last executing test programs: 8m6.116093544s ago: executing program 0 (id=1505): ioprio_get$uid(0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10) 8m5.033681969s ago: executing program 0 (id=1509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfffc, 0x1, 0x0, 0x0, 0xfffffffe, 0x5c0, 0x0, 0xfffc, 0x1, 0x0}) 7m59.75966153s ago: executing program 0 (id=1521): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x0, 0xa, 0x68, {0x68, 0x5, "2dbb0ffd6cea28fac34e881522d83eb1728818fae80793a68a39cceb2139b1f64fe6bd759531a8ccc185c5e88b4cbe87cc28808c7549f71acbb02b713742baddde00de93defd9d12e246178daaa3df04d8c746fc7b40a97b1b39f3682ebbd295c198f1b4046f"}}, &(0x7f0000000100)={0x0, 0x3, 0x8, @string={0x8, 0x3, "cffe0727e325"}}, 0x0, 0x0, 0x0}, &(0x7f0000000980)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x1}}, 0x0, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000580)={0x40, 0xb, 0x2, "c24f"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x3}, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x19, 0x2, "8061"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 7m56.311561092s ago: executing program 0 (id=1527): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) close(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 7m53.562405381s ago: executing program 0 (id=1531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) dup(r0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfffc, 0x1, 0x0, 0x0, 0xfffffffe, 0x5c0, 0x0, 0xfffc, 0x1, 0x0}) 7m53.095632616s ago: executing program 1 (id=1535): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 7m52.890337873s ago: executing program 1 (id=1537): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x0, 0xa, 0x68, {0x68, 0x5, "2dbb0ffd6cea28fac34e881522d83eb1728818fae80793a68a39cceb2139b1f64fe6bd759531a8ccc185c5e88b4cbe87cc28808c7549f71acbb02b713742baddde00de93defd9d12e246178daaa3df04d8c746fc7b40a97b1b39f3682ebbd295c198f1b4046f"}}, &(0x7f0000000100)={0x0, 0x3, 0x8, @string={0x8, 0x3, "cffe0727e325"}}, 0x0, 0x0, 0x0}, &(0x7f0000000980)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x1}}, 0x0, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000580)={0x40, 0xb, 0x2, "c24f"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x3}, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x19, 0x2, "8061"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 7m47.883756445s ago: executing program 1 (id=1546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310002000015000300686173683a69702c706f72742c6e6574000000"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0xc0c1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="06000000200d"], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040000) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000406010100000000000000000700000a0500010007080000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = fanotify_init(0xf00, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r8, r8, 0x2) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r7, 0x1, 0x800002b, r9, 0x0) 7m47.610266414s ago: executing program 1 (id=1547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYRESDEC, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xc, 0x4, 0x290, 0xffffffff, 0x220, 0x130, 0x0, 0x98, 0xffffffff, 0x220, 0x220, 0x220, 0x98, 0x4, 0x0, {[{{@ip={@local, @loopback, 0xff, 0xffffff00, 'dummy0\x00', 'veth1_macvtap\x00', {}, {}, 0x8, 0x2, 0x46}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x150, 0x22, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) symlinkat(&(0x7f0000000040)='./file1/file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000002380)='./file1/file1\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchmod(r3, 0x208) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x240448c8) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 7m47.583492314s ago: executing program 0 (id=1548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f00000007c0)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@numtail}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 7m46.552793588s ago: executing program 1 (id=1550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) 7m46.1920836s ago: executing program 1 (id=1551): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) socket$inet6(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) 7m32.371177828s ago: executing program 32 (id=1548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f00000007c0)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@numtail}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 7m30.952353154s ago: executing program 33 (id=1551): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) socket$inet6(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) 4m40.47966809s ago: executing program 4 (id=1975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) dup(r1) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfffc, 0x1, 0x0, 0x0, 0xfffffffe, 0x5c0, 0x0, 0xfffc, 0x1, 0x0}) 4m38.824435693s ago: executing program 4 (id=1979): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) setxattr$security_capability(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180), &(0x7f0000000200)=@v3={0x3000000, [{0xff, 0xe04e}, {0x4, 0x40}]}, 0x18, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') chdir(&(0x7f00000001c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 4m37.282447703s ago: executing program 4 (id=1984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6eca}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3400}, @CTA_SYNPROXY={0x4}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m37.158835087s ago: executing program 4 (id=1986): socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x800084, 0x80800) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 4m36.403459852s ago: executing program 4 (id=1990): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) close(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 4m35.322089556s ago: executing program 4 (id=1993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f0000000300)={[{@utf8}, {@shortname_winnt}, {@shortname_win95}, {@numtail}, {@shortname_win95}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@fat=@time_offset={'time_offset', 0x3d, 0x471}}, {@shortname_win95}]}, 0x1, 0x362, &(0x7f0000000900)="$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") 4m19.765994155s ago: executing program 34 (id=1993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f0000000300)={[{@utf8}, {@shortname_winnt}, {@shortname_win95}, {@numtail}, {@shortname_win95}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@fat=@time_offset={'time_offset', 0x3d, 0x471}}, {@shortname_win95}]}, 0x1, 0x362, &(0x7f0000000900)="$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") 2m35.444575341s ago: executing program 2 (id=2347): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, 0x0, 0x20040051) 2m35.14699174s ago: executing program 2 (id=2348): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/84, 0x54}], 0x1}}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40000000, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x86, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @multicast2, @empty}, {0x4e20, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b0eb591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "00802000003211817ada1e97297a54f5"}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x0, 0x72, 0x0, &(0x7f0000000500)=""/114, 0x4, 0x0, 0x0, 0x50, &(0x7f0000000440), &(0x7f0000000900)="b8d7bcc846386ac4b94b264c415be10d2bb301903dc7a982f4fca061c8959e72cd49a0084c309017d3b162e7f4e30f9934a63a03bed8c8b2b187ff34c259bdb7f66cd988188ac70f412910e48b3ae1b1", 0x3, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x35aa2dae0099c8e0) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 2m31.890805825s ago: executing program 2 (id=2349): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x808, &(0x7f0000000480)=ANY=[], 0x1, 0x1c2, &(0x7f0000000280)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbGRvA9EIov+KW9ro1p/zOnPTU1Vomy8zQ6qktjywml9pj5Ca52IGBmSE09ciiYiGG7MScnNSi4oUMFbeYIa5hsL/GBrXGIQnkqCM+HlkzGks4J0lpirGxZSqcPfNBfh2bxhGGRyuYN9Z55jXWFaZOzWvI+/k/qypr3sSJG2c2djY2rpxYF5Xmt4qxJcVlU1MnI5PDFjWBzcyG7FCjHyY5sPZ4+DWfMlZ6ncp8yXhhkdSpFVUzJ3xRms1o+J3hDk/ZCgkNDSeJKxIWDSaMH1j/N7gyVNxKTmlgSFMIY0xSYxNr23JmTggzJwMDg0JL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoaykBBbLvgS5HGXwmv1cZOGQzu9kzLmqEByQIO15VQnixYT0LyCg8dTU2jlOSEhk0SCUluBYYvGbbu4Vwt0MCCFG0qDAwM2xlhcQsB12CMUTAKRsEoGAWjYBSMglEwCkbBKBgFIwIAAgAA///fBI5p") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 2m30.669971255s ago: executing program 2 (id=2355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0xd, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 2m26.280890626s ago: executing program 2 (id=2363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x40}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 2m25.705226625s ago: executing program 2 (id=2366): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}]}, &(0x7f0000000040)=0x10) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0xa0880) shutdown(r1, 0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={r2, 0x4}, 0x8) 2m10.481740466s ago: executing program 35 (id=2366): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}]}, &(0x7f0000000040)=0x10) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0xa0880) shutdown(r1, 0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={r2, 0x4}, 0x8) 26.709585277s ago: executing program 7 (id=2700): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, 0x0, &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 26.682090099s ago: executing program 7 (id=2702): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_inodes=E']) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x286822, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}]}) 26.594873321s ago: executing program 7 (id=2703): bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x7ffffff3, @mcast1, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0xe}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) 21.448815147s ago: executing program 5 (id=2716): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 21.135578788s ago: executing program 5 (id=2718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56559, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe3}, {0xffe0, 0xb}, {0x9, 0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) 19.711425964s ago: executing program 5 (id=2721): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000000)) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffff9, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0xd8000000, 0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x10000003, 0x0, 0x1, 0x1ff]}, 0x45c) 19.655515755s ago: executing program 3 (id=2722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000003600), 0x40040, 0x0) read$FUSE(r4, &(0x7f0000003b80)={0x2020}, 0x2020) writev(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0xfffffffa) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040), 0x0) 18.57883316s ago: executing program 3 (id=2723): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000003600), 0x40040, 0x0) read$FUSE(r4, &(0x7f0000003b80)={0x2020}, 0x2020) writev(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0xfffffffa) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040), 0x0) 18.365341187s ago: executing program 5 (id=2724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x979b, @ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x3}, 0x20) 17.388537858s ago: executing program 3 (id=2725): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000000)) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f0000019200)=""/162) pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 16.546786166s ago: executing program 5 (id=2728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0xd, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x729f}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x6) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r2, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc10200000011125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 16.337787613s ago: executing program 3 (id=2729): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000000)) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') ioctl$GIO_UNISCRNMAP(r9, 0x4b69, &(0x7f0000019200)=""/162) pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r10, @ANYBLOB], 0xbc}, 0x1, 0x0, 0x0, 0x2df21b6c789bcea3}, 0x20004801) 15.017960745s ago: executing program 7 (id=2731): clock_adjtime(0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x520, &(0x7f0000000880)="$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") ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1, 0x0, 0x0, r2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x5, r3, r2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = dup3(0xffffffffffffffff, r7, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, 0x0) 10.907599118s ago: executing program 7 (id=2737): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) epoll_create1(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, &(0x7f0000000600)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@private0, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r5}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r5, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={[{'noacl'}]}) 10.287607108s ago: executing program 8 (id=2738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x979b, @ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x3}, 0x20) 9.259558011s ago: executing program 6 (id=2740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xc, 0x4, 0x290, 0xffffffff, 0x220, 0x130, 0x0, 0x98, 0xffffffff, 0x220, 0x220, 0x220, 0x98, 0x4, 0x0, {[{{@ip={@local, @loopback, 0xff, 0xffffff00, 'dummy0\x00', 'veth1_macvtap\x00', {}, {}, 0x8, 0x2, 0x46}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x150, 0x22, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000002380)='./file1/file1\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchmod(r3, 0x208) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x240448c8) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc010) 8.241449984s ago: executing program 6 (id=2741): bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x7ffffff3, @mcast1, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0xe}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) 7.833099387s ago: executing program 8 (id=2742): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000180)={[{@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@numtail}, {}, {@shortname_lower}, {@utf8no}, {@uni_xlateno}, {@shortname_lower}, {@uni_xlateno}, {@shortname_lower}, {@fat=@check_strict}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbb6}}]}, 0x1, 0x363, &(0x7f0000000280)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000200)={0x0, 0x0, "1e9f399ca3d2013bb9a03bdf3003bc8d7bede67945eb0b87cb9e9d6d74856181"}) 5.827590301s ago: executing program 6 (id=2743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0xd, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 5.038823507s ago: executing program 8 (id=2744): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 4.425551937s ago: executing program 6 (id=2745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000003600), 0x40040, 0x0) read$FUSE(r4, &(0x7f0000003b80)={0x2020}, 0x2020) writev(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0xfffffffa) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040), 0x0) 3.477800438s ago: executing program 8 (id=2746): socket$inet6(0xa, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@delalloc}, {@errors_remount}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002", @ANYRES16=r0], 0x44}}, 0x8000) 3.40717809s ago: executing program 6 (id=2747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe5c, 0x2, [@TCA_MATCHALL_ACT={0xe58, 0x2, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10003, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e1, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x9, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8000ffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff8, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0xffff8000, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe90}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x40}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 2.945897455s ago: executing program 3 (id=2748): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) epoll_create1(0x80000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xf0002017}) read$char_usb(r4, &(0x7f0000000340)=""/170, 0xaa) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03062fbd7000fcdbdf250300000005000300000000000c00018008000100", @ANYRES32=r7, @ANYBLOB="0500050080000000050002"], 0x38}}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) 2.819103819s ago: executing program 5 (id=2749): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000000)) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffff9, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0xd8000000, 0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x10000003, 0x0, 0x1, 0x1ff]}, 0x45c) 2.818250879s ago: executing program 8 (id=2750): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/84, 0x54}], 0x1}}], 0x1, 0x40000000, 0x0) write(r2, &(0x7f0000000700)="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", 