last executing test programs: 5m52.001896355s ago: executing program 3 (id=1494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x0, 0x2, 0x3, "360b54110404c5e74050596c80402c9ec2e8e78a1d07639eed6eca72e763ccd9", 0x32314d54}) 5m51.121553344s ago: executing program 3 (id=1497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x20303159}}) 5m49.99653745s ago: executing program 3 (id=1501): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/84, 0x54}], 0x1}}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40000000, 0x0) write(r2, &(0x7f0000000700)="7e82cf4c05c0a8aa54aaa39fae4cf28214227fe64431bce9925e66d81dd987eada57a297aacbd46171e854fed3c51cad03464671e86a1a7b35dbb27571d2744493ced33d8b4c3eb2b7dbae9e4620a49e4eb9a9e2b6677af8c1e1cdc47be4c83316671850fbf6f19a09b56dc2b7bff94d0255faf952af4635105d14cc3df6a91d303dcb6525233df2a66a6541d4d4c632bb25fb62b9bc06de07ec86ede63f402d9e2db378b89cc96692bf63000000000000000000000048c38491109e5d1c10b8c0d91117d4a39cf1e48605a3fe218e42ed4f99f8131c29034d6a21d04c33afa463fd51211995db29b8a00254a8ad91543cb514ac5bb645a8c115baf10b0bd0773e4f7f187755d65e9481a208f51d10fcd98fc5d5a74c260d5665f5eff391bf71f3e5cc5c3bc1b24a6bf04054488ff043c029522726510f2872d8116cbae9dba530c587faf166a5d9a00eaef668a9308538f508b733e38b55276642b993fecac811aea74a36192e9581de0ac7c86e943d73e3e256419ff103bb7b10aab120ec3600a395b2b662f498ad7680df1c29f94bded3f82e2a08775f8eaa00c26ac1b53cc79fc01b4384237273b7f63371952d9d8b71fd03b05aadc31c6ebe1ac419dbdd4392c502b218ba6c47721954ca", 0x1cd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x86, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @multicast2, @empty}, {0x4e20, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b0eb591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "00802000003211817ada1e97297a54f5"}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x0, 0x72, 0x0, &(0x7f0000000500)=""/114, 0x4, 0x0, 0x0, 0x50, &(0x7f0000000440), &(0x7f0000000900)="b8d7bcc846386ac4b94b264c415be10d2bb301903dc7a982f4fca061c8959e72cd49a0084c309017d3b162e7f4e30f9934a63a03bed8c8b2b187ff34c259bdb7f66cd988188ac70f412910e48b3ae1b1", 0x3, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x35aa2dae0099c8e0) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 5m48.646140394s ago: executing program 3 (id=1509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m47.548004839s ago: executing program 3 (id=1513): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0xa, 0x300) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 5m47.379447155s ago: executing program 3 (id=1515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0xfd, 0x2b6, &(0x7f0000000c00)="$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") 5m31.813047099s ago: executing program 32 (id=1515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000ec0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd277b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72cc35426dc6d8a263752c4e54004b0b9a20c83ec85696068e2a47c6877caf5da8b37c3c45b90ec089507974e3a53b14831acdf17b549e30b21e75bc182234c9b753774c80edd9ff4075ebb4f8a9060b2c271181f92c8d1c9e125d0b59839ae338a7e2c0fa5dbb8438cd84e895775f0b46773d07c298911380fb1932c46bdb8027541a918fc587e7b7bf89566be53a4f552cf0a8dd18f8508ccb518c52a890d886c5363228468d8befec8539e6e7e9458776ec0f6bb977890789d163afd5ec15145ed622a41cfbea756254c41df4e96d8346f05d5a927c8728963a16cdcd9ba98cf1a36047011d3e1313ba4df1f54c033ef8be99fdf6d4bea81c605bb3da0a9bcc8457b6e33e55baa27e5ed149cd5c2ee448294cfa7be27d8764bbeba98a5df9b02e76cbc915afa0e246789257a5fed60203aab71ef5aabd83e4d8fa3b427072ebb00b1ba5c360b1d51c7bb7543f2395a94b7e5f8ed3c4b96fd62e5ceefd7452dfdcb585a632da32a27a0b6862a186bb4a2d19cbd331e39dfa9adfa5b4a1e2564d72698e837592798500efb145fcc2b2f0cb78d6e5c7d648d56c337a2facf87c513468fd930d00c68e514eeed69d470d363815e977f59ce5ac20882da0386b96be3bb3be69cae8258b5215a59d7012458e9d2e7f35e1dcd2e030b2cb217be530843acbb80fe62559eceba29dc8886c6267f3c3426b2b1ed3ff1058b40cf32"], 0xfd, 0x2b6, &(0x7f0000000c00)="$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") 1m47.662369633s ago: executing program 0 (id=2165): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 1m46.732239094s ago: executing program 0 (id=2168): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x842, 0x22) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r1, 0x66a8, 0x4000, 0xf, 0x0, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff6, 0x4012011, r0, 0x0) 1m46.084031835s ago: executing program 0 (id=2170): ioprio_get$uid(0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r4, 0x0, 0x10) 1m45.022888649s ago: executing program 0 (id=2172): r0 = syz_open_dev$dvb_demux(&(0x7f0000000280), 0x0, 0x20000) r1 = dup(r0) r2 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m44.765126687s ago: executing program 0 (id=2174): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000180)={[{@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@numtail}, {}, {@shortname_lower}, {@utf8no}, {@uni_xlateno}, {@shortname_lower}, {@uni_xlateno}, {@shortname_lower}, {@fat=@check_strict}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbb6}}]}, 0x1, 0x363, &(0x7f0000000280)="$eJzs3U1oY1UbAOA3vWnSGfi+dicKQnQnaJnOTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0naaQerFJ8Hmpy+57znnPtDcntJTp9bjPal6bh8/fq1mJmpRHXxkcW4UYm5yKKwG+NqE2IAwOlwI6X4PeWOmFI54SkBACes9/7/QkQ0Yi6PvP7lYe2Td38AOPX6f/+fOazNzEEVr5zIlACAEzZ2///efdW13k+1+LVa+lQAAHBaPfH0M48urUQ83mjMRKy9udncbMZDw/qly/FSdGI1zsVs3IzILxS6D5Xe44WLK8vnGo3GTvw0F82ImOonNvMrhaWsl1+PhZiNuX5+/2ojpZRd+GRleaHRExG7O73xY62y2ZyOs/3xvz8bq8MLj6KT3lPExZXl841+B821In8nYm9436I7//mYjW+fH3STUvEJxpXlKwvFpIf5m816XBrshQPvgAAAAAAAAAAAAAAAAAAAAAAAwG2ZbwzMDdbPSd3nfKWc+fkJ9b31cfL8/vpAe/n6QKmeIqXfXnug+VYW+9YHGl2fZ9NCggAAAAAAAAAAAAAAAAAAADCwsVWLVqezur6xtd0uF3bWN7amIqIbefnrj744E+NtblGo5kPUIwZDNPrDbrdbKSsapyxiPD3rDl5EPvh0MONym/pgKyZOo35wVafzv3t+fHcYuTsrev5z2CaLyRuYlabx8EjPa//Pp3ScHTUonC9H6uOjX00plSJvlNOvPDveYVQiqsc/cNvtqTi4TeoWvrr24p3F3m99nnL33T/75NV33v+l3ep0R47eEaytb9xM7ValaHy83dLd1UWkEnmhUj4Tqoel7+2PtLLvfn3qrre/OdroqRx5tXs+j7TJ8s35eDS9lhe60xypOjNMn+5vRGd1esLJf6vCbRzTO9777MOUfvj5yEMMTY29bFT+nlcfAAAAAAAAAAAAAAAAAACgrPRd8b7+l32nD8t68LGTnxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HOG//+/VNjbjZHIUQp/7EzIqq+ub0TU/u3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+6vAAAA///tLFqQ") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000200)={0x0, 0x0, "1e9f399ca3d2013bb9a03bdf3003bc8d7bede67945eb0b87cb9e9d6d74856181"}) 1m39.206448077s ago: executing program 0 (id=2188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0xfd, 0x2b6, &(0x7f0000000c00)="$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") r2 = userfaultfd(0x80801) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @loopback, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa0500"/259], 0x610) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50) 1m24.083376455s ago: executing program 33 (id=2188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0xfd, 0x2b6, &(0x7f0000000c00)="$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") r2 = userfaultfd(0x80801) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @loopback, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa0500"/259], 0x610) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50) 19.465326352s ago: executing program 6 (id=2368): clock_adjtime(0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x520, &(0x7f0000000880)="$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") ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1, 0x0, 0x0, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x5, r3, r2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, 0x0) 15.997216424s ago: executing program 2 (id=2376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(0x0, 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x20303159}}) 14.724846165s ago: executing program 2 (id=2377): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x4}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) rseq(0x0, 0xfde1, 0x0, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000a00)) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x979b, @ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x8}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 13.61896117s ago: executing program 6 (id=2379): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0xd, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 12.295616203s ago: executing program 1 (id=2384): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000000c0)={0xf0002017}) read$char_usb(r5, &(0x7f0000000340)=""/170, 