last executing test programs: 27m34.699376084s ago: executing program 2 (id=1183): mkdir(0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4502c1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) mount(0x0, 0x0, &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0) 27m32.203924378s ago: executing program 2 (id=1190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xc00, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1000000, &(0x7f0000000340)={[{@debug}, {@journal_path={'journal_path', 0x3d, './file2'}}], [{@euid_gt}]}, 0x4, 0x52b, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1JvYidp68ZN/PtJk5n3nu3vPbtvnudVnhfA0DoXEZsRcSoibkXEVJ6f5FtcaW/p454/u7+w9ez+QhKt1o1/Jll5mhcdz0m9k7/meET88HsRP0n2xm2sb6zMV6uVtTw93aytTjfWNy4uF/Kc8tzs3Mynlz4p962tH9R++/S7y9d+9PvffeXJnza//bO0WpM/P5OVdbajn9pNL8ZkR95oRFx7E8EGZDT/98Pxk/a2z0XEh1n/n4qR7NMEAE6yVmsqWlOdaQDgpEuv/ycjKZTyuYDJKBRKpfYc3vsxUajWG80LU/W7dxYjm8M6G8XC7eVqZSafKzwbxSRNz2bHL9Llz6QfVi5FxHsR8XDsdFZeWqhXFwf5xQcAhtg7u8b//4y1x/9OxUFVDgB4c8YHXQEA4MgZ/wFg+Bj/AWD4vMT479eBAHBCuP4HgOFj/AeA4XPg+P/gaOoBAByJH1y/nm6trfb9r7fv1H1xsdJYKdXuLpQW6murpaV6falaKS20Wge9XrVeX539eCfZWN+4WavfvdO8uVybX6rcrLiXAAAM3nsfPP5LOuhvXj6dbdGxloOxGk62wqArAAzMyCs+z+8A4PjTj2F4HeIa3zQAnHBdluhtyycIkl4PeGTxVziuzn/R/D8Mq9eZ/zd3AMfbq83/f6fv9QCOnjEchlerlVjzHwCGjDl+oOf//+d63iLkUf/rAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMfFZLYlhVK2Fvhm+rdQKkWciYizUUxuL1crMxHxbkT8eaw4lqZnB11pAOA1Ff6e5Ot/nZ/6aHJ36ankv2PZPiJ++ssbv7g332yuzab5/9rJbz5K808318qnBtEAAKDTlb1Z2fhdzvcdF/LPn91f2N6OsopPr7YXF03jbuVbu2Q0RrP9eBQjYuLfSZ5uS7+vjPQh/uaDiPjCdvvH415HhMlsDqS98unu+GnsM32P3/n+745f2G5vtitkZem+mL0Xn49dlQMO9Phq+zyZ9720i+f9rxDnsn33/j+enaFeX3r+S7vr1p7zX2Hn/DeyJ36S9flzO+n9a/L04z98f09ma6pd9iDiS6Pd4ic78ZPu59/iR4ds41+//NUPe5W1fhVxvmv7t1ekrmWn2elmbXW6sb5xcbk2v1RZqtwpl+dm52Y+vfRJeTqbo27//WO3GP+4fOHdXvHT9k/0iD++f/vjG4ds/6//d+vHX9sn/re+3v3zf3+f+OmY+M1Dxp+fuNJz+e40/mKP9h/w+ceFQ8Z/8reNxUM+FAA4Ao31jZX5arWydsBB+l3zoMc4OPxBem3/FlQjO4jNiJd+Vjb7EBG7irazuz4r/Ub9djT5TR0kA4v+m36/4EBPS8AReNHpB10TAAAAAAAAAAAAAACgl8b6xspY919r9e1g0G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5Pp/AAAA//8egsDl") r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x100080) dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x100078, 0x78}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r7, 0x0, 0xd, 0xfffffffffffffffe) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x10) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="84000a2654cb2a20"], 0x8) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r9, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r10, 0x1, 0x1, 0xfffffffe, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x5050) 27m29.951776083s ago: executing program 2 (id=1192): syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_unlink(&(0x7f0000000000)='eth0\x00') shmctl$IPC_RMID(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 27m28.159047064s ago: executing program 2 (id=1195): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file7\x00', 0x2000002, &(0x7f00000003c0)=ANY=[@ANYBLOB='volume=00000000000000001062,gid=', @ANYRESDEC=0x0, @ANYBLOB=',noadinicb,rootdir=00000000000000000004,gid=forget,unhide,noadinicb,iocharset=cp861,longad,\x00'], 0x1, 0xc32, &(0x7f0000000e00)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f0000000800)={[{@data_err_ignore}, {@nodiscard}, {@quota}]}, 0x1, 0x580, &(0x7f0000001f80)="$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") renameat2(0xffffffffffffffff, &(0x7f0000000380)='./file7\x00', 0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) 27m25.936928634s ago: executing program 2 (id=1204): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 27m9.681041526s ago: executing program 32 (id=1204): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 21m53.121089778s ago: executing program 3 (id=2181): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x1c}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000002400)=[{0x1010, 0x1, 0x8, "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"}], 0x1010}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 21m53.01576051s ago: executing program 3 (id=2182): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x3e5, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) socket$unix(0x1, 0x2, 0x0) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) 21m51.756692911s ago: executing program 4 (id=2184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb3a, 0x6, 0x26, 0x7, 0x9, 0x10000, 0x42, 0xdec, 0x10001, 0x40, 0x2, 0x2, 0x7, 0x0, 0xfffeffff, 0x0, 0xffffff84, 0xf, 0x5, 0xfffffffd, 0x2, 0x3, 0x9, 0x1, 0x577, 0x7, 0x4, 0x7, 0xe, 0x7, 0x0, 0x5, 0x8, 0x355d, 0x5, 0x9, 0x10000, 0x3, 0x97, 0x0, 0x5, 0xaa4, 0x4, 0x5, 0x8, 0xfd, 0x9, 0x401, 0x2, 0x9, 0x74, 0xfc79, 0x20000, 0x10, 0x4, 0x80, 0x7, 0x81, 0x6, 0x7, 0xb06e, 0x3, 0x2, 0x8, 0x7fffffff, 0x80000001, 0x1000, 0x3, 0x7fffffff, 0x2, 0x8, 0x8001, 0x7ffffffc, 0x0, 0x3, 0xc, 0xffff, 0x1000, 0x2bca, 0x57, 0x9, 0x9, 0xfffffffd, 0x0, 0x1, 0x9, 0x5, 0x101, 0xcd1c, 0x2, 0x2, 0x4, 0xffdffffa, 0x450, 0x9, 0x8, 0x9, 0x80, 0x6, 0x0, 0x0, 0x5, 0x1, 0x22462e3c, 0x1, 0xb, 0xfffffff8, 0x3, 0x2, 0x10001, 0x3, 0x1, 0xe7b, 0x4, 0x6, 0xfff, 0x3, 0x6d, 0xffffffff, 0xa, 0x80, 0x8001, 0x9, 0x6, 0x7, 0x7, 0x9, 0x1a93, 0x248, 0x66f, 0x8, 0x2800000, 0x2, 0x2, 0x4, 0x3, 0x200, 0x1, 0x8, 0x80000001, 0xb, 0xab64, 0x7fff, 0x4, 0x8, 0xc, 0x6, 0x200, 0x401, 0x1, 0xfffffffd, 0x5537, 0x4, 0x0, 0x73c9, 0xdad5, 0x9, 0x9, 0x5, 0x7f, 0xfbff7190, 0x7, 0x1, 0x16, 0x5, 0x1000, 0x7, 0xffffffff, 0x4, 0x28f, 0x1dd0, 0x8001, 0x5, 0x6, 0x6, 0x80, 0xb, 0xed, 0x10001, 0x3, 0x9, 0x5, 0x2, 0x8, 0x23, 0x0, 0x401, 0xc, 0xfffffffc, 0x2, 0x7, 0x893, 0x6, 0x9, 0x0, 0x8001, 0x100, 0xb7c, 0x9, 0x4, 0x435, 0x2d4f, 0xffffffff, 0x400, 0x3, 0x8a, 0xfff, 0x1, 0x3, 0x7f, 0x7, 0x6, 0x2, 0x7, 0x694, 0x1, 0xe94, 0x67, 0x7, 0x7, 0x6, 0x9, 0xfffff001, 0x9, 0x2, 0x343, 0x8000, 0xfff, 0x0, 0x20, 0x10, 0x7, 0x6, 0x5, 0x8, 0x6, 0x9, 0x2232, 0x3, 0x2, 0xfe79800, 0x0, 0x4f6, 0x3, 0x8, 0x260c, 0xaedb, 0x6, 0xfffc, 0x8, 0x2, 0x1000, 0x400, 0x6000, 0x0, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff81, 0x9, 0x2, 0x3, 0x5, 0xdfffff01, 0x0, 0x1599, 0x7ff, 0xb, 0x209c, 0x436c, 0x2, 0x42d2, 0x6, 0x5678f281, 0x100, 0x7, 0xee, 0x5, 0x3, 0x8001, 0x80000, 0x8, 0xc425, 0x88, 0x401, 0x8, 0xfffffbff, 0x3, 0x1, 0xffffffff, 0x80, 0xf7f, 0x9, 0x3, 0x3, 0xfffffff9, 0x80000000, 0x40, 0x0, 0x3, 0x1, 0xe, 0xfffffff7, 0x400, 0x1ff, 0x2, 0x9, 0x5, 0x54e, 0x4, 0x1000, 0x7, 0xb166, 0x2, 0x36c, 0x5, 0x200, 0x9, 0xffff, 0x1, 0x5, 0xc86, 0xfffffff1, 0x1, 0x67, 0x2, 0xffff, 0x1, 0x9, 0x10001, 0x0, 0xc4a, 0x80000001, 0xfffffffd, 0x366, 0xd, 0x0, 0xd, 0xea, 0xffffffff, 0x2, 0x9, 0x1, 0x0, 0x2, 0x3, 0x2, 0x3, 0x4, 0x3, 0x4, 0x7, 0x1000, 0x2c21, 0x3a41, 0x2e90, 0x0, 0x3000000, 0x5, 0x1, 0xe60, 0x6, 0xa, 0x1, 0xfffffffa, 0x25, 0x0, 0x2, 0x40, 0x9, 0x100, 0x27e1, 0x8000000, 0x9, 0x4, 0xd, 0x1, 0x400008, 0x3e83, 0xb7, 0x3, 0x20000000, 0x3, 0xd, 0x10, 0x1, 0xffffffe0, 0x200, 0x5, 0xffffffff, 0x8, 0x6, 0x40, 0x1, 0x10, 0x3, 0x9, 0x1000000, 0x9, 0x1, 0x2, 0x7, 0x2, 0xfffffff9, 0x10001, 0x4c2, 0xfff, 0x8, 0x4d76, 0x7f, 0x5, 0x1, 0x3366, 0x2, 0x4, 0x800, 0x800, 0x3, 0x6, 0xe, 0xff, 0x80000001, 0xe, 0x51, 0x2, 0x6, 0xfffffffb, 0x20006, 0x7, 0xec49, 0xffffffff, 0x97, 0xf0cb, 0xfff, 0x5, 0xd, 0x8, 0xa, 0x6, 0x8, 0x10007, 0x81, 0xe61, 0x1, 0x7, 0x4, 0x2, 0x1, 0x8, 0x0, 0xfffffffd, 0x800, 0x4, 0x0, 0x1, 0x4, 0x1, 0x10001, 0xb, 0xe, 0xcd, 0x4, 0x9, 0x6, 0x9, 0x7, 0x0, 0x9, 0x3, 0x6, 0xec16, 0xa443, 0x9, 0x6, 0x5, 0x8, 0x1, 0x9, 0x7, 0x2, 0x5, 0x3, 0x58, 0x40, 0x81, 0xbf1f, 0x6, 0x40, 0x5, 0x98, 0x1, 0x9, 0x22472c26, 0xfffffffb, 0x0, 0x7, 0x1, 0x5, 0x201, 0x5, 0x6, 0x9, 0x9, 0x80000001, 0x1, 0x1, 0x65d3, 0x2, 0x1, 0xffff8001, 0x5, 0xb, 0x8, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x7a94, 0x7, 0xb, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x1, 0x1, 0x400, 0x8, 0x8, 0x401}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080), 0x1}, 0x4) 21m51.519723601s ago: executing program 3 (id=2186): socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r4, &(0x7f00000003c0), 0x0, 0x20040940, &(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r3, 0x14) mkdir(0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x25dfdbfd, {}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x2c, 0x0, 0x4, 0x0, 0x9, 0x40, 0xff}}}}}]}, 0x44}}, 0x4004000) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/57, 0x39, 0x9) 21m51.200218088s ago: executing program 1 (id=2187): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_secret(0x0) syz_io_uring_setup(0x80007fe3, &(0x7f0000000180)={0x0, 0xc32e, 0x40, 0x4, 0xc7, 0x0, r3}, &(0x7f0000000200), &(0x7f0000000340)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_DEBUG(r5, 0x227e, &(0x7f00000000c0)) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='syz1\x00', &(0x7f0000000400)='/dev/video#\x00', 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x32314742, 0x0, 0x4, [{0x2000000}, {}, {}, {0x4}, {0x80000000}]}}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001f1ffffff00000000000300000a48000000060a01040000eeffffffffff0900000409f6000073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010f00000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 21m51.147343009s ago: executing program 3 (id=2188): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0x8}}, 0x0, 0x0, 0x27, 0x0, "bb353738626e3fc7c9f1cf53b6a7b4e24740bd4c0b42a25d7214bf92594925208a0e2f964e654dc534a6b24d4993fcf19b2d07ee818a118a7c49462189316d556d2ccd00"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) 21m50.01278114s ago: executing program 3 (id=2189): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x10, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xb26f5000) 21m47.463573476s ago: executing program 4 (id=2192): syz_open_dev$mouse(&(0x7f0000000080), 0x3ff, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001c380)=""/102400, 0x19000) r3 = syz_io_uring_setup(0x542b, &(0x7f0000000140)={0x0, 0xe445, 0x4000, 0xffff7fff, 0x305}, &(0x7f0000000280), &(0x7f0000000300)) io_uring_enter(r3, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0480, 0x0) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4000000c}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000200)="8000e859667fbc33", 0x8}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000002922ec8d370bac4d5d00020400000000"], 0x18}, 0x0) 21m45.675357478s ago: executing program 4 (id=2193): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') r1 = epoll_create1(0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x4000200a}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000580)) close_range(r0, 0xffffffffffffffff, 0x0) 21m44.501888992s ago: executing program 1 (id=2195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x50, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 21m44.379536832s ago: executing program 0 (id=2196): socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r4, &(0x7f00000003c0), 0x0, 0x20040940, &(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r3, 0x14) mkdir(0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x25dfdbfd, {}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x2c, 0x0, 0x4, 0x0, 0x9, 0x40, 0xff}}}}}]}, 0x44}}, 0x4004000) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/57, 0x39, 0x9) 21m44.089857293s ago: executing program 3 (id=2197): openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x12) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0)=0x78, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_COPY(r2, 0xc028aa05, 0x0) 21m43.758204088s ago: executing program 1 (id=2198): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000}]) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r4, 0x1, 0x1, 0xfffffffe, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x5050) 21m43.655499771s ago: executing program 0 (id=2199): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000000)={@desc={0x1, 0x0, @desc4}}) dup2(r1, 0xffffffffffffffff) 21m43.404396259s ago: executing program 0 (id=2200): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x8, 0x3, 0xe, 0x200, 0x2], [0x1ff, 0x80000004, 0xf, 0x3, 0x5, 0x20008, 0xffffffffffffffff, 0xb, 0xa51c, 0xbcd, 0x5, 0x5, 0x24c, 0xa33, 0x1, 0x6, 0x10000, 0x2, 0x10, 0x5, 0x3, 0x2, 0x7c21804a, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x9, 0xe, 0xfffffffffffffffe, 0xde1d, 0x7, 0x2, 0x3, 0xffffffffffff8000, 0x6, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0x8, 0xfffffffffffffb61, 0x400000000, 0x100000000, 0x8001, 0x1, 0x3, 0x5, 0xffff, 0x3, 0x8101, 0x0, 0x67c, 0x8000000000000000, 0x1, 0x9, 0x4, 0x0, 0x8000000000000000, 0x0, 0x1, 0x5, 0x5, 0x100, 0x2da74e41, 0x1, 0x6ac8, 0x80000000080, 0x75, 0x1, 0x2, 0x2, 0x8, 0xc79, 0x8000, 0x3, 0x7, 0x7ff, 0x3, 0x7686, 0x1ff, 0x7, 0xe648, 0x2, 0x2, 0xdfb3, 0x3, 0x2, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0xa1, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7f, 0x40003, 0xb4000000, 0x0, 0x6, 0x80, 0x5, 0x662, 0x7, 0x9, 0xca, 0x4, 0x7, 0xe7, 0x2, 0xfffffffffffff36f, 0x4]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21m43.148084597s ago: executing program 4 (id=2201): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file7\x00', 0x2000002, &(0x7f00000003c0)=ANY=[@ANYBLOB='volume=00000000000000001062,gid=', @ANYRESDEC=0x0, @ANYBLOB=',noadinicb,rootdir=00000000000000000004,gid=forget,unhide,noadinicb,iocharset=cp861,longad,\x00'], 0x1, 0xc32, &(0x7f0000000e00)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f0000000800)={[{@data_err_ignore}, {@nodiscard}, {@quota}]}, 0x1, 0x580, &(0x7f0000001f80)="$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") renameat2(0xffffffffffffffff, &(0x7f0000000380)='./file7\x00', 0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) 21m42.950385514s ago: executing program 0 (id=2202): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000855) 21m42.710960254s ago: executing program 4 (id=2203): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa0}}, 0x0) 21m42.709768683s ago: executing program 1 (id=2204): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x3e5, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) 21m42.274999331s ago: executing program 0 (id=2205): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f0000006c40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)={0x90, 0x0, 0x47, {0x4, 0xfffffffffffffffd, 0x40000000000000, 0xffffffff, 0xfffffffb, 0x0, {0x8000, 0x2, 0x0, 0x9, 0x3, 0xe, 0x3, 0x102, 0xfffffff7, 0x4000, 0x10001, r4, 0x0, 0x3, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 21m42.167756123s ago: executing program 4 (id=2206): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x10, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xb26f5000) 21m41.637173475s ago: executing program 0 (id=2207): socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r4, &(0x7f00000003c0), 0x0, 0x20040940, &(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r3, 0x14) mkdir(0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x25dfdbfd, {}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x2c, 0x0, 0x4, 0x0, 0x9, 0x40, 0xff}}}}}]}, 0x44}}, 0x4004000) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/57, 0x39, 0x9) 21m41.515549905s ago: executing program 1 (id=2208): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000000)={@desc={0x1, 0x0, @desc4}}) dup2(r2, r0) 21m41.015908421s ago: executing program 1 (id=2209): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') r1 = epoll_create1(0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x4000200a}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000580)) close_range(r0, 0xffffffffffffffff, 0x0) 20m56.638898968s ago: executing program 33 (id=2207): socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r4, &(0x7f00000003c0), 0x0, 0x20040940, &(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r3, 0x14) mkdir(0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x25dfdbfd, {}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x2c, 0x0, 0x4, 0x0, 0x9, 0x40, 0xff}}}}}]}, 0x44}}, 0x4004000) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/57, 0x39, 0x9) 20m56.367262843s ago: executing program 34 (id=2209): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') r1 = epoll_create1(0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x4000200a}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000580)) close_range(r0, 0xffffffffffffffff, 0x0) 20m56.051928051s ago: executing program 35 (id=2206): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x10, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xb26f5000) 20m55.915500758s ago: executing program 36 (id=2197): openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x12) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0)=0x78, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_COPY(r2, 0xc028aa05, 0x0) 31.661291507s ago: executing program 6 (id=4952): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @remote, 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)=')', 0x1}], 0x1}}], 0x1, 0x40015) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="1a0000000200", 0x6) 31.407808714s ago: executing program 6 (id=4955): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={r2, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1}, 0xc) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 30.118767745s ago: executing program 6 (id=4958): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3000000000000000840000000100000000000001"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x1, 0x400}, 0x90) 29.825702235s ago: executing program 6 (id=4961): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 29.467284415s ago: executing program 6 (id=4963): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x6b, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 28.439762141s ago: executing program 6 (id=4967): bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000002240)=""/4110, 0x100e}], 0x100000000000031b, 0x142, 0xffb) 27.399936795s ago: executing program 37 (id=4967): bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000002240)=""/4110, 0x100e}], 0x100000000000031b, 0x142, 0xffb) 27.224260624s ago: executing program 7 (id=4972): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @remote, 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)=')', 0x1}], 0x1}}], 0x1, 0x40015) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="1a000000020000", 0x7) 26.979780733s ago: executing program 7 (id=4975): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e) fcntl$notify(0xffffffffffffffff, 0x402, 0x1a) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='rdma.current\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000cc0)="409b", 0x2) lseek(r1, 0xfffffffffffffffe, 0x1) syz_pidfd_open(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 25.447742843s ago: executing program 7 (id=4980): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x5}, 0x10) 25.239466878s ago: executing program 7 (id=4981): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 24.985132245s ago: executing program 7 (id=4983): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000340)='./file0\x00', r4}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) 24.017668871s ago: executing program 7 (id=4985): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)='j\x00'/14, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 23.462268717s ago: executing program 38 (id=4985): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)='j\x00'/14, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5.006888198s ago: executing program 8 (id=5027): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r1, 0x0, 0x0, 0x10003) 4.328621504s ago: executing program 8 (id=5029): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000280)='j\x00'/14, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.215100925s ago: executing program 8 (id=5031): pselect6(0x40, &(0x7f0000000040)={0x8, 0x0, 0x2, 0x2, 0x400004, 0x7, 0x8000000000000001, 0x6}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) capset(&(0x7f0000000040)={0x19980330}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.181975459s ago: executing program 5 (id=5032): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000001dc0)={'netdevsim0\x00', @ifru_mtu}) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000006ec0)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/194, 0xc2}], 0x1, &(0x7f0000000300)=""/198, 0xc6}, 0xb}, {{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/95, 0x5f}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f00000006c0)=""/36, 0x24}, {&(0x7f0000000700)=""/150, 0x96}, {0x0}], 0x7, &(0x7f0000000d40)=""/109, 0x6d}, 0x1}, {{&(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=""/185, 0xb9}, 0x5}, {{&(0x7f0000000980)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/152, 0x98}, {&(0x7f0000003d40)=""/117, 0x75}, {&(0x7f0000003dc0)=""/141, 0x8d}, {&(0x7f0000003e80)=""/76, 0x4c}], 0x6, &(0x7f0000007100)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/220, 0xdc}, {&(0x7f0000006100)=""/72, 0x48}, {&(0x7f0000006180)=""/31, 0x1f}, {&(0x7f00000062c0)=""/109, 0x6d}, {&(0x7f0000006340)=""/23, 0x17}], 0x6, &(0x7f0000006400)=""/238, 0xee}, 0xad99}, {{&(0x7f0000006500)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000006800)=[{&(0x7f0000006580)=""/100, 0x64}, {&(0x7f0000000dc0)=""/234, 0xea}, {&(0x7f0000006700)=""/12, 0xc}, {&(0x7f0000006740)=""/48, 0x30}, {&(0x7f0000006780)=""/17, 0x11}, {&(0x7f00000067c0)}], 0x6, &(0x7f0000006880)=""/227, 0xe3}, 0xaf74}, {{&(0x7f0000006980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000006a40)=[{&(0x7f0000006a00)=""/32, 0x20}], 0x1, &(0x7f0000006a80)=""/106, 0x6a}, 0x1}, {{&(0x7f0000006b00)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000006c80)=[{&(0x7f0000006b80)=""/154, 0x9a}, {&(0x7f00000007c0)=""/16, 0x10}], 0x2, &(0x7f0000006cc0)=""/1, 0x1}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000006d80)=[{&(0x7f0000006d00)=""/3, 0x3}, {&(0x7f0000006d40)=""/19, 0x13}], 0x2, &(0x7f0000000bc0)=""/263, 0x107}, 0x8}], 0x9, 0x2103, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ec0)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x40}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010b28bd70dec6dbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x24044000) 2.955215621s ago: executing program 5 (id=5033): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000b62c851373113900000000008510000002000000b7000000000000009500c200000000009500001200000000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r3, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0xfea7) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) 2.885907119s ago: executing program 9 (id=4968): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 1.804756646s ago: executing program 8 (id=5034): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1.696676798s ago: executing program 5 (id=5035): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 1.603829922s ago: executing program 9 (id=5036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40) 1.432148373s ago: executing program 9 (id=5037): pselect6(0x40, &(0x7f0000000040)={0x8, 0x0, 0x2, 0x2, 0x400004, 0x7, 0x8000000000000001, 0x6}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.382818344s ago: executing program 5 (id=5038): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000280)='j\x00'/14, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 275.174056ms ago: executing program 5 (id=5039): pselect6(0x40, &(0x7f0000000040)={0x8, 0x0, 0x2, 0x2, 0x400004, 0x7, 0x8000000000000001, 0x6}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 195.623293ms ago: executing program 8 (id=5040): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000001dc0)={'netdevsim0\x00', @ifru_mtu}) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000006ec0)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/194, 0xc2}], 0x1, &(0x7f0000000300)=""/198, 0xc6}, 0xb}, {{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/95, 0x5f}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f00000006c0)=""/36, 0x24}, {&(0x7f0000000d00)=""/1, 0x1}], 0x6, &(0x7f0000000d40)=""/109, 0x6d}, 0x1}, {{&(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=""/185, 0xb9}, 0x5}, {{&(0x7f0000000980)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/152, 0x98}, {&(0x7f0000003d40)=""/117, 0x75}, {&(0x7f0000003dc0)=""/141, 0x8d}, {&(0x7f0000003e80)=""/76, 0x4c}], 0x6, &(0x7f0000007100)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/220, 0xdc}, {&(0x7f0000006100)=""/72, 0x48}, {&(0x7f0000006180)=""/31, 0x1f}, {&(0x7f00000062c0)=""/109, 0x6d}, {&(0x7f0000006340)=""/23, 0x17}], 0x6, &(0x7f0000006400)=""/238, 0xee}, 0xad99}, {{&(0x7f0000006500)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000006800)=[{&(0x7f0000006580)=""/100, 0x64}, {&(0x7f0000000dc0)=""/234, 0xea}, {&(0x7f0000006700)=""/12, 0xc}, {&(0x7f0000006740)=""/48, 0x30}, {&(0x7f0000006780)=""/17, 0x11}, {&(0x7f00000067c0)}], 0x6, &(0x7f0000006880)=""/227, 0xe3}, 0xaf74}, {{&(0x7f0000006980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000006a40)=[{&(0x7f0000006a00)=""/32, 0x20}], 0x1, &(0x7f0000006a80)=""/106, 0x6a}, 0x1}, {{&(0x7f0000006b00)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000006c80)=[{&(0x7f0000006b80)=""/154, 0x9a}, {&(0x7f00000007c0)=""/16, 0x10}], 0x2, &(0x7f0000006cc0)=""/1, 0x1}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000006d80)=[{&(0x7f0000006d00)=""/3, 0x3}, {&(0x7f0000006d40)=""/19, 0x13}], 0x2, &(0x7f0000000bc0)=""/263, 0x107}, 0x8}], 0x9, 0x2103, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ec0)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x40}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010b28bd70dec6dbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x24044000) 173.497039ms ago: executing program 2 (id=4987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 113.790589ms ago: executing program 9 (id=5041): r0 = syz_usb_connect(0x2, 0x73, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e017aa00109026100010000000009040001"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 35.315705ms ago: executing program 8 (id=5042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 0s ago: executing program 5 (id=5043): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) kernel console output (not intermixed with test programs): 472][T21413] loop8: detected capacity change from 0 to 512 [ 1779.305100][T21413] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1779.378368][T21413] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1779.426277][T21421] loop7: detected capacity change from 0 to 512 [ 1779.828947][T21421] EXT4-fs (loop7): 1 truncate cleaned up [ 