0x1cd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x86, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @multicast2, @empty}, {0x4e20, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b0eb591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "00802000003211817ada1e97297a54f5"}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x0, 0x72, 0x0, &(0x7f0000000500)=""/114, 0x4, 0x0, 0x0, 0x50, &(0x7f0000000440), &(0x7f0000000900)="b8d7bcc846386ac4b94b264c415be10d2bb301903dc7a982f4fca061c8959e72cd49a0084c309017d3b162e7f4e30f9934a63a03bed8c8b2b187ff34c259bdb7f66cd988188ac70f412910e48b3ae1b1", 0x3, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x35aa2dae0099c8e0) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 2.582405597s ago: executing program 7 (id=2751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xc, 0x4, 0x290, 0xffffffff, 0x220, 0x130, 0x0, 0x98, 0xffffffff, 0x220, 0x220, 0x220, 0x98, 0x4, 0x0, {[{{@ip={@local, @loopback, 0xff, 0xffffff00, 'dummy0\x00', 'veth1_macvtap\x00', {}, {}, 0x8, 0x2, 0x46}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x150, 0x22, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000002380)='./file1/file1\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchmod(r3, 0x208) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x240448c8) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc010) 1.86357741s ago: executing program 6 (id=2752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x979b, @ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x3}, 0x20) 1.656867256s ago: executing program 3 (id=2753): bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x7ffffff3, @mcast1, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0xe}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) 0s ago: executing program 8 (id=2754): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000180)={[{@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@numtail}, {}, {@shortname_lower}, {@utf8no}, {@uni_xlateno}, {@shortname_lower}, {@uni_xlateno}, {@shortname_lower}, {@fat=@check_strict}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbb6}}]}, 0x1, 0x363, &(0x7f0000000280)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000200)={0x0, 0x0, "1e9f399ca3d2013bb9a03bdf3003bc8d7bede67945eb0b87cb9e9d6d74856181"}) kernel console output (not intermixed with test programs): s INIT FAILED.... [ 617.800509][T10589] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 617.857200][ T7] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 617.870358][T10589] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.1872: Invalid inode table block 1 in block_group 0 [ 617.948842][T10589] EXT4-fs (loop4): get root inode failed [ 617.971122][ T7] lan78xx: probe of 4-1:1.0 failed with error -71 [ 618.012699][ T7] usb 4-1: USB disconnect, device number 35 [ 618.031480][T10589] EXT4-fs (loop4): mount failed [ 618.518321][T10597] loop5: detected capacity change from 0 to 2048 [ 618.618114][ T9449] EXT4-fs (loop6): unmounting filesystem. [ 618.640628][T10597] ext4: Unknown parameter 'appraise' [ 619.711417][T10605] ubi: mtd0 is already attached to ubi0 [ 621.482708][T10616] bridge0: port 3(wlan1) entered blocking state [ 621.489800][T10616] bridge0: port 3(wlan1) entered disabled state [ 621.505444][T10616] device wlan1 entered promiscuous mode [ 621.513429][T10616] bridge0: port 3(wlan1) entered blocking state [ 621.519770][T10616] bridge0: port 3(wlan1) entered forwarding state [ 621.628781][ T4894] bridge0: port 3(wlan1) entered disabled state [ 624.314505][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.325418][ T1045] block nbd1: Possible stuck request ffff888024820000: control (read@0,1024B). Runtime 300 seconds [ 624.338568][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.339689][ T1045] block nbd1: Possible stuck request ffff888024820200: control (read@1024,1024B). Runtime 300 seconds [ 624.364256][ T1045] block nbd1: Possible stuck request ffff888024820400: control (read@2048,1024B). Runtime 300 seconds [ 624.376544][ T1045] block nbd1: Possible stuck request ffff888024820600: control (read@3072,1024B). Runtime 300 seconds [ 625.470398][ T7] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 625.694183][ T7] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 625.734255][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.795229][ T7] usb 3-1: Product: syz [ 625.819794][ T7] usb 3-1: Manufacturer: syz [ 625.860028][ T7] usb 3-1: SerialNumber: syz [ 626.096229][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 626.164867][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 628.045722][T10662] loop5: detected capacity change from 0 to 512 [ 628.187795][T10662] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 628.217375][T10662] EXT4-fs (loop5): mount failed [ 628.312020][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 628.354527][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 628.382476][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 628.405068][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 629.274937][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 629.287247][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 629.339853][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 629.414969][T10681] loop6: detected capacity change from 0 to 512 [ 629.466839][T10683] loop5: detected capacity change from 0 to 8 [ 629.490716][T10681] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 629.511812][T10683] SQUASHFS error: Unable to read inode 0x127 [ 629.530552][T10681] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 629.560342][T10681] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz.6.1895: Invalid inode table block 1 in block_group 0 [ 629.574953][T10681] EXT4-fs (loop6): get root inode failed [ 629.581077][T10681] EXT4-fs (loop6): mount failed [ 629.631392][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 629.646181][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 629.666943][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 629.737183][ T7] lan78xx: probe of 3-1:1.0 failed with error -71 [ 629.927340][ T7862] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 631.478355][T10699] ubi: mtd0 is already attached to ubi0 [ 632.477017][ T7] usb 3-1: USB disconnect, device number 35 [ 633.802122][T10717] loop6: detected capacity change from 0 to 256 [ 637.283830][T10751] loop4: detected capacity change from 0 to 512 [ 637.327807][T10751] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 637.327874][T10751] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 637.429908][T10751] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.1913: Invalid inode table block 1 in block_group 0 [ 637.430902][T10751] EXT4-fs (loop4): get root inode failed [ 637.430922][T10751] EXT4-fs (loop4): mount failed [ 637.674364][ T4291] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 638.629629][T10775] ubi: mtd0 is already attached to ubi0 [ 640.461571][T10797] loop3: detected capacity change from 0 to 8 [ 640.553271][T10797] SQUASHFS error: Unable to read inode 0x127 [ 640.838821][ T4358] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 641.060187][ T4358] usb 6-1: Using ep0 maxpacket: 16 [ 641.084459][ T4486] Bluetooth: hci3: Frame reassembly failed (-84) [ 641.174053][ T4486] Bluetooth: hci3: Frame reassembly failed (-84) [ 641.202096][ T4358] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.218002][ T5526] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 641.471956][ T4358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 641.489369][T10803] loop3: detected capacity change from 0 to 1024 [ 641.496366][ T4358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 641.514113][T10803] EXT4-fs: Ignoring removed orlov option [ 641.538499][ T4358] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 641.558799][ T4358] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.598048][ T4358] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 641.617524][ T4358] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 641.635266][ T4358] usb 6-1: Manufacturer: syz [ 641.650882][ T4358] usb 6-1: config 0 descriptor?? [ 641.675900][T10803] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 641.721267][T10803] netlink: 'syz.3.1930': attribute type 14 has an invalid length. [ 641.729156][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1930'. [ 641.866023][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 642.090556][ T4358] rc_core: IR keymap rc-hauppauge not found [ 642.096540][ T4358] Registered IR keymap rc-empty [ 642.191445][T10812] loop4: detected capacity change from 0 to 128 [ 642.895799][ T7846] block nbd0: Possible stuck request ffff8880247c8000: control (read@0,1024B). Runtime 330 seconds [ 642.906787][ T7846] block nbd0: Possible stuck request ffff8880247c8200: control (read@1024,1024B). Runtime 330 seconds [ 643.446491][ T4293] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 643.453160][ T4291] Bluetooth: hci3: command 0x1003 tx timeout [ 643.636047][ T4358] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 643.710629][ T4358] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 643.761311][ T4358] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 644.025728][ T4358] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input35 [ 644.076611][ T1045] block nbd3: Possible stuck request ffff8880248ba000: control (read@0,1024B). Runtime 330 seconds [ 644.087746][ T1045] block nbd3: Possible stuck request ffff8880248ba200: control (read@1024,1024B). Runtime 330 seconds [ 644.110472][ T1045] block nbd3: Possible stuck request ffff8880248ba400: control (read@2048,1024B). Runtime 330 seconds [ 644.122754][ T1045] block nbd3: Possible stuck request ffff8880248ba600: control (read@3072,1024B). Runtime 330 seconds [ 644.162568][ T4358] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 644.190281][ T4358] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 644.220257][ T4358] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 644.260474][ T4358] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 644.300286][ T4358] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 644.316405][T10824] loop2: detected capacity change from 0 to 512 [ 644.340265][ T4358] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 644.390247][ T4358] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 644.421050][ T4358] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 644.610530][ T4358] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 644.640309][ T4358] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 644.699482][T10824] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 644.728538][T10824] EXT4-fs (loop2): mount failed [ 644.800801][ T4358] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 644.913325][ T4358] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 644.933926][ T4358] usb 6-1: USB disconnect, device number 3 [ 646.098624][T10846] device syzkaller0 entered promiscuous mode [ 646.138848][T10849] device syzkaller0 entered promiscuous mode [ 646.293363][T10849] tipc: Enabled bearer , priority 0 [ 646.330616][T10847] tipc: Resetting bearer [ 646.407040][T10847] tipc: Disabling bearer [ 647.900219][T10863] loop5: detected capacity change from 0 to 128 [ 648.188479][ T9828] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 648.681619][ T7846] block nbd0: Possible stuck request ffff8880247c8400: control (read@2048,1024B). Runtime 330 seconds [ 648.710211][ T7846] block nbd0: Possible stuck request ffff8880247c8600: control (read@3072,1024B). Runtime 330 seconds [ 648.770100][ T52] block nbd2: Possible stuck request ffff888024858000: control (read@0,1024B). Runtime 330 seconds [ 648.837554][ T52] block nbd2: Possible stuck request ffff888024858200: control (read@1024,1024B). Runtime 330 seconds [ 648.848722][ T52] block nbd2: Possible stuck request ffff888024858400: control (read@2048,1024B). Runtime 330 seconds [ 648.859831][ T52] block nbd2: Possible stuck request ffff888024858600: control (read@3072,1024B). Runtime 330 seconds [ 649.270313][ T4293] Bluetooth: hci3: command 0x1003 tx timeout [ 649.278435][ T4288] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 651.947228][T10873] bridge0: port 3(wlan1) entered blocking state [ 651.953676][T10873] bridge0: port 3(wlan1) entered disabled state [ 651.961551][T10873] device wlan1 entered promiscuous mode [ 651.967681][T10873] bridge0: port 3(wlan1) entered blocking state [ 651.974100][T10873] bridge0: port 3(wlan1) entered forwarding state [ 652.133671][ T9889] bridge0: port 3(wlan1) entered disabled state [ 652.433438][T10894] loop3: detected capacity change from 0 to 128 [ 652.472502][T10894] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 652.503908][T10894] ext4 filesystem being mounted at /382/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 653.443724][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 653.463756][T10905] device syzkaller0 entered promiscuous mode [ 653.485672][T10905] tipc: Started in network mode [ 653.502922][T10905] tipc: Node identity 92fbef32275e, cluster identity 4711 [ 653.541550][T10905] tipc: Enabled bearer , priority 0 [ 653.602015][T10904] tipc: Resetting bearer [ 653.666892][T10907] loop4: detected capacity change from 0 to 1024 [ 653.733841][T10907] EXT4-fs: Ignoring removed orlov option [ 653.747643][T10904] tipc: Disabling bearer [ 653.776944][T10907] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 653.833985][T10907] netlink: 'syz.4.1958': attribute type 14 has an invalid length. [ 653.860847][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1958'. [ 653.884619][T10911] loop2: detected capacity change from 0 to 8192 [ 654.245385][T10920] loop3: detected capacity change from 0 to 128 [ 655.302649][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 655.980898][T10927] overlayfs: failed to resolve './bus': -2 [ 657.314051][ T1045] block nbd1: Possible stuck request ffff888024820000: control (read@0,1024B). Runtime 330 seconds [ 657.314098][ T1045] block nbd1: Possible stuck request ffff888024820200: control (read@1024,1024B). Runtime 330 seconds [ 657.314128][ T1045] block nbd1: Possible stuck request ffff888024820400: control (read@2048,1024B). Runtime 330 seconds [ 657.314157][ T1045] block nbd1: Possible stuck request ffff888024820600: control (read@3072,1024B). Runtime 330 seconds [ 657.428804][T10926] tty tty31: ldisc open failed (-12), clearing slot 30 [ 657.590876][T10933] device syzkaller0 entered promiscuous mode [ 657.829527][T10946] loop5: detected capacity change from 0 to 128 [ 657.915842][T10946] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 657.959319][T10946] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 658.668401][T10955] loop4: detected capacity change from 0 to 2048 [ 658.729875][T10955] ext4: Unknown parameter 'appraise' [ 658.952451][ T9431] EXT4-fs (loop5): unmounting filesystem. [ 659.152928][T10964] device syzkaller0 entered promiscuous mode [ 659.205986][T10964] tipc: Enabled bearer , priority 0 [ 659.962862][T10963] tipc: Resetting bearer [ 660.019198][T10963] tipc: Disabling bearer [ 661.713267][T10989] overlayfs: failed to resolve './bus': -2 [ 662.188590][T10997] device syzkaller0 entered promiscuous mode [ 662.371003][T10999] loop6: detected capacity change from 0 to 128 [ 662.449614][T10999] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 662.496498][T10999] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 663.987691][ T9449] EXT4-fs (loop6): unmounting filesystem. [ 664.369953][T11027] loop6: detected capacity change from 0 to 512 [ 665.104304][T11027] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 665.120364][T11027] EXT4-fs (loop6): mount failed [ 665.353082][T11046] loop4: detected capacity change from 0 to 256 [ 665.938845][T11050] overlayfs: failed to resolve './bus': -2 [ 666.286865][T11046] FAT-fs (loop4): Directory bread(block 64) failed [ 666.385811][T11046] FAT-fs (loop4): Directory bread(block 65) failed [ 666.468306][T11046] FAT-fs (loop4): Directory bread(block 66) failed [ 666.536777][T11046] FAT-fs (loop4): Directory bread(block 67) failed [ 666.684398][T11046] FAT-fs (loop4): Directory bread(block 68) failed [ 666.745610][T11046] FAT-fs (loop4): Directory bread(block 69) failed [ 666.767159][T11046] FAT-fs (loop4): Directory bread(block 70) failed [ 666.810021][T11046] FAT-fs (loop4): Directory bread(block 71) failed [ 666.842946][T11071] loop6: detected capacity change from 0 to 128 [ 666.914393][T11046] FAT-fs (loop4): Directory bread(block 72) failed [ 667.211633][T11073] bridge0: port 3(wlan1) entered blocking state [ 667.218343][T11073] bridge0: port 3(wlan1) entered disabled state [ 667.232180][T11073] device wlan1 entered promiscuous mode [ 667.239286][T11073] bridge0: port 3(wlan1) entered blocking state [ 667.245678][T11073] bridge0: port 3(wlan1) entered forwarding state [ 667.273598][ T5862] bridge0: port 3(wlan1) entered disabled state [ 667.636874][T11046] FAT-fs (loop4): Directory bread(block 73) failed [ 667.645924][T11071] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 667.690749][T11071] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 670.356668][ T9449] EXT4-fs (loop6): unmounting filesystem. [ 670.969277][T11105] loop6: detected capacity change from 0 to 512 [ 671.325571][T11105] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 671.366825][T11105] EXT4-fs (loop6): mount