0xaa) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="03062fbd7000fcdbdf250300000005000300000000000c00018008000100", @ANYRES32=r8, @ANYBLOB="0500050080000000050002"], 0x38}}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) 10.955743446s ago: executing program 1 (id=2387): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000340)) 10.759482653s ago: executing program 2 (id=2389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x729f}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x6) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, 0x0, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc10200000011125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 10.680014545s ago: executing program 1 (id=2390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x979b, @ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x3}, 0x20) 9.245229791s ago: executing program 5 (id=2392): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) 9.141959725s ago: executing program 6 (id=2393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10003, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e1, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x9, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8000ffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff8, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0xffff8000, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x40}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 8.924109012s ago: executing program 5 (id=2394): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000003600), 0x40040, 0x0) read$FUSE(r4, &(0x7f0000003b80)={0x2020}, 0x2020) writev(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0xfffffffa) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040), 0x0) 8.892551163s ago: executing program 1 (id=2395): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000000180)=0x2c) socket$inet6(0xa, 0x3, 0xff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x10, 0x200, &(0x7f0000000180)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949e496f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7963e43b7f9c03bebfb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 7.721532911s ago: executing program 5 (id=2397): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000000c0)={0xf0002017}) read$char_usb(r5, &(0x7f0000000340)=""/170, 0xaa) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="03062fbd7000fcdbdf250300000005000300000000000c00018008000100", @ANYRES32=r8, @ANYBLOB="0500050080000000050002"], 0x38}}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) 7.342877763s ago: executing program 4 (id=2398): unshare(0x2c020400) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0xe0142, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x88}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) 7.245228926s ago: executing program 4 (id=2399): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x4}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) rseq(0x0, 0xfde1, 0x0, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000a00)) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x979b, @ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x8}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 5.89630844s ago: executing program 4 (id=2400): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e457152031", 0xae, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb8", 0x21, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f", 0x6}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d62230167", 0x9e}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.817697065s ago: executing program 4 (id=2401): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x2}, 0x89}], 0x1, 0x1822b, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) sendto$inet6(r4, &(0x7f0000001440)="0d0ad7c36d66", 0x6, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24000050, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) 4.279132552s ago: executing program 5 (id=2402): socket$netlink(0x10, 0x3, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611285000000000061134c0000000000bf200000000000001500020000feff7f3d030100000000009500000000000000bc26000000000000bf67200000000000070300000fff07006702000003000000160600000ee600f0bf0500000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet(0x2, 0x3, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = syz_io_uring_setup(0x2b06, 0x0, &(0x7f0000ffd000), &(0x7f0000ffe000), 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) io_uring_register$IORING_REGISTER_FILES(r4, 0x14, &(0x7f00000003c0), 0x2) setuid(0xee01) syz_open_dev$usbfs(&(0x7f0000000480), 0x71, 0x141301) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') recvmsg$can_j1939(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@xdp, 0x80, &(0x7f00000002c0)}, 0x142) syz_open_dev$tty20(0xc, 0x4, 0x1) 4.264961372s ago: executing program 1 (id=2403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0xd, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 4.123906287s ago: executing program 2 (id=2404): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x71bd0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x3c, 0x2, 0x0, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x10}, @mcast1, [0x0, 0x0, 0xff], [0x0, 0x0, 0xffffff00], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xd4b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000cc0)={0x0, 0xfb, 0x15, 0x2, 0x8, "de47b8ff9d6748d0cfe067ceecce19a1"}, 0x15, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 3.908192064s ago: executing program 6 (id=2405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x979b, @ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x3}, 0x20) 3.138376109s ago: executing program 5 (id=2406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000003600), 0x40040, 0x0) read$FUSE(r4, &(0x7f0000003b80)={0x2020}, 0x2020) writev(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0xfffffffa) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040), 0x0) 2.113180482s ago: executing program 4 (id=2407): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000003600), 0x40040, 0x0) read$FUSE(r4, &(0x7f0000003b80)={0x2020}, 0x2020) writev(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0xfffffffa) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040), 0x0) 1.923286858s ago: executing program 5 (id=2408): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 1.324579607s ago: executing program 2 (id=2409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r3, &(0x7f0000000540)}, 0x20) 1.132870363s ago: executing program 1 (id=2410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x4}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) rseq(0x0, 0xfde1, 0x0, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000a00)) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x979b, @ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x8}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 943.797979ms ago: executing program 6 (id=2411): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab5c4dd7a77de7f5ae2edb307892dbfa8377446d8cabb9302b27250c66ddaeb3988933df044b6ae4570671cf861484b9124827dbe78a0388eecac9e6ad371287ca014fa658c6f1308b046b2fc0cc3d5b8ba48f3b1319d5976bb45f3c630f01c77b93f07fe2b304a98383258a37791da00145e24f619c5dd07939c39212ca7d8421dcf50ab703f86dacf4a4159a123d25a7a9ad2319a876af43da4cf86b0f6a7f261562e1b10681a71d941a5e90031452e37f4a616b85fe6b48803cbca2369565be720ef5fd1e6326234c34f6e13ba39f9460acc68e15eef508e402b29e452883c90b50b04d66ad07cb689d31426147a965dd4691519d844bfc83d830b8c5a679c41fbdcc2d16b3dcecc1f5be156f96fa2a315c68bfd1ebba95e9de0e3cdf7ad8e93b92cda3c4643ca88fcd710c1a24d0d62b54d937f2fbe7aa09ba34c71a17eefa0dba2d4752ae91850d734be15b1f2f5e36856786f5cf0afec24a46634f8d5aec6008c1ace1e404af77c8f4d37283847349ac22f6703d44fb66cec0ceb9390cf2f878d8390ecd8fbeb82a6ccd966bca4c4689a2e2a850a30dfa7c0c19ecec0c799e2880d2088ece8401306bfa4b34da709caa802c8f9d6deb5b599d262faa7de40de113c89a8e8e3a4f19ac1847387be89e27286e20dd49339021e79ddb0cf3bf72fcc25f3b7d35ca05c4473521320b1a6bee637e4f4da9692506931df8f990ed54e23000030d26f30c8ee3ace6c9d5795b7443aa0651ecb2b64549d4bd4bea0ed0f69e69291057bf7c3b92ad0a8ec4e5acf31c4ed8c372f1bd9b0bf6c51a7a29915fc2e5a24c36599612fd4527870ea6c7057f87c105c73386f738f98165cb8bac0d2ce46eeb7e39d9f3c2d93e4910d231ce946d65120f2bd4842ed181261c0ea7", 0x350}], 0x1}}], 0x2, 0x2090) 141.173436ms ago: executing program 4 (id=2412): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000000c0)={0xf0002017}) read$char_usb(r5, &(0x7f0000000340)=""/170, 