1779.836029][T21421] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1781.399027][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1781.434943][T21436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4022'. [ 1781.673235][T21436] macvlan2: entered promiscuous mode [ 1781.683983][T21436] macvlan2: entered allmulticast mode [ 1781.692414][T21436] bond1: entered promiscuous mode [ 1781.707082][T21436] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1781.723189][T21436] bond1: left promiscuous mode [ 1781.739772][T21445] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4024'. [ 1781.746669][T18067] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1781.878263][T21445] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4024'. [ 1781.995244][T18067] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.026541][T18067] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.042234][T18067] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1782.095735][T18067] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1782.120815][T18067] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.138336][T18067] usb 6-1: config 0 descriptor?? [ 1782.178218][T21445] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4024'. [ 1782.320624][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1782.541216][T21455] loop7: detected capacity change from 0 to 512 [ 1782.597721][T21451] nvme_fabrics: missing parameter 'transport=%s' [ 1782.614495][T21451] nvme_fabrics: missing parameter 'nqn=%s' [ 1782.665082][T21455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1782.678410][T21455] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1782.729869][T21460] loop6: detected capacity change from 0 to 512 [ 1782.741269][T18067] plantronics 0003:047F:FFFF.003F: No inputs registered, leaving [ 1782.868355][T21460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1782.891571][T18067] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1782.964650][T21460] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1784.090235][T21468] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1784.106161][T21468] Quota error (device loop6): write_blk: dquota write failed [ 1784.114357][T21468] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1784.124814][T21468] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4026: Failed to acquire dquot type 0 [ 1784.456835][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1784.559506][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1784.627641][T21470] loop8: detected capacity change from 0 to 512 [ 1784.665788][T21472] loop7: detected capacity change from 0 to 128 [ 1784.721359][T21470] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1784.739011][T21472] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1784.768811][T21472] ext4 filesystem being mounted at /428/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1784.823597][T21470] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1784.858427][T13395] usb 6-1: USB disconnect, device number 66 [ 1784.958773][T21478] loop6: detected capacity change from 0 to 512 [ 1785.011520][T21478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1785.027557][T21478] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1785.992799][T21486] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1786.008911][T21486] Quota error (device loop8): write_blk: dquota write failed [ 1786.017198][T21486] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1786.027343][T21486] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4028: Failed to acquire dquot type 0 [ 1786.118902][T21488] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1786.134373][T21488] Quota error (device loop6): write_blk: dquota write failed [ 1786.142022][T21488] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1786.151965][T21488] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4029: Failed to acquire dquot type 0 [ 1786.271273][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1786.368584][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1787.977493][T21504] loop5: detected capacity change from 0 to 128 [ 1788.068563][T21504] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1788.145643][T21504] ext4 filesystem being mounted at /452/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1789.039010][T21511] loop6: detected capacity change from 0 to 512 [ 1789.490318][T21511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1789.537141][T21511] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1789.586276][T13230] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1789.589509][T13228] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1790.670688][T21522] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1790.685663][T21522] Quota error (device loop6): write_blk: dquota write failed [ 1790.693504][T21522] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1790.703501][T21522] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4035: Failed to acquire dquot type 0 [ 1791.449263][T21531] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4036'. [ 1791.644551][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1791.967386][T21538] loop8: detected capacity change from 0 to 512 [ 1792.271040][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.277872][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.146071][T21538] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1794.215459][T21538] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1794.277987][T21549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4040'. [ 1794.453415][T21551] macvlan2: entered promiscuous mode [ 1794.471203][T21553] loop6: detected capacity change from 0 to 512 [ 1794.493237][T21551] macvlan2: entered allmulticast mode [ 1794.536987][T21551] bond1: entered promiscuous mode [ 1794.586580][T21551] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1794.604717][T21551] bond1: left promiscuous mode [ 1794.673065][T21553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1794.780303][T21557] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1794.796213][T21557] Quota error (device loop8): write_blk: dquota write failed [ 1794.804350][T21557] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1794.814668][T21557] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4039: Failed to acquire dquot type 0 [ 1795.018591][T21553] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1795.432774][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1796.215279][T21559] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1796.231061][T21559] Quota error (device loop6): write_blk: dquota write failed [ 1796.238790][T21559] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1796.250707][T21559] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4041: Failed to acquire dquot type 0 [ 1796.421888][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1796.501788][T21565] loop7: detected capacity change from 0 to 512 [ 1796.632596][T21565] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1796.936917][T21565] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1799.058092][T21575] loop6: detected capacity change from 0 to 128 [ 1799.322031][T21575] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1799.426703][T21575] ext4 filesystem being mounted at /448/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1799.964751][T21584] loop5: detected capacity change from 0 to 512 [ 1800.302420][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1800.415616][T21584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1800.435400][T21587] loop8: detected capacity change from 0 to 512 [ 1800.546937][T21584] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1800.611294][T21587] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1800.641251][T13226] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1800.683481][T21587] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1800.775169][T21594] loop7: detected capacity change from 0 to 512 [ 1801.540209][T21598] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1801.549399][T21595] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1801.556422][T21598] Quota error (device loop5): write_blk: dquota write failed [ 1801.570357][T21595] Quota error (device loop8): write_blk: dquota write failed [ 1801.576845][T21598] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1801.584625][T21595] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1801.594251][T21598] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4048: Failed to acquire dquot type 0 [ 1801.604518][T21595] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4049: Failed to acquire dquot type 0 [ 1801.613802][T21594] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1801.686053][T21594] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1802.192592][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1802.312039][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1803.569533][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1803.647469][T21609] loop8: detected capacity change from 0 to 512 [ 1803.808538][T21609] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1803.858457][T21620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4053'. [ 1803.873167][T21609] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1804.821422][T21626] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1804.836319][T21626] Quota error (device loop8): write_blk: dquota write failed [ 1804.843892][T21626] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1804.853976][T21626] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4052: Failed to acquire dquot type 0 [ 1805.010052][T21628] loop6: detected capacity change from 0 to 512 [ 1805.123519][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1805.165933][T21628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1805.233031][T21628] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1805.436736][T21633] loop7: detected capacity change from 0 to 512 [ 1805.524498][T21637] loop8: detected capacity change from 0 to 512 [ 1805.651836][T21640] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1805.667697][T21640] Quota error (device loop6): write_blk: dquota write failed [ 1805.675690][T21640] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1805.686029][T21640] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4056: Failed to acquire dquot type 0 [ 1805.885354][T21633] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1806.034236][T21637] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1806.060388][T21633] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1806.120288][T21637] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1806.240002][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1807.179100][T21646] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1807.193995][T21646] Quota error (device loop7): write_blk: dquota write failed [ 1807.201612][T21646] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1807.211562][T21646] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4057: Failed to acquire dquot type 0 [ 1807.296192][T21648] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1807.311130][T21648] Quota error (device loop8): write_blk: dquota write failed [ 1807.318735][T21648] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1807.328770][T21648] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4058: Failed to acquire dquot type 0 [ 1807.564046][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1807.578619][T21650] loop6: detected capacity change from 0 to 512 [ 1807.597699][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1807.673536][T21650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1807.691861][T21650] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1808.690908][T21654] loop7: detected capacity change from 0 to 512 [ 1808.705412][T21658] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1808.720325][T21658] Quota error (device loop6): write_blk: dquota write failed [ 1808.727932][T21658] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1808.737961][T21658] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4059: Failed to acquire dquot type 0 [ 1809.504758][T21654] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1809.759112][T21654] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1810.375308][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1810.451299][T21619] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1811.501533][T21672] Quota error (device loop7): write_blk: dquota write failed [ 1811.509090][T21672] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1811.519009][T21672] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4060: Failed to acquire dquot type 0 [ 1811.946414][T21674] loop5: detected capacity change from 0 to 512 [ 1811.955977][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1812.050854][T21674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1812.117275][T21674] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1812.523837][T21683] loop6: detected capacity change from 0 to 512 [ 1813.002090][T21690] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1813.017240][T21690] Quota error (device loop5): write_blk: dquota write failed [ 1813.024971][T21690] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1813.034964][T21690] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4065: Failed to acquire dquot type 0 [ 1813.105226][T21683] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1813.146069][T21683] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1813.591823][T21695] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4068'. [ 1813.762879][T21702] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4070'. [ 1814.349019][T21701] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1814.364032][T21701] Quota error (device loop6): write_blk: dquota write failed [ 1814.371681][T21701] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1814.382081][T21701] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4067: Failed to acquire dquot type 0 [ 1814.505574][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1814.533068][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1814.810477][T21705] loop6: detected capacity change from 0 to 512 [ 1814.842696][T21706] loop5: detected capacity change from 0 to 512 [ 1814.895958][T21705] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1814.960714][T21705] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1815.018027][T21706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1815.036978][T21706] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1816.074961][T21714] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1816.075101][T21716] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1816.090594][T21714] Quota error (device loop6): write_blk: dquota write failed [ 1816.104928][T21716] Quota error (device loop5): write_blk: dquota write failed [ 1816.111854][T21714] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1816.111909][T21714] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4071: Failed to acquire dquot type 0 [ 1816.142056][T21716] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1816.152097][T21716] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4069: Failed to acquire dquot type 0 [ 1816.375397][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1816.407160][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1816.636161][T21720] loop6: detected capacity change from 0 to 512 [ 1816.663357][T21719] overlayfs: failed to resolve './file1': -2 [ 1816.704267][T21720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1816.747995][T21720] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1816.839802][T21723] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1818.039591][T21726] Quota error (device loop6): write_blk: dquota write failed [ 1818.047329][T21726] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1818.057406][T21726] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4072: Failed to acquire dquot type 0 [ 1818.187059][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1818.435092][T21732] loop6: detected capacity change from 0 to 512 [ 1818.662586][T21732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1818.701061][T21742] loop7: detected capacity change from 0 to 512 [ 1818.829194][T21732] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1819.298406][T21742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1819.350913][T21742] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1820.371926][T21752] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1820.386830][T21752] Quota error (device loop7): write_blk: dquota write failed [ 1820.394341][T21752] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1820.404237][T21752] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4079: Failed to acquire dquot type 0 [ 1820.416609][T21748] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1820.431680][T21748] Quota error (device loop6): write_blk: dquota write failed [ 1820.439799][T21748] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1820.450031][T21748] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4075: Failed to acquire dquot type 0 [ 1820.835160][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1820.868613][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1823.104008][T21761] loop7: detected capacity change from 0 to 512 [ 1823.216167][T21761] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1823.245685][T21767] loop5: detected capacity change from 0 to 512 [ 1823.254880][T21761] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1823.293901][T21768] loop6: detected capacity change from 0 to 128 [ 1823.343303][T21767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1823.398864][T21767] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1823.552712][T21768] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1823.656505][T21765] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1824.377649][T21774] Quota error (device loop7): write_blk: dquota write failed [ 1824.385228][T21774] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1824.395352][T21774] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4081: Failed to acquire dquot type 0 [ 1824.410795][T21776] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1824.425599][T21776] Quota error (device loop5): write_blk: dquota write failed [ 1824.433648][T21776] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1824.443629][T21776] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4083: Failed to acquire dquot type 0 [ 1824.607824][T21768] ext4 filesystem being mounted at /458/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1824.884723][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1824.900672][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1825.961709][T13226] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1826.380702][T21789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4085'. [ 1826.527074][ T5838] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1827.221261][T21799] loop7: detected capacity change from 0 to 512 [ 1827.331508][T21803] loop8: detected capacity change from 0 to 512 [ 1827.349176][T21799] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1827.379028][T21799] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1827.401461][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1827.436190][T21803] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1827.444105][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1827.463173][ T5838] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1827.476449][ T5838] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1827.486555][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.509635][ T5838] usb 6-1: config 0 descriptor?? [ 1827.521150][T21803] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1828.393413][T21806] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1828.408353][T21806] Quota error (device loop8): write_blk: dquota write failed [ 1828.415974][T21806] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1828.426405][T21806] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4090: Failed to acquire dquot type 0 [ 1828.449056][T21810] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1828.463935][T21810] Quota error (device loop7): write_blk: dquota write failed [ 1828.471728][T21810] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1828.481869][T21810] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4089: Failed to acquire dquot type 0 [ 1828.578617][T21809] loop6: detected capacity change from 0 to 512 [ 1828.615558][T21815] nvme_fabrics: missing parameter 'transport=%s' [ 1828.653613][T21815] nvme_fabrics: missing parameter 'nqn=%s' [ 1828.748147][T21809] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1828.781500][T21809] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1828.832075][ T5838] plantronics 0003:047F:FFFF.0040: No inputs registered, leaving [ 1828.851201][ T5838] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1828.881222][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1828.899223][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1829.186631][T21825] loop8: detected capacity change from 0 to 512 [ 1829.386137][T21828] loop7: detected capacity change from 0 to 512 [ 1829.520160][T21826] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1829.535023][T21826] Quota error (device loop6): write_blk: dquota write failed [ 1829.542684][T21826] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1829.553242][T21826] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4091: Failed to acquire dquot type 0 [ 1829.617661][T21825] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1829.642447][T21828] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1829.714943][T21825] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1829.727881][T21828] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1830.156767][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1830.619783][T21834] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1830.636691][T21834] Quota error (device loop8): write_blk: dquota write failed [ 1830.644250][T21834] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1830.654578][T21834] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4092: Failed to acquire dquot type 0 [ 1830.680324][T21833] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1830.695499][T21833] Quota error (device loop7): write_blk: dquota write failed [ 1830.703223][T21833] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1830.713284][T21833] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4093: Failed to acquire dquot type 0 [ 1830.942529][T21840] loop5: detected capacity change from 0 to 128 [ 1830.963448][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1830.992668][T21840] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1831.005553][T21840] ext4 filesystem being mounted at /467/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1831.052232][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1831.072223][T21843] loop6: detected capacity change from 0 to 512 [ 1831.240605][T21843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1831.256814][T21843] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1832.277621][T21851] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1832.292543][T21851] Quota error (device loop6): write_blk: dquota write failed [ 1832.300315][T21851] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1832.310305][T21851] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4094: Failed to acquire dquot type 0 [ 1832.467609][T13395] usb 6-1: USB disconnect, device number 67 [ 1832.489677][T21853] loop8: detected capacity change from 0 to 512 [ 1832.515685][T13228] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1832.537288][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1832.550643][T21853] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1832.700155][T21853] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1834.107685][T21863] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1834.123903][T21863] Quota error (device loop8): write_blk: dquota write failed [ 1834.132284][T21863] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1834.142519][T21863] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4097: Failed to acquire dquot type 0 [ 1834.369313][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1834.585968][T21869] loop7: detected capacity change from 0 to 512 [ 1834.665615][T21869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1834.687168][T21878] loop5: detected capacity change from 0 to 512 [ 1834.695306][T21869] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1834.707675][T21871] loop8: detected capacity change from 0 to 512 [ 1834.792817][T21878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1834.935950][T21871] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1834.960642][T21871] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1835.016522][T21878] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1835.269816][T13395] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1835.537965][T21875] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1835.741535][T21884] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1835.757696][T21884] Quota error (device loop7): write_blk: dquota write failed [ 1835.765982][T21884] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1835.776148][T21884] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4101: Failed to acquire dquot type 0 [ 1835.827637][T21886] Quota error (device loop8): write_blk: dquota write failed [ 1835.836773][T21886] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1835.847736][T21886] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4100: Failed to acquire dquot type 0 [ 1836.002376][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1836.011394][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1836.023567][T13395] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1836.045014][T13395] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.059786][T13395] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1836.092641][T13395] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1836.155322][T13395] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.239838][T13395] usb 7-1: config 0 descriptor?? [ 1836.292928][T21889] loop7: detected capacity change from 0 to 512 [ 1836.608712][T21892] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1836.698516][T21892] Quota error (device loop5): write_blk: dquota write failed [ 1836.706825][T21892] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1836.717081][T21892] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4102: Failed to acquire dquot type 0 [ 1836.873371][T21889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1837.038116][T21889] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1837.139999][T21899] overlayfs: failed to resolve './file0': -2 [ 1837.148505][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1837.368498][T13395] plantronics 0003:047F:FFFF.0041: No inputs registered, leaving [ 1837.633918][T21894] nvme_fabrics: missing parameter 'transport=%s' [ 1838.415565][T21903] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1838.430218][T21903] Quota error (device loop7): write_blk: dquota write failed [ 1838.437794][T21903] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1838.447746][T21903] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4105: Failed to acquire dquot type 0 [ 1838.646510][T13395] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1838.682102][T21894] nvme_fabrics: missing parameter 'nqn=%s' [ 1838.828828][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1838.968287][ T9] usb 7-1: USB disconnect, device number 86 [ 1839.108073][T21910] loop8: detected capacity change from 0 to 512 [ 1839.123884][T21912] loop7: detected capacity change from 0 to 128 [ 1839.143495][T21907] fido_id[21907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1839.180865][T21913] loop6: detected capacity change from 0 to 512 [ 1839.199835][T21910] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1839.218858][T21912] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1839.266561][T21910] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1839.281612][T21912] ext4 filesystem being mounted at /446/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1839.403717][T21913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1839.445259][T21920] loop5: detected capacity change from 0 to 512 [ 1839.477141][T21913] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1840.604521][T21929] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1840.620547][T21922] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1840.620832][T21922] Quota error (device loop8): write_blk: dquota write failed [ 1840.620947][T21922] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1840.620986][T21922] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4108: Failed to acquire dquot type 0 [ 1840.664681][T21929] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4109: Failed to acquire dquot type 0 [ 1840.748634][T21920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1840.818891][T21920] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1840.981723][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1840.993237][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1841.074009][T13230] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1841.374568][T21935] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1841.390579][T21935] __quota_error: 2 callbacks suppressed [ 1841.390618][T21935] Quota error (device loop5): write_blk: dquota write failed [ 1841.404388][T21935] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1841.414802][T21935] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4110: Failed to acquire dquot type 0 [ 1841.898735][T21941] loop7: detected capacity change from 0 to 512 [ 1841.916714][T21939] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4111'. [ 1841.948706][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1842.446012][T21941] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1842.610343][T21941] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1842.849534][T21949] loop8: detected capacity change from 0 to 512 [ 1843.061840][T21951] loop5: detected capacity change from 0 to 512 [ 1843.104546][T21949] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1843.544099][T21957] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1843.559091][T21957] Quota error (device loop7): write_blk: dquota write failed [ 1843.566674][T21957] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1843.576643][T21957] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4113: Failed to acquire dquot type 0 [ 1843.684674][T21949] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1843.700320][T21956] overlayfs: failed to resolve './file0': -2 [ 1843.712304][T21951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1843.746090][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1843.767009][T21951] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1844.909677][T21968] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1844.913266][T21970] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1844.928489][T21968] Quota error (device loop8): write_blk: dquota write failed [ 1844.939639][T21970] Quota error (device loop5): write_blk: dquota write failed [ 1844.946813][T21968] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1844.954110][T21970] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1844.963792][T21968] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4115: Failed to acquire dquot type 0 [ 1844.973702][T21970] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4114: Failed to acquire dquot type 0 [ 1845.168014][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1845.222956][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1845.454538][T21980] loop8: detected capacity change from 0 to 512 [ 1845.455209][T21981] loop5: detected capacity change from 0 to 512 [ 1845.515789][T21981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1845.535243][T21981] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1845.618025][T21980] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1845.686706][T21980] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1846.566438][T21994] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1846.582935][T21994] Quota error (device loop5): write_blk: dquota write failed [ 1846.591278][T21994] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1846.601604][T21994] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4119: Failed to acquire dquot type 0 [ 1846.620106][T21995] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1846.635924][T21995] Quota error (device loop8): write_blk: dquota write failed [ 1846.644065][T21995] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1846.655245][T21995] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4120: Failed to acquire dquot type 0 [ 1846.898521][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1846.920330][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1847.084490][T21997] loop7: detected capacity change from 0 to 512 [ 1847.418235][T21997] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1848.323076][T21997] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1848.863338][T22011] loop6: detected capacity change from 0 to 512 [ 1849.007308][T21875] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1849.096210][T22013] Quota error (device loop7): write_blk: dquota write failed [ 1849.104419][T22013] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1849.115547][T22013] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4124: Failed to acquire dquot type 0 [ 1849.295851][T22011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1849.444592][T22011] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1849.639526][T22020] loop8: detected capacity change from 0 to 512 [ 1849.673943][T22018] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1850.687256][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1850.720399][T22025] Quota error (device loop6): write_blk: dquota write failed [ 1850.728110][T22025] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1850.738301][T22025] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4125: Failed to acquire dquot type 0 [ 1850.780190][T22020] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1850.856452][T22020] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1851.455909][T22035] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1851.472479][T22035] Quota error (device loop8): write_blk: dquota write failed [ 1851.480755][T22035] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1851.555618][T22035] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4126: Failed to acquire dquot type 0 [ 1851.669899][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1851.824958][T22038] loop7: detected capacity change from 0 to 512 [ 1851.901392][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1851.938863][T22041] loop6: detected capacity change from 0 to 512 [ 1851.981718][T22038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1852.002751][T22041] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1852.015752][T22038] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1852.027836][T22041] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1852.942206][T22047] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1852.958365][T22047] Quota error (device loop6): write_blk: dquota write failed [ 1852.966631][T22047] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1852.977665][T22047] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4130: Failed to acquire dquot type 0 [ 1852.997641][T22050] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1853.013001][T22050] Quota error (device loop7): write_blk: dquota write failed [ 1853.020659][T22050] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1853.030643][T22050] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4128: Failed to acquire dquot type 0 [ 1853.247949][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1853.298164][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1853.315615][T22051] loop8: detected capacity change from 0 to 512 [ 1853.434511][T22051] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1853.502038][T22051] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1853.575352][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.579630][ T5772] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1853.586482][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.601315][T22068] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1854.616576][T22068] Quota error (device loop8): write_blk: dquota write failed [ 1854.624145][T22068] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1854.634220][T22068] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4131: Failed to acquire dquot type 0 [ 1854.733688][ T5772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1854.750692][ T5772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1854.760788][ T5772] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1854.774069][ T5772] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1854.785535][ T5772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.894626][ T5772] usb 6-1: config 0 descriptor?? [ 1855.227536][T22073] loop6: detected capacity change from 0 to 512 [ 1855.263230][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1855.354247][T22073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1855.383091][T22073] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1855.417694][T22078] loop7: detected capacity change from 0 to 512 [ 1855.460638][T22078] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1855.650482][T22078] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1856.383690][T22089] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1856.398701][T22089] Quota error (device loop7): write_blk: dquota write failed [ 1856.406383][T22089] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1856.416369][T22089] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4137: Failed to acquire dquot type 0 [ 1856.485943][T22086] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1856.500744][T22086] Quota error (device loop6): write_blk: dquota write failed [ 1856.508349][T22086] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1856.518392][T22086] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4136: Failed to acquire dquot type 0 [ 1856.925361][T22084] nvme_fabrics: missing parameter 'transport=%s' [ 1856.960815][T22084] nvme_fabrics: missing parameter 'nqn=%s' [ 1856.972347][ T5772] plantronics 0003:047F:FFFF.0042: No inputs registered, leaving [ 1856.992752][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1857.007680][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1857.012766][ T5772] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1857.177710][T22096] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4139'. [ 1857.233131][T22098] loop6: detected capacity change from 0 to 512 [ 1857.308112][T22098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1857.337044][T22098] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1857.971628][T22106] loop7: detected capacity change from 0 to 512 [ 1858.052075][T22105] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1858.130837][T22105] Quota error (device loop6): write_blk: dquota write failed [ 1858.138564][T22105] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1858.148532][T22105] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4138: Failed to acquire dquot type 0 [ 1858.185479][T22106] EXT4-fs (loop7): 1 truncate cleaned up [ 1858.192856][T22106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1858.312724][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1858.343260][T22110] overlayfs: failed to resolve './file0': -2 [ 1858.348201][ T5838] usb 6-1: USB disconnect, device number 68 [ 1858.507746][T22114] loop6: detected capacity change from 0 to 512 [ 1858.850188][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1858.892636][T22114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1859.047734][T22114] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1859.115122][T22115] loop5: detected capacity change from 0 to 512 [ 1859.411396][T22115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1860.020575][T22115] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1860.315666][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1860.624514][T22127] loop8: detected capacity change from 0 to 512 [ 1861.574187][T22129] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1861.588998][T22129] Quota error (device loop5): write_blk: dquota write failed [ 1861.596667][T22129] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1861.607544][T22129] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4143: Failed to acquire dquot type 0 [ 1861.891746][T22127] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1861.907436][T22127] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1861.986937][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1862.116980][ T9] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1862.690142][T22137] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1862.705859][T22137] Quota error (device loop8): write_blk: dquota write failed [ 1862.713886][T22137] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1862.724076][T22137] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4146: Failed to acquire dquot type 0 [ 1862.962271][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1862.975389][ T9] usb 7-1: config 0 has no interfaces? [ 1862.983633][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1863.006383][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1863.016242][T22139] loop5: detected capacity change from 0 to 512 [ 1863.034144][ T9] usb 7-1: Product: syz [ 1863.054341][ T9] usb 7-1: Manufacturer: syz [ 1863.217777][ T9] usb 7-1: SerialNumber: syz [ 1863.247780][ T9] usb 7-1: config 0 descriptor?? [ 1863.283753][T22141] loop8: detected capacity change from 0 to 512 [ 1863.336237][T22139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1863.420036][T22139] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1863.451841][T22141] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1863.485258][T22141] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1863.656628][ T9] usb 7-1: USB disconnect, device number 87 [ 1864.256577][T22058] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1864.295056][T22147] Quota error (device loop5): write_blk: dquota write failed [ 1864.302884][T22147] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1864.316516][T22147] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4147: Failed to acquire dquot type 0 [ 1865.018388][T22150] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1865.033204][T22150] Quota error (device loop8): write_blk: dquota write failed [ 1865.040892][T22150] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1865.051430][T22150] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4148: Failed to acquire dquot type 0 [ 1865.238089][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1865.278466][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1865.356382][ T9] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1866.946666][ T5772] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1867.548368][ T5772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1867.622290][ T5772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1867.700035][ T5772] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1867.715304][ T5772] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1867.725265][ T5772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.742836][ T5772] usb 6-1: config 0 descriptor?? [ 1868.063791][T22177] loop8: detected capacity change from 0 to 512 [ 1868.923165][T22180] nvme_fabrics: missing parameter 'transport=%s' [ 1868.934495][T22180] nvme_fabrics: missing parameter 'nqn=%s' [ 1868.944522][T22177] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1869.013822][T22177] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1869.994909][ T5772] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving [ 1870.065155][ T5772] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1870.103458][T22191] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4157'. [ 1870.767186][T22185] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1871.065600][T22195] Quota error (device loop8): write_blk: dquota write failed [ 1871.073264][T22195] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1871.083280][T22195] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4156: Failed to acquire dquot type 0 [ 1871.195289][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1871.507101][T22199] loop8: detected capacity change from 0 to 512 [ 1871.611643][T22199] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1871.669431][T22199] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1871.810975][T22207] loop5: detected capacity change from 0 to 512 [ 1871.963258][T22207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1871.992399][T22207] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1872.009469][T22204] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1873.055090][T22212] Quota error (device loop8): write_blk: dquota write failed [ 1873.062811][T22212] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1873.073375][T22212] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4158: Failed to acquire dquot type 0 [ 1873.090322][T22214] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1873.105149][T22214] Quota error (device loop5): write_blk: dquota write failed [ 1873.112833][T22214] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1873.122786][T22214] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4161: Failed to acquire dquot type 0 [ 1873.259143][T18067] usb 6-1: USB disconnect, device number 69 [ 1873.322767][T22216] loop6: detected capacity change from 0 to 512 [ 1873.402863][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1873.427694][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1873.435303][T22216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1873.457331][T22216] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1873.704136][T22216] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1873.719311][T22216] Quota error (device loop6): write_blk: dquota write failed [ 1873.727150][T22216] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1873.737460][T22216] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4162: Failed to acquire dquot type 0 [ 1873.897511][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1874.374244][T22229] loop6: detected capacity change from 0 to 512 [ 1874.831745][T22231] loop5: detected capacity change from 0 to 512 [ 1874.878363][T22229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1874.954919][T22229] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1875.004085][T22231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1875.108116][T22231] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1875.134128][T22239] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4167'. [ 1875.488861][T22242] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1875.503919][T22242] Quota error (device loop5): write_blk: dquota write failed [ 1875.511670][T22242] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1875.521759][T22242] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4166: Failed to acquire dquot type 0 [ 1875.551461][T22244] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4168'. [ 1875.676094][T22248] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1875.691245][T22248] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4165: Failed to acquire dquot type 0 [ 1875.773463][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1876.316636][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4170'. [ 1876.336434][ T5772] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1876.528401][ T5772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1876.548857][ T5772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1876.570718][ T5772] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1876.584190][ T5772] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1876.593718][ T5772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.604735][ T5772] usb 6-1: config 0 descriptor?? [ 1876.782892][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1877.316106][T22269] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.4172'. [ 1877.706935][T22261] nvme_fabrics: missing parameter 'transport=%s' [ 1877.816385][T22261] nvme_fabrics: missing parameter 'nqn=%s' [ 1877.829049][ T5772] plantronics 0003:047F:FFFF.0044: No inputs registered, leaving [ 1877.840617][ T5772] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1878.441120][T22276] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.4173'. [ 1878.622703][T22276] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1879.346576][ T5772] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1879.590834][ T5772] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1879.782486][ T5772] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1879.808000][ T5772] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1879.819187][ T5772] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1879.863415][ T5772] usb 7-1: Product: syz [ 1879.879054][ T5772] usb 7-1: Manufacturer: syz [ 1879.903412][ T5772] usb 7-1: SerialNumber: syz [ 1879.999905][ T5772] usb 7-1: config 0 descriptor?? [ 1880.011003][ T5772] hub 7-1:0.0: bad descriptor, ignoring hub [ 1880.018491][ T5772] hub: probe of 7-1:0.0 failed with error -5 [ 1881.372283][T21895] usb 6-1: reset high-speed USB device number 70 using dummy_hcd [ 1881.689631][ T5772] snd-usb-audio: probe of 7-1:0.0 failed with error -22 [ 1882.056875][ T5772] usb 7-1: reset high-speed USB device number 89 using dummy_hcd [ 1882.266907][T22294] loop8: detected capacity change from 0 to 512 [ 1882.319971][T22294] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1882.358265][T22299] loop7: detected capacity change from 0 to 512 [ 1882.390764][T22294] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1882.437035][T22299] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1882.450308][T22299] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1883.109628][T22305] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1883.124388][T22305] __quota_error: 2 callbacks suppressed [ 1883.124401][T22305] Quota error (device loop7): write_blk: dquota write failed [ 1883.137550][T22305] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1883.147522][T22305] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4179: Failed to acquire dquot type 0 [ 1883.345842][T13395] usb 7-1: USB disconnect, device number 89 [ 1883.578862][T15356] usb 6-1: USB disconnect, device number 70 [ 1883.627554][T22310] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1883.643330][T22310] Quota error (device loop8): write_blk: dquota write failed [ 1883.651821][T22310] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1883.662062][T22310] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4178: Failed to acquire dquot type 0 [ 1883.787928][T20719] udevd[20719]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1884.160373][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1884.161792][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1884.408736][T22313] loop7: detected capacity change from 0 to 512 [ 1884.864720][T22324] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.4182'. [ 1884.890818][T22324] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1884.899727][T22324] CPU: 0 PID: 22324 Comm: syz.8.4182 Not tainted syzkaller #0 [ 1884.907254][T22324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1884.917462][T22324] Call Trace: [ 1884.920787][T22324] [ 1884.923758][T22324] dump_stack_lvl+0x18c/0x250 [ 1884.928549][T22324] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1884.934306][T22324] ? show_regs_print_info+0x20/0x20 [ 1884.939568][T22324] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1884.945269][T22324] sysfs_warn_dup+0x8e/0xa0 [ 1884.949832][T22324] sysfs_do_create_link_sd+0xc0/0x110 [ 1884.955261][T22324] device_add_class_symlinks+0x1cf/0x240 [ 1884.960961][T22324] device_add+0x507/0xc20 [ 1884.965353][T22324] wiphy_register+0x1dad/0x2ae0 [ 1884.970339][T22324] ? cfg80211_event_work+0x40/0x40 [ 1884.975492][T22324] ? minstrel_ht_alloc+0x88a/0x990 [ 1884.980744][T22324] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1884.986909][T22324] ieee80211_register_hw+0x3464/0x4250 [ 1884.992505][T22324] ? ieee80211_tasklet_handler+0x20/0x20 [ 1884.998206][T22324] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1885.004217][T22324] ? __debug_object_init+0xec/0x450 [ 1885.009473][T22324] ? __asan_memset+0x22/0x40 [ 1885.014207][T22324] ? __hrtimer_init+0x186/0x270 [ 1885.019112][T22324] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1885.024912][T22324] ? mac80211_hwsim_free+0x220/0x220 [ 1885.030312][T22324] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1885.035504][T22324] ? __nla_validate+0x50/0x50 [ 1885.040256][T22324] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1885.046663][T22324] ? __nla_parse+0x40/0x50 [ 1885.051149][T22324] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1885.057612][T22324] genl_family_rcv_msg_doit+0x211/0x310 [ 1885.063203][T22324] ? end_current_label_crit_section+0x170/0x170 [ 1885.069496][T22324] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1885.075501][T22324] ? bpf_lsm_capable+0x9/0x10 [ 1885.080243][T22324] ? security_capable+0x89/0xb0 [ 1885.085154][T22324] genl_rcv_msg+0x619/0x7a0 [ 1885.089806][T22324] ? genl_bind+0x360/0x360 [ 1885.094260][T22324] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1885.100924][T22324] netlink_rcv_skb+0x241/0x4d0 [ 1885.105804][T22324] ? genl_bind+0x360/0x360 [ 1885.110265][T22324] ? netlink_ack+0x1180/0x1180 [ 1885.115094][T22324] ? __lock_acquire+0x7d40/0x7d40 [ 1885.120366][T22324] ? down_read+0x1ac/0x2e0 [ 1885.124840][T22324] genl_rcv+0x28/0x40 [ 1885.128898][T22324] netlink_unicast+0x751/0x8d0 [ 1885.133752][T22324] netlink_sendmsg+0x8d0/0xbf0 [ 1885.138611][T22324] ? netlink_getsockopt+0x590/0x590 [ 1885.143874][T22324] ? aa_sock_msg_perm+0x94/0x150 [ 1885.148874][T22324] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1885.154213][T22324] ? security_socket_sendmsg+0x80/0xa0 [ 1885.159733][T22324] ? netlink_getsockopt+0x590/0x590 [ 1885.165009][T22324] ____sys_sendmsg+0x5ba/0x960 [ 1885.169912][T22324] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1885.175626][T22324] ? __asan_memset+0x22/0x40 [ 1885.180294][T22324] ? __sys_sendmsg_sock+0x30/0x30 [ 1885.185380][T22324] ? __import_iovec+0x5f2/0x850 [ 1885.190304][T22324] ? import_iovec+0x73/0xa0 [ 1885.194882][T22324] ___sys_sendmsg+0x2a6/0x360 [ 1885.199641][T22324] ? __sys_sendmsg+0x2a0/0x2a0 [ 1885.204532][T22324] __se_sys_sendmsg+0x1c2/0x2b0 [ 1885.209610][T22324] ? __x64_sys_sendmsg+0x80/0x80 [ 1885.214616][T22324] ? lockdep_hardirqs_on+0x98/0x150 [ 1885.219968][T22324] do_syscall_64+0x55/0xa0 [ 1885.224700][T22324] ? clear_bhb_loop+0x40/0x90 [ 1885.229470][T22324] ? clear_bhb_loop+0x40/0x90 [ 1885.234198][T22324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1885.240144][T22324] RIP: 0033:0x7ff3fb39c799 [ 1885.244614][T22324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1885.264273][T22324] RSP: 002b:00007ff3fc1a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1885.272831][T22324] RAX: ffffffffffffffda RBX: 00007ff3fb616180 RCX: 00007ff3fb39c799 [ 1885.280852][T22324] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003 [ 1885.288869][T22324] RBP: 00007ff3fb432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1885.296891][T22324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1885.304992][T22324] R13: 00007ff3fb616218 R14: 00007ff3fb616180 R15: 00007ffc108b4a68 [ 1885.313198][T22324] [ 1885.601208][T22313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1885.636871][T22313] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1886.734465][T22330] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1886.749180][T22330] Quota error (device loop7): write_blk: dquota write failed [ 1886.756863][T22330] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1886.767000][T22330] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4181: Failed to acquire dquot type 0 [ 1886.923548][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1887.190877][T22332] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.4186'. [ 1887.255566][T22332] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1887.538295][T22335] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4187'. [ 1888.079709][T22335] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1888.115503][T22344] macvlan2: entered promiscuous mode [ 1888.143740][T22344] macvlan2: entered allmulticast mode [ 1888.187408][T22344] bond2: entered promiscuous mode [ 1888.192626][T22344] bridge2: entered promiscuous mode [ 1888.240016][T22344] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1888.344476][T22344] bond2: left promiscuous mode [ 1888.386428][T22344] bridge2: left promiscuous mode [ 1888.820764][T22345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4189'. [ 1888.935323][T22348] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1889.056237][T22349] macvlan2: entered promiscuous mode [ 1889.062010][T22349] macvlan2: entered allmulticast mode [ 1889.104665][T22349] bond2: entered promiscuous mode [ 1889.110347][T22349] bridge1: entered promiscuous mode [ 1889.122801][T22349] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1889.143445][T22349] bond2: left promiscuous mode [ 1889.152314][T22349] bridge1: left promiscuous mode [ 1889.696160][T22358] loop7: detected capacity change from 0 to 512 [ 1889.770329][T22358] EXT4-fs (loop7): 1 truncate cleaned up [ 1889.777780][T22358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1890.416081][T22368] loop8: detected capacity change from 0 to 512 [ 1890.526680][T22368] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1890.640686][T22368] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1890.664790][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1891.445926][T22372] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1891.460721][T22372] Quota error (device loop8): write_blk: dquota write failed [ 1891.468361][T22372] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1891.478385][T22372] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4193: Failed to acquire dquot type 0 [ 1891.594288][T22374] loop7: detected capacity change from 0 to 512 [ 1891.653999][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1891.698475][T22374] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1891.722283][T22377] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4195'. [ 1891.753911][T22374] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1892.476814][T22381] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1892.491633][T22381] Quota error (device loop7): write_blk: dquota write failed [ 1892.499398][T22381] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1892.509358][T22381] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4194: Failed to acquire dquot type 0 [ 1892.703865][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1893.276120][T22392] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4197'. [ 1896.170516][T22405] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.4201'. [ 1896.203327][T22405] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1896.820385][T22408] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4203'. [ 1898.810196][T22412] macvlan2: entered promiscuous mode [ 1898.822140][T22412] macvlan2: entered allmulticast mode [ 1898.890440][T22428] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.4205'. [ 1899.300499][T22412] bond3: entered promiscuous mode [ 1899.507003][T22412] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1899.525626][T22412] bond3: left promiscuous mode [ 1899.573368][ C1] vkms_vblank_simulate: vblank timer overrun [ 1899.599287][T22428] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1899.607784][T22428] CPU: 0 PID: 22428 Comm: syz.8.4205 Not tainted syzkaller #0 [ 1899.615298][T22428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1899.625402][T22428] Call Trace: [ 1899.628727][T22428] [ 1899.631700][T22428] dump_stack_lvl+0x18c/0x250 [ 1899.636445][T22428] ? show_regs_print_info+0x20/0x20 [ 1899.641709][T22428] ? load_image+0x400/0x400 [ 1899.646316][T22428] sysfs_warn_dup+0x8e/0xa0 [ 1899.650871][T22428] sysfs_do_create_link_sd+0xc0/0x110 [ 1899.656305][T22428] device_add_class_symlinks+0x1cf/0x240 [ 1899.662013][T22428] device_add+0x507/0xc20 [ 1899.666511][T22428] wiphy_register+0x1dad/0x2ae0 [ 1899.671439][T22428] ? cfg80211_event_work+0x40/0x40 [ 1899.676691][T22428] ? minstrel_ht_alloc+0x88a/0x990 [ 1899.681880][T22428] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1899.688094][T22428] ieee80211_register_hw+0x3464/0x4250 [ 1899.693632][T22428] ? ieee80211_tasklet_handler+0x20/0x20 [ 1899.699321][T22428] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1899.705280][T22428] ? __debug_object_init+0xec/0x450 [ 1899.710542][T22428] ? __asan_memset+0x22/0x40 [ 1899.715197][T22428] ? __hrtimer_init+0x186/0x270 [ 1899.720111][T22428] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1899.725928][T22428] ? mac80211_hwsim_free+0x220/0x220 [ 1899.731405][T22428] ? rcu_is_watching+0x15/0xb0 [ 1899.736319][T22428] ? kstrndup+0xbd/0x140 [ 1899.740623][T22428] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1899.745875][T22428] ? __nla_validate+0x50/0x50 [ 1899.750609][T22428] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1899.756998][T22428] ? __nla_parse+0x40/0x50 [ 1899.761452][T22428] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1899.767835][T22428] genl_family_rcv_msg_doit+0x211/0x310 [ 1899.773443][T22428] ? end_current_label_crit_section+0x170/0x170 [ 1899.779765][T22428] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1899.785726][T22428] ? bpf_lsm_capable+0x9/0x10 [ 1899.790557][T22428] ? security_capable+0x89/0xb0 [ 1899.795669][T22428] genl_rcv_msg+0x619/0x7a0 [ 1899.800239][T22428] ? genl_bind+0x360/0x360 [ 1899.804701][T22428] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1899.811104][T22428] netlink_rcv_skb+0x241/0x4d0 [ 1899.815916][T22428] ? genl_bind+0x360/0x360 [ 1899.820372][T22428] ? netlink_ack+0x1180/0x1180 [ 1899.825189][T22428] ? __lock_acquire+0x7d40/0x7d40 [ 1899.830262][T22428] ? down_read+0x1ac/0x2e0 [ 1899.834760][T22428] genl_rcv+0x28/0x40 [ 1899.838784][T22428] netlink_unicast+0x751/0x8d0 [ 1899.843603][T22428] netlink_sendmsg+0x8d0/0xbf0 [ 1899.848426][T22428] ? netlink_getsockopt+0x590/0x590 [ 1899.853670][T22428] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1899.859335][T22428] ? aa_sock_msg_perm+0x94/0x150 [ 1899.864315][T22428] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1899.869665][T22428] ? security_socket_sendmsg+0x80/0xa0 [ 1899.875159][T22428] ? netlink_getsockopt+0x590/0x590 [ 1899.880425][T22428] ____sys_sendmsg+0x5ba/0x960 [ 1899.885452][T22428] ? __asan_memset+0x22/0x40 [ 1899.890098][T22428] ? __sys_sendmsg_sock+0x30/0x30 [ 1899.895157][T22428] ? __import_iovec+0x5f2/0x850 [ 1899.900069][T22428] ? import_iovec+0x73/0xa0 [ 1899.904620][T22428] ___sys_sendmsg+0x2a6/0x360 [ 1899.909342][T22428] ? __sys_sendmsg+0x2a0/0x2a0 [ 1899.915077][T22428] __se_sys_sendmsg+0x1c2/0x2b0 [ 1899.920010][T22428] ? __x64_sys_sendmsg+0x80/0x80 [ 1899.924999][T22428] ? lockdep_hardirqs_on+0x98/0x150 [ 1899.930240][T22428] do_syscall_64+0x55/0xa0 [ 1899.934703][T22428] ? clear_bhb_loop+0x40/0x90 [ 1899.939457][T22428] ? clear_bhb_loop+0x40/0x90 [ 1899.944172][T22428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1899.950192][T22428] RIP: 0033:0x7ff3fb39c799 [ 1899.954672][T22428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1899.974428][T22428] RSP: 002b:00007ff3fc1a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1899.982975][T22428] RAX: ffffffffffffffda RBX: 00007ff3fb616180 RCX: 00007ff3fb39c799 [ 1899.990985][T22428] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003 [ 1899.998987][T22428] RBP: 00007ff3fb432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1900.006997][T22428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1900.015031][T22428] R13: 00007ff3fb616218 R14: 00007ff3fb616180 R15: 00007ffc108b4a68 [ 1900.023148][T22428] [ 1900.075435][T22430] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4207'. [ 1900.075463][T22435] loop5: detected capacity change from 0 to 512 [ 1900.119365][T22435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1900.168095][T22435] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1900.484208][T22432] macvlan2: entered promiscuous mode [ 1900.493294][T22432] macvlan2: entered allmulticast mode [ 1900.963265][T22439] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1901.023502][T22445] Quota error (device loop5): write_blk: dquota write failed [ 1901.032641][T22445] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1901.042995][T22445] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4208: Failed to acquire dquot type 0 [ 1901.094364][T22432] bond3: entered promiscuous mode [ 1901.164010][T22432] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1901.390739][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1901.462035][T22432] bond3: left promiscuous mode [ 1901.589178][T22451] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.4210'. [ 1901.602393][T22451] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1901.610534][T22451] CPU: 1 PID: 22451 Comm: syz.8.4210 Not tainted syzkaller #0 [ 1901.618066][T22451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1901.628220][T22451] Call Trace: [ 1901.631549][T22451] [ 1901.634521][T22451] dump_stack_lvl+0x18c/0x250 [ 1901.639278][T22451] ? show_regs_print_info+0x20/0x20 [ 1901.644550][T22451] ? load_image+0x400/0x400 [ 1901.649141][T22451] sysfs_warn_dup+0x8e/0xa0 [ 1901.653705][T22451] sysfs_do_create_link_sd+0xc0/0x110 [ 1901.659146][T22451] device_add_class_symlinks+0x1cf/0x240 [ 1901.664848][T22451] device_add+0x507/0xc20 [ 1901.669245][T22451] wiphy_register+0x1dad/0x2ae0 [ 1901.674182][T22451] ? cfg80211_event_work+0x40/0x40 [ 1901.679350][T22451] ? minstrel_ht_alloc+0x88a/0x990 [ 1901.684553][T22451] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1901.690700][T22451] ieee80211_register_hw+0x3464/0x4250 [ 1901.696263][T22451] ? ieee80211_tasklet_handler+0x20/0x20 [ 1901.702013][T22451] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1901.707981][T22451] ? __debug_object_init+0xec/0x450 [ 1901.713449][T22451] ? __asan_memset+0x22/0x40 [ 1901.718119][T22451] ? __hrtimer_init+0x186/0x270 [ 1901.723046][T22451] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1901.728872][T22451] ? mac80211_hwsim_free+0x220/0x220 [ 1901.734228][T22451] ? rcu_is_watching+0x15/0xb0 [ 1901.739054][T22451] ? kstrndup+0xbd/0x140 [ 1901.743443][T22451] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1901.748614][T22451] ? __nla_validate+0x50/0x50 [ 1901.753356][T22451] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1901.759748][T22451] ? __nla_parse+0x40/0x50 [ 1901.764302][T22451] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1901.770769][T22451] genl_family_rcv_msg_doit+0x211/0x310 [ 1901.776364][T22451] ? end_current_label_crit_section+0x170/0x170 [ 1901.782663][T22451] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1901.788606][T22451] ? bpf_lsm_capable+0x9/0x10 [ 1901.793331][T22451] ? security_capable+0x89/0xb0 [ 1901.798233][T22451] genl_rcv_msg+0x619/0x7a0 [ 1901.802776][T22451] ? genl_bind+0x360/0x360 [ 1901.807222][T22451] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1901.813597][T22451] ? ref_tracker_free+0x690/0x840 [ 1901.818754][T22451] netlink_rcv_skb+0x241/0x4d0 [ 1901.823563][T22451] ? genl_bind+0x360/0x360 [ 1901.828009][T22451] ? netlink_ack+0x1180/0x1180 [ 1901.832821][T22451] ? __lock_acquire+0x7d40/0x7d40 [ 1901.837917][T22451] ? down_read+0x1ac/0x2e0 [ 1901.842541][T22451] genl_rcv+0x28/0x40 [ 1901.846557][T22451] netlink_unicast+0x751/0x8d0 [ 1901.851371][T22451] netlink_sendmsg+0x8d0/0xbf0 [ 1901.856189][T22451] ? netlink_getsockopt+0x590/0x590 [ 1901.861434][T22451] ? aa_sock_msg_perm+0x94/0x150 [ 1901.866431][T22451] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1901.871752][T22451] ? security_socket_sendmsg+0x80/0xa0 [ 1901.877257][T22451] ? netlink_getsockopt+0x590/0x590 [ 1901.882531][T22451] ____sys_sendmsg+0x5ba/0x960 [ 1901.887422][T22451] ? __asan_memset+0x22/0x40 [ 1901.892059][T22451] ? __sys_sendmsg_sock+0x30/0x30 [ 1901.897127][T22451] ? __import_iovec+0x5f2/0x850 [ 1901.902056][T22451] ? import_iovec+0x73/0xa0 [ 1901.906624][T22451] ___sys_sendmsg+0x2a6/0x360 [ 1901.911351][T22451] ? __sys_sendmsg+0x2a0/0x2a0 [ 1901.916189][T22451] __se_sys_sendmsg+0x1c2/0x2b0 [ 1901.921224][T22451] ? __x64_sys_sendmsg+0x80/0x80 [ 1901.926247][T22451] ? lockdep_hardirqs_on+0x98/0x150 [ 1901.931497][T22451] do_syscall_64+0x55/0xa0 [ 1901.935960][T22451] ? clear_bhb_loop+0x40/0x90 [ 1901.940672][T22451] ? clear_bhb_loop+0x40/0x90 [ 1901.945393][T22451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1901.951330][T22451] RIP: 0033:0x7ff3fb39c799 [ 1901.955787][T22451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.975612][T22451] RSP: 002b:00007ff3fc1c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1901.984065][T22451] RAX: ffffffffffffffda RBX: 00007ff3fb616090 RCX: 00007ff3fb39c799 [ 1901.992071][T22451] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003 [ 1902.000092][T22451] RBP: 00007ff3fb432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1902.008179][T22451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1902.016270][T22451] R13: 00007ff3fb616128 R14: 00007ff3fb616090 R15: 00007ffc108b4a68 [ 1902.024297][T22451] [ 1902.027404][ C1] vkms_vblank_simulate: vblank timer overrun [ 1902.153238][T22453] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4212'. [ 1902.709168][T22457] macvlan2: entered promiscuous mode [ 1902.756386][T22457] macvlan2: entered allmulticast mode [ 1902.777878][T22457] bond4: entered promiscuous mode [ 1902.783553][T22457] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1902.861525][T22457] bond4: left promiscuous mode [ 1903.684874][T22470] loop5: detected capacity change from 0 to 128 [ 1903.726006][T22470] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1903.742822][T22470] ext4 filesystem being mounted at /494/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1905.038032][T13228] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1908.539361][T22498] loop8: detected capacity change from 0 to 512 [ 1909.602498][T22498] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1909.618756][T22498] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1910.716323][T22515] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1910.731694][T22517] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.4225'. [ 1910.732022][T22515] Quota error (device loop8): write_blk: dquota write failed [ 1910.748642][T22515] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1910.749356][T22517] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1910.759037][T22515] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4222: Failed to acquire dquot type 0 [ 1910.780664][T22517] CPU: 1 PID: 22517 Comm: syz.5.4225 Not tainted syzkaller #0 [ 1910.788181][T22517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1910.798292][T22517] Call Trace: [ 1910.801621][T22517] [ 1910.804597][T22517] dump_stack_lvl+0x18c/0x250 [ 1910.809444][T22517] ? show_regs_print_info+0x20/0x20 [ 1910.814725][T22517] ? load_image+0x400/0x400 [ 1910.819320][T22517] sysfs_warn_dup+0x8e/0xa0 [ 1910.823897][T22517] sysfs_do_create_link_sd+0xc0/0x110 [ 1910.829433][T22517] device_add_class_symlinks+0x1cf/0x240 [ 1910.835166][T22517] device_add+0x507/0xc20 [ 1910.839578][T22517] wiphy_register+0x1dad/0x2ae0 [ 1910.844506][T22517] ? cfg80211_event_work+0x40/0x40 [ 1910.849672][T22517] ? minstrel_ht_alloc+0x88a/0x990 [ 1910.854914][T22517] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1910.861054][T22517] ieee80211_register_hw+0x3464/0x4250 [ 1910.866611][T22517] ? ieee80211_tasklet_handler+0x20/0x20 [ 1910.872290][T22517] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1910.878237][T22517] ? __debug_object_init+0xec/0x450 [ 1910.883514][T22517] ? __asan_memset+0x22/0x40 [ 1910.888142][T22517] ? __hrtimer_init+0x186/0x270 [ 1910.893052][T22517] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1910.898831][T22517] ? mac80211_hwsim_free+0x220/0x220 [ 1910.904203][T22517] ? rcu_is_watching+0x15/0xb0 [ 1910.909004][T22517] ? kstrndup+0xbd/0x140 [ 1910.913299][T22517] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1910.918474][T22517] ? __nla_validate+0x50/0x50 [ 1910.923205][T22517] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1910.929940][T22517] ? __nla_parse+0x40/0x50 [ 1910.934390][T22517] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1910.940758][T22517] genl_family_rcv_msg_doit+0x211/0x310 [ 1910.946344][T22517] ? end_current_label_crit_section+0x170/0x170 [ 1910.952630][T22517] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1910.958577][T22517] ? bpf_lsm_capable+0x9/0x10 [ 1910.963301][T22517] ? security_capable+0x89/0xb0 [ 1910.968211][T22517] genl_rcv_msg+0x619/0x7a0 [ 1910.972768][T22517] ? genl_bind+0x360/0x360 [ 1910.977308][T22517] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1910.983794][T22517] netlink_rcv_skb+0x241/0x4d0 [ 1910.988666][T22517] ? genl_bind+0x360/0x360 [ 1910.993127][T22517] ? netlink_ack+0x1180/0x1180 [ 1910.997958][T22517] ? __lock_acquire+0x7d40/0x7d40 [ 1911.003030][T22517] ? down_read+0x1ac/0x2e0 [ 1911.007490][T22517] genl_rcv+0x28/0x40 [ 1911.011504][T22517] netlink_unicast+0x751/0x8d0 [ 1911.016330][T22517] netlink_sendmsg+0x8d0/0xbf0 [ 1911.021174][T22517] ? netlink_getsockopt+0x590/0x590 [ 1911.026428][T22517] ? aa_sock_msg_perm+0x94/0x150 [ 1911.031441][T22517] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1911.036781][T22517] ? security_socket_sendmsg+0x80/0xa0 [ 1911.042325][T22517] ? netlink_getsockopt+0x590/0x590 [ 1911.047756][T22517] ____sys_sendmsg+0x5ba/0x960 [ 1911.052565][T22517] ? __asan_memset+0x22/0x40 [ 1911.057200][T22517] ? __sys_sendmsg_sock+0x30/0x30 [ 1911.062254][T22517] ? __import_iovec+0x5f2/0x850 [ 1911.067222][T22517] ? import_iovec+0x73/0xa0 [ 1911.071767][T22517] ___sys_sendmsg+0x2a6/0x360 [ 1911.076538][T22517] ? __sys_sendmsg+0x2a0/0x2a0 [ 1911.081421][T22517] __se_sys_sendmsg+0x1c2/0x2b0 [ 1911.086316][T22517] ? __x64_sys_sendmsg+0x80/0x80 [ 1911.091305][T22517] ? lockdep_hardirqs_on+0x98/0x150 [ 1911.096553][T22517] do_syscall_64+0x55/0xa0 [ 1911.101122][T22517] ? clear_bhb_loop+0x40/0x90 [ 1911.105846][T22517] ? clear_bhb_loop+0x40/0x90 [ 1911.110567][T22517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1911.116498][T22517] RIP: 0033:0x7f2cb079c799 [ 1911.120950][T22517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1911.140596][T22517] RSP: 002b:00007f2cb165e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1911.149076][T22517] RAX: ffffffffffffffda RBX: 00007f2cb0a16180 RCX: 00007f2cb079c799 [ 1911.157085][T22517] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003 [ 1911.165091][T22517] RBP: 00007f2cb0832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1911.173104][T22517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1911.181125][T22517] R13: 00007f2cb0a16218 R14: 00007f2cb0a16180 R15: 00007fffa28ebb18 [ 1911.189161][T22517] [ 1911.482301][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1911.833782][T22524] loop8: detected capacity change from 0 to 512 [ 1911.999793][T22524] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1912.041428][T22524] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1913.673131][T22533] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1913.688079][T22533] Quota error (device loop8): write_blk: dquota write failed [ 1913.696332][T22533] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1913.706847][T22533] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4227: Failed to acquire dquot type 0 [ 1913.842410][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1915.019434][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.032317][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.853481][T22562] loop7: detected capacity change from 0 to 512 [ 1916.935219][T22562] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1916.983966][T22562] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1918.009401][T22570] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1918.025656][T22570] Quota error (device loop7): write_blk: dquota write failed [ 1918.033292][T22570] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1918.043333][T22570] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4234: Failed to acquire dquot type 0 [ 1918.198087][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1919.650632][T22584] loop5: detected capacity change from 0 to 512 [ 1919.862299][T22584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1919.955834][T22584] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1919.983108][T22590] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4240'. [ 1921.675575][T22599] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1921.690905][T22599] Quota error (device loop5): write_blk: dquota write failed [ 1921.698894][T22599] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1921.709009][T22599] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4238: Failed to acquire dquot type 0 [ 1921.856596][T22596] macvlan2: entered promiscuous mode [ 1921.876501][T22596] macvlan2: entered allmulticast mode [ 1921.908080][T22596] bond5: entered promiscuous mode [ 1921.935180][T22596] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1922.333337][T22596] bond5: left promiscuous mode [ 1922.391999][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1923.535722][T22615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4244'. [ 1924.666880][T22615] macvlan2: entered promiscuous mode [ 1924.693852][T22615] macvlan2: entered allmulticast mode [ 1924.723404][T22615] bond3: entered promiscuous mode [ 1924.729680][T22615] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1924.742806][T22615] bond3: left promiscuous mode [ 1927.420042][T22639] loop8: detected capacity change from 0 to 512 [ 1927.765383][T22639] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1927.829175][T22639] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1928.557803][T22644] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1928.896712][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1930.240778][T22665] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.4254'. [ 1930.252156][T22665] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1930.260153][T22665] CPU: 0 PID: 22665 Comm: syz.6.4254 Not tainted syzkaller #0 [ 1930.268060][T22665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1930.278135][T22665] Call Trace: [ 1930.281432][T22665] [ 1930.284384][T22665] dump_stack_lvl+0x18c/0x250 [ 1930.289102][T22665] ? show_regs_print_info+0x20/0x20 [ 1930.294329][T22665] ? load_image+0x400/0x400 [ 1930.298866][T22665] sysfs_warn_dup+0x8e/0xa0 [ 1930.303412][T22665] sysfs_do_create_link_sd+0xc0/0x110 [ 1930.308814][T22665] device_add_class_symlinks+0x1cf/0x240 [ 1930.314536][T22665] device_add+0x507/0xc20 [ 1930.318898][T22665] wiphy_register+0x1dad/0x2ae0 [ 1930.323793][T22665] ? cfg80211_event_work+0x40/0x40 [ 1930.328939][T22665] ? minstrel_ht_alloc+0x88a/0x990 [ 