failed [ 671.377516][T11115] overlayfs: failed to resolve './bus': -2 [ 671.462975][T11117] device syzkaller0 entered promiscuous mode [ 673.013590][T10864] block nbd0: Possible stuck request ffff8880247c8000: control (read@0,1024B). Runtime 360 seconds [ 673.128457][T10864] block nbd0: Possible stuck request ffff8880247c8200: control (read@1024,1024B). Runtime 360 seconds [ 673.444979][T11126] loop6: detected capacity change from 0 to 2048 [ 673.771035][T11126] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 674.507655][ T4886] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 674.633107][ T1045] block nbd3: Possible stuck request ffff8880248ba000: control (read@0,1024B). Runtime 360 seconds [ 674.644033][ T1045] block nbd3: Possible stuck request ffff8880248ba200: control (read@1024,1024B). Runtime 360 seconds [ 674.655128][ T1045] block nbd3: Possible stuck request ffff8880248ba400: control (read@2048,1024B). Runtime 360 seconds [ 674.849490][ T1045] block nbd3: Possible stuck request ffff8880248ba600: control (read@3072,1024B). Runtime 360 seconds [ 674.864436][T11126] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 674.879591][T11126] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 674.892046][T11126] EXT4-fs (loop6): This should not happen!! Data will be lost [ 674.892046][T11126] [ 674.902456][T11126] EXT4-fs (loop6): Total free blocks count 0 [ 674.908504][T11126] EXT4-fs (loop6): Free/Dirty block details [ 674.914528][T11126] EXT4-fs (loop6): free_blocks=2415919504 [ 674.920406][T11126] EXT4-fs (loop6): dirty_blocks=48 [ 674.925662][T11126] EXT4-fs (loop6): Block reservation details [ 674.931798][T11126] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 674.947975][T11126] input: syz0 as /devices/virtual/input/input36 [ 675.650792][ T9449] EXT4-fs (loop6): unmounting filesystem. [ 676.030886][T11157] device syzkaller0 entered promiscuous mode [ 676.142448][T11158] overlayfs: failed to resolve './bus': -2 [ 679.582553][T11192] loop5: detected capacity change from 0 to 1024 [ 679.621443][T10864] block nbd0: Possible stuck request ffff8880247c8400: control (read@2048,1024B). Runtime 360 seconds [ 679.632505][T10864] block nbd0: Possible stuck request ffff8880247c8600: control (read@3072,1024B). Runtime 360 seconds [ 679.644055][ T52] block nbd2: Possible stuck request ffff888024858000: control (read@0,1024B). Runtime 360 seconds [ 679.654904][ T52] block nbd2: Possible stuck request ffff888024858200: control (read@1024,1024B). Runtime 360 seconds [ 679.741125][T11192] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 679.749801][T11192] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.217494][ T52] block nbd2: Possible stuck request ffff888024858400: control (read@2048,1024B). Runtime 360 seconds [ 680.228766][ T52] block nbd2: Possible stuck request ffff888024858600: control (read@3072,1024B). Runtime 360 seconds [ 680.361857][ T9431] EXT4-fs (loop5): unmounting filesystem. [ 680.367802][T11182] bridge0: port 3(wlan1) entered blocking state [ 680.374267][T11182] bridge0: port 3(wlan1) entered disabled state [ 680.382913][T11182] device wlan1 entered promiscuous mode [ 680.388972][T11182] bridge0: port 3(wlan1) entered blocking state [ 680.395347][T11182] bridge0: port 3(wlan1) entered forwarding state [ 680.404969][ T4886] bridge0: port 3(wlan1) entered disabled state [ 680.758014][T11207] loop3: detected capacity change from 0 to 512 [ 680.878079][T11207] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 680.973433][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 680.983996][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 680.992166][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 681.001105][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 681.008934][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 681.016383][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 681.032075][T11207] EXT4-fs (loop3): mount failed [ 682.383648][ T9286] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 683.254595][ T9286] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 683.270701][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 683.451959][ T9286] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.460320][ T9286] usb 7-1: Product: syz [ 683.464565][ T9286] usb 7-1: Manufacturer: syz [ 683.469196][ T9286] usb 7-1: SerialNumber: syz [ 683.488812][T11230] loop5: detected capacity change from 0 to 1024 [ 683.515534][T11230] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 683.524445][T11230] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.692725][ T9431] EXT4-fs (loop5): unmounting filesystem. [ 683.810815][ T9286] net_ratelimit: 2 callbacks suppressed [ 683.810837][ T9286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 683.840604][ T9286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 683.938138][T11210] chnl_net:caif_netlink_parms(): no params data found [ 684.281796][T11210] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.292210][T11210] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.314951][T11210] device bridge_slave_0 entered promiscuous mode [ 684.339596][T11210] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.347009][T11210] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.357736][T11210] device bridge_slave_1 entered promiscuous mode [ 684.589198][T11210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.653504][T11210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.775222][T11210] team0: Port device team_slave_0 added [ 684.785414][T11210] team0: Port device team_slave_1 added [ 684.826332][T11210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.838833][T11210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.877012][T11210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.919314][T11210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.946658][T11210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.026837][T11210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.133885][T11210] device hsr_slave_0 entered promiscuous mode [ 685.141330][T11210] device hsr_slave_1 entered promiscuous mode [ 685.148256][T11210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.155939][T11210] Cannot create hsr debugfs directory [ 685.420920][ T4291] Bluetooth: hci3: command 0x041b tx timeout [ 685.866326][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.875314][ T9286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 685.887483][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.976582][ T9286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 686.033054][ T9286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 686.052204][T11261] loop5: detected capacity change from 0 to 512 [ 686.090587][ T9286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 686.127867][ T9286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 686.162336][ T9286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 686.199907][ T9286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 686.250660][ T9286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 686.292165][T11261] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 686.427953][ T9286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 686.552223][T11261] EXT4-fs (loop5): mount failed [ 686.695169][ T9286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 686.929483][ T9286] lan78xx: probe of 7-1:1.0 failed with error -71 [ 686.981719][ T9286] usb 7-1: USB disconnect, device number 2 [ 687.014884][T11271] loop6: detected capacity change from 0 to 1024 [ 687.510304][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 687.771693][T11274] loop3: detected capacity change from 0 to 1024 [ 687.855075][T11271] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 687.873380][T11274] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 687.882198][T11274] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.989176][ T1045] block nbd1: Possible stuck request ffff888024820000: control (read@0,1024B). Runtime 360 seconds [ 688.001643][ T1045] block nbd1: Possible stuck request ffff888024820200: control (read@1024,1024B). Runtime 360 seconds [ 688.012870][ T1045] block nbd1: Possible stuck request ffff888024820400: control (read@2048,1024B). Runtime 360 seconds [ 688.023939][ T1045] block nbd1: Possible stuck request ffff888024820600: control (read@3072,1024B). Runtime 360 seconds [ 688.088304][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 688.138721][T11210] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 688.149058][T11210] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 688.171126][T11210] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 688.392754][T11210] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 688.998883][ T9449] EXT4-fs (loop6): unmounting filesystem. [ 689.250688][T11210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.349196][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 689.396808][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 689.426235][T11210] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.461905][ T5862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 689.476507][ T5862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 689.508628][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.515833][ T5862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.536917][ T5862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 689.555389][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 689.569802][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 689.579256][ T4904] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.586444][ T4904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.594240][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 689.610801][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 689.619989][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 689.642682][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 689.656478][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 689.676497][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 689.687128][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 689.696643][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 689.706221][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 689.716198][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 689.733482][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 689.767378][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 689.786995][ T4286] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 689.796046][T11210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 690.088554][ T4286] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 690.148592][ T4286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.204952][ T4286] usb 6-1: Product: syz [ 690.209187][ T4286] usb 6-1: Manufacturer: syz [ 690.233527][ T4286] usb 6-1: SerialNumber: syz [ 690.545962][ T4286] net_ratelimit: 2 callbacks suppressed [ 690.546025][ T4286] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 690.808537][ T4286] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 691.517341][T11322] loop2: detected capacity change from 0 to 1024 [ 692.097082][ T5862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 692.111177][ T5862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 692.152830][T11210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.616404][ T4286] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 692.627048][ T4286] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 692.637750][ T4286] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 692.650990][ T4286] lan78xx: probe of 6-1:1.0 failed with error -110 [ 693.766695][T11322] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 693.775440][T11322] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.921855][T11346] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 693.937443][T11345] loop6: detected capacity change from 0 to 2048 [ 693.956996][T11313] usb 6-1: USB disconnect, device number 4 [ 694.102153][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 694.151338][T11345] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 694.497562][T11345] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 694.513195][T11345] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 694.525659][T11345] EXT4-fs (loop6): This should not happen!! Data will be lost [ 694.525659][T11345] [ 694.538748][T11357] input: syz0 as /devices/virtual/input/input37 [ 694.545612][T11345] EXT4-fs (loop6): Total free blocks count 0 [ 694.551804][T11345] EXT4-fs (loop6): Free/Dirty block details [ 694.558377][T11345] EXT4-fs (loop6): free_blocks=2415919504 [ 694.564408][T11345] EXT4-fs (loop6): dirty_blocks=48 [ 694.569687][T11345] EXT4-fs (loop6): Block reservation details [ 694.575841][T11345] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 694.838131][ T9449] EXT4-fs (loop6): unmounting filesystem. [ 696.026985][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 696.061454][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 696.178167][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 696.193130][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 696.221782][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 696.238472][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 696.379517][T11210] device veth0_vlan entered promiscuous mode [ 696.472212][T11210] device veth1_vlan entered promiscuous mode [ 696.526038][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 696.547212][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 696.558007][T11383] loop3: detected capacity change from 0 to 128 [ 696.564350][T11385] loop6: detected capacity change from 0 to 128 [ 696.581968][T11385] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 696.600452][T11385] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 696.692459][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 696.754078][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 696.836675][T11210] device veth0_macvtap entered promiscuous mode [ 697.526188][T11210] device veth1_macvtap entered promiscuous mode [ 697.610689][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 697.626375][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 697.777549][ T9449] EXT4-fs (loop6): unmounting filesystem. [ 697.782714][T11392] loop2: detected capacity change from 0 to 1024 [ 697.816472][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.829364][T11392] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 697.838684][T11392] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.999892][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.035263][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.050264][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.087102][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.112200][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.156589][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.167411][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.177592][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.188990][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.201933][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.213588][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.223801][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.234539][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.247560][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 698.255597][T11210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.314707][ T5857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 698.347940][ T5857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 698.360481][ T4286] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 698.396135][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.422372][T11403] loop2: detected capacity change from 0 to 8 [ 698.432015][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.462640][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.484419][T11403] SQUASHFS error: Unable to read inode 0x127 [ 698.501292][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.511377][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.522081][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.532337][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.542982][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.564023][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.578750][ T4286] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 698.600187][ T4286] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.626941][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.647652][ T4286] usb 7-1: Product: syz [ 698.653284][ T4286] usb 7-1: Manufacturer: syz [ 698.660503][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.679510][ T4286] usb 7-1: SerialNumber: syz [ 698.685497][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.735420][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.767470][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.779374][T11210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.796272][T11210] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.805505][T11210] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.814519][T11210] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.823739][T11210] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.845654][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 