0xaa) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="03062fbd7000fcdbdf250300000005000300000000000c00018008000100", @ANYRES32=r8, @ANYBLOB="0500050080000000050002"], 0x38}}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) 140.185816ms ago: executing program 2 (id=2413): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_getoverrun(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x10, 0x3c}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3982, 0x0) sendfile(r3, r6, 0x0, 0x40000000000b946) 0s ago: executing program 6 (id=2414): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x62040200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000000180)=0x2c) kernel console output (not intermixed with test programs): type 2 family 0 port 6081 - 0 [ 577.368852][ T14] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 577.375192][ T9522] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.391467][ T9522] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.406537][ T9522] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.427713][ T14] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 577.435097][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 577.541978][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 577.609660][ T14] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 577.639420][ T14] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 577.687760][ T14] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 577.752945][ T5154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.810562][ T5154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.845501][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 577.883019][ T14] usb 5-1: USB disconnect, device number 24 [ 577.915488][ T9666] loop0: detected capacity change from 0 to 1024 [ 577.929016][ T9666] EXT4-fs: Ignoring removed orlov option [ 578.528360][ T9666] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 578.650386][ T9675] loop1: detected capacity change from 0 to 128 [ 579.515154][ T9666] netlink: 'syz.0.1605': attribute type 14 has an invalid length. [ 579.515175][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'. [ 579.518622][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.518680][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.519062][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 579.725047][ T4290] EXT4-fs (loop0): unmounting filesystem. [ 581.214031][ T9687] loop2: detected capacity change from 0 to 256 [ 581.297564][ T9687] FAT-fs (loop2): Directory bread(block 64) failed [ 581.304209][ T9687] FAT-fs (loop2): Directory bread(block 65) failed [ 581.310983][ T9687] FAT-fs (loop2): Directory bread(block 66) failed [ 581.317595][ T9687] FAT-fs (loop2): Directory bread(block 67) failed [ 581.324246][ T9687] FAT-fs (loop2): Directory bread(block 68) failed [ 581.330947][ T9687] FAT-fs (loop2): Directory bread(block 69) failed [ 581.337661][ T9687] FAT-fs (loop2): Directory bread(block 70) failed [ 581.344232][ T9687] FAT-fs (loop2): Directory bread(block 71) failed [ 581.350883][ T9687] FAT-fs (loop2): Directory bread(block 72) failed [ 581.357431][ T9687] FAT-fs (loop2): Directory bread(block 73) failed [ 581.907969][ T9708] loop2: detected capacity change from 0 to 512 [ 582.032507][ T9708] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1615: casefold flag without casefold feature [ 582.076386][ T9697] device syzkaller0 entered promiscuous mode [ 582.148498][ T9708] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1615: couldn't read orphan inode 15 (err -117) [ 582.475463][ T9708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 583.813792][ T9725] loop5: detected capacity change from 0 to 1024 [ 583.860923][ T9725] EXT4-fs: Ignoring removed orlov option [ 583.975742][ T9725] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 584.174458][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 584.271667][ T9730] loop2: detected capacity change from 0 to 256 [ 584.296389][ T9730] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 584.391213][ T9730] FAT-fs (loop2): Directory bread(block 64) failed [ 584.406093][ T9730] FAT-fs (loop2): Directory bread(block 65) failed [ 584.420817][ T9730] FAT-fs (loop2): Directory bread(block 66) failed [ 584.433139][ T9730] FAT-fs (loop2): Directory bread(block 67) failed [ 584.440532][ T9730] FAT-fs (loop2): Directory bread(block 68) failed [ 584.447253][ T9730] FAT-fs (loop2): Directory bread(block 69) failed [ 584.455145][ T9730] FAT-fs (loop2): Directory bread(block 70) failed [ 584.462194][ T9730] FAT-fs (loop2): Directory bread(block 71) failed [ 584.469275][ T9730] FAT-fs (loop2): Directory bread(block 72) failed [ 584.475935][ T9730] FAT-fs (loop2): Directory bread(block 73) failed [ 587.209870][ T52] block nbd0: Possible stuck request ffff888024a70000: control (read@0,1024B). Runtime 300 seconds [ 587.227048][ T52] block nbd0: Possible stuck request ffff888024a70200: control (read@1024,1024B). Runtime 300 seconds [ 587.239338][ T52] block nbd0: Possible stuck request ffff888024a70400: control (read@2048,1024B). Runtime 300 seconds [ 587.245560][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.250709][ T52] block nbd0: Possible stuck request ffff888024a70600: control (read@3072,1024B). Runtime 300 seconds [ 587.737191][ T9744] loop2: detected capacity change from 0 to 128 [ 590.618426][ T9725] netlink: 'syz.5.1619': attribute type 14 has an invalid length. [ 590.626371][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1619'. [ 590.825095][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 593.989848][ T9776] loop1: detected capacity change from 0 to 512 [ 594.109707][ T9776] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 594.221541][ T9776] EXT4-fs (loop1): 1 truncate cleaned up [ 594.227365][ T9776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 595.893320][ T4322] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 596.243752][ T9799] loop4: detected capacity change from 0 to 128 [ 596.525430][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 596.962507][ T9803] loop5: detected capacity change from 0 to 1024 [ 597.132035][ T9803] EXT4-fs: Ignoring removed orlov option [ 597.348780][ T9803] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 597.405187][ T9803] netlink: 'syz.5.1637': attribute type 14 has an invalid length. [ 597.471976][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1637'. [ 597.619226][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 601.917867][ T4325] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 602.317574][ T4325] usb 5-1: Using ep0 maxpacket: 16 [ 602.324815][ T4325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.345586][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 602.357650][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 602.391361][ T4325] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 602.673536][ T9863] loop1: detected capacity change from 0 to 512 [ 602.688345][ T4325] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 602.817929][ T4325] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 602.906888][ T9863] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 603.077149][ T9863] EXT4-fs (loop1): 1 truncate cleaned up [ 603.083931][ T9863] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 603.234388][ T4325] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 603.565194][ T4325] usb 5-1: Manufacturer: syz [ 603.581501][ T4325] usb 5-1: config 0 descriptor?? [ 604.999530][ T52] block nbd3: Possible stuck request ffff888024b70000: control (read@0,1024B). Runtime 240 seconds [ 605.010713][ T52] block nbd3: Possible stuck request ffff888024b70200: control (read@1024,1024B). Runtime 240 seconds [ 605.023309][ T52] block nbd3: Possible stuck request ffff888024b70400: control (read@2048,1024B). Runtime 240 seconds [ 605.036589][ T52] block nbd3: Possible stuck request ffff888024b70600: control (read@3072,1024B). Runtime 240 seconds [ 605.191628][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 605.197680][ T4325] rc_core: IR keymap rc-hauppauge not found [ 605.203999][ T4325] Registered IR keymap rc-empty [ 605.234851][ T4325] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 605.438474][ T4325] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 605.517581][ T4325] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 605.615850][ T4325] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 605.711936][ T4325] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 605.762032][ T9887] device syzkaller0 entered promiscuous mode [ 605.768491][ T4325] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 605.807961][ T4325] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 605.880302][ T4325] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 607.531434][ T4325] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 607.900325][ T9894] bridge0: port 3(wlan1) entered blocking state [ 607.907026][ T9894] bridge0: port 3(wlan1) entered disabled state [ 607.916205][ T9894] device wlan1 entered promiscuous mode [ 607.924375][ T9894] bridge0: port 3(wlan1) entered blocking state [ 607.931497][ T9894] bridge0: port 3(wlan1) entered forwarding state [ 608.501983][ T4325] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.577853][ T4325] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.619244][ T4325] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.648713][ T5155] bridge0: port 3(wlan1) entered disabled state [ 608.658683][ T4325] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.683266][ T9911] loop5: detected capacity change from 0 to 1024 [ 608.716973][ T9911] EXT4-fs: Ignoring removed orlov option [ 608.727674][ T4325] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.769192][ T9911] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 608.770326][ T4325] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 608.832293][ T4325] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 608.883221][ T9916] loop0: detected capacity change from 0 to 512 [ 608.890609][ T9910] netlink: 'syz.5.1663': attribute type 14 has an invalid length. [ 609.027625][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1663'. [ 609.087195][ T4325] usb 5-1: USB disconnect, device number 25 [ 609.192422][ T9924] loop4: detected capacity change from 0 to 2048 [ 609.225147][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 609.266509][ T9916] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 609.294634][ T9916] EXT4-fs (loop0): mount failed [ 609.323513][ T9924] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 610.192660][ T9933] loop8: detected capacity change from 0 to 7 [ 610.231450][ T9933] Dev loop8: unable to read RDB block 7 [ 610.237680][ T9933] loop8: unable to read partition table [ 610.274280][ T9933] loop8: partition table beyond EOD, truncated [ 610.297714][ T9933] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 610.504594][ T9942] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 610.521578][ T9942] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 610.534010][ T9942] EXT4-fs (loop4): This should not happen!! Data will be lost [ 610.534010][ T9942] [ 610.553834][ T9943] input: syz0 as /devices/virtual/input/input32 [ 610.562216][ T9942] EXT4-fs (loop4): Total free blocks count 0 [ 610.568409][ T9942] EXT4-fs (loop4): Free/Dirty block details [ 610.574407][ T9942] EXT4-fs (loop4): free_blocks=2415919504 [ 610.580311][ T9942] EXT4-fs (loop4): dirty_blocks=48 [ 610.585540][ T9942] EXT4-fs (loop4): Block reservation details [ 610.591698][ T9942] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 611.065351][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 611.466558][ T9953] device syzkaller0 entered promiscuous mode [ 611.652353][ T9960] device syzkaller0 entered promiscuous mode [ 611.751626][ T9961] overlayfs: failed to resolve './bus': -2 [ 612.676461][ T9973] loop2: detected capacity change from 0 to 128 [ 612.736062][ T9973] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 612.745223][ T9973] ext4 filesystem being mounted at /347/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 613.848707][ T9988] loop4: detected capacity change from 0 to 512 [ 615.252177][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 615.310223][ T9988] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1682: corrupted in-inode xattr [ 615.327942][ T9997] xt_hashlimit: size too large, truncated to 1048576 [ 615.362734][ T9988] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1682: couldn't read orphan inode 15 (err -117) [ 615.382340][ T9988] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 615.706858][T10004] device syzkaller0 entered promiscuous mode [ 615.878690][T10006] device syzkaller0 entered promiscuous mode [ 615.910983][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 616.275585][T10012] loop0: detected capacity change from 0 to 1024 [ 616.326880][T10012] EXT4-fs: Ignoring removed orlov option [ 616.425396][T10012] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 616.464579][T10012] netlink: 'syz.0.1691': attribute type 14 has an invalid length. [ 616.472802][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 616.788857][ T4290] EXT4-fs (loop0): unmounting filesystem. [ 616.973354][ T4399] Bluetooth: hci3: Frame reassembly failed (-84) [ 617.798024][ T52] block nbd0: Possible stuck request ffff888024a70000: control (read@0,1024B). Runtime 330 seconds [ 617.809259][ T52] block nbd0: Possible stuck request ffff888024a70200: control (read@1024,1024B). Runtime 330 seconds [ 617.820505][ T52] block nbd0: Possible stuck request ffff888024a70400: control (read@2048,1024B). Runtime 330 seconds [ 617.832896][ T52] block nbd0: Possible stuck request ffff888024a70600: control (read@3072,1024B). Runtime 330 seconds [ 618.789789][T10040] loop2: detected capacity change from 0 to 128 [ 618.804292][T10042] xt_hashlimit: size too large, truncated to 1048576 [ 618.828474][T10040] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 618.848164][T10040] ext4 filesystem being mounted at /351/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 618.937590][ T4293] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 619.275864][T10053] device syzkaller0 entered promiscuous mode [ 619.860499][T10056] device syzkaller0 entered promiscuous mode [ 620.211359][T10064] overlayfs: failed to resolve './bus': -2 [ 621.781510][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 623.145207][T10086] xt_hashlimit: size too large, truncated to 1048576 [ 624.154548][T10099] device syzkaller0 entered promiscuous mode [ 624.883714][T10107] loop0: detected capacity change from 0 to 512 [ 624.951227][T10109] loop2: detected capacity change from 0 to 128 [ 625.030515][T10107] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 625.108645][T10109] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 625.123259][T10107] EXT4-fs (loop0): mount failed [ 625.160146][T10109] ext4 filesystem being mounted at /356/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 625.555627][T10117] loop1: detected capacity change from 0 to 256 [ 625.590716][T10117] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 626.259624][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 626.338374][T10117] FAT-fs (loop1): Directory bread(block 64) failed [ 626.345013][T10117] FAT-fs (loop1): Directory bread(block 65) failed [ 626.381220][T10117] FAT-fs (loop1): Directory bread(block 66) failed [ 626.417861][T10117] FAT-fs (loop1): Directory bread(block 67) failed [ 626.465332][T10117] FAT-fs (loop1): Directory bread(block 68) failed [ 626.503426][T10117] FAT-fs (loop1): Directory bread(block 69) failed [ 626.553832][T10117] FAT-fs (loop1): Directory bread(block 70) failed [ 626.605539][T10117] FAT-fs (loop1): Directory bread(block 71) failed [ 626.647745][T10117] FAT-fs (loop1): Directory bread(block 72) failed [ 626.654374][T10117] FAT-fs (loop1): Directory bread(block 73) failed [ 627.030674][T10129] loop0: detected capacity change from 0 to 128 [ 627.530140][ T9582] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 627.779692][ T4515] hid-generic 0005:0005:5508.0005: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 628.177575][T10138] loop1: detected capacity change from 0 to 1024 [ 628.220858][T10138] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 628.229636][T10138] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.473128][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 628.652535][T10148] overlayfs: failed to resolve './bus': -2 [ 628.870486][T10151] loop1: detected capacity change from 0 to 2048 [ 628.908444][T10151] ext4: Unknown parameter 'appraise' [ 629.321828][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.328293][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.570836][T10173] device syzkaller0 entered promiscuous mode [ 631.616129][T10173] tipc: Started in network mode [ 631.627689][T10173] tipc: Node identity 1a0aaea2c38c, cluster identity 4711 [ 