1930.334081][T22665] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1930.340179][T22665] ieee80211_register_hw+0x3464/0x4250 [ 1930.345707][T22665] ? ieee80211_tasklet_handler+0x20/0x20 [ 1930.351367][T22665] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1930.357290][T22665] ? __debug_object_init+0xec/0x450 [ 1930.362517][T22665] ? __asan_memset+0x22/0x40 [ 1930.367152][T22665] ? __hrtimer_init+0x186/0x270 [ 1930.372030][T22665] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1930.377926][T22665] ? mac80211_hwsim_free+0x220/0x220 [ 1930.383265][T22665] ? rcu_is_watching+0x15/0xb0 [ 1930.388054][T22665] ? kstrndup+0xbd/0x140 [ 1930.392329][T22665] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1930.397474][T22665] ? __nla_validate+0x50/0x50 [ 1930.402183][T22665] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1930.408561][T22665] ? __nla_parse+0x40/0x50 [ 1930.412999][T22665] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1930.419368][T22665] genl_family_rcv_msg_doit+0x211/0x310 [ 1930.424960][T22665] ? end_current_label_crit_section+0x170/0x170 [ 1930.431261][T22665] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1930.437196][T22665] ? bpf_lsm_capable+0x9/0x10 [ 1930.441902][T22665] ? security_capable+0x89/0xb0 [ 1930.446799][T22665] genl_rcv_msg+0x619/0x7a0 [ 1930.451346][T22665] ? genl_bind+0x360/0x360 [ 1930.455775][T22665] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1930.462154][T22665] ? ref_tracker_free+0x690/0x840 [ 1930.467227][T22665] netlink_rcv_skb+0x241/0x4d0 [ 1930.472016][T22665] ? genl_bind+0x360/0x360 [ 1930.476461][T22665] ? netlink_ack+0x1180/0x1180 [ 1930.481294][T22665] ? __lock_acquire+0x7d40/0x7d40 [ 1930.486408][T22665] ? down_read+0x1ac/0x2e0 [ 1930.490847][T22665] genl_rcv+0x28/0x40 [ 1930.494842][T22665] netlink_unicast+0x751/0x8d0 [ 1930.499668][T22665] netlink_sendmsg+0x8d0/0xbf0 [ 1930.504550][T22665] ? netlink_getsockopt+0x590/0x590 [ 1930.509770][T22665] ? aa_sock_msg_perm+0x94/0x150 [ 1930.514729][T22665] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1930.520035][T22665] ? security_socket_sendmsg+0x80/0xa0 [ 1930.525596][T22665] ? netlink_getsockopt+0x590/0x590 [ 1930.530821][T22665] ____sys_sendmsg+0x5ba/0x960 [ 1930.535616][T22665] ? __asan_memset+0x22/0x40 [ 1930.540227][T22665] ? __sys_sendmsg_sock+0x30/0x30 [ 1930.545261][T22665] ? __import_iovec+0x5f2/0x850 [ 1930.550170][T22665] ? import_iovec+0x73/0xa0 [ 1930.554699][T22665] ___sys_sendmsg+0x2a6/0x360 [ 1930.559397][T22665] ? __sys_sendmsg+0x2a0/0x2a0 [ 1930.564187][T22665] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1930.569604][T22665] __se_sys_sendmsg+0x1c2/0x2b0 [ 1930.574481][T22665] ? __x64_sys_sendmsg+0x80/0x80 [ 1930.579453][T22665] ? lockdep_hardirqs_on+0x98/0x150 [ 1930.584688][T22665] do_syscall_64+0x55/0xa0 [ 1930.589147][T22665] ? clear_bhb_loop+0x40/0x90 [ 1930.593862][T22665] ? clear_bhb_loop+0x40/0x90 [ 1930.598568][T22665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1930.604483][T22665] RIP: 0033:0x7fbb3779c799 [ 1930.608916][T22665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1930.628551][T22665] RSP: 002b:00007fbb38571028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1930.637081][T22665] RAX: ffffffffffffffda RBX: 00007fbb37a16090 RCX: 00007fbb3779c799 [ 1930.645089][T22665] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003 [ 1930.653081][T22665] RBP: 00007fbb37832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1930.661064][T22665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1930.669062][T22665] R13: 00007fbb37a16128 R14: 00007fbb37a16090 R15: 00007fff5baae808 [ 1930.677104][T22665] [ 1933.241632][T22678] loop5: detected capacity change from 0 to 512 [ 1933.297970][T22680] loop6: detected capacity change from 0 to 512 [ 1933.362530][T22678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1933.398513][T22680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1933.439549][T22678] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1933.452153][T22680] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1934.388316][T22685] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1934.865121][T22696] Quota error (device loop5): write_blk: dquota write failed [ 1934.872899][T22696] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1934.882906][T22696] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4261: Failed to acquire dquot type 0 [ 1935.013836][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1935.055008][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1938.146642][T22712] loop8: detected capacity change from 0 to 512 [ 1938.248253][T22712] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1938.288487][T22712] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1938.392332][T22721] loop7: detected capacity change from 0 to 512 [ 1938.877027][T22725] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1938.891835][T22725] Quota error (device loop8): write_blk: dquota write failed [ 1938.899451][T22725] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1938.909373][T22725] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4262: Failed to acquire dquot type 0 [ 1939.120269][T22721] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1939.177537][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1939.327565][T22721] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1939.930521][T22733] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1939.946624][T22733] Quota error (device loop7): write_blk: dquota write failed [ 1939.954160][T22733] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1939.964292][T22733] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4271: Failed to acquire dquot type 0 [ 1940.445997][T22735] loop8: detected capacity change from 0 to 512 [ 1940.494542][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1940.565609][T22735] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1940.599251][T22735] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1941.122623][T22742] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1941.138631][T22742] Quota error (device loop8): write_blk: dquota write failed [ 1941.146696][T22742] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1941.157008][T22742] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4272: Failed to acquire dquot type 0 [ 1941.755742][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1942.117763][T22736] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.4273'. [ 1942.129237][T22736] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1942.137255][T22736] CPU: 0 PID: 22736 Comm: syz.5.4273 Not tainted syzkaller #0 [ 1942.144827][T22736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1942.154995][T22736] Call Trace: [ 1942.158295][T22736] [ 1942.161247][T22736] dump_stack_lvl+0x18c/0x250 [ 1942.165981][T22736] ? show_regs_print_info+0x20/0x20 [ 1942.171246][T22736] ? load_image+0x400/0x400 [ 1942.175780][T22736] sysfs_warn_dup+0x8e/0xa0 [ 1942.180300][T22736] sysfs_do_create_link_sd+0xc0/0x110 [ 1942.185776][T22736] device_add_class_symlinks+0x1cf/0x240 [ 1942.191461][T22736] device_add+0x507/0xc20 [ 1942.195849][T22736] wiphy_register+0x1dad/0x2ae0 [ 1942.200749][T22736] ? cfg80211_event_work+0x40/0x40 [ 1942.205908][T22736] ? minstrel_ht_alloc+0x88a/0x990 [ 1942.211244][T22736] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1942.217498][T22736] ieee80211_register_hw+0x3464/0x4250 [ 1942.223015][T22736] ? ieee80211_tasklet_handler+0x20/0x20 [ 1942.228677][T22736] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1942.234593][T22736] ? __debug_object_init+0xec/0x450 [ 1942.239831][T22736] ? __asan_memset+0x22/0x40 [ 1942.244443][T22736] ? __hrtimer_init+0x186/0x270 [ 1942.249409][T22736] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1942.255224][T22736] ? mac80211_hwsim_free+0x220/0x220 [ 1942.260639][T22736] ? rcu_is_watching+0x15/0xb0 [ 1942.265429][T22736] ? kstrndup+0xbd/0x140 [ 1942.269700][T22736] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1942.274845][T22736] ? __nla_validate+0x50/0x50 [ 1942.279557][T22736] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1942.285919][T22736] ? __nla_parse+0x40/0x50 [ 1942.290353][T22736] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1942.296705][T22736] genl_family_rcv_msg_doit+0x211/0x310 [ 1942.302269][T22736] ? end_current_label_crit_section+0x170/0x170 [ 1942.308543][T22736] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1942.314546][T22736] ? bpf_lsm_capable+0x9/0x10 [ 1942.319315][T22736] ? security_capable+0x89/0xb0 [ 1942.324284][T22736] genl_rcv_msg+0x619/0x7a0 [ 1942.328839][T22736] ? genl_bind+0x360/0x360 [ 1942.333270][T22736] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1942.339717][T22736] ? ref_tracker_free+0x690/0x840 [ 1942.344778][T22736] netlink_rcv_skb+0x241/0x4d0 [ 1942.349585][T22736] ? genl_bind+0x360/0x360 [ 1942.354039][T22736] ? netlink_ack+0x1180/0x1180 [ 1942.358837][T22736] ? __lock_acquire+0x7d40/0x7d40 [ 1942.363890][T22736] ? down_read+0x1ac/0x2e0 [ 1942.368332][T22736] genl_rcv+0x28/0x40 [ 1942.372338][T22736] netlink_unicast+0x751/0x8d0 [ 1942.377148][T22736] netlink_sendmsg+0x8d0/0xbf0 [ 1942.381945][T22736] ? netlink_getsockopt+0x590/0x590 [ 1942.387189][T22736] ? aa_sock_msg_perm+0x94/0x150 [ 1942.392241][T22736] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1942.397548][T22736] ? security_socket_sendmsg+0x80/0xa0 [ 1942.403020][T22736] ? netlink_getsockopt+0x590/0x590 [ 1942.408340][T22736] ____sys_sendmsg+0x5ba/0x960 [ 1942.413139][T22736] ? __asan_memset+0x22/0x40 [ 1942.417754][T22736] ? __sys_sendmsg_sock+0x30/0x30 [ 1942.422795][T22736] ? __import_iovec+0x5f2/0x850 [ 1942.427683][T22736] ? import_iovec+0x73/0xa0 [ 1942.432220][T22736] ___sys_sendmsg+0x2a6/0x360 [ 1942.437184][T22736] ? __sys_sendmsg+0x2a0/0x2a0 [ 1942.442021][T22736] __se_sys_sendmsg+0x1c2/0x2b0 [ 1942.446894][T22736] ? __x64_sys_sendmsg+0x80/0x80 [ 1942.451865][T22736] ? lockdep_hardirqs_on+0x98/0x150 [ 1942.457083][T22736] do_syscall_64+0x55/0xa0 [ 1942.461534][T22736] ? clear_bhb_loop+0x40/0x90 [ 1942.466335][T22736] ? clear_bhb_loop+0x40/0x90 [ 1942.471163][T22736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1942.477122][T22736] RIP: 0033:0x7f2cb079c799 [ 1942.481568][T22736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1942.501217][T22736] RSP: 002b:00007f2cb167f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1942.509656][T22736] RAX: ffffffffffffffda RBX: 00007f2cb0a16090 RCX: 00007f2cb079c799 [ 1942.517652][T22736] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003 [ 1942.525638][T22736] RBP: 00007f2cb0832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1942.533672][T22736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1942.541665][T22736] R13: 00007f2cb0a16128 R14: 00007f2cb0a16090 R15: 00007fffa28ebb18 [ 1942.549668][T22736] [ 1943.003430][T22751] loop6: detected capacity change from 0 to 512 [ 1943.097143][T22753] loop8: detected capacity change from 0 to 512 [ 1943.118395][T22749] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.4274'. [ 1943.130704][T22749] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1943.138721][T22749] CPU: 0 PID: 22749 Comm: syz.7.4274 Not tainted syzkaller #0 [ 1943.146238][T22749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1943.156351][T22749] Call Trace: [ 1943.159686][T22749] [ 1943.162677][T22749] dump_stack_lvl+0x18c/0x250 [ 1943.167433][T22749] ? show_regs_print_info+0x20/0x20 [ 1943.172712][T22749] ? load_image+0x400/0x400 [ 1943.177318][T22749] sysfs_warn_dup+0x8e/0xa0 [ 1943.181882][T22749] sysfs_do_create_link_sd+0xc0/0x110 [ 1943.187322][T22749] device_add_class_symlinks+0x1cf/0x240 [ 1943.193055][T22749] device_add+0x507/0xc20 [ 1943.197549][T22749] wiphy_register+0x1dad/0x2ae0 [ 1943.202501][T22749] ? cfg80211_event_work+0x40/0x40 [ 1943.207671][T22749] ? minstrel_ht_alloc+0x88a/0x990 [ 1943.212862][T22749] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1943.218997][T22749] ieee80211_register_hw+0x3464/0x4250 [ 1943.224611][T22749] ? ieee80211_tasklet_handler+0x20/0x20 [ 1943.230320][T22749] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1943.236292][T22749] ? __debug_object_init+0xec/0x450 [ 1943.241737][T22749] ? __asan_memset+0x22/0x40 [ 1943.246400][T22749] ? __hrtimer_init+0x186/0x270 [ 1943.251349][T22749] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1943.257267][T22749] ? mac80211_hwsim_free+0x220/0x220 [ 1943.262652][T22749] ? rcu_is_watching+0x15/0xb0 [ 1943.267497][T22749] ? kstrndup+0xbd/0x140 [ 1943.271826][T22749] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1943.277017][T22749] ? __nla_validate+0x50/0x50 [ 1943.281775][T22749] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1943.288183][T22749] ? __nla_parse+0x40/0x50 [ 1943.292657][T22749] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1943.299054][T22749] genl_family_rcv_msg_doit+0x211/0x310 [ 1943.304700][T22749] ? end_current_label_crit_section+0x170/0x170 [ 1943.311008][T22749] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1943.317063][T22749] ? bpf_lsm_capable+0x9/0x10 [ 1943.321811][T22749] ? security_capable+0x89/0xb0 [ 1943.326770][T22749] genl_rcv_msg+0x619/0x7a0 [ 1943.331342][T22749] ? genl_bind+0x360/0x360 [ 1943.335816][T22749] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1943.342226][T22749] ? ref_tracker_free+0x690/0x840 [ 1943.347350][T22749] netlink_rcv_skb+0x241/0x4d0 [ 1943.352183][T22749] ? genl_bind+0x360/0x360 [ 1943.356676][T22749] ? netlink_ack+0x1180/0x1180 [ 1943.361526][T22749] ? __lock_acquire+0x7d40/0x7d40 [ 1943.366631][T22749] ? down_read+0x1ac/0x2e0 [ 1943.371154][T22749] genl_rcv+0x28/0x40 [ 1943.375192][T22749] netlink_unicast+0x751/0x8d0 [ 1943.380035][T22749] netlink_sendmsg+0x8d0/0xbf0 [ 1943.384883][T22749] ? netlink_getsockopt+0x590/0x590 [ 1943.390153][T22749] ? aa_sock_msg_perm+0x94/0x150 [ 1943.395158][T22749] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1943.400589][T22749] ? security_socket_sendmsg+0x80/0xa0 [ 1943.406101][T22749] ? netlink_getsockopt+0x590/0x590 [ 1943.411363][T22749] ____sys_sendmsg+0x5ba/0x960 [ 1943.416192][T22749] ? __asan_memset+0x22/0x40 [ 1943.420885][T22749] ? __sys_sendmsg_sock+0x30/0x30 [ 1943.425947][T22749] ? __import_iovec+0x5f2/0x850 [ 1943.430844][T22749] ? import_iovec+0x73/0xa0 [ 1943.435379][T22749] ___sys_sendmsg+0x2a6/0x360 [ 1943.440097][T22749] ? __sys_sendmsg+0x2a0/0x2a0 [ 1943.445032][T22749] __se_sys_sendmsg+0x1c2/0x2b0 [ 1943.449935][T22749] ? __x64_sys_sendmsg+0x80/0x80 [ 1943.454940][T22749] ? lockdep_hardirqs_on+0x98/0x150 [ 1943.460185][T22749] do_syscall_64+0x55/0xa0 [ 1943.464663][T22749] ? clear_bhb_loop+0x40/0x90 [ 1943.469376][T22749] ? clear_bhb_loop+0x40/0x90 [ 1943.474112][T22749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1943.480055][T22749] RIP: 0033:0x7f9c0539c799 [ 1943.484508][T22749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1943.504267][T22749] RSP: 002b:00007f9c06210028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1943.512820][T22749] RAX: ffffffffffffffda RBX: 00007f9c05616180 RCX: 00007f9c0539c799 [ 1943.520830][T22749] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003 [ 1943.528840][T22749] RBP: 00007f9c05432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1943.536857][T22749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1943.544858][T22749] R13: 00007f9c05616218 R14: 00007f9c05616180 R15: 00007ffedf2df3a8 [ 1943.552877][T22749] [ 1943.657357][T22751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1943.701239][T22751] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1943.723378][T22753] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1943.817999][T22753] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1944.198645][T22760] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1944.213514][T22760] Quota error (device loop6): write_blk: dquota write failed [ 1944.221185][T22760] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1944.231215][T22760] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4276: Failed to acquire dquot type 0 [ 1945.192897][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1945.318866][T22765] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1945.359383][T22765] Quota error (device loop8): write_blk: dquota write failed [ 1945.378584][T22765] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1945.410601][T22765] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4277: Failed to acquire dquot type 0 [ 1946.712736][T22779] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4283'. [ 1946.780003][T22781] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4283'. [ 1946.852049][T22783] loop6: detected capacity change from 0 to 512 [ 1946.902038][T22783] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1946.912105][T22783] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1947.520863][T22790] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1947.536716][T22790] Quota error (device loop6): write_blk: dquota write failed [ 1947.545120][T22790] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1947.555303][T22790] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4284: Failed to acquire dquot type 0 [ 1948.215365][T22792] loop5: detected capacity change from 0 to 512 [ 1948.223626][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1948.284308][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1948.333135][T22792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1948.360889][T22792] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1949.992020][T22797] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1950.006874][T22797] Quota error (device loop5): write_blk: dquota write failed [ 1950.014477][T22797] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1950.024506][T22797] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4286: Failed to acquire dquot type 0 [ 1950.249572][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1953.793779][T22827] loop8: detected capacity change from 0 to 512 [ 1954.488792][T22827] EXT4-fs (loop8): 1 truncate cleaned up [ 1954.495916][T22827] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1954.759025][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1955.003898][T22834] loop5: detected capacity change from 0 to 512 [ 1955.127759][T22834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1955.171745][T22834] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1955.474530][T22843] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.4298'. [ 1955.497546][T22843] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1955.506343][T22843] CPU: 0 PID: 22843 Comm: syz.6.4298 Not tainted syzkaller #0 [ 1955.513868][T22843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1955.523984][T22843] Call Trace: [ 1955.527327][T22843] [ 1955.530315][T22843] dump_stack_lvl+0x18c/0x250 [ 1955.535062][T22843] ? show_regs_print_info+0x20/0x20 [ 1955.540326][T22843] ? load_image+0x400/0x400 [ 1955.544902][T22843] sysfs_warn_dup+0x8e/0xa0 [ 1955.549457][T22843] sysfs_do_create_link_sd+0xc0/0x110 [ 1955.554879][T22843] device_add_class_symlinks+0x1cf/0x240 [ 1955.560626][T22843] device_add+0x507/0xc20 [ 1955.565015][T22843] wiphy_register+0x1dad/0x2ae0 [ 1955.569939][T22843] ? cfg80211_event_work+0x40/0x40 [ 1955.575188][T22843] ? minstrel_ht_alloc+0x88a/0x990 [ 1955.580370][T22843] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1955.586496][T22843] ieee80211_register_hw+0x3464/0x4250 [ 1955.592084][T22843] ? ieee80211_tasklet_handler+0x20/0x20 [ 1955.597776][T22843] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1955.603729][T22843] ? __debug_object_init+0xec/0x450 [ 1955.609004][T22843] ? __asan_memset+0x22/0x40 [ 1955.613656][T22843] ? __hrtimer_init+0x186/0x270 [ 1955.618567][T22843] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1955.624380][T22843] ? mac80211_hwsim_free+0x220/0x220 [ 1955.629731][T22843] ? rcu_is_watching+0x15/0xb0 [ 1955.634558][T22843] ? kstrndup+0xbd/0x140 [ 1955.638870][T22843] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1955.644053][T22843] ? __nla_validate+0x50/0x50 [ 1955.648805][T22843] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1955.655236][T22843] ? __nla_parse+0x40/0x50 [ 1955.659717][T22843] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1955.666101][T22843] genl_family_rcv_msg_doit+0x211/0x310 [ 1955.671736][T22843] ? end_current_label_crit_section+0x170/0x170 [ 1955.678134][T22843] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1955.684090][T22843] ? bpf_lsm_capable+0x9/0x10 [ 1955.688823][T22843] ? security_capable+0x89/0xb0 [ 1955.693735][T22843] genl_rcv_msg+0x619/0x7a0 [ 1955.698301][T22843] ? genl_bind+0x360/0x360 [ 1955.702933][T22843] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1955.709530][T22843] netlink_rcv_skb+0x241/0x4d0 [ 1955.714375][T22843] ? genl_bind+0x360/0x360 [ 1955.718937][T22843] ? netlink_ack+0x1180/0x1180 [ 1955.723785][T22843] ? __lock_acquire+0x7d40/0x7d40 [ 1955.728879][T22843] ? down_read+0x1ac/0x2e0 [ 1955.733354][T22843] genl_rcv+0x28/0x40 [ 1955.737421][T22843] netlink_unicast+0x751/0x8d0 [ 1955.742266][T22843] netlink_sendmsg+0x8d0/0xbf0 [ 1955.747099][T22843] ? netlink_getsockopt+0x590/0x590 [ 1955.752354][T22843] ? aa_sock_msg_perm+0x94/0x150 [ 1955.757435][T22843] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1955.762806][T22843] ? security_socket_sendmsg+0x80/0xa0 [ 1955.768369][T22843] ? netlink_getsockopt+0x590/0x590 [ 1955.773645][T22843] ____sys_sendmsg+0x5ba/0x960 [ 1955.778477][T22843] ? __asan_memset+0x22/0x40 [ 1955.783126][T22843] ? __sys_sendmsg_sock+0x30/0x30 [ 1955.788199][T22843] ? __import_iovec+0x5f2/0x850 [ 1955.793141][T22843] ? import_iovec+0x73/0xa0 [ 1955.797696][T22843] ___sys_sendmsg+0x2a6/0x360 [ 1955.802432][T22843] ? __sys_sendmsg+0x2a0/0x2a0 [ 1955.807281][T22843] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1955.812741][T22843] __se_sys_sendmsg+0x1c2/0x2b0 [ 1955.817657][T22843] ? __x64_sys_sendmsg+0x80/0x80 [ 1955.822670][T22843] ? lockdep_hardirqs_on+0x98/0x150 [ 1955.827947][T22843] do_syscall_64+0x55/0xa0 [ 1955.832420][T22843] ? clear_bhb_loop+0x40/0x90 [ 1955.837151][T22843] ? clear_bhb_loop+0x40/0x90 [ 1955.841878][T22843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1955.847820][T22843] RIP: 0033:0x7fbb3779c799 [ 1955.852279][T22843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1955.872300][T22843] RSP: 002b:00007fbb359f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1955.880766][T22843] RAX: ffffffffffffffda RBX: 00007fbb37a16180 RCX: 00007fbb3779c799 [ 1955.888781][T22843] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003 [ 1955.896898][T22843] RBP: 00007fbb37832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1955.904920][T22843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1955.912957][T22843] R13: 00007fbb37a16218 R14: 00007fbb37a16180 R15: 00007fff5baae808 [ 1955.921050][T22843] [ 1956.745015][T22845] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1956.759911][T22845] Quota error (device loop5): write_blk: dquota write failed [ 1956.767489][T22845] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1956.777464][T22845] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4297: Failed to acquire dquot type 0 [ 1958.656564][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1961.723481][T22869] loop7: detected capacity change from 0 to 512 [ 1961.862993][T22869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1961.946606][T22869] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1962.545992][T22877] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1962.562430][T22877] Quota error (device loop7): write_blk: dquota write failed [ 1962.633345][T22877] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1962.643425][T22877] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4307: Failed to acquire dquot type 0 [ 1963.000128][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1963.577068][T22888] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.4309'. [ 1963.589295][T22888] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1963.598497][T22888] CPU: 1 PID: 22888 Comm: syz.7.4309 Not tainted syzkaller #0 [ 1963.606021][T22888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1963.616122][T22888] Call Trace: [ 1963.619444][T22888] [ 1963.622452][T22888] dump_stack_lvl+0x18c/0x250 [ 1963.627198][T22888] ? show_regs_print_info+0x20/0x20 [ 1963.632455][T22888] ? load_image+0x400/0x400 [ 1963.637033][T22888] sysfs_warn_dup+0x8e/0xa0 [ 1963.641589][T22888] sysfs_do_create_link_sd+0xc0/0x110 [ 1963.647008][T22888] device_add_class_symlinks+0x1cf/0x240 [ 1963.652713][T22888] device_add+0x507/0xc20 [ 1963.657098][T22888] wiphy_register+0x1dad/0x2ae0 [ 1963.662015][T22888] ? cfg80211_event_work+0x40/0x40 [ 1963.667210][T22888] ? minstrel_ht_alloc+0x88a/0x990 [ 1963.672390][T22888] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1963.678545][T22888] ieee80211_register_hw+0x3464/0x4250 [ 1963.684090][T22888] ? ieee80211_tasklet_handler+0x20/0x20 [ 1963.689781][T22888] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1963.695727][T22888] ? __debug_object_init+0xec/0x450 [ 1963.700995][T22888] ? __asan_memset+0x22/0x40 [ 1963.705641][T22888] ? __hrtimer_init+0x186/0x270 [ 1963.710555][T22888] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1963.716358][T22888] ? mac80211_hwsim_free+0x220/0x220 [ 1963.721701][T22888] ? rcu_is_watching+0x15/0xb0 [ 1963.726525][T22888] ? kstrndup+0xbd/0x140 [ 1963.730833][T22888] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1963.736006][T22888] ? __nla_validate+0x50/0x50 [ 1963.740843][T22888] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1963.747254][T22888] ? __nla_parse+0x40/0x50 [ 1963.751727][T22888] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1963.758110][T22888] genl_family_rcv_msg_doit+0x211/0x310 [ 1963.763729][T22888] ? end_current_label_crit_section+0x170/0x170 [ 1963.770024][T22888] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1963.775974][T22888] ? bpf_lsm_capable+0x9/0x10 [ 1963.780698][T22888] ? security_capable+0x89/0xb0 [ 1963.785610][T22888] genl_rcv_msg+0x619/0x7a0 [ 1963.790169][T22888] ? genl_bind+0x360/0x360 [ 1963.794715][T22888] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1963.801102][T22888] ? ref_tracker_free+0x690/0x840 [ 1963.806180][T22888] netlink_rcv_skb+0x241/0x4d0 [ 1963.810998][T22888] ? genl_bind+0x360/0x360 [ 1963.815459][T22888] ? netlink_ack+0x1180/0x1180 [ 1963.820296][T22888] ? __lock_acquire+0x7d40/0x7d40 [ 1963.825377][T22888] ? down_read+0x1ac/0x2e0 [ 1963.829838][T22888] genl_rcv+0x28/0x40 [ 1963.833866][T22888] netlink_unicast+0x751/0x8d0 [ 