698.863584][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 699.050688][ T4286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 699.742764][ T4286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 700.722302][ T5857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.746292][ T5857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.770084][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 700.868993][ T5857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.881515][ T5857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.889242][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 701.627151][T11439] loop5: detected capacity change from 0 to 128 [ 701.819205][ T4286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 701.850685][ T4286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 701.923278][ T4286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 702.974148][T11442] loop5: detected capacity change from 0 to 1024 [ 703.038535][T11442] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 703.047471][T11442] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.628367][T11451] loop7: detected capacity change from 0 to 4096 [ 703.630665][ T4286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 704.252697][ T9431] EXT4-fs (loop5): unmounting filesystem. [ 704.290164][T11451] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 704.346773][ T4286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 704.360667][ T52] block nbd0: Possible stuck request ffff8880247c8000: control (read@0,1024B). Runtime 390 seconds [ 704.373012][ T52] block nbd0: Possible stuck request ffff8880247c8200: control (read@1024,1024B). Runtime 390 seconds [ 704.395764][ T4286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 704.416057][ T4286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 704.435265][ T4286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 704.558476][ T4286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 704.689692][ T4286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 704.704966][ T4286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 704.714935][ T4286] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 704.736485][T11210] EXT4-fs (loop7): unmounting filesystem. [ 704.780589][ T4286] lan78xx: probe of 7-1:1.0 failed with error -71 [ 704.823555][ T4286] usb 7-1: USB disconnect, device number 3 [ 704.960051][T11460] device syzkaller0 entered promiscuous mode [ 705.000609][T11281] block nbd3: Possible stuck request ffff8880248ba000: control (read@0,1024B). Runtime 390 seconds [ 705.011938][T11281] block nbd3: Possible stuck request ffff8880248ba200: control (read@1024,1024B). Runtime 390 seconds [ 705.023578][T11281] block nbd3: Possible stuck request ffff8880248ba400: control (read@2048,1024B). Runtime 390 seconds [ 705.034764][T11281] block nbd3: Possible stuck request ffff8880248ba600: control (read@3072,1024B). Runtime 390 seconds [ 706.057891][ T5526] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 706.430275][T11480] loop2: detected capacity change from 0 to 128 [ 706.894802][T11486] loop7: detected capacity change from 0 to 1024 [ 706.945344][T11486] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 706.954042][T11486] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 707.076417][T11313] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 707.136345][T11210] EXT4-fs (loop7): unmounting filesystem. [ 707.274920][T11313] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 707.296801][T11501] loop6: detected capacity change from 0 to 8 [ 707.304309][T11313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.344387][T11313] usb 6-1: Product: syz [ 707.348660][T11313] usb 6-1: Manufacturer: syz [ 707.356675][T11501] SQUASHFS error: Unable to read inode 0x127 [ 707.380625][T11313] usb 6-1: SerialNumber: syz [ 708.249641][T11313] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 708.502299][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 708.781081][T11517] overlayfs: failed to resolve './bus': -2 [ 709.104097][T11313] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 709.131785][T11516] tty tty35: ldisc open failed (-12), clearing slot 34 [ 709.582062][T11529] loop2: detected capacity change from 0 to 1024 [ 709.602545][T11526] loop3: detected capacity change from 0 to 512 [ 709.626556][T11529] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 709.635242][T11529] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.685877][T11526] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 709.721815][T11526] EXT4-fs (loop3): mount failed [ 709.773463][T11313] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 709.820228][T11313] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 709.857326][T11313] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 710.070983][ T52] block nbd0: Possible stuck request ffff8880247c8400: control (read@2048,1024B). Runtime 390 seconds [ 710.082282][ T52] block nbd0: Possible stuck request ffff8880247c8600: control (read@3072,1024B). Runtime 390 seconds [ 710.094104][T10864] block nbd2: Possible stuck request ffff888024858000: control (read@0,1024B). Runtime 390 seconds [ 710.650288][ T52] block nbd2: Possible stuck request ffff888024858200: control (read@1024,1024B). Runtime 390 seconds [ 710.661545][ T52] block nbd2: Possible stuck request ffff888024858400: control (read@2048,1024B). Runtime 390 seconds [ 710.673536][ T52] block nbd2: Possible stuck request ffff888024858600: control (read@3072,1024B). Runtime 390 seconds [ 710.686429][T11313] lan78xx: probe of 6-1:1.0 failed with error -32 [ 710.695183][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 710.918277][T11550] loop3: detected capacity change from 0 to 512 [ 710.935660][T11550] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 710.947710][T11550] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 710.959994][ T4330] usb 6-1: USB disconnect, device number 5 [ 711.060381][T11550] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.2128: Invalid inode table block 1 in block_group 0 [ 711.134793][T11550] EXT4-fs (loop3): get root inode failed [ 711.149407][T11550] EXT4-fs (loop3): mount failed [ 711.176345][T11557] loop5: detected capacity change from 0 to 8 [ 711.830763][T11557] SQUASHFS error: Unable to read inode 0x127 [ 711.860511][T11553] device syzkaller0 entered promiscuous mode [ 711.897772][ T4436] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 713.301908][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 714.687009][T11584] loop5: detected capacity change from 0 to 512 [ 714.715476][T11583] loop2: detected capacity change from 0 to 2048 [ 714.812057][T11583] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 714.822258][T11584] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 714.887618][T11583] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 714.902577][T11583] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 714.914923][T11583] EXT4-fs (loop2): This should not happen!! Data will be lost [ 714.914923][T11583] [ 714.924680][T11583] EXT4-fs (loop2): Total free blocks count 0 [ 714.931487][T11583] EXT4-fs (loop2): Free/Dirty block details [ 714.937447][T11583] EXT4-fs (loop2): free_blocks=2415919504 [ 714.943340][T11583] EXT4-fs (loop2): dirty_blocks=48 [ 714.948582][T11583] EXT4-fs (loop2): Block reservation details [ 714.954911][T11583] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 714.962557][T11594] input: syz0 as /devices/virtual/input/input38 [ 714.981462][T11584] EXT4-fs (loop5): mount failed [ 715.046497][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 715.062492][T11596] loop6: detected capacity change from 0 to 256 [ 715.097357][ T4436] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 716.101256][T11596] FAT-fs (loop6): Directory bread(block 64) failed [ 716.179071][T11596] FAT-fs (loop6): Directory bread(block 65) failed [ 716.253162][T11596] FAT-fs (loop6): Directory bread(block 66) failed [ 716.274937][T11596] FAT-fs (loop6): Directory bread(block 67) failed [ 716.309818][T11596] FAT-fs (loop6): Directory bread(block 68) failed [ 716.355932][T11596] FAT-fs (loop6): Directory bread(block 69) failed [ 716.420627][T11596] FAT-fs (loop6): Directory bread(block 70) failed [ 716.480179][T11596] FAT-fs (loop6): Directory bread(block 71) failed [ 716.517523][T11596] FAT-fs (loop6): Directory bread(block 72) failed [ 716.580262][T11596] FAT-fs (loop6): Directory bread(block 73) failed [ 716.882610][T11621] device syzkaller0 entered promiscuous mode [ 718.203504][T11638] vivid-000: ================= START STATUS ================= [ 718.213798][T11638] vivid-000: Test Pattern: 75% Colorbar [ 718.220031][T11638] vivid-000: Fill Percentage of Frame: 100 [ 718.228151][T11638] vivid-000: Horizontal Movement: No Movement [ 718.307569][T11638] vivid-000: Vertical Movement: No Movement [ 718.349247][T11638] vivid-000: OSD Text Mode: All [ 718.385936][T11638] vivid-000: Show Border: false [ 718.402128][T11641] loop5: detected capacity change from 0 to 512 [ 718.460272][T11638] vivid-000: Show Square: false [ 718.470981][T11638] vivid-000: Sensor Flipped Horizontally: false [ 718.485543][T11638] vivid-000: Sensor Flipped Vertically: false [ 718.498467][T11638] vivid-000: Insert SAV Code in Image: false [ 718.510979][T11638] vivid-000: Insert EAV Code in Image: false [ 718.524028][T11638] vivid-000: Insert Video Guard Band: false [ 718.535294][T11638] vivid-000: Reduced Framerate: false [ 718.564628][T11638] vivid-000: Enable Capture Cropping: true [ 718.595028][T11641] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 718.619210][T11638] vivid-000: Enable Capture Composing: true [ 718.626727][T11641] EXT4-fs (loop5): mount failed [ 718.634995][T11281] block nbd1: Possible stuck request ffff888024820000: control (read@0,1024B). Runtime 390 seconds [ 718.646217][T11281] block nbd1: Possible stuck request ffff888024820200: control (read@1024,1024B). Runtime 390 seconds [ 718.650646][T11638] vivid-000: Enable Capture Scaler: [ 718.657765][T11281] block nbd1: Possible stuck request ffff888024820400: control (read@2048,1024B). Runtime 390 seconds [ 718.674418][T11281] block nbd1: Possible stuck request ffff888024820600: control (read@3072,1024B). Runtime 390 seconds [ 718.691523][T11638] true [ 718.755710][T11638] vivid-000: Timestamp Source: End of Frame [ 718.851931][T11638] vivid-000: Colorspace: sRGB [ 718.898912][T11638] vivid-000: Transfer Function: Default [ 718.972052][T11638] vivid-000: Y'CbCr Encoding: Default [ 719.351299][T11638] vivid-000: HSV Encoding: Hue 0-179 [ 719.356698][T11638] vivid-000: Quantization: Default [ 719.362148][T11638] vivid-000: Apply Alpha To Red Only: false [ 719.369338][T11638] vivid-000: Standard Aspect Ratio: 4x3 [ 719.375242][T11638] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 719.383319][T11638] vivid-000: DV Timings: 640x480p59 inactive [ 719.389370][T11638] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 719.397182][T11638] vivid-000: Maximum EDID Blocks: 2 [ 719.402899][T11638] vivid-000: Limited RGB Range (16-235): false [ 719.409117][T11638] vivid-000: Rx RGB Quantization Range: Automatic [ 719.416157][T11638] vivid-000: Power Present: 0x00000001 [ 719.422103][T11638] tpg source WxH: 320x180 (R'G'B) [ 719.427200][T11638] tpg field: 1 [ 719.479535][T11638] tpg crop: 320x180@0x0 [ 719.630458][T11638] tpg compose: 320x180@0x0 [ 719.634960][T11638] tpg colorspace: 8 [ 719.638809][T11638] tpg transfer function: 0/0 [ 719.660365][T11638] tpg quantization: 0/0 [ 719.664600][T11638] tpg RGB range: 0/2 [ 719.690308][T11638] vivid-000: ================== END STATUS ================== [ 720.229747][T11660] device syzkaller0 entered promiscuous mode [ 720.458619][T11666] loop5: detected capacity change from 0 to 512 [ 720.478451][T11666] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 720.635448][T11666] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 721.033729][T11666] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.2163: Invalid inode table block 1 in block_group 0 [ 721.130163][T11666] EXT4-fs (loop5): get root inode failed [ 721.193882][T11666] EXT4-fs (loop5): mount failed [ 721.614567][T11313] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 722.047014][T11679] ubi: mtd0 is already attached to ubi0 [ 722.260179][T11313] usb 4-1: Using ep0 maxpacket: 32 [ 722.293774][T11313] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 722.387461][T11313] usb 4-1: config 0 has no interface number 0 [ 722.472775][T11313] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 722.547399][T11313] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 722.858870][T11313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.955703][T11313] usb 4-1: Product: syz [ 723.001668][T11313] usb 4-1: Manufacturer: syz [ 723.069270][T11313] usb 4-1: SerialNumber: syz [ 723.146364][T11313] usb 4-1: config 0 descriptor?? [ 723.189417][T11664] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 723.618300][T11313] asix: probe of 4-1:0.188 failed with error -71 [ 723.654465][T11313] usb 4-1: USB disconnect, device number 36 [ 723.660674][ T14] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 723.884107][ T14] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 723.931172][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.966960][ T14] usb 8-1: Product: syz [ 723.983815][ T14] usb 8-1: Manufacturer: syz [ 724.002004][ T14] usb 8-1: SerialNumber: syz [ 724.257461][ T14] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 724.289312][ T14] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 725.547662][T11720] netlink: 'syz.3.2176': attribute type 1 has an invalid length. [ 725.667379][ T14] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 725.679746][ T14] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 725.691464][ T14] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 725.721490][ T14] lan78xx: probe of 8-1:1.0 failed with error -32 [ 725.860384][T11724] loop5: detected capacity change from 0 to 512 [ 725.910974][T11724] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 725.944006][T11724] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 725.965246][T11724] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.2177: Invalid inode table block 1 in block_group 0 [ 725.994501][T11724] EXT4-fs (loop5): get root inode failed [ 726.010367][T11724] EXT4-fs (loop5): mount failed [ 726.378978][T11732] ubi: mtd0 is already attached to ubi0 [ 727.247715][ T14] usb 8-1: USB disconnect, device number 2 [ 727.691456][T11313] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 727.900241][T11313] usb 4-1: Using ep0 maxpacket: 32 [ 727.908320][T11313] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 727.947748][T11313] usb 4-1: config 0 has no interface number 0 [ 728.168548][T11313] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 728.921412][T11751] usb usb1: usbfs: process 11751 (syz.7.2185) did not claim interface 0 before use [ 729.380377][T11313] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 729.389486][T11313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.640477][T11313] usb 4-1: Product: syz [ 729.893768][T11313] usb 4-1: Manufacturer: syz [ 729.898585][T11313] usb 4-1: SerialNumber: syz [ 730.652012][T11313] usb 4-1: config 0 descriptor?? [ 731.649139][T11313] usb 4-1: can't set config #0, error -71 [ 732.005088][T11313] usb 4-1: USB disconnect, device number 37 [ 732.014320][T11776] loop2: detected capacity change from 0 to 512 [ 732.026195][T11776] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 732.152209][T11776] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 732.161900][T11778] loop3: detected capacity change from 0 to 512 [ 732.197441][T11776] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 732.214364][T11778] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 732.466641][T11778] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 732.560010][T11778] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.2192: Invalid inode table block 1 in block_group 0 [ 732.648494][T11778] EXT4-fs (loop3): get root inode failed [ 732.690748][T11778] EXT4-fs (loop3): mount failed [ 732.798997][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 732.807203][ T7862] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 733.006552][ T14] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 733.144782][T11793] ubi: mtd0 is already attached to ubi0 [ 733.732679][ T14] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 733.783920][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.840587][ T14] usb 6-1: Product: syz [ 733.900863][ T14] usb 6-1: Manufacturer: syz [ 734.328752][T11804] usb usb1: usbfs: process 11804 (syz.3.2198) did not claim interface 0 before use [ 734.608352][ T14] usb 6-1: SerialNumber: syz [ 734.781350][ T52] block nbd0: Possible stuck request ffff8880247c8000: control (read@0,1024B). Runtime 420 seconds [ 734.792498][ T52] block nbd0: Possible stuck request ffff8880247c8200: control (read@1024,1024B). Runtime 420 seconds [ 735.125269][ T14] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 735.155723][ T14] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 735.623179][T11281] block nbd3: Possible stuck request ffff8880248ba000: control (read@0,1024B). Runtime 420 seconds [ 735.634500][T11281] block nbd3: Possible stuck request ffff8880248ba200: control (read@1024,1024B). Runtime 420 seconds [ 735.645588][T11281] block nbd3: Possible stuck request ffff8880248ba400: control (read@2048,1024B). Runtime 420 seconds [ 736.098399][T11281] block nbd3: Possible stuck request ffff8880248ba600: control (read@3072,1024B). Runtime 420 seconds [ 736.201179][ T14] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 736.225149][ T14] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 736.236126][ T14] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 736.962724][ T14] lan78xx: probe of 6-1:1.0 failed with error -32 [ 737.203691][ T33] usb 6-1: USB disconnect, device number 6 [ 737.255117][ T4905] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 737.354147][T11825] loop2: detected capacity change from 0 to 512 [ 737.421649][T11825] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 737.504953][T11825] EXT4-fs (loop2): mount failed [ 737.550290][ T14] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 737.760332][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 737.771842][ T14] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 737.881258][ T14] usb 4-1: config 0 has no interface number 0 [ 738.095744][ T14] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 738.242294][ T14] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 738.285111][T11840] loop6: detected capacity change from 0 to 512 [ 738.292406][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.346329][ T14] usb 4-1: Product: syz [ 738.352289][T11840] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 738.382561][ T14] usb 4-1: Manufacturer: syz [ 738.387248][ T14] usb 4-1: SerialNumber: syz [ 738.414738][T11840] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 738.449877][ T14] usb 4-1: config 0 descriptor?? [ 738.521584][T11819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 738.562412][T11840] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz.6.2208: Invalid inode table block 1 in block_group 0 [ 738.649843][T11840] EXT4-fs (loop6): get root inode failed [ 738.689038][T11840] EXT4-fs (loop6): mount failed [ 738.747022][T11819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 739.220925][T11852] usb usb1: usbfs: process 11852 (syz.5.2209) did not claim interface 0 before use [ 739.585197][T11857] loop7: detected capacity change from 0 to 512 [ 739.596264][T11857] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 739.873375][T11857] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 739.882759][T11857] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 740.358484][T11863] ubi: mtd0 is already attached to ubi0 [ 740.369636][T11865] loop5: detected capacity change from 0 to 128 [ 740.455261][T11210] EXT4-fs (loop7): unmounting filesystem. [ 740.879263][T11867] device syzkaller0 entered promiscuous mode [ 741.065614][T11869] loop2: detected capacity change from 0 to 2048 [ 741.186428][T11869] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 741.594304][T11874] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 741.609374][T11874] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 741.610435][ T14] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 741.622267][T11874] EXT4-fs (loop2): This should not happen!! Data will be lost [ 741.622267][T11874] [ 741.636034][ T14] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 741.641719][T11874] EXT4-fs (loop2): Total free blocks count 0 [ 741.652179][ T14] asix: probe of 4-1:0.188 failed with error -32 [ 741.658652][T11874] EXT4-fs (loop2): Free/Dirty block details [ 741.671575][T11874] EXT4-fs (loop2): free_blocks=2415919504 [ 741.677346][T11874] EXT4-fs (loop2): dirty_blocks=48 [ 741.682568][T11874] EXT4-fs (loop2): Block reservation details [ 741.688585][T11874] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 741.726994][T11874] input: syz0 as /devices/virtual/input/input39 [ 741.833839][ T52] block nbd0: Possible stuck request ffff8880247c8400: control (read@2048,1024B). Runtime 420 seconds [ 741.844969][ T52] block nbd0: Possible stuck request ffff8880247c8600: control (read@3072,1024B). Runtime 420 seconds [ 741.856599][T10864] block nbd2: Possible stuck request ffff888024858000: control (read@0,1024B). Runtime 420 seconds [ 741.867959][T10864] block nbd2: Possible stuck request ffff888024858200: control (read@1024,1024B). Runtime 420 seconds [ 741.879189][T10864] block nbd2: Possible stuck request ffff888024858400: control (read@2048,1024B). Runtime 420 seconds [ 741.890711][T10864] block nbd2: Possible stuck request ffff888024858600: control (read@3072,1024B). Runtime 420 seconds [ 741.910777][ T14] usb 4-1: USB disconnect, device number 38 [ 747.192717][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.199135][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.210227][ T4275] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 747.252098][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 747.440345][ T4275] usb 8-1: Using ep0 maxpacket: 32 [ 747.495132][ T4275] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 748.640195][ T4275] usb 8-1: config 0 has no interface number 0 [ 748.646393][ T4275] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 748.658647][T11945] bridge0: port 3(wlan1) entered disabled state [ 749.631497][ T4275] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 750.101106][T11281] block nbd1: Possible stuck request ffff888024820000: control (read@0,1024B). Runtime 420 seconds [ 750.111962][T11281] block nbd1: Possible stuck request ffff888024820200: control (read@1024,1024B). Runtime 420 seconds [ 750.140672][T11281] block nbd1: Possible stuck request ffff888024820400: control (read@2048,1024B). Runtime 420 seconds [ 750.224255][ T4275] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.232441][ T4275] usb 8-1: Product: syz [ 750.236649][ T4275] usb 8-1: Manufacturer: syz [ 750.241369][ T4275] usb 8-1: SerialNumber: syz [ 750.247009][T11281] block nbd1: Possible stuck request ffff888024820600: control (read@3072,1024B). Runtime 420 seconds [ 750.250055][ T4275] usb 8-1: config 0 descriptor?? [ 750.316016][ T4275] usb 8-1: can't set config #0, error -71 [ 750.362061][ T4275] usb 8-1: USB disconnect, device number 3 [ 750.650175][T11957] loop7: detected capacity change from 0 to 1024 [ 751.040445][T11957] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 751.049851][T11957] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.259845][T11959] loop2: detected capacity change from 0 to 4096 [ 751.411322][T11959] EXT4-fs (loop2): Test dummy encryption mode enabled [ 751.483533][T11959] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 751.766321][T11959] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 751.821369][T11972] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 751.852366][T11210] EXT4-fs (loop7): unmounting filesystem. [ 752.161767][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 752.215350][T11988] loop7: detected capacity change from 0 to 512 [ 752.284656][T11988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 752.350824][T11988] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 752.359859][T11988] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.774052][T11210] EXT4-fs (loop7): unmounting filesystem. [ 753.835047][T11313] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 753.894501][T12008] No such timeout policy "syz1" [ 755.130917][T12018] loop7: detected capacity change from 0 to 256 [ 755.170011][T12018] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 755.280805][T12018] FAT-fs (loop7): Directory bread(block 64) failed [ 755.330210][T12018] FAT-fs (loop7): Directory bread(block 65) failed [ 755.336904][T12018] FAT-fs (loop7): Directory bread(block 66) failed [ 755.394729][T12018] FAT-fs (loop7): Directory bread(block 67) failed [ 755.421124][T12018] FAT-fs (loop7): Directory bread(block 68) failed [ 755.456247][T12018] FAT-fs (loop7): Directory bread(block 69) failed [ 755.482060][T12018] FAT-fs (loop7): Directory bread(block 70) failed [ 755.519313][T12018] FAT-fs (loop7): Directory bread(block 71) failed [ 755.549842][T12018] FAT-fs (loop7): Directory bread(block 72) failed [ 755.582836][T12018] FAT-fs (loop7): Directory bread(block 73) failed [ 755.692480][T11313] usb 4-1: Using ep0 maxpacket: 32 [ 755.733269][T11313] usb 4-1: device descriptor read/all, error -71 [ 755.948172][T12031] loop8: detected capacity change from 0 to 7 [ 755.969537][T12031] Dev loop8: unable to read RDB block 7 [ 755.975350][T12031] loop8: AHDI p1 [ 755.979036][T12031] loop8: partition table partially beyond EOD, truncated [ 757.817401][T12060] loop6: detected capacity change from 0 to 512 [ 757.825381][T12060] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 757.905929][T12060] EXT4-fs (loop6): 1 truncate cleaned up [ 757.911805][T12060] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 759.204456][ T9449] EXT4-fs (loop6): unmounting filesystem. [ 760.449072][T12104] loop7: detected capacity change from 0 to 256 [ 760.487480][T12104] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 760.610029][T12104] FAT-fs (loop7): Directory bread(block 64) failed [ 760.637418][T12104] FAT-fs (loop7): Directory bread(block 65) failed [ 760.667925][T12104] FAT-fs (loop7): Directory bread(block 66) failed [ 760.685808][T12104] FAT-fs (loop7): Directory bread(block 67) failed [ 760.784283][T12104] FAT-fs (loop7): Directory bread(block 68) failed [ 760.833336][T12104] FAT-fs (loop7): Directory bread(block 69) failed [ 760.863679][T12104] FAT-fs (loop7): Directory bread(block 70) failed [ 760.891121][T12104] FAT-fs (loop7): Directory bread(block 71) failed [ 760.918886][T12104] FAT-fs (loop7): Directory bread(block 72) failed [ 761.392989][ T4291] Bluetooth: hci0: command 0x1003 tx timeout [ 761.408707][ T4288] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 761.416654][T12104] FAT-fs (loop7): Directory bread(block 73) failed [ 762.242845][T12123] device syzkaller0 entered promiscuous mode [ 765.631594][T10864] block nbd0: Possible stuck request ffff8880247c8000: control (read@0,1024B). Runtime 450 seconds [ 765.642412][T10864] block nbd0: Possible stuck request ffff8880247c8200: control (read@1024,1024B). Runtime 450 seconds [ 765.921958][T12146] loop6: detected capacity change from 0 to 2048 [ 766.018502][T12146] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 766.424102][T12153] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 766.439649][T12153] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 766.452101][T12153] EXT4-fs (loop6): This should not happen!! Data will be lost [ 766.452101][T12153] [ 766.461957][T12153] EXT4-fs (loop6): Total free blocks count 0 [ 766.467977][T12153] EXT4-fs (loop6): Free/Dirty block details [ 766.474145][T12153] EXT4-fs (loop6): free_blocks=2415919504 [ 766.479907][T12153] EXT4-fs (loop6): dirty_blocks=48 [ 766.485093][T12153] EXT4-fs (loop6): Block reservation details [ 766.491185][T12153] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 766.519345][T12153] input: syz0 as /devices/virtual/input/input40 [ 766.621014][T11281] block nbd3: Possible stuck request ffff8880248ba000: control (read@0,1024B). Runtime 450 seconds [ 766.632098][T11281] block nbd3: Possible stuck request ffff8880248ba200: control (read@1024,1024B). Runtime 450 seconds [ 767.061551][T11281] block nbd3: Possible stuck request ffff8880248ba400: control (read@2048,1024B). Runtime 450 seconds [ 767.072792][T11281] block nbd3: Possible stuck request ffff8880248ba600: control (read@3072,1024B). Runtime 450 seconds [ 767.259771][T12158] loop5: detected capacity change from 0 to 8 [ 767.709683][T12166] loop3: detected capacity change from 0 to 512 [ 767.747361][T12166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 767.839078][T12166] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 767.900316][T12166] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 768.591213][ T4904] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 768.843104][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 769.709213][ T9449] EXT4-fs (loop6): unmounting filesystem. [ 769.877136][ T33] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 770.039803][T12196] 9pnet_fd: Insufficient options for proto=fd [ 770.070244][ T33] usb 4-1: Using ep0 maxpacket: 16 [ 770.077346][ T33] usb 4-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 770.128437][ T33] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 770.205339][ T33] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 770.281476][ T33] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 770.293104][ T33] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 771.299258][T12208] loop7: detected capacity change from 0 to 256 [ 771.358349][T12208] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 771.491428][T12208] FAT-fs (loop7): Directory bread(block 64) failed [ 771.517877][T12208] FAT-fs (loop7): Directory bread(block 65) failed [ 771.551001][T12208] FAT-fs (loop7): Directory bread(block 66) failed [ 771.588253][T12208] FAT-fs (loop7): Directory bread(block 67) failed [ 771.618674][T12208] FAT-fs (loop7): Directory bread(block 68) failed [ 771.635032][ T33] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 771.644216][ T33] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 771.650512][T12208] FAT-fs (loop7): Directory bread(block 69) failed [ 771.652445][ T33] usb 4-1: Manufacturer: syz [ 771.690250][T12208] FAT-fs (loop7): Directory bread(block 70) failed [ 771.737648][T12208] FAT-fs (loop7): Directory bread(block 71) failed [ 771.770683][T12208] FAT-fs (loop7): Directory bread(block 72) failed [ 771.777301][T12208] FAT-fs (loop7): Directory bread(block 73) failed [ 771.892915][T12211] loop5: detected capacity change from 0 to 512 [ 772.150579][T10864] block nbd0: Possible stuck request ffff8880247c8400: control (read@2048,1024B). Runtime 450 seconds [ 772.161716][T10864] block nbd0: Possible stuck request ffff8880247c8600: control (read@3072,1024B). Runtime 450 seconds [ 772.173896][ T52] block nbd2: Possible stuck request ffff888024858000: control (read@0,1024B). Runtime 450 seconds [ 772.184742][ T52] block nbd2: Possible stuck request ffff888024858200: control (read@1024,1024B). Runtime 450 seconds [ 772.196224][ T52] block nbd2: Possible stuck request ffff888024858400: control (read@2048,1024B). Runtime 450 seconds [ 772.207313][ T52] block nbd2: Possible stuck request ffff888024858600: control (read@3072,1024B). Runtime 450 seconds [ 772.285001][T12211] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 772.394411][ T33] usb 4-1: config 0 descriptor?? [ 772.409237][T12211] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 772.419943][ T33] usb 4-1: can't set config #0, error -71 [ 772.430314][T12211] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 772.444266][ T33] usb 4-1: USB disconnect, device number 41 [ 772.612000][ T9431] EXT4-fs (loop5): unmounting filesystem. [ 773.086650][T12227] device syzkaller0 entered promiscuous mode [ 774.092511][T12236] loop3: detected capacity change from 0 to 8 [ 774.135385][T12236] SQUASHFS error: Unable to read inode 0x127 [ 774.285142][T12239] 9pnet_fd: Insufficient options for proto=fd [ 776.512260][T12258] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 776.565107][T12258] overlayfs: missing 'lowerdir' [ 776.650166][ T4275] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 776.886364][T12263] loop7: detected capacity change from 0 to 512 [ 776.893826][T12263] journal_path: not usable as path [ 776.899045][T12263] EXT4-fs: error: could not find journal device path [ 777.021916][ T4275] usb 6-1: Using ep0 maxpacket: 16 [ 777.046828][ T4275] usb 6-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 777.086587][ T4275] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 777.124529][ T4275] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 777.158042][ T4275] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 777.194090][ T4275] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 777.239718][ T4275] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 777.267983][ T4275] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 777.287589][ T4275] usb 6-1: Manufacturer: syz [ 777.321200][ T4275] usb 6-1: config 0 descriptor?? [ 777.628654][ T7862] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 777.760348][ T4275] rc_core: IR keymap rc-hauppauge not found [ 777.766394][ T4275] Registered IR keymap rc-empty [ 777.781885][ T4275] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 777.840251][ T4275] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 777.890897][ T4275] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 777.921907][ T4275] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input41 [ 777.952884][ T4275] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 778.001193][ T4275] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 778.075959][ T4275] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 778.149289][T12268] device syzkaller0 entered promiscuous mode [ 778.160691][ T4275] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 778.210326][ T4275] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 778.251217][ T4275] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 778.300530][ T4275] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 778.368956][ T4275] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 778.404051][ T4275] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 778.452159][ T4275] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 778.493403][ T4275] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 778.516603][ T4275] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 778.543848][ T4275] usb 6-1: USB disconnect, device number 7 [ 779.561571][T12290] loop3: detected capacity change from 0 to 8 [ 779.592522][T12290] SQUASHFS error: Unable to read inode 0x127 [ 779.632728][T12288] loop2: detected capacity change from 0 to 2048 [ 779.827912][T12288] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 779.938225][T12298] loop5: detected capacity change from 0 to 256 [ 779.954444][T12298] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 780.011213][T12298] FAT-fs (loop5): Directory bread(block 64) failed [ 780.017825][T12298] FAT-fs (loop5): Directory bread(block 65) failed [ 780.040285][T12298] FAT-fs (loop5): Directory bread(block 66) failed [ 780.048195][T12298] FAT-fs (loop5): Directory bread(block 67) failed [ 780.072697][T12298] FAT-fs (loop5): Directory bread(block 68) failed [ 780.086884][T12298] FAT-fs (loop5): Directory bread(block 69) failed [ 780.103809][T12298] FAT-fs (loop5): Directory bread(block 70) failed [ 780.120229][T12298] FAT-fs (loop5): Directory bread(block 71) failed [ 780.134671][T12298] FAT-fs (loop5): Directory bread(block 72) failed [ 780.150035][T12298] FAT-fs (loop5): Directory bread(block 73) failed [ 780.545278][T12301] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 780.560291][T12301] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 780.572631][T12301] EXT4-fs (loop2): This should not happen!! Data will be lost [ 780.572631][T12301] [ 780.582351][T12301] EXT4-fs (loop2): Total free blocks count 0 [ 780.588376][T12301] EXT4-fs (loop2): Free/Dirty block details [ 780.604412][T12302] input: syz0 as /devices/virtual/input/input42 [ 780.611199][T12301] EXT4-fs (loop2): free_blocks=2415919504 [ 780.617062][T12301] EXT4-fs (loop2): dirty_blocks=48 [ 780.622262][T12301] EXT4-fs (loop2): Block reservation details [ 780.628274][T12301] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 781.009620][T11281] block nbd1: Possible stuck request ffff888024820000: control (read@0,1024B). Runtime 450 seconds [ 781.030032][T11281] block nbd1: Possible stuck request ffff888024820200: control (read@1024,1024B). Runtime 450 seconds [ 781.041191][T11281] block nbd1: Possible stuck request ffff888024820400: control (read@2048,1024B). Runtime 450 seconds [ 781.060193][T11281] block nbd1: Possible stuck request ffff888024820600: control (read@3072,1024B). Runtime 450 seconds [ 781.088100][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 787.907751][T12340] loop5: detected capacity change from 0 to 256 [ 787.986869][T12344] loop2: detected capacity change from 0 to 8 [ 788.008580][T12340] FAT-fs (loop5): Directory bread(block 64) failed [ 788.033810][T12344] SQUASHFS error: Unable to read inode 0x127 [ 788.041022][T12340] FAT-fs (loop5): Directory bread(block 65) failed [ 788.048242][T12340] FAT-fs (loop5): Directory bread(block 66) failed [ 788.115025][T12340] FAT-fs (loop5): Directory bread(block 67) failed [ 788.175324][T12340] FAT-fs (loop5): Directory bread(block 68) failed [ 788.182888][ T4436] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 788.402432][T12340] FAT-fs (loop5): Directory bread(block 69) failed [ 788.440410][T12340] FAT-fs (loop5): Directory bread(block 70) failed [ 788.457841][T12340] FAT-fs (loop5): Directory bread(block 71) failed [ 788.486517][T12340] FAT-fs (loop5): Directory bread(block 72) failed [ 788.527811][T12340] FAT-fs (loop5): Directory bread(block 73) failed [ 790.690805][ T4330] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 791.474698][ T4330] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 791.496315][ T4330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.525198][ T4330] usb 6-1: Product: syz [ 791.539975][ T4330] usb 6-1: Manufacturer: syz [ 791.555049][ T4330] usb 6-1: SerialNumber: syz [ 792.139641][ T4330] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 792.277900][ T4330] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 793.241415][ T4330] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 793.283921][ T4330] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 793.327567][ T4330] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 793.439667][ T4330] lan78xx: probe of 6-1:1.0 failed with error -32 [ 793.603408][T12391] loop3: detected capacity change from 0 to 1024 [ 793.765492][T12391] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 793.774257][T12391] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 793.913089][T12398] loop6: detected capacity change from 0 to 8 [ 793.940166][T12398] SQUASHFS error: Unable to read inode 0x127 [ 794.165978][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 794.325129][ T4322] usb 6-1: USB disconnect, device number 8 [ 796.019885][ T52] block nbd0: Possible stuck request ffff8880247c8000: control (read@0,1024B). Runtime 480 seconds [ 796.030814][ T52] block nbd0: Possible stuck request ffff8880247c8200: control (read@1024,1024B). Runtime 480 seconds [ 796.730144][ T4322] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 796.924328][ T4322] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 796.940309][ T4322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.020178][ T4322] usb 6-1: Product: syz [ 797.024433][ T4322] usb 6-1: Manufacturer: syz [ 797.057768][T12436] loop3: detected capacity change from 0 to 1024 [ 797.077705][ T4322] usb 6-1: SerialNumber: syz [ 797.116059][T11281] block nbd3: Possible stuck request ffff8880248ba000: control (read@0,1024B). Runtime 480 seconds [ 797.127099][T11281] block nbd3: Possible stuck request ffff8880248ba200: control (read@1024,1024B). Runtime 480 seconds [ 797.137765][T12436] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 797.140943][T11281] block nbd3: Possible stuck request ffff8880248ba400: control (read@2048,1024B). Runtime 480 seconds [ 797.158497][T11281] block nbd3: Possible stuck request ffff8880248ba600: control (read@3072,1024B). Runtime 480 seconds [ 797.170645][T12436] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 797.377860][ T4322] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 797.402499][ T4322] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 797.410396][T12447] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 798.112057][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 798.216640][T12456] loop6: detected capacity change from 0 to 8 [ 798.267056][T12456] SQUASHFS error: Unable to read inode 0x127 [ 798.301706][ T4322] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 798.998745][ T4322] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 800.045734][ T5861] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 800.168716][ T4322] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 800.208642][ T4322] lan78xx: probe of 6-1:1.0 failed with error -32 [ 800.486480][T11313] usb 6-1: USB disconnect, device number 9 [ 801.258137][T12482] loop3: detected capacity change from 0 to 512 [ 801.374592][T12482] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 801.398814][T12482] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 802.378252][ T52] block nbd0: Possible stuck request ffff8880247c8400: control (read@2048,1024B). Runtime 480 seconds [ 802.389840][ T52] block nbd0: Possible stuck request ffff8880247c8600: control (read@3072,1024B). Runtime 480 seconds [ 802.401327][T10864] block nbd2: Possible stuck request ffff888024858000: control (read@0,1024B). Runtime 480 seconds [ 802.412143][T10864] block nbd2: Possible stuck request ffff888024858200: control (read@1024,1024B). Runtime 480 seconds [ 802.423499][T10864] block nbd2: Possible stuck request ffff888024858400: control (read@2048,1024B). Runtime 480 seconds [ 802.434572][T10864] block nbd2: Possible stuck request ffff888024858600: control (read@3072,1024B). Runtime 480 seconds [ 802.648823][T12496] 9pnet_fd: Insufficient options for proto=fd [ 802.710558][ T26] audit: type=1804 audit(1780081578.124:39): pid=12496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2391" name="/newroot/481/bus/file1" dev="loop3" ino=15 res=1 errno=0 [ 803.414147][T12491] loop6: detected capacity change from 0 to 1024 [ 803.524578][T12491] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 803.555550][T12491] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.064559][ T9449] EXT4-fs (loop6): unmounting filesystem. [ 806.802619][ T126] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 806.831272][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 807.034066][ T126] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 807.060184][ T126] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.068621][ T126] usb 8-1: Product: syz [ 807.098302][ T126] usb 8-1: Manufacturer: syz [ 807.120338][ T126] usb 8-1: SerialNumber: syz [ 808.079654][ T126] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 808.633233][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.639648][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.649625][ T126] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 809.781386][ T126] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 809.828585][ T126] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 809.869091][ T126] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 809.916042][ T126] lan78xx: probe of 8-1:1.0 failed with error -71 [ 809.943520][ T126] usb 8-1: USB disconnect, device number 4 [ 810.297235][T12553] loop5: detected capacity change from 0 to 1024 [ 810.312254][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 810.322569][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 810.331437][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 810.344548][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 810.353920][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 810.361359][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 810.458400][T12553] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 810.525945][T12553] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.521651][T12577] 9pnet_fd: Insufficient options for proto=fd [ 811.550600][T11281] block nbd1: Possible stuck request ffff888024820000: control (read@0,1024B). Runtime 480 seconds [ 811.568714][T11281] block nbd1: Possible stuck request ffff888024820200: control (read@1024,1024B). Runtime 480 seconds [ 811.580450][T11281] block nbd1: Possible stuck request ffff888024820400: control (read@2048,1024B). Runtime 480 seconds [ 811.591594][T11281] block nbd1: Possible stuck request ffff888024820600: control (read@3072,1024B). Runtime 480 seconds [ 811.754322][T12558] chnl_net:caif_netlink_parms(): no params data found [ 811.996704][ T9431] EXT4-fs (loop5): unmounting filesystem. [ 812.037720][T12558] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.110407][T12558] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.119325][T12558] device bridge_slave_0 entered promiscuous mode [ 812.331687][T12558] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.338896][T12558] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.390749][T12558] device bridge_slave_1 entered promiscuous mode [ 812.397426][ T4293] Bluetooth: hci0: command 0x0409 tx timeout [ 812.503816][T12558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.536884][T12558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.721493][T12558] team0: Port device team_slave_0 added [ 813.740339][T12600] loop3: detected capacity change from 0 to 8 [ 813.763902][T12558] team0: Port device team_slave_1 added [ 813.811033][T12600] SQUASHFS error: Unable to read inode 0x127 [ 814.488455][ T4293] Bluetooth: hci0: command 0x041b tx timeout [ 814.659797][T12558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.700174][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.988686][T12558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.099597][T12558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.214770][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.587888][T12605] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 815.598600][T12558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.896345][T12558] device hsr_slave_0 entered promiscuous mode [ 815.940660][T12558] device hsr_slave_1 entered promiscuous mode [ 815.955463][T12558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 815.977846][T12558] Cannot create hsr debugfs directory [ 816.192598][T12623] loop7: detected capacity change from 0 to 512 [ 816.271753][T12623] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 816.321520][T12623] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 816.550640][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 816.616733][T12558] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 816.667395][T12558] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 816.706878][T12558] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 816.741818][T12558] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 816.762134][ T26] audit: type=1804 audit(1780081592.254:40): pid=12633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2426" name="/newroot/66/bus/file1" dev="loop7" ino=15 res=1 errno=0 [ 816.802007][T12633] 9pnet_fd: Insufficient options for proto=fd [ 816.910136][ T953] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 817.083735][T12558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.111115][ T953] usb 4-1: Using ep0 maxpacket: 16 [ 817.124000][ T953] usb 4-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 817.257369][ T953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 817.437365][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 817.466669][ T953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 817.495802][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 817.635061][T12558] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.658105][ T953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 817.737817][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 817.753849][ T953] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 817.787961][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 817.821445][T10865] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.828675][T10865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.850741][ T953] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 817.882119][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 817.932192][ T953] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 817.936924][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 817.953854][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 817.962747][T10865] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.971389][T10865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.975621][ T953] usb 4-1: Manufacturer: syz [ 818.001000][ T953] usb 4-1: config 0 descriptor?? [ 818.017209][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 818.033508][T11210] EXT4-fs (loop7): unmounting filesystem. [ 818.153575][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 818.169734][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 818.186989][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 818.204976][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 818.307240][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 819.009178][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 819.042831][ T953] rc_core: IR keymap rc-hauppauge not found [ 819.049358][ T953] Registered IR keymap rc-empty [ 819.056685][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 819.075165][ T953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.091438][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 819.130352][ T953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.160923][ T953] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 819.194650][ T953] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input43 [ 819.219553][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 819.234015][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 819.268834][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 819.459498][ T953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.500469][ T953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.550345][ T953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.591508][ T953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.612887][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 819.638000][ T953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.690277][ T953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.780319][ T953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.810276][ T953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.850451][ T953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.890178][ T953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 819.944660][ T953] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 819.960138][ T953] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 820.043225][ T953] usb 4-1: USB disconnect, device number 42 [ 820.522979][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 820.551036][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 820.602075][T12558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.393278][ T4275] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 821.603443][ T4275] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 821.630296][ T4275] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.638896][ T4275] usb 8-1: Product: syz [ 821.663780][ T4275] usb 8-1: Manufacturer: syz [ 821.668458][ T4275] usb 8-1: SerialNumber: syz [ 822.084062][ T4275] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 822.104528][ T4275] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 822.117656][T12683] 9pnet_fd: Insufficient options for proto=fd [ 822.313649][T12675] loop3: detected capacity change from 0 to 1024 [ 822.694351][T12675] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 822.807168][T12675] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 823.234643][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 823.269431][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 823.362325][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 823.379519][ T4275] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 823.404983][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 823.420143][ T4275] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 823.451236][T12558] device veth0_vlan entered promiscuous mode [ 823.478393][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 823.493385][ T4275] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 823.503514][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 823.843279][T12558] device veth1_vlan entered promiscuous mode [ 824.261464][ T4275] lan78xx: probe of 8-1:1.0 failed with error -32 [ 824.292531][ T4275] usb 8-1: USB disconnect, device number 5 [ 824.313500][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 824.352867][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 824.572643][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 824.629844][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 824.759927][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 825.186362][T12558] device veth0_macvtap entered promiscuous mode [ 825.312904][T12558] device veth1_macvtap entered promiscuous mode [ 825.330362][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 825.331226][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 825.427346][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.427372][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.427383][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.427398][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.427410][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.427425][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.427437][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.427452][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.427464][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.427479][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.427494][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.427509][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.427522][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.427537][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.427550][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.427565][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.429093][T12558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.431912][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.431939][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.431949][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.431962][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.431971][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.431983][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.431993][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.432005][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.432015][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.432027][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.432040][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.432052][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.432062][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.432074][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.432084][T12558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.432096][T12558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.433448][T12558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.434913][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 825.435635][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 825.436132][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 825.436576][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 825.438929][T12558] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.438966][T12558] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.438996][T12558] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.439025][T12558] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.739694][ T5864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.739719][ T5864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.739962][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 825.859185][ T5864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.859211][ T5864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.859456][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 826.680458][T10864] block nbd0: Possible stuck request ffff8880247c8000: control (read@0,1024B). Runtime 510 seconds [ 826.680504][T10864] block nbd0: Possible stuck request ffff8880247c8200: control (read@1024,1024B). Runtime 510 seconds [ 827.191812][T11281] block nbd3: Possible stuck request ffff8880248ba000: control (read@0,1024B). Runtime 510 seconds [ 827.191859][T11281] block nbd3: Possible stuck request ffff8880248ba200: control (read@1024,1024B). Runtime 510 seconds [ 827.191891][T11281] block nbd3: Possible stuck request ffff8880248ba400: control (read@2048,1024B). Runtime 510 seconds [ 827.191921][T11281] block nbd3: Possible stuck request ffff8880248ba600: control (read@3072,1024B). Runtime 510 seconds [ 827.333190][T12747] device syzkaller0 entered promiscuous mode [ 832.969881][T10864] block nbd0: Possible stuck request ffff8880247c8400: control (read@2048,1024B). Runtime 510 seconds [ 833.053999][ T52] block nbd2: Possible stuck request ffff888024858000: control (read@0,1024B). Runtime 510 seconds [ 833.065161][ T52] block nbd2: Possible stuck request ffff888024858200: control (read@1024,1024B). Runtime 510 seconds [ 833.076738][T10864] block nbd0: Possible stuck request ffff8880247c8600: control (read@3072,1024B). Runtime 510 seconds [ 833.088193][ T52] block nbd2: Possible stuck request ffff888024858400: control (read@2048,1024B). Runtime 510 seconds [ 833.099378][ T52] block nbd2: Possible stuck request ffff888024858600: control (read@3072,1024B). Runtime 510 seconds [ 833.836428][ T4487] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 840.836874][T12886] loop8: detected capacity change from 0 to 1024 [ 840.965870][T12890] loop3: detected capacity change from 0 to 256 [ 840.973557][T12886] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 840.982188][T12886] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.681235][T12890] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 841.895020][T12890] FAT-fs (loop3): Directory bread(block 64) failed [ 841.916224][T11281] block nbd1: Possible stuck request ffff888024820000: control (read@0,1024B). Runtime 510 seconds [ 841.927502][T11281] block nbd1: Possible stuck request ffff888024820200: control (read@1024,1024B). Runtime 510 seconds [ 841.939252][T11281] block nbd1: Possible stuck request ffff888024820400: control (read@2048,1024B). Runtime 510 seconds [ 841.951700][T11281] block nbd1: Possible stuck request ffff888024820600: control (read@3072,1024B). Runtime 510 seconds [ 841.961464][T12890] FAT-fs (loop3): Directory bread(block 65) failed [ 841.975759][T12890] FAT-fs (loop3): Directory bread(block 66) failed [ 842.006378][T12890] FAT-fs (loop3): Directory bread(block 67) failed [ 842.060945][T12890] FAT-fs (loop3): Directory bread(block 68) failed [ 842.130251][T12890] FAT-fs (loop3): Directory bread(block 69) failed [ 842.137003][T12890] FAT-fs (loop3): Directory bread(block 70) failed [ 842.190196][T12890] FAT-fs (loop3): Directory bread(block 71) failed [ 842.196921][T12890] FAT-fs (loop3): Directory bread(block 72) failed [ 842.210402][T12890] FAT-fs (loop3): Directory bread(block 73) failed [ 843.847346][T12892] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 844.912804][T12558] EXT4-fs (loop8): unmounting filesystem. [ 844.934374][T12911] device syzkaller0 entered promiscuous mode [ 847.614334][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 857.625610][ T52] block nbd0: Possible stuck request ffff8880247c8000: control (read@0,1024B). Runtime 540 seconds [ 857.636426][ T52] block nbd0: Possible stuck request ffff8880247c8200: control (read@1024,1024B). Runtime 540 seconds [ 858.199170][T11281] block nbd3: Possible stuck request ffff8880248ba000: control (read@0,1024B). Runtime 540 seconds [ 858.210002][T11281] block nbd3: Possible stuck request ffff8880248ba200: control (read@1024,1024B). Runtime 540 seconds [ 858.221549][T11281] block nbd3: Possible stuck request ffff8880248ba400: control (read@2048,1024B). Runtime 540 seconds [ 858.232604][T11281] block nbd3: Possible stuck request ffff8880248ba600: control (read@3072,1024B). Runtime 540 seconds [ 858.491471][T12991] loop3: detected capacity change from 0 to 1024 [ 858.561462][T12991] EXT4-fs: Ignoring removed orlov option [ 858.682198][T12991] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 858.846517][T13000] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2516'. [ 859.603249][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 860.126098][T13014] device syzkaller0 entered promiscuous mode [ 862.490249][ T4288] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 863.808205][ T52] block nbd0: Possible stuck request ffff8880247c8400: control (read@2048,1024B). Runtime 540 seconds [ 863.819725][ T52] block nbd0: Possible stuck request ffff8880247c8600: control (read@3072,1024B). Runtime 540 seconds [ 863.831492][T10864] block nbd2: Possible stuck request ffff888024858000: control (read@0,1024B). Runtime 540 seconds [ 863.842320][T10864] block nbd2: Possible stuck request ffff888024858200: control (read@1024,1024B). Runtime 540 seconds [ 863.853396][T10864] block nbd2: Possible stuck request ffff888024858400: control (read@2048,1024B). Runtime 540 seconds [ 863.864476][T10864] block nbd2: Possible stuck request ffff888024858600: control (read@3072,1024B). Runtime 540 seconds [ 864.845850][ T4904] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 866.940001][T13078] loop5: detected capacity change from 0 to 1024 [ 867.469115][T13078] EXT4-fs: Mount option(s) incompatible with ext3 [ 868.254038][T13087] loop5: detected capacity change from 0 to 128 [ 868.308943][T13087] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 868.332920][T13087] ext4 filesystem being mounted at /189/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 868.423205][T13087] EXT4-fs warning (device loop5): ext4_group_extend:1899: can't read last block, resize aborted [ 868.534401][ T9431] EXT4-fs (loop5): unmounting filesystem. [ 868.736218][T13091] loop5: detected capacity change from 0 to 512 [ 868.799487][T13091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 868.873217][T13091] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 868.892476][T13091] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 869.162527][ T9431] EXT4-fs (loop5): unmounting filesystem. [ 870.073040][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.084983][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.054192][T11281] block nbd1: Possible stuck request ffff888024820000: control (read@0,1024B). Runtime 540 seconds [ 872.065046][T11281] block nbd1: Possible stuck request ffff888024820200: control (read@1024,1024B). Runtime 540 seconds [ 872.076495][T11281] block nbd1: Possible stuck request ffff888024820400: control (read@2048,1024B). Runtime 540 seconds [ 872.087596][T11281] block nbd1: Possible stuck request ffff888024820600: control (read@3072,1024B). Runtime 540 seconds [ 873.253590][T13122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 874.260378][T13138] tmpfs: Bad value for 'nr_inodes' [ 877.864046][T13182] loop3: detected capacity change from 0 to 256 [ 877.889584][T13184] netlink: 'syz.6.2568': attribute type 3 has an invalid length. [ 880.159569][T13209] loop5: detected capacity change from 0 to 4096 [ 880.482307][T13209] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 881.236611][T13224] loop7: detected capacity change from 0 to 512 [ 881.245956][T13225] loop3: detected capacity change from 0 to 512 [ 881.345510][T13225] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 881.403338][T13224] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 881.471169][T13224] EXT4-fs (loop7): mount failed [ 882.383915][T13225] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 882.394061][ T9431] EXT4-fs (loop5): unmounting filesystem. [ 882.470925][T13225] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 882.906089][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 883.223629][T13253] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2589'. [ 884.559409][T13274] loop5: detected capacity change from 0 to 512 [ 884.791996][T13274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 885.276957][T13274] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 885.596921][T13274] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 885.921278][ T9431] EXT4-fs (loop5): unmounting filesystem. [ 886.023352][T13294] loop3: detected capacity change from 0 to 512 [ 886.159308][T13294] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 886.199199][T13294] ext4 filesystem being mounted at /521/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 886.600338][T13307] 9pnet_fd: Insufficient options for proto=fd [ 887.751067][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 888.030764][T10864] block nbd0: Possible stuck request ffff8880247c8000: control (read@0,1024B). Runtime 570 seconds [ 888.042308][T10864] block nbd0: Possible stuck request ffff8880247c8200: control (read@1024,1024B). Runtime 570 seconds [ 888.528339][T13321] loop3: detected capacity change from 0 to 512 [ 888.606324][T13321] EXT4-fs: Ignoring removed bh option [ 888.625392][T13321] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 888.636683][T13321] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 888.682063][T13321] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 888.703983][T11281] block nbd3: Possible stuck request ffff8880248ba000: control (read@0,1024B). Runtime 570 seconds [ 888.715533][T11281] block nbd3: Possible stuck request ffff8880248ba200: control (read@1024,1024B). Runtime 570 seconds [ 888.726903][T11281] block nbd3: Possible stuck request ffff8880248ba400: control (read@2048,1024B). Runtime 570 seconds [ 888.738050][T11281] block nbd3: Possible stuck request ffff8880248ba600: control (read@3072,1024B). Runtime 570 seconds [ 888.780164][T13321] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 888.831163][T13328] 9pnet_fd: Insufficient options for proto=fd [ 888.833677][T13321] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 889.520877][T13329] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 889.936743][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 890.258611][T13347] loop3: detected capacity change from 0 to 512 [ 890.512830][T13354] tc action pedit 'at' offset 6 out of bounds [ 890.621295][T13347] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 890.638009][T13347] ext4 filesystem being mounted at /523/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 891.263359][T13363] 9pnet_fd: Insufficient options for proto=fd [ 893.166877][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 893.518673][T13376] 9pnet_fd: Insufficient options for proto=fd [ 894.402647][T10864] block nbd0: Possible stuck request ffff8880247c8400: control (read@2048,1024B). Runtime 570 seconds [ 894.422140][T10864] block nbd0: Possible stuck request ffff8880247c8600: control (read@3072,1024B). Runtime 570 seconds [ 894.433488][T10864] block nbd2: Possible stuck request ffff888024858000: control (read@0,1024B). Runtime 570 seconds [ 894.448311][T10864] block nbd2: Possible stuck request ffff888024858200: control (read@1024,1024B). Runtime 570 seconds [ 894.459389][T10864] block nbd2: Possible stuck request ffff888024858400: control (read@2048,1024B). Runtime 570 seconds [ 894.472115][T10864] block nbd2: Possible stuck request ffff888024858600: control (read@3072,1024B). Runtime 570 seconds [ 895.362848][T13397] bridge0: port 3(wlan1) entered blocking state [ 895.369245][T13397] bridge0: port 3(wlan1) entered disabled state [ 895.376802][T13397] device wlan1 entered promiscuous mode [ 895.382837][T13397] bridge0: port 3(wlan1) entered blocking state [ 895.389164][T13397] bridge0: port 3(wlan1) entered forwarding state [ 895.417444][T10865] bridge0: port 3(wlan1) entered disabled state [ 896.220589][ T5864] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 897.235403][T13407] loop7: detected capacity change from 0 to 512 [ 897.280177][T13407] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 897.291810][T13407] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 897.775404][T13416] 9pnet_fd: Insufficient options for proto=fd [ 898.291437][T13414] tc action pedit 'at' offset 6 out of bounds [ 898.458696][T13419] 9pnet_fd: Insufficient options for proto=fd [ 898.593935][T11210] EXT4-fs (loop7): unmounting filesystem. [ 