631.636843][T10173] tipc: Enabled bearer , priority 0 [ 631.781284][T10171] tipc: Resetting bearer [ 631.892242][T10171] tipc: Disabling bearer [ 632.438777][T10180] loop2: detected capacity change from 0 to 512 [ 632.632850][ T5689] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 632.642278][T10180] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 632.671851][T10180] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 632.837580][ T5689] usb 6-1: Using ep0 maxpacket: 16 [ 632.844767][ T5689] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.911607][ T5689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 632.978931][ T5689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 633.010539][ T5689] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 633.056366][ T5689] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.104280][ T5689] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 633.128961][ T5689] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 633.150605][ T5689] usb 6-1: Manufacturer: syz [ 633.175898][ T5689] usb 6-1: config 0 descriptor?? [ 633.193709][ T27] audit: type=1804 audit(1780081404.611:40): pid=10191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1735" name="/newroot/359/bus/file1" dev="loop2" ino=15 res=1 errno=0 [ 633.219641][T10191] 9pnet_fd: Insufficient options for proto=fd [ 633.677672][ T5689] rc_core: IR keymap rc-hauppauge not found [ 633.683780][ T5689] Registered IR keymap rc-empty [ 633.709792][ T5689] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 633.778353][ T5689] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 633.833369][ T5689] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 633.907721][ T5689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input33 [ 634.035172][ T5689] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 634.097696][ T5689] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 634.138100][ T5689] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 634.197682][ T5689] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 634.247766][ T5689] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 634.294165][ T5689] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 634.333715][ T5689] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 634.379071][ T5689] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 634.428180][ T5689] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 634.457805][ T5689] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 634.498910][ T5689] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 634.535583][ T5689] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 634.569465][T10200] device syzkaller0 entered promiscuous mode [ 634.583973][ T5689] usb 6-1: USB disconnect, device number 2 [ 635.009060][T10206] loop4: detected capacity change from 0 to 2048 [ 635.048813][T10206] ext4: Unknown parameter 'appraise' [ 635.088283][ T52] block nbd3: Possible stuck request ffff888024b70000: control (read@0,1024B). Runtime 270 seconds [ 635.099153][ T52] block nbd3: Possible stuck request ffff888024b70200: control (read@1024,1024B). Runtime 270 seconds [ 635.111306][ T52] block nbd3: Possible stuck request ffff888024b70400: control (read@2048,1024B). Runtime 270 seconds [ 635.122446][ T52] block nbd3: Possible stuck request ffff888024b70600: control (read@3072,1024B). Runtime 270 seconds [ 635.375870][T10212] device syzkaller0 entered promiscuous mode [ 635.435232][T10212] tipc: Enabled bearer , priority 0 [ 635.493127][T10211] tipc: Resetting bearer [ 635.645139][T10211] tipc: Disabling bearer [ 635.962960][T10219] overlayfs: failed to resolve './bus': -2 [ 638.592735][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 638.677646][ T5689] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 638.847607][ T4325] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 638.877531][ T5689] usb 5-1: Using ep0 maxpacket: 16 [ 638.885115][ T5689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.905775][ T5689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 638.937245][ T5689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 638.973445][ T5689] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 638.994463][ T5689] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.082996][ T4325] usb 2-1: Using ep0 maxpacket: 32 [ 639.089412][ T5689] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 639.100986][ T4325] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 639.140009][ T4325] usb 2-1: config 0 has no interface number 0 [ 639.150139][ T5689] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 639.204724][ T4325] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 639.216112][ T5689] usb 5-1: Manufacturer: syz [ 639.935794][ T5689] usb 5-1: config 0 descriptor?? [ 639.949897][ T4325] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 639.965966][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.974511][ T4325] usb 2-1: Product: syz [ 639.979037][ T4325] usb 2-1: Manufacturer: syz [ 639.983735][ T4325] usb 2-1: SerialNumber: syz [ 640.006686][ T4325] usb 2-1: config 0 descriptor?? [ 640.040344][T10249] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 640.444019][T10249] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 640.777771][ T5689] rc_core: IR keymap rc-hauppauge not found [ 640.789818][ T5689] Registered IR keymap rc-empty [ 640.811224][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 640.829448][T10276] loop2: detected capacity change from 0 to 256 [ 640.977870][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 641.042125][T10276] FAT-fs (loop2): Directory bread(block 64) failed [ 641.049888][ T5689] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 641.110342][T10276] FAT-fs (loop2): Directory bread(block 65) failed [ 641.116603][ T5689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input34 [ 641.174810][T10276] FAT-fs (loop2): Directory bread(block 66) failed [ 641.183763][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 641.225765][T10276] FAT-fs (loop2): Directory bread(block 67) failed [ 641.233448][ T4325] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 641.283216][T10276] FAT-fs (loop2): Directory bread(block 68) failed [ 641.357584][T10276] FAT-fs (loop2): Directory bread(block 69) failed [ 641.457238][T10283] loop5: detected capacity change from 0 to 512 [ 641.465315][T10276] FAT-fs (loop2): Directory bread(block 70) failed [ 641.476706][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 641.485590][ T4325] asix: probe of 2-1:0.188 failed with error -32 [ 641.527728][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.226980][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.285771][T10276] FAT-fs (loop2): Directory bread(block 71) failed [ 642.293628][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.298096][T10276] FAT-fs (loop2): Directory bread(block 72) failed [ 642.350772][T10276] FAT-fs (loop2): Directory bread(block 73) failed [ 642.366376][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.382745][T10283] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 642.457779][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.502473][T10283] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 642.577970][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.705670][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.977270][ T7] usb 2-1: USB disconnect, device number 16 [ 642.997624][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.048786][ T5689] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 643.110677][ T5689] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 643.126655][T10297] overlayfs: failed to resolve './bus': -2 [ 643.246308][ T5689] usb 5-1: USB disconnect, device number 26 [ 643.498697][ T27] audit: type=1804 audit(1780081414.921:41): pid=10305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1766" name="/newroot/40/bus/file1" dev="loop5" ino=15 res=1 errno=0 [ 643.532519][T10305] 9pnet_fd: Insufficient options for proto=fd [ 645.157712][ T5689] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 645.365105][ T5689] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 645.395795][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.432965][ T5689] usb 5-1: Product: syz [ 645.437306][ T5689] usb 5-1: Manufacturer: syz [ 645.456711][ T5689] usb 5-1: SerialNumber: syz [ 645.695314][ T5689] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 645.735559][ T5689] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 647.007844][ T4293] Bluetooth: hci5: command 0x0406 tx timeout [ 647.039075][ T5689] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 647.552075][ T5689] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 647.635955][ T5689] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 647.684388][ T5689] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 647.706866][ T5689] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 647.747573][ T5689] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 647.779873][ T5689] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 647.823148][ T5689] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 647.877570][ T5689] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 647.932001][ T5689] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 647.946594][ T52] block nbd0: Possible stuck request ffff888024a70000: control (read@0,1024B). Runtime 360 seconds [ 647.960573][ T52] block nbd0: Possible stuck request ffff888024a70200: control (read@1024,1024B). Runtime 360 seconds [ 647.976228][ T52] block nbd0: Possible stuck request ffff888024a70400: control (read@2048,1024B). Runtime 360 seconds [ 647.987494][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 647.998314][ T52] block nbd0: Possible stuck request ffff888024a70600: control (read@3072,1024B). Runtime 360 seconds [ 648.162857][ T5689] lan78xx: probe of 5-1:1.0 failed with error -71 [ 648.194848][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 648.201391][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 648.266559][ T7] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 648.436838][ T5689] usb 5-1: USB disconnect, device number 27 [ 648.444437][ T7] usb 2-1: config 0 has no interface number 0 [ 648.550072][ T7] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 648.622051][ T7] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 648.652879][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.673387][ T7] usb 2-1: Product: syz [ 648.723826][ T7] usb 2-1: Manufacturer: syz [ 648.772033][ T7] usb 2-1: SerialNumber: syz [ 648.811515][ T7] usb 2-1: config 0 descriptor?? [ 648.828193][T10334] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 649.069061][T10334] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 649.226715][T10347] loop0: detected capacity change from 0 to 512 [ 649.265823][T10347] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 649.317615][T10347] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 649.338489][T10347] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.1785: Invalid inode table block 1 in block_group 0 [ 649.412769][T10347] EXT4-fs (loop0): get root inode failed [ 649.444585][T10347] EXT4-fs (loop0): mount failed [ 649.510558][T10352] loop5: detected capacity change from 0 to 1024 [ 649.524638][T10352] EXT4-fs: Ignoring removed orlov option [ 649.729097][ T7] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 649.741629][T10347] ubi: mtd0 is already attached to ubi0 [ 649.778366][ T7] asix: probe of 2-1:0.188 failed with error -61 [ 649.848549][T10352] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 649.962349][T10352] netlink: 'syz.5.1786': attribute type 14 has an invalid length. [ 649.989998][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1786'. [ 650.084023][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 650.180046][T10365] loop4: detected capacity change from 0 to 512 [ 650.241576][T10365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 650.261367][T10365] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 650.416723][T10372] loop5: detected capacity change from 0 to 8 [ 650.480970][T10372] SQUASHFS error: Unable to read inode 0x127 [ 650.705738][ T27] audit: type=1804 audit(1780081422.121:42): pid=10376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1791" name="/newroot/350/bus/file1" dev="loop4" ino=15 res=1 errno=0 [ 650.727319][ C0] vkms_vblank_simulate: vblank timer overrun [ 650.730989][ T6391] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 650.752736][T10374] 9pnet_fd: Insufficient options for proto=fd [ 651.301622][ T6391] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 651.338575][ T6391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.404374][ T6391] usb 3-1: Product: syz [ 651.427830][ T6391] usb 3-1: Manufacturer: syz [ 651.432511][ T6391] usb 3-1: SerialNumber: syz [ 651.539454][ T4327] usb 2-1: USB disconnect, device number 17 [ 651.809611][ T6391] net_ratelimit: 2 callbacks suppressed [ 651.809634][ T6391] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 651.865804][ T6391] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 651.988376][T10388] loop0: detected capacity change from 0 to 512 [ 652.073982][T10388] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 652.094874][T10388] EXT4-fs (loop0): mount failed [ 652.128016][T10396] loop1: detected capacity change from 0 to 512 [ 652.184003][T10396] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 652.224341][T10396] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 652.351470][T10396] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.1799: Invalid inode table block 1 in block_group 0 [ 652.393628][T10396] EXT4-fs (loop1): get root inode failed [ 652.399812][T10396] EXT4-fs (loop1): mount failed [ 652.771855][T10396] ubi: mtd0 is already attached to ubi0 [ 653.126027][T10402] loop1: detected capacity change from 0 to 512 [ 653.135198][T10404] loop0: detected capacity change from 0 to 1024 [ 653.188981][T10404] EXT4-fs: Ignoring removed orlov option [ 653.221956][T10402] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 653.258803][T10402] EXT4-fs (loop1): mount failed [ 653.269967][T10404] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 653.409215][T10404] netlink: 'syz.0.1801': attribute type 14 has an invalid length. [ 653.458286][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'. [ 653.550424][ T4290] EXT4-fs (loop0): unmounting filesystem. [ 654.167633][ T6391] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 654.184688][ T6391] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 654.196741][ T6391] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 654.253798][ T6391] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 654.296183][ T6391] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 654.408704][ T6391] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 654.500154][ T6391] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 654.592567][ T6391] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 654.686937][ T6391] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 654.764726][ T6391] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 654.841014][ T6391] lan78xx: probe of 3-1:1.0 failed with error -71 [ 654.891131][ T6391] usb 3-1: USB disconnect, device number 18 [ 655.409964][T10436] device syzkaller0 entered promiscuous mode [ 655.442261][T10439] loop5: detected capacity change from 0 to 512 [ 655.612610][T10439] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 655.651380][T10440] overlayfs: failed to resolve './bus': -2 [ 655.698842][T10439] EXT4-fs (loop5): mount failed [ 655.925380][ T6391] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 656.633846][T10454] loop2: detected capacity change from 0 to 512 [ 656.657604][ T6391] usb 2-1: Using ep0 maxpacket: 16 [ 656.664751][ T6391] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.698157][ T6391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 656.717557][ T6391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 656.777742][T10454] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 656.799351][ T6391] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 656.820500][ T6391] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 656.842002][T10454] EXT4-fs (loop2): mount failed [ 656.853218][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 656.894523][ T6391] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 656.905661][ T6391] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 656.924113][ T6391] usb 2-1: Manufacturer: syz [ 657.053496][ T6391] usb 2-1: config 0 descriptor?? [ 658.719472][ T6391] rc_core: IR keymap rc-hauppauge not found [ 658.758412][ T6391] Registered IR keymap rc-empty [ 658.777783][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 658.807612][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 658.881114][ T6391] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 659.050139][ T6391] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input35 [ 