1963.838698][T22888] netlink_sendmsg+0x8d0/0xbf0 [ 1963.843532][T22888] ? netlink_getsockopt+0x590/0x590 [ 1963.848783][T22888] ? aa_sock_msg_perm+0x94/0x150 [ 1963.853775][T22888] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1963.859110][T22888] ? security_socket_sendmsg+0x80/0xa0 [ 1963.864620][T22888] ? netlink_getsockopt+0x590/0x590 [ 1963.869879][T22888] ____sys_sendmsg+0x5ba/0x960 [ 1963.874695][T22888] ? __asan_memset+0x22/0x40 [ 1963.879334][T22888] ? __sys_sendmsg_sock+0x30/0x30 [ 1963.884401][T22888] ? __import_iovec+0x5f2/0x850 [ 1963.889338][T22888] ? import_iovec+0x73/0xa0 [ 1963.893888][T22888] ___sys_sendmsg+0x2a6/0x360 [ 1963.898623][T22888] ? __sys_sendmsg+0x2a0/0x2a0 [ 1963.903523][T22888] __se_sys_sendmsg+0x1c2/0x2b0 [ 1963.908461][T22888] ? __x64_sys_sendmsg+0x80/0x80 [ 1963.913481][T22888] ? lockdep_hardirqs_on+0x98/0x150 [ 1963.918843][T22888] do_syscall_64+0x55/0xa0 [ 1963.923357][T22888] ? clear_bhb_loop+0x40/0x90 [ 1963.928081][T22888] ? clear_bhb_loop+0x40/0x90 [ 1963.932837][T22888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1963.938775][T22888] RIP: 0033:0x7f9c0539c799 [ 1963.943233][T22888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1963.962956][T22888] RSP: 002b:00007f9c061ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1963.971512][T22888] RAX: ffffffffffffffda RBX: 00007f9c05616270 RCX: 00007f9c0539c799 [ 1963.979536][T22888] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003 [ 1963.987545][T22888] RBP: 00007f9c05432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1963.995552][T22888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1964.003744][T22888] R13: 00007f9c05616308 R14: 00007f9c05616270 R15: 00007ffedf2df3a8 [ 1964.011781][T22888] [ 1967.053131][T22916] loop8: detected capacity change from 0 to 512 [ 1967.097883][T22915] loop7: detected capacity change from 0 to 512 [ 1967.151907][T22916] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1967.236644][T22916] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1967.298410][T22915] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1967.379074][T22915] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1967.715619][T22923] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1967.731519][T22923] Quota error (device loop8): write_blk: dquota write failed [ 1967.739643][T22923] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1967.750540][T22923] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4319: Failed to acquire dquot type 0 [ 1968.395667][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1968.710398][T22919] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1969.507615][T22927] Quota error (device loop7): write_blk: dquota write failed [ 1969.515198][T22927] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1969.525230][T22927] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4318: Failed to acquire dquot type 0 [ 1969.703354][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1970.392822][T22934] loop6: detected capacity change from 0 to 512 [ 1970.547666][T22934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1970.616753][T22934] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1971.868513][T22945] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1971.883515][T22945] Quota error (device loop6): write_blk: dquota write failed [ 1971.891705][T22945] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1971.902371][T22945] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4322: Failed to acquire dquot type 0 [ 1972.117261][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1975.141786][T22976] loop5: detected capacity change from 0 to 512 [ 1975.218263][T22976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1975.274667][T22976] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1975.600882][T22983] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1975.793873][T22988] Quota error (device loop5): write_blk: dquota write failed [ 1975.801966][T22988] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1975.812431][T22988] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4330: Failed to acquire dquot type 0 [ 1976.137156][T22990] loop8: detected capacity change from 0 to 512 [ 1976.347703][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1976.351954][T22990] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1976.374943][T22990] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1976.452715][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.459337][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.476687][T22995] loop6: detected capacity change from 0 to 512 [ 1976.547878][T22999] loop5: detected capacity change from 0 to 512 [ 1976.591569][T22995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1976.660358][T22999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1976.706787][T22995] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1976.743767][T22999] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1977.155170][T23004] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1977.170351][T23004] Quota error (device loop8): write_blk: dquota write failed [ 1977.178018][T23004] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1977.187940][T23004] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4334: Failed to acquire dquot type 0 [ 1977.522718][T23007] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1977.537610][T23007] Quota error (device loop5): write_blk: dquota write failed [ 1977.545140][T23007] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1977.555089][T23007] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4336: Failed to acquire dquot type 0 [ 1977.815413][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1977.845874][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1978.553862][T23011] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1978.569655][T23011] Quota error (device loop6): write_blk: dquota write failed [ 1978.577749][T23011] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1978.587828][T23011] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4335: Failed to acquire dquot type 0 [ 1978.926006][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1979.981567][T23030] loop6: detected capacity change from 0 to 512 [ 1980.042142][T23036] loop8: detected capacity change from 0 to 512 [ 1980.053933][T23030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1980.090868][T23030] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1980.122264][T23036] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1980.296992][T23036] ext4 filesystem being mounted at /579/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1980.900327][T23042] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1980.916569][T23042] Quota error (device loop6): write_blk: dquota write failed [ 1980.924818][T23042] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1980.935224][T23042] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4339: Failed to acquire dquot type 0 [ 1980.981050][T23045] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1980.995939][T23045] Quota error (device loop8): write_blk: dquota write failed [ 1981.004081][T23045] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1981.014220][T23045] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4341: Failed to acquire dquot type 0 [ 1981.424679][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1981.441317][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1981.588699][T23050] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4342'. [ 1981.639381][T23053] loop7: detected capacity change from 0 to 512 [ 1981.718641][T23053] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1981.739411][T23056] loop6: detected capacity change from 0 to 512 [ 1981.765878][T23059] loop8: detected capacity change from 0 to 512 [ 1981.776429][T23053] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1981.845354][T23059] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1981.860494][T23056] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1981.903542][T23059] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1981.977668][T23056] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1982.574390][T23066] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1982.589285][T23066] Quota error (device loop7): write_blk: dquota write failed [ 1982.596811][T23066] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1982.606743][T23066] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4345: Failed to acquire dquot type 0 [ 1982.785704][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1983.525409][T23067] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1983.540207][T23067] Quota error (device loop6): write_blk: dquota write failed [ 1983.547917][T23067] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1983.557954][T23067] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4343: Failed to acquire dquot type 0 [ 1983.565349][T22993] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1983.584760][T23068] Quota error (device loop8): write_blk: dquota write failed [ 1983.592434][T23068] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1983.602395][T23068] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4344: Failed to acquire dquot type 0 [ 1983.898571][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1983.953532][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1984.264348][T23079] loop6: detected capacity change from 0 to 512 [ 1985.042452][T23083] loop8: detected capacity change from 0 to 512 [ 1985.204839][T23079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1985.229474][T23083] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1985.242266][T23083] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1985.266711][T23079] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1986.094757][T22993] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1986.389514][T23099] Quota error (device loop8): write_blk: dquota write failed [ 1986.397287][T23099] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1986.409831][T23099] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4348: Failed to acquire dquot type 0 [ 1986.422168][T23094] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1986.438314][T23094] Quota error (device loop6): write_blk: dquota write failed [ 1986.445848][T23094] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1986.455800][T23094] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4347: Failed to acquire dquot type 0 [ 1986.642353][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1986.677495][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1987.775011][T23110] loop8: detected capacity change from 0 to 512 [ 1987.907439][T23110] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1988.031186][T23110] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1988.248989][T23119] loop5: detected capacity change from 0 to 512 [ 1988.342422][T23119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1988.379540][T23119] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1988.732085][T23125] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1988.746989][T23125] Quota error (device loop8): write_blk: dquota write failed [ 1988.754521][T23125] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1988.764739][T23125] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4352: Failed to acquire dquot type 0 [ 1989.208808][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1989.414813][T23130] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1989.429695][T23130] Quota error (device loop5): write_blk: dquota write failed [ 1989.437301][T23130] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1989.447242][T23130] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4355: Failed to acquire dquot type 0 [ 1990.249468][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1990.836755][ T9] usb 7-1: new full-speed USB device number 90 using dummy_hcd [ 1991.063019][ T9] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 1991.254866][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1991.374359][ T9] usb 7-1: config 0 has no interfaces? [ 1991.404185][ T9] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1991.440393][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1991.472889][ T9] usb 7-1: config 0 descriptor?? [ 1991.743643][T23147] loop5: detected capacity change from 0 to 512 [ 1991.810771][T23147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1991.836065][ T5772] usb 7-1: USB disconnect, device number 90 [ 1991.870219][T23147] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1992.833181][T23156] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1992.847990][T23156] Quota error (device loop5): write_blk: dquota write failed [ 1992.855543][T23156] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1992.865904][T23156] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4360: Failed to acquire dquot type 0 [ 1993.063228][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1993.661891][T23171] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1993.698220][T23171] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1993.712529][T23166] kvm: kvm [23165]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc95a [ 1993.751342][T23166] kvm: kvm [23165]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100 [ 1993.787364][T23166] kvm: kvm [23165]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x500 [ 1993.840561][T23166] kvm: kvm [23165]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10000e000 [ 1993.905485][T23166] kvm: kvm [23165]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x100002e00 [ 1993.936484][T23166] kvm: kvm [23165]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xb300 [ 1993.972138][T23166] kvm: kvm [23165]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1994.023617][T23166] kvm: kvm [23165]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1300 [ 1994.036472][ T28] audit: type=1800 audit(1772792748.342:271): pid=23174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4365" name="cpu.stat" dev="overlay" ino=3376 res=0 errno=0 [ 1994.055030][T23166] kvm: kvm [23165]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1994.083798][T23166] kvm: kvm [23165]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x300 [ 1994.525790][ T5771] Bluetooth: hci6: unexpected event for opcode 0x0404 [ 1995.079236][T23189] loop8: detected capacity change from 0 to 512 [ 1995.182034][T23189] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1995.254365][T23189] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1995.279039][T23194] loop5: detected capacity change from 0 to 512 [ 1995.334437][T23194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1995.362672][T23194] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1996.227162][T23202] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1996.242092][T23202] Quota error (device loop8): write_blk: dquota write failed [ 1996.249688][T23202] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 1996.260857][T23202] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.4373: Failed to acquire dquot type 0 [ 1996.273222][T23204] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1996.288079][T23204] Quota error (device loop5): write_blk: dquota write failed [ 1996.295622][T23204] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1996.305591][T23204] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.4372: Failed to acquire dquot type 0 [ 1996.680849][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1996.688482][T13234] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1998.813965][ T5771] Bluetooth: hci6: unexpected event for opcode 0x0404 [ 1999.138733][T23227] kvm_pr_unimpl_wrmsr: 9 callbacks suppressed [ 1999.138753][T23227] kvm: kvm [23226]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc95a [ 1999.183096][T23227] kvm: kvm [23226]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1016 [ 1999.213484][T23227] kvm: kvm [23226]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x10000c8ad [ 1999.235813][T23227] kvm: kvm [23226]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1999.284864][T23227] kvm: kvm [23226]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xe1c6 [ 1999.298987][T23227] kvm: kvm [23226]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xaa74 [ 1999.304371][ T28] audit: type=1800 audit(1772792753.622:272): pid=23237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4385" name="cpu.stat" dev="overlay" ino=3143 res=0 errno=0 [ 1999.328305][ C0] vkms_vblank_simulate: vblank timer overrun [ 1999.338537][T23227] kvm: kvm [23226]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1999.364468][T23227] kvm: kvm [23226]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x85b [ 1999.380460][T23227] kvm: kvm [23226]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1999.390683][T23239] loop7: detected capacity change from 0 to 512 [ 1999.404569][T23227] kvm_intel: kvm [23226]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x3187 [ 1999.424564][T23227] kvm: kvm [23226]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3187 [ 1999.476948][T23227] kvm_intel: kvm [23226]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x5149 [ 1999.511972][T23239] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1999.567875][T23239] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1999.662907][T23245] loop6: detected capacity change from 0 to 512 [ 1999.898062][T23245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1999.947434][T23245] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2001.070967][T23253] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 2001.086095][T23253] Quota error (device loop6): write_blk: dquota write failed [ 2001.093792][T23253] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 2001.104828][T23253] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4387: Failed to acquire dquot type 0 [ 2001.763444][T23255] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 2001.778215][T23255] Quota error (device loop7): write_blk: dquota write failed [ 2001.785682][T23255] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 2001.796046][T23255] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4386: Failed to acquire dquot type 0 [ 2001.942092][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2001.960192][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2004.637029][T18067] usb 7-1: new full-speed USB device number 91 using dummy_hcd [ 2004.848315][T18067] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 2004.877712][T18067] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.916489][T18067] usb 7-1: config 0 has no interfaces? [ 2004.922070][T18067] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2004.965499][T18067] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.994393][T18067] usb 7-1: config 0 descriptor?? [ 2005.306397][ T5772] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 2005.323876][ T8992] usb 7-1: USB disconnect, device number 91 [ 2005.547027][ T5772] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2005.560896][ T5772] usb 9-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2005.577139][ T5772] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2005.587369][ T5772] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 2005.601960][ T5772] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 2005.632264][ T5772] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2005.666391][ T5772] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2005.675242][ T5772] usb 9-1: Product: syz [ 2005.680797][ T5772] usb 9-1: Manufacturer: syz [ 2005.739422][ T5772] cdc_wdm 9-1:1.0: skipping garbage [ 2005.744954][ T5772] cdc_wdm 9-1:1.0: skipping garbage [ 2005.751428][ T5772] cdc_wdm: probe of 9-1:1.0 failed with error -22 [ 2006.129629][ T5772] usb 9-1: USB disconnect, device number 46 [ 2006.501247][T23319] kvm_pr_unimpl_wrmsr: 5 callbacks suppressed [ 2006.501263][T23319] kvm: kvm [23317]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc95a [ 2007.056791][T23319] kvm: kvm [23317]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1016 [ 2007.228954][T23329] loop5: detected capacity change from 0 to 16 [ 2007.251478][T23329] erofs: (device loop5): mounted with root inode @ nid 36. [ 2007.330721][T23331] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2007.428843][T23332] syz.5.4414: attempt to access beyond end of device [ 2007.428843][T23332] loop5: rw=524288, sector=527032, nr_sectors = 8 limit=16 [ 2007.466431][T23332] syz.5.4414: attempt to access beyond end of device [ 2007.466431][T23332] loop5: rw=524288, sector=296, nr_sectors = 8 limit=16 [ 2007.521470][T23332] syz.5.4414: attempt to access beyond end of device [ 2007.521470][T23332] loop5: rw=524288, sector=1049344, nr_sectors = 8 limit=16 [ 2007.573494][T23332] syz.5.4414: attempt to access beyond end of device [ 2007.573494][T23332] loop5: rw=524288, sector=688, nr_sectors = 8 limit=16 [ 2007.617545][T23332] syz.5.4414: attempt to access beyond end of device [ 2007.617545][T23332] loop5: rw=524288, sector=525096, nr_sectors = 8 limit=16 [ 2007.657612][T23332] syz.5.4414: attempt to access beyond end of device [ 2007.657612][T23332] loop5: rw=524288, sector=712, nr_sectors = 8 limit=16 [ 2007.799482][T23332] syz.5.4414: attempt to access beyond end of device [ 2007.799482][T23332] loop5: rw=524288, sector=525136, nr_sectors = 8 limit=16 [ 2007.853329][T23332] syz.5.4414: attempt to access beyond end of device [ 2007.853329][T23332] loop5: rw=524288, sector=712, nr_sectors = 8 limit=16 [ 2007.867395][T23332] syz.5.4414: attempt to access beyond end of device [ 2007.867395][T23332] loop5: rw=524288, sector=19320, nr_sectors = 8 limit=16 [ 2007.881507][T23332] syz.5.4414: attempt to access beyond end of device [ 2007.881507][T23332] loop5: rw=524288, sector=6227189760, nr_sectors = 8 limit=16 [ 2008.257646][T23341] loop6: detected capacity change from 0 to 512 [ 2008.413297][T23341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2008.488911][T23341] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2008.558053][ T9726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2008.570076][ T9726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2008.579478][ T9726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2008.597019][ T9726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2008.614579][ T9726] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2008.624253][ T9726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2009.435548][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2009.833048][T23345] chnl_net:caif_netlink_parms(): no params data found [ 2010.687042][ T5771] Bluetooth: hci0: command tx timeout [ 2011.056630][ T1098] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.137479][T23395] loop6: detected capacity change from 0 to 512 [ 2011.172755][T23345] bridge0: port 1(bridge_slave_0) entered blocking state [ 2011.213120][T23345] bridge0: port 1(bridge_slave_0) entered disabled state [ 2011.238183][T23395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2011.247884][T23345] bridge_slave_0: entered allmulticast mode [ 2011.277990][T23345] bridge_slave_0: entered promiscuous mode [ 2011.312103][T23395] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2012.228311][ T1098] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2012.408854][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2012.476799][T23345] bridge0: port 2(bridge_slave_1) entered blocking state [ 2012.484412][T23345] bridge0: port 2(bridge_slave_1) entered disabled state [ 2012.491871][T23345] bridge_slave_1: entered allmulticast mode [ 2012.501744][T23345] bridge_slave_1: entered promiscuous mode [ 2012.710800][T23406] loop6: detected capacity change from 0 to 128 [ 2012.776005][ T5771] Bluetooth: hci0: command tx timeout [ 2012.792914][T23406] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2012.813225][ T1098] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2012.855385][T23406] ext4 filesystem being mounted at /545/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2012.865071][T23345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2014.504012][T23427] loop5: detected capacity change from 0 to 512 [ 2014.541590][T23427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2014.575036][T23427] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2014.846647][ T5771] Bluetooth: hci0: command tx timeout [ 2014.914765][T13228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2015.269746][T23409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2015.335038][T23409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2015.907338][T23409] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.919792][T23409] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.929060][T23409] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.938514][T23409] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2016.266125][ T1098] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2016.317686][T23345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2016.384152][T13226] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2016.391649][T23345] team0: Port device team_slave_0 added [ 2016.409790][T23438] ip6gre1: entered promiscuous mode [ 2016.416584][T23438] ip6gre1: entered allmulticast mode [ 2016.425075][T23441] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4443'. [ 2016.486181][T23345] team0: Port device team_slave_1 added [ 2016.592450][T23345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2016.599685][T23345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2016.665431][T23345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2016.747010][T23345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2016.754044][T23345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2016.780199][ C0] vkms_vblank_simulate: vblank timer overrun [ 2016.826454][T23345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2016.930901][ T5771] Bluetooth: hci0: command tx timeout [ 2017.480551][T23345] hsr_slave_0: entered promiscuous mode [ 2017.491072][T23345] hsr_slave_1: entered promiscuous mode [ 2018.246696][ T8992] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 2018.476165][ T8992] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 2018.486719][ T8992] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2018.513329][ T8992] usb 6-1: config 0 has no interfaces? [ 2018.540544][ T8992] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2018.553158][ T8992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.583088][ T8992] usb 6-1: config 0 descriptor?? [ 