exit_rcu+0x12f/0x220 [ 1271.496015][ C0] ? irq_exit_rcu+0x20/0x20 [ 1271.496058][ C0] irq_exit_rcu+0x5/0x20 [ 1271.496088][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1271.496122][ C0] [ 1271.496129][ C0] [ 1271.496138][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1271.496160][ C0] RIP: 0010:console_emit_next_record+0xab0/0xc90 [ 1271.496193][ C0] Code: 86 6c 1a 00 4d 85 ff 75 16 e8 7c 6c 1a 00 eb 15 e8 75 6c 1a 00 e8 20 27 a9 08 4d 85 ff 74 ea e8 66 6c 1a 00 fb 48 8b 5c 24 48 <48> c7 84 24 80 00 00 00 0e 36 e0 45 4a c7 04 2b 00 00 00 00 4a c7 [ 1271.496211][ C0] RSP: 0018:ffffc900051dee60 EFLAGS: 00000283 [ 1271.496229][ C0] RAX: ffffffff81666a0a RBX: 1ffff92000a3bddc RCX: 0000000000100000 [ 1271.496246][ C0] RDX: ffffc9001a74a000 RSI: 00000000000041d8 RDI: 00000000000041d9 [ 1271.496261][ C0] RBP: ffffc900051df0a0 R08: dffffc0000000000 R09: fffffbfff2117049 [ 1271.496278][ C0] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: ffffffff8166678d [ 1271.496295][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000200 [ 1271.496313][ C0] ? console_emit_next_record+0x82d/0xc90 [ 1271.496348][ C0] ? console_emit_next_record+0xaaa/0xc90 [ 1271.496405][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 1271.496436][ C0] ? info_print_prefix+0x300/0x300 [ 1271.496478][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1271.496516][ C0] ? __down_trylock_console_sem+0xeb/0x1e0 [ 1271.496550][ C0] ? __down_trylock_console_sem+0x184/0x1e0 [ 1271.496580][ C0] ? dev_vprintk_emit+0x32d/0x3d3 [ 1271.496608][ C0] ? widen_string+0x3b/0x2b0 [ 1271.496628][ C0] ? string+0x26d/0x2b0 [ 1271.496646][ C0] ? dev_vprintk_emit+0x32d/0x3d3 [ 1271.496675][ C0] ? console_trylock+0x160/0x160 [ 1271.496707][ C0] console_unlock+0x223/0x630 [ 1271.496740][ C0] ? dev_vprintk_emit+0x32d/0x3d3 [ 1271.496770][ C0] vprintk_emit+0x489/0x680 [ 1271.496802][ C0] ? printk_sprint+0x460/0x460 [ 1271.496832][ C0] ? vscnprintf+0x80/0x80 [ 1271.496850][ C0] ? ret_from_fork+0x1f/0x30 [ 1271.496891][ C0] dev_vprintk_emit+0x32d/0x3d3 [ 1271.496923][ C0] ? _dev_info+0x14e/0x14e [ 1271.496959][ C0] ? mark_lock+0x94/0x320 [ 1271.496994][ C0] dev_printk_emit+0xdd/0x11d [ 1271.497026][ C0] ? mark_lock+0x94/0x320 [ 1271.497061][ C0] ? dev_vprintk_emit+0x3d3/0x3d3 [ 1271.497088][ C0] ? __lock_acquire+0x13c0/0x7c50 [ 1271.497118][ C0] ? __dev_printk+0x131/0x190 [ 1271.497147][ C0] _dev_err+0x107/0x14e [ 1271.497180][ C0] ? _dev_crit+0x14e/0x14e [ 1271.497211][ C0] ? mark_lock+0x94/0x320 [ 1271.497236][ C0] ? verify_lock_unused+0x140/0x140 [ 1271.497264][ C0] ? verify_lock_unused+0x140/0x140 [ 1271.497289][ C0] ? __lock_acquire+0x13c0/0x7c50 [ 1271.497319][ C0] usb_get_configuration+0x49cf/0x4cb0 [ 1271.497367][ C0] ? trace_rpm_return_int_rcuidle+0x1e/0x1f0 [ 1271.497403][ C0] ? rpm_resume+0xb63/0x1a20 [ 1271.497444][ C0] ? mark_lock+0x94/0x320 [ 1271.497474][ C0] ? usb_destroy_configuration+0x660/0x660 [ 1271.497503][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1271.497534][ C0] ? lock_chain_count+0x20/0x20 [ 1271.497560][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1271.497591][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1271.497620][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 1271.497647][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1271.497676][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1271.497699][ C0] usb_new_device+0x146/0x1620 [ 1271.497734][ C0] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1271.497760][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1271.497789][ C0] ? mutex_unlock+0x10/0x10 [ 1271.497815][ C0] ? lock_chain_count+0x20/0x20 [ 1271.497841][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 1271.497871][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 1271.497905][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1271.497935][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1271.497960][ C0] hub_event+0x2b02/0x5210 [ 1271.498029][ C0] ? led_work+0x6e0/0x6e0 [ 1271.498051][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1271.498078][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1271.498109][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1271.498141][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1271.498175][ C0] ? process_one_work+0x7a1/0x1160 [ 1271.498198][ C0] process_one_work+0x898/0x1160 [ 1271.498237][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1271.498266][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 1271.498295][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1271.498326][ C0] ? kthread_data+0x4b/0xc0 [ 1271.498368][ C0] worker_thread+0xaa2/0x1250 [ 1271.498419][ C0] kthread+0x29d/0x330 [ 1271.498448][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1271.498471][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1271.498504][ C0] ret_from_fork+0x1f/0x30 [ 1271.498546][ C0] [ 1271.498844][ C0] Kernel Offset: disabled [ 1272.976687][ C0] Rebooting in 86400 seconds..