659.220978][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.349198][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.458488][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.497662][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.556439][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.627655][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.677620][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.717628][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.747777][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 659.755163][T10492] loop5: detected capacity change from 0 to 512 [ 659.799528][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 660.016131][T10500] bridge0: port 3(wlan1) entered blocking state [ 660.023524][T10500] bridge0: port 3(wlan1) entered disabled state [ 660.038864][T10500] device wlan1 entered promiscuous mode [ 660.046076][T10500] bridge0: port 3(wlan1) entered blocking state [ 660.052468][T10500] bridge0: port 3(wlan1) entered forwarding state [ 660.148289][ T5159] bridge0: port 3(wlan1) entered disabled state [ 660.280520][ T4288] Bluetooth: hci3: command 0x1003 tx timeout [ 660.280690][ T4279] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 661.484281][ T6391] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 661.558708][T10492] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 661.587712][ T6391] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 661.647688][T10492] EXT4-fs (loop5): mount failed [ 661.670291][ T6391] usb 2-1: USB disconnect, device number 18 [ 662.097671][ T4327] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 662.300055][ T4327] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 662.367578][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.456924][ T4327] usb 3-1: Product: syz [ 662.487283][ T4327] usb 3-1: Manufacturer: syz [ 662.532847][ T4327] usb 3-1: SerialNumber: syz [ 662.797037][ T4327] net_ratelimit: 2 callbacks suppressed [ 662.797058][ T4327] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 663.248245][ T4400] Bluetooth: hci3: Frame reassembly failed (-84) [ 663.647158][ T4327] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 663.704102][T10536] loop1: detected capacity change from 0 to 8192 [ 663.770510][T10540] loop5: detected capacity change from 0 to 128 [ 664.748164][ T4327] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 664.788249][ T4327] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 664.841375][ T4327] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 665.050971][ T4327] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 665.067658][T10503] Bluetooth: hci3: command 0x1003 tx timeout [ 665.076077][ T4293] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 665.302240][T10567] bridge0: port 3(wlan1) entered blocking state [ 665.308897][T10567] bridge0: port 3(wlan1) entered disabled state [ 665.320359][T10567] device wlan1 entered promiscuous mode [ 665.327227][T10567] bridge0: port 3(wlan1) entered blocking state [ 665.333609][T10567] bridge0: port 3(wlan1) entered forwarding state [ 665.429858][ T5164] bridge0: port 3(wlan1) entered disabled state [ 666.177611][T10574] loop1: detected capacity change from 0 to 8 [ 666.245735][T10574] SQUASHFS error: Unable to read inode 0x127 [ 666.539308][ T4327] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 666.561077][ T4327] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 667.453631][ T52] block nbd3: Possible stuck request ffff888024b70000: control (read@0,1024B). Runtime 300 seconds [ 667.464442][ T52] block nbd3: Possible stuck request ffff888024b70200: control (read@1024,1024B). Runtime 300 seconds [ 667.476304][ T52] block nbd3: Possible stuck request ffff888024b70400: control (read@2048,1024B). Runtime 300 seconds [ 667.487465][ T52] block nbd3: Possible stuck request ffff888024b70600: control (read@3072,1024B). Runtime 300 seconds [ 667.499974][ T4327] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 667.513202][ T4327] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 667.533127][ T4327] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 667.548760][T10586] loop0: detected capacity change from 0 to 128 [ 667.558657][ T4327] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 667.600357][ T4327] lan78xx: probe of 3-1:1.0 failed with error -71 [ 667.651840][ T4327] usb 3-1: USB disconnect, device number 19 [ 669.147619][ T4515] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 669.668590][ T4515] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 669.697134][ T4515] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.705714][ T4515] usb 5-1: Product: syz [ 669.710387][ T4515] usb 5-1: Manufacturer: syz [ 669.715023][ T4515] usb 5-1: SerialNumber: syz [ 669.815668][T10623] loop2: detected capacity change from 0 to 1024 [ 669.877975][T10623] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 669.894990][T10627] loop0: detected capacity change from 0 to 2048 [ 669.960201][ T4515] net_ratelimit: 2 callbacks suppressed [ 669.960238][ T4515] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 670.020730][T10627] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 670.069722][ T4515] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 670.425409][T10634] input: syz0 as /devices/virtual/input/input36 [ 670.495825][T10632] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 670.511716][T10632] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 670.524500][T10632] EXT4-fs (loop0): This should not happen!! Data will be lost [ 670.524500][T10632] [ 670.534439][T10632] EXT4-fs (loop0): Total free blocks count 0 [ 670.540782][T10632] EXT4-fs (loop0): Free/Dirty block details [ 670.546931][T10632] EXT4-fs (loop0): free_blocks=2415919504 [ 670.552964][T10632] EXT4-fs (loop0): dirty_blocks=48 [ 670.558321][T10632] EXT4-fs (loop0): Block reservation details [ 670.564539][T10632] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 670.858911][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 670.865893][ T4290] EXT4-fs (loop0): unmounting filesystem. [ 671.301593][T10649] loop0: detected capacity change from 0 to 2048 [ 671.435227][T10649] ext4: Unknown parameter 'appraise' [ 671.547619][ T9947] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 672.337963][ T4515] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 672.357699][ T4515] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 672.387857][ T4515] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 672.447775][ T4515] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 672.472831][ T4515] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 672.556084][ T4515] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 672.587875][ T4515] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 672.788338][ T4515] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 672.817929][ T4515] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 672.947088][ T4515] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 672.959958][ T4515] lan78xx: probe of 5-1:1.0 failed with error -71 [ 673.526607][ T4515] usb 5-1: USB disconnect, device number 28 [ 673.591092][T10674] loop4: detected capacity change from 0 to 2048 [ 673.712377][T10674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 673.976777][T10682] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 673.991831][T10682] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 674.004187][T10682] EXT4-fs (loop4): This should not happen!! Data will be lost [ 674.004187][T10682] [ 674.013928][T10682] EXT4-fs (loop4): Total free blocks count 0 [ 674.020332][T10682] EXT4-fs (loop4): Free/Dirty block details [ 674.026272][T10682] EXT4-fs (loop4): free_blocks=2415919504 [ 674.032441][T10682] EXT4-fs (loop4): dirty_blocks=48 [ 674.037778][T10682] EXT4-fs (loop4): Block reservation details [ 674.043893][T10682] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 674.051651][T10687] input: syz0 as /devices/virtual/input/input37 [ 674.366411][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 674.648934][T10698] loop4: detected capacity change from 0 to 2048 [ 674.661318][T10698] ext4: Unknown parameter 'appraise' [ 676.932544][T10733] loop5: detected capacity change from 0 to 8 [ 676.985365][T10733] SQUASHFS error: Unable to read inode 0x127 [ 678.600494][ T52] block nbd0: Possible stuck request ffff888024a70000: control (read@0,1024B). Runtime 390 seconds [ 678.612686][ T52] block nbd0: Possible stuck request ffff888024a70200: control (read@1024,1024B). Runtime 