2019.167324][T23475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4451'. [ 2019.256641][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4451'. [ 2019.646887][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2019.670713][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2019.684861][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2019.693019][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2019.717798][ T1098] bridge_slave_1: left allmulticast mode [ 2019.723624][ T1098] bridge_slave_1: left promiscuous mode [ 2019.730811][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 2019.745164][ T1098] bridge_slave_0: left allmulticast mode [ 2019.751289][ T1098] bridge_slave_0: left promiscuous mode [ 2019.761784][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 2019.818700][ T1098] veth1_macvtap: left promiscuous mode [ 2019.824502][ T1098] veth0_macvtap: left promiscuous mode [ 2019.830801][ T1098] veth1_vlan: left promiscuous mode [ 2019.837961][ T1098] veth0_vlan: left promiscuous mode [ 2020.064821][T23495] loop6: detected capacity change from 0 to 512 [ 2020.161183][ T1098] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 2020.175845][T23495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2020.194813][T23495] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2020.493432][ T1098] bond2 (unregistering): Released all slaves [ 2020.632418][T23505] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 2020.648420][T23505] Quota error (device loop6): write_blk: dquota write failed [ 2020.656641][T23505] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 2020.667024][T23505] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4452: Failed to acquire dquot type 0 [ 2020.879537][ T1098] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 2020.994038][ T5838] usb 6-1: USB disconnect, device number 71 [ 2021.093361][ T1098] bond1 (unregistering): Released all slaves [ 2021.227901][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2021.918221][T23516] kvm: kvm [23514]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc95a [ 2021.955286][T23516] kvm: kvm [23514]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1016 [ 2021.977009][T23516] kvm: kvm [23514]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x8000 [ 2021.988839][T23516] kvm: kvm [23514]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2022.003420][T23516] kvm: kvm [23514]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2000 [ 2022.046572][T23516] kvm: kvm [23514]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2022.078193][T23516] kvm: kvm [23514]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2f00 [ 2022.098905][T23516] kvm: kvm [23514]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4f00 [ 2022.121690][T23516] kvm: kvm [23514]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xf00 [ 2022.135092][T23516] kvm: kvm [23514]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9500 [ 2023.385255][T23536] overlayfs: workdir and upperdir must reside under the same mount [ 2023.735902][T23542] loop6: detected capacity change from 0 to 512 [ 2023.778405][T23542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2023.806626][T23542] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2023.827122][ C1] vkms_vblank_simulate: vblank timer overrun [ 2023.977691][T23545] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 2024.267058][T23547] Quota error (device loop6): write_blk: dquota write failed [ 2024.275103][T23547] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 2024.285503][T23547] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4464: Failed to acquire dquot type 0 [ 2024.878071][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2025.057731][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 2025.175588][ C1] vkms_vblank_simulate: vblank timer overrun [ 2025.205712][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 2025.348059][T21895] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 2025.367296][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2026.351145][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2026.441024][T21895] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2026.451288][T21895] usb 7-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 2026.468014][T21895] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2026.479391][T21895] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2026.648564][T21895] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2026.693532][T21895] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2026.702263][T21895] usb 7-1: Product: syz [ 2026.738968][T21895] usb 7-1: Manufacturer: syz [ 2026.808457][T21895] cdc_wdm 7-1:1.0: skipping garbage [ 2026.813768][T21895] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 2027.056795][T21895] usb 7-1: USB disconnect, device number 92 [ 2027.394652][ T1098] bond0 (unregistering): Released all slaves [ 2027.922091][T23345] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2027.954244][T23345] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2027.970274][T23345] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2028.032739][T23345] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2028.357805][ T1098] IPVS: stop unused estimator thread 0... [ 2028.493727][T23345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2029.306325][T23345] 8021q: adding VLAN 0 to HW filter on device team0 [ 2029.384357][T22292] bridge0: port 1(bridge_slave_0) entered blocking state [ 2029.391590][T22292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2029.436141][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2029.443399][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2029.519467][T23576] loop7: detected capacity change from 0 to 512 [ 2029.640345][T23576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2029.683937][T23576] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2029.990749][T23593] overlayfs: workdir and upperdir must reside under the same mount [ 2030.105185][T23595] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 2030.121145][T23595] Quota error (device loop7): write_blk: dquota write failed [ 2030.129246][T23595] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 2030.139404][T23595] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.4473: Failed to acquire dquot type 0 [ 2030.844627][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2031.041014][T23345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2032.051416][T23618] syzkaller0: entered promiscuous mode [ 2032.057373][T23618] syzkaller0: entered allmulticast mode [ 2032.368924][T23345] veth0_vlan: entered promiscuous mode [ 2032.383999][T23345] veth1_vlan: entered promiscuous mode [ 2032.475885][T23345] veth0_macvtap: entered promiscuous mode [ 2032.498064][T23345] veth1_macvtap: entered promiscuous mode [ 2033.582420][T23345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2033.667994][T23345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2033.711247][T23345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2033.722208][T23345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2033.745988][T23345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2033.772425][T23345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2033.784341][T23345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2033.799792][T23345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2033.812072][T23345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2033.880198][T23345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2033.911148][T23629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4485'. [ 2033.938868][T23345] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2033.966297][T23345] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2034.143660][T23345] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2034.166635][T23345] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2034.285728][T23640] loop7: detected capacity change from 0 to 512 [ 2034.990511][T23640] EXT4-fs (loop7): 1 truncate cleaned up [ 2034.997593][T23640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2035.272189][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2035.291220][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2035.301620][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2035.373667][ T6475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2035.404287][ T6475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2036.938928][T23657] ip6gre2: entered promiscuous mode [ 2036.944377][T23657] ip6gre2: entered allmulticast mode [ 2037.028151][ T6475] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2037.070087][T21895] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2037.078613][ T6475] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2037.408514][T23672] tc_dump_action: action bad kind [ 2037.586499][T23680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4499'. [ 2037.807577][T23420] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2038.626647][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.633058][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.646094][T23418] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2040.531926][T23716] tc_dump_action: action bad kind [ 2040.766383][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2040.993806][T23725] overlayfs: failed to resolve './file1': -2 [ 2041.722439][T23750] loop7: detected capacity change from 0 to 512 [ 2042.429857][T23750] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2042.515342][T23750] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2043.567080][T23772] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4526'. [ 2043.824333][T23772] hsr_slave_1 (unregistering): left promiscuous mode [ 2043.872922][T23778] syzkaller0: entered promiscuous mode [ 2043.881210][T23778] syzkaller0: entered allmulticast mode [ 2044.253062][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2044.424717][T23785] loop6: detected capacity change from 0 to 512 [ 2044.492083][T23785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2044.504952][T23785] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2045.497576][T23796] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 2045.512751][T23796] Quota error (device loop6): write_blk: dquota write failed [ 2045.520350][T23796] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 2045.530320][T23796] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.4532: Failed to acquire dquot type 0 [ 2045.688433][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2046.558124][T23788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2046.574662][T23788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2047.024493][T23788] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.050227][T23788] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.067793][T23788] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.089724][T23788] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.163439][T23788] ip6gre1: left promiscuous mode [ 2047.169529][T23788] ip6gre1: left allmulticast mode [ 2047.179331][T23788] ip6gre2: left promiscuous mode [ 2047.184556][T23788] ip6gre2: left allmulticast mode [ 2047.205809][T23814] syzkaller0: entered promiscuous mode [ 2047.221066][T23814] syzkaller0: entered allmulticast mode [ 2047.903515][T23850] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4549'. [ 2047.936886][T23418] usb 7-1: new full-speed USB device number 93 using dummy_hcd [ 2048.193884][T23418] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 2048.202623][T23418] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2048.213926][T23418] usb 7-1: config 0 has no interfaces? [ 2048.220461][T23418] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2048.229878][T23418] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.241021][T23418] usb 7-1: config 0 descriptor?? [ 2048.866083][T23879] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2049.761264][T23901] syzkaller0: entered promiscuous mode [ 2049.767206][T23901] syzkaller0: entered allmulticast mode [ 2050.365924][ T9726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2050.371383][T23908] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4570'. [ 2050.388161][ T9726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2050.404771][ T9726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2050.423020][ T9726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2050.432727][ T9726] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2050.440391][ T9726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2050.619388][ T23] usb 7-1: USB disconnect, device number 93 [ 2051.088375][T23927] loop7: detected capacity change from 0 to 512 [ 2051.192779][T23927] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2051.227198][T23927] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2051.456023][T23936] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2051.579235][T23909] chnl_net:caif_netlink_parms(): no params data found [ 2051.881784][T23909] bridge0: port 1(bridge_slave_0) entered blocking state [ 2051.939704][T23909] bridge0: port 1(bridge_slave_0) entered disabled state [ 2051.958814][T23909] bridge_slave_0: entered allmulticast mode [ 2051.974409][T23909] bridge_slave_0: entered promiscuous mode [ 2052.083538][T23909] bridge0: port 2(bridge_slave_1) entered blocking state [ 2052.099283][T23909] bridge0: port 2(bridge_slave_1) entered disabled state [ 2052.114735][T23909] bridge_slave_1: entered allmulticast mode [ 2052.126141][T23909] bridge_slave_1: entered promiscuous mode [ 2052.153374][T23947] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4580'. [ 2052.295310][T23909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2052.331527][T23909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2052.527379][ T5771] Bluetooth: hci2: command tx timeout [ 2052.600347][T23909] team0: Port device team_slave_0 added [ 2052.659266][T23909] team0: Port device team_slave_1 added [ 2052.744895][T23909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2052.806864][T23909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2052.872487][T13230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2052.882166][T23909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2052.935888][T23909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2052.982205][T23909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2053.022953][T23909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2053.168587][T23962] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2053.406794][T23967] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4588'. [ 2053.538563][T23909] hsr_slave_0: entered promiscuous mode [ 2053.548279][T23909] hsr_slave_1: entered promiscuous mode [ 2053.562945][T23909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2053.571435][T23909] Cannot create hsr debugfs directory [ 2054.076908][T23981] loop6: detected capacity change from 0 to 512 [ 2054.191237][T23981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2054.251878][T23981] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2054.606569][ T5771] Bluetooth: hci2: command tx timeout [ 2055.664870][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2056.687402][ T5771] Bluetooth: hci2: command tx timeout [ 2057.403594][T24039] loop8: detected capacity change from 0 to 512 [ 2057.510221][T24039] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2057.533402][T24039] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2057.591716][T22292] hsr_slave_0: left promiscuous mode [ 2057.653853][T22292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2057.714206][T22292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2057.749857][T22292] bridge_slave_1: left allmulticast mode [ 2057.790754][T22292] bridge_slave_1: left promiscuous mode [ 2057.820042][T22292] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.963041][T22292] bridge_slave_0: left allmulticast mode [ 2058.074857][T22292] bridge_slave_0: left promiscuous mode [ 2058.132182][T22292] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.451906][T22292] bond3 (unregistering): Released all slaves [ 2058.607272][T22292] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 2058.744889][T22292] bond2 (unregistering): Released all slaves [ 2058.769642][ T5771] Bluetooth: hci2: command tx timeout [ 2058.869943][T22292] bond1 (unregistering): Released all slaves [ 2059.713587][T23345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2061.137838][T22292] team0 (unregistering): Port device team_slave_1 removed [ 2061.224721][T22292] team0 (unregistering): Port device team_slave_0 removed [ 2061.310572][T22292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2061.392704][T22292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2062.069704][T22292] bond0 (unregistering): Released all slaves [ 2062.176595][T23909] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2062.192552][T23909] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2062.208440][T24075] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4612'. [ 2062.265518][T23909] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2062.362877][T23909] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2062.835778][T23909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2062.835945][T22292] IPVS: stop unused estimator thread 0... [ 2062.893942][T23909] 8021q: adding VLAN 0 to HW filter on device team0 [ 2062.922573][T11992] bridge0: port 1(bridge_slave_0) entered blocking state [ 2062.929841][T11992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2062.986961][T11992] bridge0: port 2(bridge_slave_1) entered blocking state [ 2062.994214][T11992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2063.050690][T24108] overlayfs: missing 'lowerdir' [ 2065.131306][T24118] bridge0: port 2(bridge_slave_1) entered disabled state [ 2065.139277][T24118] bridge0: port 1(bridge_slave_0) entered disabled state [ 2065.892587][T24118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2065.967786][T24118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2066.558173][T24118] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.576001][T24118] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.586318][T24118] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.595404][T24118] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.776639][T24142] syzkaller0: entered promiscuous mode [ 2066.782206][T24142] syzkaller0: entered allmulticast mode [ 2067.072696][T23909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2067.187166][T23418] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 2067.394454][T23418] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2067.537747][T23418] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2067.703345][T23418] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2067.802023][T23418] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2067.812345][T23418] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.851684][T23418] usb 7-1: config 0 descriptor?? [ 2068.373046][T24172] nvme_fabrics: missing parameter 'transport=%s' [ 2068.392035][T24172] nvme_fabrics: missing parameter 'nqn=%s' [ 2068.494073][T23418] plantronics 0003:047F:FFFF.0045: No inputs registered, leaving [ 2068.565645][T23418] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2068.721040][T23909] veth0_vlan: entered promiscuous mode [ 2068.752469][T23909] veth1_vlan: entered promiscuous mode [ 2068.862073][T23909] veth0_macvtap: entered promiscuous mode [ 2068.892453][T23909] veth1_macvtap: entered promiscuous mode [ 2068.950269][T23909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2068.976281][T23909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2068.998371][T23909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2069.032000][T23909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2069.056593][T23909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2069.082543][T23909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2069.115874][T23909] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2069.134259][T23909] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2069.145854][T23909] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2069.163388][T23909] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2069.187949][T24181] ip6gre1: entered promiscuous mode [ 2069.193295][T24181] ip6gre1: entered allmulticast mode [ 2069.400447][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2069.420437][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2069.494106][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2069.518421][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2070.789465][T21895] usb 7-1: USB disconnect, device number 94 [ 2071.818443][T24221] syzkaller0: entered promiscuous mode [ 2071.824005][T24221] syzkaller0: entered allmulticast mode [ 2072.530418][ T9726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2072.544761][ T9726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2072.561607][ T9726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2072.580538][ T9726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2072.594974][ T9726] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2072.619345][ T9726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2074.042214][ T6802] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.514574][ T6802] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.539131][T24254] overlayfs: failed to resolve './bus': -2 [ 2074.728985][ T6802] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.822216][T24226] chnl_net:caif_netlink_parms(): no params data found [ 2074.846730][ T5771] Bluetooth: hci3: command tx timeout [ 2075.051613][ T6802] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2075.151755][T24261] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4661'. [ 2075.321917][T24226] bridge0: port 1(bridge_slave_0) entered blocking state [ 2075.329704][T24226] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.337128][T24226] bridge_slave_0: entered allmulticast mode [ 2075.344771][T24226] bridge_slave_0: entered promiscuous mode [ 2075.356527][T24226] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.364063][T24226] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.375618][T24226] bridge_slave_1: entered allmulticast mode [ 2075.384122][T24226] bridge_slave_1: entered promiscuous mode [ 2075.426410][T24226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2075.440662][T24226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2075.520960][T24226] team0: Port device team_slave_0 added [ 2075.571694][T24226] team0: Port device team_slave_1 added [ 2075.865799][T24226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2075.880571][T24226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2075.908812][T24277] overlayfs: missing 'lowerdir' [ 2075.918697][T24226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2076.841922][T24287] overlayfs: failed to resolve './bus': -2 [ 2076.899247][T24226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2076.910584][T24226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2076.932209][ T5771] Bluetooth: hci3: command tx timeout [ 2076.945726][T24226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2077.121128][T24226] hsr_slave_0: entered promiscuous mode [ 2077.204329][T24226] hsr_slave_1: entered promiscuous mode [ 2077.237359][T24226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2077.247523][T24226] Cannot create hsr debugfs directory [ 2077.645203][T24300] ip6gre1: entered promiscuous mode [ 2077.652497][T24300] ip6gre1: entered allmulticast mode [ 2077.940435][ C1] vkms_vblank_simulate: vblank timer overrun [ 2078.359400][T24317] overlayfs: missing 'workdir' [ 2079.006476][ T5771] Bluetooth: hci3: command tx timeout [ 2080.612075][T24351] overlayfs: missing 'workdir' [ 2081.086443][ T5771] Bluetooth: hci3: command tx timeout [ 2081.469864][ T6802] hsr_slave_0: left promiscuous mode [ 2081.498206][ T6802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2081.505715][ T6802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2081.551639][ T6802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2081.574525][ T6802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2081.662914][ T6802] veth1_macvtap: left promiscuous mode [ 2081.668713][ T6802] veth0_macvtap: left promiscuous mode [ 2081.685031][ T6802] veth1_vlan: left promiscuous mode [ 2081.695111][ T6802] veth0_vlan: left promiscuous mode [ 2082.071662][ T6802] bond3 (unregistering): Released all slaves [ 2083.133766][ T6802] bond2 (unregistering): Released all slaves [ 2083.200828][ T6802] bond1 (unregistering): Released all slaves [ 2086.024975][ T6802] team0 (unregistering): Port device team_slave_1 removed [ 2086.162856][ T6802] team0 (unregistering): Port device team_slave_0 removed [ 2086.300198][ T6802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2086.401113][ T6802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2087.167773][ T6802] bond0 (unregistering): Released all slaves [ 2087.248971][T24359] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2087.454139][T24409] fuse: Bad value for 'fd' [ 2087.729424][T24226] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2087.790892][T24226] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2087.877048][T24226] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2087.921322][T24226] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2088.476949][ T6802] IPVS: stop unused estimator thread 0... [ 2088.553051][T24226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2088.665322][T24226] 8021q: adding VLAN 0 to HW filter on device team0 [ 2088.862744][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 2088.870005][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2088.898953][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 2088.906270][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2089.963867][T24226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2090.908000][T24484] overlayfs: missing 'lowerdir' [ 2091.951002][T24226] veth0_vlan: entered promiscuous mode [ 2091.987185][T24226] veth1_vlan: entered promiscuous mode [ 2092.055815][T24226] veth0_macvtap: entered promiscuous mode [ 2092.084668][T24226] veth1_macvtap: entered promiscuous mode [ 