900.008533][T13448] loop7: detected capacity change from 0 to 512 [ 900.901312][T13448] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 900.948192][T13448] EXT4-fs (loop7): mount failed [ 900.993385][T13464] 9pnet_fd: Insufficient options for proto=fd [ 901.927900][T13484] overlayfs: missing 'lowerdir' [ 902.244743][T11281] block nbd1: Possible stuck request ffff888024820000: control (read@0,1024B). Runtime 570 seconds [ 902.256575][T11281] block nbd1: Possible stuck request ffff888024820200: control (read@1024,1024B). Runtime 570 seconds [ 902.282739][T11281] block nbd1: Possible stuck request ffff888024820400: control (read@2048,1024B). Runtime 570 seconds [ 902.294012][T11281] block nbd1: Possible stuck request ffff888024820600: control (read@3072,1024B). Runtime 570 seconds [ 902.721883][T13493] bridge0: port 3(wlan1) entered blocking state [ 902.728268][T13493] bridge0: port 3(wlan1) entered disabled state [ 902.736424][T13493] device wlan1 entered promiscuous mode [ 905.041592][T13512] 9pnet_fd: Insufficient options for proto=fd [ 905.504246][T13520] loop3: detected capacity change from 0 to 512 [ 905.622270][T13520] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 905.769289][T13520] EXT4-fs (loop3): mount failed [ 906.205567][ T4288] Bluetooth: hci6: command 0x1003 tx timeout [ 906.220126][ T4293] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 907.795732][T13544] tmpfs: Cannot retroactively limit inodes [ 908.537650][T13564] overlayfs: failed to clone lowerpath [ 913.000402][T13619] tmpfs: Cannot retroactively limit inodes [ 915.426218][T13650] overlayfs: failed to resolve './bus': -2 [ 915.949863][T13649] tty tty37: ldisc open failed (-12), clearing slot 36 [ 918.110383][T10864] block nbd0: Possible stuck request ffff8880247c8000: control (read@0,1024B). Runtime 600 seconds [ 918.121289][T10864] block nbd0: Possible stuck request ffff8880247c8200: control (read@1024,1024B). Runtime 600 seconds [ 918.344630][T13680] loop8: detected capacity change from 0 to 128 [ 918.381280][T13680] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 918.443203][T13680] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 918.893423][T13686] device syzkaller0 entered promiscuous mode [ 918.977138][T13691] tipc: Enabling of bearer rejected, failed to enable media [ 919.971099][T11281] block nbd3: Possible stuck request ffff8880248ba000: control (read@0,1024B). Runtime 600 seconds [ 919.982060][T11281] block nbd3: Possible stuck request ffff8880248ba200: control (read@1024,1024B). Runtime 600 seconds [ 919.995086][T11281] block nbd3: Possible stuck request ffff8880248ba400: control (read@2048,1024B). Runtime 600 seconds [ 920.006233][T11281] block nbd3: Possible stuck request ffff8880248ba600: control (read@3072,1024B). Runtime 600 seconds [ 920.168405][T13695] loop5: detected capacity change from 0 to 2048 [ 920.383668][T13695] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 920.732906][T13705] input: syz0 as /devices/virtual/input/input44 [ 921.252207][ T9431] EXT4-fs (loop5): unmounting filesystem. [ 923.301226][T12558] EXT4-fs (loop8): unmounting filesystem. [ 924.294381][T13723] device syzkaller0 entered promiscuous mode [ 924.470416][T10864] block nbd0: Possible stuck request ffff8880247c8400: control (read@2048,1024B). Runtime 600 seconds [ 924.481832][T10864] block nbd0: Possible stuck request ffff8880247c8600: control (read@3072,1024B). Runtime 600 seconds [ 924.493207][T10864] block nbd2: Possible stuck request ffff888024858000: control (read@0,1024B). Runtime 600 seconds [ 924.510231][T10864] block nbd2: Possible stuck request ffff888024858200: control (read@1024,1024B). Runtime 600 seconds [ 924.521388][T10864] block nbd2: Possible stuck request ffff888024858400: control (read@2048,1024B). Runtime 600 seconds [ 924.533782][T10864] block nbd2: Possible stuck request ffff888024858600: control (read@3072,1024B). Runtime 600 seconds [ 924.771961][T13737] loop7: detected capacity change from 0 to 512 [ 924.885417][T13737] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 924.961182][T13737] EXT4-fs (loop7): mount failed [ 927.822490][ T4907] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 931.513754][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.520194][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.511012][T13786] loop8: detected capacity change from 0 to 256 [ 932.549299][T13786] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 932.645961][T13786] FAT-fs (loop8): Directory bread(block 64) failed [ 932.670395][T13786] FAT-fs (loop8): Directory bread(block 65) failed [ 932.709888][T13786] FAT-fs (loop8): Directory bread(block 66) failed [ 932.744680][T13786] FAT-fs (loop8): Directory bread(block 67) failed [ 932.762075][T13786] FAT-fs (loop8): Directory bread(block 68) failed [ 932.768673][T13786] FAT-fs (loop8): Directory bread(block 69) failed [ 932.805062][T13786] FAT-fs (loop8): Directory bread(block 70) failed [ 932.838958][T13786] FAT-fs (loop8): Directory bread(block 71) failed [ 932.855064][T13786] FAT-fs (loop8): Directory bread(block 72) failed [ 932.880149][T13786] FAT-fs (loop8): Directory bread(block 73) failed [ 933.621064][T11281] block nbd1: Possible stuck request ffff888024820000: control (read@0,1024B). Runtime 600 seconds [ 933.631956][T11281] block nbd1: Possible stuck request ffff888024820200: control (read@1024,1024B). Runtime 600 seconds [ 933.645613][T11281] block nbd1: Possible stuck request ffff888024820400: control (read@2048,1024B). Runtime 600 seconds [ 933.656797][T11281] block nbd1: Possible stuck request ffff888024820600: control (read@3072,1024B). Runtime 600 seconds [ 936.277564][T13801] loop8: detected capacity change from 0 to 1024 [ 936.305084][T13801] EXT4-fs: Ignoring removed orlov option [ 936.358755][T13801] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 936.835656][T12558] EXT4-fs (loop8): unmounting filesystem. [ 937.249790][T13821] loop5: detected capacity change from 0 to 2048 [ 937.695875][T13821] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 939.704725][T13820] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 940.154642][ T27] INFO: task syz.2.2366:12405 blocked for more than 143 seconds. [ 940.198877][ T27] Not tainted syzkaller #0 [ 940.213467][T13847] loop8: detected capacity change from 0 to 256 [ 940.222578][T13820] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 940.240031][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 940.274732][T13847] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 940.368697][ T27] task:syz.2.2366 state:D stack:27856 pid:12405 ppid:4280 flags:0x00004004 [ 940.393220][T13820] EXT4-fs (loop5): This should not happen!! Data will be lost [ 940.393220][T13820] [ 940.408960][ T27] Call Trace: [ 940.449647][ T27] [ 940.477526][T13847] FAT-fs (loop8): Directory bread(block 64) failed [ 940.491018][ T27] __schedule+0x11d1/0x40e0 [ 940.521840][ T27] ? __sched_text_start+0x8/0x8 [ 940.532664][T13847] FAT-fs (loop8): Directory bread(block 65) failed [ 940.559449][ T27] ? __mutex_trylock_common+0x86/0x260 [ 940.589052][T13847] FAT-fs (loop8): Directory bread(block 66) failed [ 940.609498][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 940.629699][T13820] EXT4-fs (loop5): Total free blocks count 0 [ 940.636132][T13820] EXT4-fs (loop5): Free/Dirty block details [ 940.642373][T13820] EXT4-fs (loop5): free_blocks=2415919504 [ 940.648251][T13820] EXT4-fs (loop5): dirty_blocks=48 [ 940.653718][T13820] EXT4-fs (loop5): Block reservation details [ 940.659835][T13820] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 940.669348][T13847] FAT-fs (loop8): Directory bread(block 67) failed [ 940.686483][T13847] FAT-fs (loop8): Directory bread(block 68) failed [ 940.693622][T13849] input: syz0 as /devices/virtual/input/input45 [ 940.700278][ T27] schedule+0xb9/0x180 [ 940.704056][T13847] FAT-fs (loop8): Directory bread(block 69) failed [ 940.704507][ T27] schedule_preempt_disabled+0xf/0x20 [ 940.724144][T13847] FAT-fs (loop8): Directory bread(block 70) failed [ 940.750453][ T27] __mutex_lock+0x562/0xaf0 [ 940.752773][T13847] FAT-fs (loop8): Directory bread(block 71) failed [ 940.755147][ T27] ? __mutex_lock+0x3b2/0xaf0 [ 940.797477][T13847] FAT-fs (loop8): Directory bread(block 72) failed [ 940.804408][ T27] ? blkdev_get_by_dev+0x13d/0xa60 [ 940.809830][ T27] ? mutex_lock_nested+0x10/0x10 [ 940.824267][T13847] FAT-fs (loop8): Directory bread(block 73) failed [ 940.831789][ T27] ? iput+0x3c0/0x980 [ 940.848039][ T27] ? ilookup+0x1c0/0x200 [ 940.858186][ T27] ? disk_block_events+0xa3/0x120 [ 940.890059][ T27] ? blkdev_get_by_dev+0x11a/0xa60 [ 940.895304][ T27] blkdev_get_by_dev+0x13d/0xa60 [ 940.930341][ T27] ? __rwlock_init+0x140/0x140 [ 940.935240][ T27] blkdev_open+0x11e/0x2e0 [ 940.939758][ T27] ? blkdev_mmap+0x1a0/0x1a0 [ 940.971543][ T27] do_dentry_open+0x7e9/0x10d0 [ 940.982236][ T27] path_openat+0x2635/0x2ee0 [ 940.992866][ T27] ? verify_lock_unused+0x140/0x140 [ 941.000682][ T27] ? do_syscall_64+0x4c/0xa0 [ 941.005502][ T27] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.012251][ T27] ? do_filp_open+0x430/0x430 [ 941.017130][ T27] do_filp_open+0x1f1/0x430 [ 941.033471][ T27] ? vfs_tmpfile+0x480/0x480 [ 941.048772][ T27] ? _raw_spin_unlock+0x24/0x40 [ 941.065148][ T27] ? alloc_fd+0x58f/0x630 [ 941.079748][ T27] do_sys_openat2+0x150/0x4b0 [ 941.108245][ T27] ? up_read+0x20/0x20 [ 941.127360][ T27] ? do_sys_open+0xe0/0xe0 [ 941.153906][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 941.170424][ T27] ? lock_chain_count+0x20/0x20 [ 941.176234][ T27] __x64_sys_openat+0x135/0x160 [ 941.181262][ T27] do_syscall_64+0x4c/0xa0 [ 941.185752][ T27] ? clear_bhb_loop+0x60/0xb0 [ 941.190830][ T27] ? clear_bhb_loop+0x60/0xb0 [ 941.195575][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.201567][ T27] RIP: 0033:0x7f04f8d5d68e [ 941.206025][ T27] RSP: 002b:00007f04f9c3db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 941.214575][ T27] RAX: ffffffffffffffda RBX: 00007f04f9c3e6c0 RCX: 00007f04f8d5d68e [ 941.222649][ T27] RDX: 00000000000a0880 RSI: 00007f04f9c3dc00 RDI: ffffffffffffff9c [ 941.230818][ T27] RBP: 00007f04f9c3dc00 R08: 0000000000000000 R09: 0000000000000000 [ 941.239262][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 941.247373][ T27] R13: 00007f04f9016128 R14: 00007f04f9016090 R15: 00007fff1c129b78 [ 941.266493][ T27] [ 941.274184][ T27] [ 941.274184][ T27] Showing all locks held in the system: [ 941.297573][ T27] 1 lock held by rcu_tasks_kthre/12: [ 941.303594][ T27] #0: ffffffff8cb2e770 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 941.323891][ T27] 1 lock held by rcu_tasks_trace/13: [ 941.329378][ T27] #0: ffffffff8cb2ef90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 941.342117][ T27] 1 lock held by khungtaskd/27: [ 941.347111][ T27] #0: ffffffff8cb2dde0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 941.367704][ T27] 2 locks held by getty/4029: [ 941.375840][ T27] #0: ffff88814d7bb098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 941.393503][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 941.413262][ T27] 1 lock held by udevd/4387: [ 941.418093][ T27] #0: ffff8880247044c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60 [ 941.438422][ T27] 1 lock held by udevd/4413: [ 941.445701][ T27] #0: ffff8881447014c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60 [ 941.465548][ T27] 1 lock held by udevd/4504: [ 941.477545][ T27] #0: ffff8880247fb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60 [ 941.499897][ T27] 1 lock held by udevd/5335: [ 941.504749][ T27] #0: ffff8881443f74c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60 [ 941.522429][ T27] 3 locks held by kworker/u4:4/10865: [ 941.533686][ T27] 1 lock held by syz.2.2366/12405: [ 941.546066][ T27] #0: ffff8881447014c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60 [ 941.566192][ T27] 1 lock held by syz.8.2754/13850: [ 941.577726][ T27] [ 941.589869][ T27] ============================================= [ 941.589869][ T27] [ 941.610306][ T27] NMI backtrace for cpu 1 [ 941.614700][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 941.621945][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 941.632037][ T27] Call Trace: [ 941.635351][ T27] [ 941.638318][ T27] dump_stack_lvl+0x188/0x24e [ 941.643048][ T27] ? irq_work_queue+0xb8/0x140 [ 941.647965][ T27] ? show_regs_print_info+0x12/0x12 [ 941.653213][ T27] ? load_image+0x400/0x400 [ 941.657760][ T27] ? vprintk_emit+0x59f/0x6a0 [ 941.662492][ T27] ? printk_sprint+0x460/0x460 [ 941.667357][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 941.672338][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 941.678570][ T27] ? _printk+0xda/0x130 [ 941.682780][ T27] ? load_image+0x400/0x400 [ 941.687331][ T27] ? load_image+0x400/0x400 [ 941.691891][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 941.698010][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 941.704203][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 941.710243][ T27] watchdog+0xeee/0xf30 [ 941.714526][ T27] ? watchdog+0x1ed/0xf30 [ 941.718909][ T27] kthread+0x29d/0x330 [ 941.723107][ T27] ? hungtask_pm_notify+0x40/0x40 [ 941.728177][ T27] ? kthread_blkcg+0xd0/0xd0 [ 941.732805][ T27] ret_from_fork+0x1f/0x30 [ 941.737306][ T27] [ 941.740392][ C1] vkms_vblank_simulate: vblank timer overrun [ 941.747708][ T27] Sending NMI from CPU 1 to CPUs 0: [ 941.755067][ C0] NMI backtrace for cpu 0 [ 941.755085][ C0] CPU: 0 PID: 13842 Comm: syz.5.2749 Not tainted syzkaller #0 [ 941.755101][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 941.755110][ C0] RIP: 0010:____sys_recvmsg+0x1bc/0x5e0 [ 941.755200][ C0] Code: 10 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 d7 5e aa f9 4d 8b 3e 49 83 c7 78 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 9c 03 00 00 45 8b 2f 41 c1 ed 05 41 83 e5 40 44 0b 6c [ 941.755214][ C0] RSP: 0018:ffffc900041c78e0 EFLAGS: 00000a06 [ 941.755228][ C0] RAX: 0000000000000000 RBX: ffffc900041c7d20 RCX: 0000000000000000 [ 941.755239][ C0] RDX: 0000000000000080 RSI: 0000000000000000 RDI: ffffc900041c7a00 [ 941.755249][ C0] RBP: ffffc900041c7a70 R08: ffffc900041c79ff R09: ffffc900041c7980 [ 941.755260][ C0] R10: dffffc0000000000 R11: fffff52000838f40 R12: ffffc900041c7d64 [ 941.755271][ C0] R13: dffffc0000000000 R14: ffff888072782410 R15: ffff88807c496078 [ 941.755283][ C0] FS: 00007f23eca8e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 941.755297][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.755308][ C0] CR2: 000000110c4141ff CR3: 0000000047257000 CR4: 00000000003506f0 [ 941.755322][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 941.755331][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 941.755340][ C0] Call Trace: [ 941.755345][ C0] [ 941.755357][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 941.755381][ C0] ? import_iovec+0x6f/0xa0 [ 941.755427][ C0] ___sys_recvmsg+0x212/0x590 [ 941.755447][ C0] ? __sys_recvmsg+0x290/0x290 [ 941.755472][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 941.755496][ C0] ? __might_sleep+0x72/0xd0 [ 941.755538][ C0] ? __might_fault+0xc2/0x120 [ 941.755574][ C0] ? __might_fault+0xa6/0x120 [ 941.755591][ C0] do_recvmmsg+0x393/0x870 [ 941.755612][ C0] ? __sys_recvmmsg+0x290/0x290 [ 941.755638][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 941.755662][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 941.755680][ C0] ? do_recvmmsg+0x870/0x870 [ 941.755698][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 941.755746][ C0] do_syscall_64+0x4c/0xa0 [ 941.755760][ C0] ? clear_bhb_loop+0x60/0xb0 [ 941.755782][ C0] ? clear_bhb_loop+0x60/0xb0 [ 941.755805][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.755827][ C0] RIP: 0033:0x7f23ebb9ce59 [ 941.755840][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.755854][ C0] RSP: 002b:00007f23eca8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 941.755870][ C0] RAX: ffffffffffffffda RBX: 00007f23ebe16180 RCX: 00007f23ebb9ce59 [ 941.755882][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 941.755892][ C0] RBP: 00007f23ebc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 941.755902][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 941.755912][ C0] R13: 00007f23ebe16218 R14: 00007f23ebe16180 R15: 00007fff3a144df8 [ 941.755930][ C0] [ 941.983445][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 941.983504][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 941.983543][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 941.983583][ T27] Call Trace: [ 941.983603][ T27] [ 941.983625][ T27] dump_stack_lvl+0x188/0x24e [ 941.983675][ T27] ? memcpy+0x3c/0x60 [ 941.983807][ T27] ? show_regs_print_info+0x12/0x12 [ 941.983860][ T27] ? load_image+0x400/0x400 [ 941.983966][ T27] panic+0x2e5/0x730 [ 941.984023][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 941.984131][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 941.984193][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 941.984288][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 941.984393][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 941.984488][ T27] watchdog+0xf2d/0xf30 [ 941.984583][ T27] ? watchdog+0x1ed/0xf30 [ 941.984687][ T27] kthread+0x29d/0x330 [ 941.984741][ T27] ? hungtask_pm_notify+0x40/0x40 [ 941.984802][ T27] ? kthread_blkcg+0xd0/0xd0 [ 941.984854][ T27] ret_from_fork+0x1f/0x30 [ 941.984956][ T27] [ 941.988203][ T27] Kernel Offset: disabled [ 942.177944][ T27] Rebooting in 86400 seconds..