2092.134672][T24226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2092.150690][T24226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.171066][T24226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2092.201749][T24226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2092.221167][T24226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.238841][T24226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2092.253958][T24226] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.263850][T24226] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.273672][T24226] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.283911][T24226] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.429088][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2092.439791][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2092.475732][ T6802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2092.486215][ T6802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2092.496459][T23420] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2092.716504][T23420] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 2092.741367][T23420] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2092.770327][T23420] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2092.800196][T23420] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2092.819108][T23420] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2092.859664][T23420] usb 6-1: Product: syz [ 2092.879674][T23420] usb 6-1: Manufacturer: syz [ 2092.902870][T23420] usb 6-1: SerialNumber: syz [ 2092.941569][T23420] usb 6-1: config 0 descriptor?? [ 2092.995466][T23420] hub 6-1:0.0: bad descriptor, ignoring hub [ 2093.031042][T23420] hub: probe of 6-1:0.0 failed with error -5 [ 2093.087600][T23420] usb 6-1: selecting invalid altsetting 0 [ 2093.676535][T24503] usb 6-1: reset high-speed USB device number 72 using dummy_hcd [ 2093.893468][ T9726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2093.906065][ T9726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2093.926083][ T9726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2093.943184][ T9726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2093.944195][ T9726] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2093.945915][ T9726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2094.096867][T24529] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4731'. [ 2094.158513][T24503] usb 6-1: failed to restore interface 0 altsetting 251 (error=-71) [ 2094.172690][T23420] usb 6-1: USB disconnect, device number 72 [ 2094.222031][T24526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4731'. [ 2094.449078][T24526] hsr_slave_1 (unregistering): left promiscuous mode [ 2095.052258][T24525] chnl_net:caif_netlink_parms(): no params data found [ 2095.343612][ C0] vkms_vblank_simulate: vblank timer overrun [ 2096.056337][ T9726] Bluetooth: hci1: command tx timeout [ 2096.265801][T24525] bridge0: port 1(bridge_slave_0) entered blocking state [ 2096.277210][T24525] bridge0: port 1(bridge_slave_0) entered disabled state [ 2096.356637][T24525] bridge_slave_0: entered allmulticast mode [ 2096.423313][T24525] bridge_slave_0: entered promiscuous mode [ 2096.915131][T24525] bridge0: port 2(bridge_slave_1) entered blocking state [ 2096.952073][T24525] bridge0: port 2(bridge_slave_1) entered disabled state [ 2096.981990][T24525] bridge_slave_1: entered allmulticast mode [ 2097.443965][T24525] bridge_slave_1: entered promiscuous mode [ 2097.590739][T24525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2097.647853][T24525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2098.126401][ T9726] Bluetooth: hci1: command tx timeout [ 2098.205544][T24525] team0: Port device team_slave_0 added [ 2098.217274][T24525] team0: Port device team_slave_1 added [ 2099.404878][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.414792][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.567281][T24525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2099.582921][T24525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2099.615197][T24525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2099.643907][T24525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2099.656588][T24525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2099.693263][T24525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2100.728642][ T9726] Bluetooth: hci1: command tx timeout [ 2100.843707][T24525] hsr_slave_0: entered promiscuous mode [ 2100.882279][T24525] hsr_slave_1: entered promiscuous mode [ 2100.922163][T24625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4756'. [ 2101.193874][T24525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2101.226304][T24525] Cannot create hsr debugfs directory [ 2102.194065][T11992] hsr_slave_0: left promiscuous mode [ 2102.230752][T11992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2102.267526][T11992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2102.309648][T11992] bridge_slave_1: left allmulticast mode [ 2102.331092][T11992] bridge_slave_1: left promiscuous mode [ 2102.360356][T11992] bridge0: port 2(bridge_slave_1) entered disabled state [ 2102.411932][T11992] bridge_slave_0: left allmulticast mode [ 2102.433210][T11992] bridge_slave_0: left promiscuous mode [ 2102.454884][T11992] bridge0: port 1(bridge_slave_0) entered disabled state [ 2102.593921][T11992] bond5 (unregistering): Released all slaves [ 2102.643511][T11992] bond4 (unregistering): Released all slaves [ 2102.687500][T11992] bond3 (unregistering): Released all slaves [ 2102.761624][T11992] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 2102.770539][ T9726] Bluetooth: hci1: command tx timeout [ 2102.865822][T11992] bond2 (unregistering): Released all slaves [ 2102.917597][T11992] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 2103.280241][T11992] bond1 (unregistering): Released all slaves [ 2104.674413][T11992] team0 (unregistering): Port device team_slave_1 removed [ 2104.750751][T11992] team0 (unregistering): Port device team_slave_0 removed [ 2104.839096][T11992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2104.921858][T11992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2105.534780][T11992] bond0 (unregistering): Released all slaves [ 2106.282637][T24682] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4765'. [ 2106.462434][T24687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4767'. [ 2107.211964][T11992] IPVS: stop unused estimator thread 0... [ 2107.630254][T24525] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2107.661880][T24525] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2107.702912][T24525] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2107.735785][T24525] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2108.042040][T24525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2108.102206][T24525] 8021q: adding VLAN 0 to HW filter on device team0 [ 2108.138956][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 2108.146285][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2108.197860][T11992] bridge0: port 2(bridge_slave_1) entered blocking state [ 2108.205121][T11992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2109.001328][T24525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2109.047379][T24745] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4777'. [ 2109.719307][T24525] veth0_vlan: entered promiscuous mode [ 2109.782349][T24525] veth1_vlan: entered promiscuous mode [ 2109.932624][T24525] veth0_macvtap: entered promiscuous mode [ 2109.967791][T24525] veth1_macvtap: entered promiscuous mode [ 2110.079049][T24525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2110.127230][T24525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.169951][T24525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2110.210597][T24525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.248236][T24525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2110.295167][T24525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2110.347440][T24525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.383686][T24525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2110.414309][T24525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.488150][T24525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2110.512275][T24525] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.736977][T24525] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2111.439552][T24525] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2111.606386][T24525] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2111.985506][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2112.035202][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2112.206872][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2112.214785][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2112.246830][T24778] overlayfs: missing 'lowerdir' [ 2115.151491][T24811] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2117.964522][T24877] fuse: Bad value for 'fd' [ 2120.558561][T24937] ip6gre2: entered promiscuous mode [ 2120.610206][T24937] ip6gre2: entered allmulticast mode [ 2128.011216][T25018] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4832'. [ 2132.130377][ T5771] Bluetooth: hci0: command 0x0406 tx timeout [ 2133.319644][T25073] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4851'. [ 2136.736442][T25126] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4866'. [ 2143.421184][T25239] syzkaller0: entered promiscuous mode [ 2143.438272][T25239] syzkaller0: entered allmulticast mode [ 2146.154073][T25278] syzkaller0: entered promiscuous mode [ 2146.160126][T25278] syzkaller0: entered allmulticast mode [ 2154.383856][T25399] loop6: detected capacity change from 0 to 512 [ 2154.470868][T25399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2154.512331][T25399] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2155.464528][T24226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2157.397731][T25450] loop7: detected capacity change from 0 to 512 [ 2157.482160][T25450] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2157.495249][T25450] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2157.513638][T25455] netlink: 'syz.8.4962': attribute type 13 has an invalid length. [ 2157.554875][T25455] netlink: 24859 bytes leftover after parsing attributes in process `syz.8.4962'. [ 2158.485424][T24525] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2158.714531][T11992] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2159.578539][T11992] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2159.736941][T11992] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2159.923028][T11992] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.838620][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.847499][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.615595][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2161.630594][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2161.645810][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2161.667482][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2161.680234][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2161.693956][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2163.590372][T25494] chnl_net:caif_netlink_parms(): no params data found [ 2163.797387][T25539] netlink: 'syz.8.4988': attribute type 13 has an invalid length. [ 2163.805955][T25539] netlink: 24859 bytes leftover after parsing attributes in process `syz.8.4988'. [ 2163.808564][ T5771] Bluetooth: hci3: command tx timeout [ 2164.141648][ T9726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2164.156013][ T9726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2164.170148][ T9726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2164.183894][ T9726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2164.194015][ T9726] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2164.216650][ T9726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2164.413415][T25494] bridge0: port 1(bridge_slave_0) entered blocking state [ 2164.420922][T25494] bridge0: port 1(bridge_slave_0) entered disabled state [ 2164.428899][T25494] bridge_slave_0: entered allmulticast mode [ 2164.436088][T25494] bridge_slave_0: entered promiscuous mode [ 2164.448894][T25494] bridge0: port 2(bridge_slave_1) entered blocking state [ 2164.488095][T25494] bridge0: port 2(bridge_slave_1) entered disabled state [ 2164.496765][T25494] bridge_slave_1: entered allmulticast mode [ 2164.558950][T25494] bridge_slave_1: entered promiscuous mode [ 2165.195458][T25494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2165.449044][T25494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2165.638932][T11992] hsr_slave_0: left promiscuous mode [ 2165.645494][T11992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2165.668835][T11992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2165.688019][T11992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2165.705405][T11992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2165.713841][T11992] bridge_slave_1: left allmulticast mode [ 2165.736116][T11992] bridge_slave_1: left promiscuous mode [ 2165.745280][T11992] bridge0: port 2(bridge_slave_1) entered disabled state [ 2165.793028][T11992] bridge_slave_0: left allmulticast mode [ 2165.812390][T11992] bridge_slave_0: left promiscuous mode [ 2165.856430][T11992] bridge0: port 1(bridge_slave_0) entered disabled state [ 2165.895166][ T9726] Bluetooth: hci3: command tx timeout [ 2165.998902][T11992] veth1_macvtap: left promiscuous mode [ 2166.111465][T11992] veth0_macvtap: left promiscuous mode [ 2166.302012][T11992] veth1_vlan: left promiscuous mode [ 2166.338791][ T9726] Bluetooth: hci1: command tx timeout [ 2166.669556][T11992] veth0_vlan: left promiscuous mode [ 2168.086727][ T9726] Bluetooth: hci3: command tx timeout [ 2168.386433][ T9726] Bluetooth: hci1: command tx timeout [ 2170.127113][ T9726] Bluetooth: hci3: command tx timeout [ 2170.152463][T11992] team0 (unregistering): Port device team_slave_1 removed [ 2170.377409][T11992] team0 (unregistering): Port device team_slave_0 removed [ 2170.446333][ T9726] Bluetooth: hci1: command tx timeout [ 2170.505203][T11992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2170.594166][T11992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2172.112084][T11992] bond0 (unregistering): Released all slaves [ 2172.289486][T25494] team0: Port device team_slave_0 added [ 2172.339143][T25494] team0: Port device team_slave_1 added [ 2172.512596][T25494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2172.526273][ T5771] Bluetooth: hci1: command tx timeout [ 2172.566543][T25494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2172.815684][T25494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2172.880800][T25494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2172.914495][T25494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2172.972824][T25494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2173.182817][ T9726] Bluetooth: hci2: command 0x0406 tx timeout [ 2173.382318][T25494] hsr_slave_0: entered promiscuous mode [ 2174.148812][T25494] hsr_slave_1: entered promiscuous mode [ 2174.155383][T25494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2174.163135][T25494] Cannot create hsr debugfs directory [ 2175.647717][T25545] chnl_net:caif_netlink_parms(): no params data found [ 2175.676792][T25494] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2175.715982][T25494] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2175.735379][T25494] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2175.793363][T25494] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2176.039833][T25545] bridge0: port 1(bridge_slave_0) entered blocking state [ 2176.056816][T25545] bridge0: port 1(bridge_slave_0) entered disabled state [ 2176.073661][T25545] bridge_slave_0: entered allmulticast mode [ 2176.081923][T25545] bridge_slave_0: entered promiscuous mode [ 2176.090653][T25545] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.098326][T25545] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.105878][T25545] bridge_slave_1: entered allmulticast mode [ 2176.113470][T25545] bridge_slave_1: entered promiscuous mode [ 2176.193566][T25545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2176.215038][T25545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2176.485772][T25545] team0: Port device team_slave_0 added [ 2176.523972][T25545] team0: Port device team_slave_1 added [ 2177.339000][T25545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2177.346110][T25545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2177.385614][T25545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2177.411779][T25545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2177.447187][T25545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2177.521889][T25545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2177.742661][T25545] hsr_slave_0: entered promiscuous mode [ 2177.778830][T25545] hsr_slave_1: entered promiscuous mode [ 2177.804981][T25545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2177.829617][T25545] Cannot create hsr debugfs directory [ 2177.906035][T25494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2178.010797][T25494] 8021q: adding VLAN 0 to HW filter on device team0 [ 2178.068838][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2178.076089][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2179.262599][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2179.269865][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2179.484723][T25494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2181.412195][T25494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2181.909866][T25545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2181.935629][T25545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2181.963088][T25545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2182.051348][T25545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2182.281389][T25494] veth0_vlan: entered promiscuous mode [ 2182.326750][T25494] veth1_vlan: entered promiscuous mode [ 2182.406789][T25545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2182.417565][T25494] veth0_macvtap: entered promiscuous mode [ 2182.440417][T25494] veth1_macvtap: entered promiscuous mode [ 2182.463405][T25545] 8021q: adding VLAN 0 to HW filter on device team0 [ 2182.492750][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2182.499973][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2182.539268][T11992] bridge0: port 2(bridge_slave_1) entered blocking state [ 2182.547083][T11992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2182.578874][T25494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2182.592978][T25494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2182.604210][T25494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2182.626023][T25494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2182.642194][T25494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2182.702885][T25494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2182.746274][T25494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2182.769602][T25494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2182.799248][T25494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2182.821991][T25494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2182.859749][T25494] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2182.870546][T25494] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2182.884150][T25494] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2182.893608][T25494] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2182.941118][T25545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2183.787639][T25780] fuse: Bad value for 'fd' [ 2183.801224][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2183.876825][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2184.030495][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2184.041689][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2184.273928][T25545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2184.641505][T25545] veth0_vlan: entered promiscuous mode [ 2184.721177][T25545] veth1_vlan: entered promiscuous mode [ 2184.811758][T25545] veth0_macvtap: entered promiscuous mode [ 2184.868046][T25545] veth1_macvtap: entered promiscuous mode [ 2184.932236][T25545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2184.964537][T25545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2184.995053][T25545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2185.019381][T25545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.035440][T25545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2185.066350][T25545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.088486][T25545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2185.117782][T25545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2185.140586][T25545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.153103][T25545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2185.182920][T25545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.252949][T25545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2185.283492][T25545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.323240][T25545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2185.493201][T25545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.550717][T25545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.566465][T25545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.575255][T25545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2185.618921][T25808] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.5035'. [ 2185.963852][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2186.035440][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2186.700174][ T6802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2186.757562][ T6802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2187.377439][T23418] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 2187.589013][T23418] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2187.609100][T23418] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2187.659613][T23418] usb 10-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 2187.680519][T23418] usb 10-1: New USB device strings: Mfr=1, Product=122, SerialNumber=160 [ 2187.716188][T23418] usb 10-1: Product: syz [ 2187.733027][T23418] usb 10-1: Manufacturer: syz [ 2187.746687][T23418] usb 10-1: SerialNumber: syz [ 2187.777351][T23418] usb 10-1: config 0 descriptor?? [ 2187.815755][T23418] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 2187.853615][T23418] dvb-usb: will use the device's hardware PID filter (table count: 8). [ 2188.146736][T23418] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 2189.961016][T23418] usb 10-1: media controller created [ 2189.992512][T23418] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2190.395845][T23418] DVB: Unable to find symbol tda10046_attach() [ 2190.445457][T23418] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 2190.495648][T23418] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 2190.546913][T23418] dvb_usb_m920x: probe of 10-1:0.0 failed with error -71 [ 2190.577965][T23418] usb 10-1: USB disconnect, device number 2 [ 2191.028906][T23418] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2191.226388][T23418] usb 10-1: Using ep0 maxpacket: 32 [ 2191.246799][T23418] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 2191.265432][T23418] usb 10-1: config 0 has no interface number 0 [ 2191.294053][T23418] usb 10-1: config 0 interface 184 has no altsetting 0 [ 2191.304731][T23418] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2191.326626][T23418] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2191.335891][T23418] usb 10-1: Product: syz [ 2191.362491][T23418] usb 10-1: Manufacturer: syz [ 2191.394484][T23418] usb 10-1: SerialNumber: syz [ 2191.434327][T23418] usb 10-1: config 0 descriptor?? [ 2191.456979][T23418] smsc75xx v1.0.0 [ 2192.130776][T23418] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2192.159680][T23418] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2193.386363][T23418] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2193.409601][T23418] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2193.420016][T23418] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2193.431010][T23418] smsc75xx: probe of 10-1:0.184 failed with error -71 [ 2193.446621][T23418] usb 10-1: USB disconnect, device number 3 [ 2217.793679][T11992] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.890238][T11992] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.973337][T11992] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2218.054627][T11992] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2219.465868][T11992] hsr_slave_0: left promiscuous mode [ 2219.472388][T11992] hsr_slave_1: left promiscuous mode [ 2219.483141][T11992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2219.500183][T11992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2219.508768][T11992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2219.517061][T11992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2219.525572][T11992] bridge_slave_1: left allmulticast mode [ 2219.531773][T11992] bridge_slave_1: left promiscuous mode [ 2219.538283][T11992] bridge0: port 2(bridge_slave_1) entered disabled state [ 2219.548927][T11992] bridge_slave_0: left allmulticast mode [ 2219.554668][T11992] bridge_slave_0: left promiscuous mode [ 2219.561244][T11992] bridge0: port 1(bridge_slave_0) entered disabled state [ 2219.619094][T11992] veth1_macvtap: left promiscuous mode [ 2219.624656][T11992] veth0_macvtap: left promiscuous mode [ 2219.631153][T11992] veth1_vlan: left promiscuous mode [ 2219.636600][T11992] veth0_vlan: left promiscuous mode [ 2220.765046][T11992] team0 (unregistering): Port device team_slave_1 removed [ 2220.843976][T11992] team0 (unregistering): Port device team_slave_0 removed [ 2220.921083][T11992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2221.003979][T11992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2221.675966][T11992] bond0 (unregistering): Released all slaves [ 2222.213796][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.226734][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.652422][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.659008][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2285.726492][ T9726] Bluetooth: hci3: command 0x0406 tx timeout [ 2290.846406][ T5771] Bluetooth: hci1: command 0x0406 tx timeout [ 2345.094081][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.107829][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.533277][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.541027][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.972577][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.979422][ T1282] ieee802154 phy1 wpan1: encryption failed: -22