390 seconds [ 678.628444][ T52] block nbd0: Possible stuck request ffff888024a70400: control (read@2048,1024B). Runtime 390 seconds [ 678.639583][ T52] block nbd0: Possible stuck request ffff888024a70600: control (read@3072,1024B). Runtime 390 seconds [ 678.706959][T10749] loop5: detected capacity change from 0 to 2048 [ 678.738347][T10749] ext4: Unknown parameter 'appraise' [ 680.758879][T10773] loop5: detected capacity change from 0 to 512 [ 680.841283][T10773] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 680.884182][T10773] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 681.687649][ T4328] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 681.935891][T10787] loop2: detected capacity change from 0 to 2048 [ 681.978395][T10787] ext4: Unknown parameter 'appraise' [ 681.997538][ T4328] usb 2-1: Using ep0 maxpacket: 16 [ 682.004528][ T4328] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 682.032360][ T4328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 682.065636][ T27] audit: type=1804 audit(1780081453.481:43): pid=10793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1914" name="/newroot/73/bus/file1" dev="loop5" ino=15 res=1 errno=0 [ 682.087303][ T4328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 682.102247][T10793] 9pnet_fd: Insufficient options for proto=fd [ 682.108719][ T4328] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 682.130037][ T4328] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.160112][ T4328] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 682.178193][ T4328] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 682.207553][ T4328] usb 2-1: Manufacturer: syz [ 682.229503][T10796] overlayfs: workdir and upperdir must reside under the same mount [ 682.250288][ T4328] usb 2-1: config 0 descriptor?? [ 682.837516][ T4328] rc_core: IR keymap rc-hauppauge not found [ 682.843520][ T4328] Registered IR keymap rc-empty [ 682.857635][ T4328] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 682.894447][T10802] loop2: detected capacity change from 0 to 2048 [ 682.900996][ T4328] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 682.958154][ T4328] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 682.999556][T10802] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 683.046754][ T4328] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input39 [ 683.287680][ T4328] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.375104][T10810] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 683.390115][T10810] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 683.402436][T10810] EXT4-fs (loop2): This should not happen!! Data will be lost [ 683.402436][T10810] [ 683.412352][T10810] EXT4-fs (loop2): Total free blocks count 0 [ 683.418419][T10810] EXT4-fs (loop2): Free/Dirty block details [ 683.435194][T10811] input: syz0 as /devices/virtual/input/input40 [ 683.442251][T10810] EXT4-fs (loop2): free_blocks=2415919504 [ 683.448129][T10810] EXT4-fs (loop2): dirty_blocks=48 [ 683.453351][T10810] EXT4-fs (loop2): Block reservation details [ 683.459391][T10810] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 683.820111][ T4328] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.833250][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 683.847738][ T4328] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.877748][ T4328] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.907563][ T4328] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.957622][ T4328] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.987601][ T4328] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.017543][ T4328] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.057595][ T4328] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.087540][ T4328] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.118574][ T4328] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 684.150702][ T4328] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 684.203250][ T4328] usb 2-1: USB disconnect, device number 19 [ 684.973596][T10824] overlayfs: failed to resolve './bus': -2 [ 686.308078][T10838] loop2: detected capacity change from 0 to 2048 [ 686.355830][T10838] ext4: Unknown parameter 'appraise' [ 686.742049][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 687.939868][T10858] loop5: detected capacity change from 0 to 128 [ 688.097211][T10858] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 688.118200][T10858] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 689.096991][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 689.777509][T10881] overlayfs: failed to resolve './bus': -2 [ 690.759903][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.766274][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.954899][T10847] tipc: Enabling of bearer rejected, failed to enable media [ 692.225515][T10889] loop2: detected capacity change from 0 to 512 [ 692.280845][T10891] loop4: detected capacity change from 0 to 1024 [ 692.316863][T10891] EXT4-fs: Ignoring removed orlov option [ 692.330318][T10889] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 692.359529][T10893] loop1: detected capacity change from 0 to 2048 [ 692.366922][T10893] ext4: Unknown parameter 'appraise' [ 692.374535][T10891] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 692.379016][T10889] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 692.477532][T10891] netlink: 'syz.4.1942': attribute type 14 has an invalid length. [ 692.527842][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 692.676818][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 693.759392][T10919] loop5: detected capacity change from 0 to 128 [ 694.317498][ T27] audit: type=1804 audit(1780081465.631:44): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1943" name="/newroot/397/bus/file1" dev="loop2" ino=15 res=1 errno=0 [ 694.438969][T10916] 9pnet_fd: Insufficient options for proto=fd [ 694.744330][T10928] overlayfs: failed to resolve './bus': -2 [ 696.284314][T10939] loop5: detected capacity change from 0 to 512 [ 696.455804][T10939] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 696.549021][T10939] EXT4-fs (loop5): mount failed [ 696.580685][T10945] device syzkaller0 entered promiscuous mode [ 696.633700][T10945] tipc: Enabled bearer , priority 0 [ 696.682853][T10943] tipc: Resetting bearer [ 696.812508][T10943] tipc: Disabling bearer [ 697.738198][T10954] loop4: detected capacity change from 0 to 8 [ 697.748818][T10954] SQUASHFS error: Unable to read inode 0x127 [ 697.798466][ T52] block nbd3: Possible stuck request ffff888024b70000: control (read@0,1024B). Runtime 330 seconds [ 697.809922][ T52] block nbd3: Possible stuck request ffff888024b70200: control (read@1024,1024B). Runtime 330 seconds [ 697.821421][ T52] block nbd3: Possible stuck request ffff888024b70400: control (read@2048,1024B). Runtime 330 seconds [ 697.828891][ T9582] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 697.832860][ T52] block nbd3: Possible stuck request ffff888024b70600: control (read@3072,1024B). Runtime 330 seconds [ 699.141029][T10974] overlayfs: failed to resolve './bus': -2 [ 702.828793][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 705.970242][T11028] overlayfs: failed to resolve './bus': -2 [ 706.951512][T10990] bridge0: port 3(wlan1) entered blocking state [ 706.957972][T10990] bridge0: port 3(wlan1) entered disabled state [ 706.965471][T10990] device wlan1 entered promiscuous mode [ 706.971550][T10990] bridge0: port 3(wlan1) entered blocking state [ 706.977933][T10990] bridge0: port 3(wlan1) entered forwarding state [ 707.065559][T11003] tipc: Enabled bearer , priority 0 [ 707.074292][T11000] device syzkaller0 entered promiscuous mode [ 707.165586][T10994] tipc: Resetting bearer [ 707.207198][T11036] loop0: detected capacity change from 0 to 512 [ 707.318191][T10994] tipc: Disabling bearer [ 707.351153][T11036] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 707.413476][T11036] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 707.961810][ T4399] bridge0: port 3(wlan1) entered disabled state [ 708.799665][ T52] block nbd0: Possible stuck request ffff888024a70000: control (read@0,1024B). Runtime 420 seconds [ 708.811700][ T52] block nbd0: Possible stuck request ffff888024a70200: control (read@1024,1024B). Runtime 420 seconds [ 708.822848][ T52] block nbd0: Possible stuck request ffff888024a70400: control (read@2048,1024B). Runtime 420 seconds [ 708.834477][ T52] block nbd0: Possible stuck request ffff888024a70600: control (read@3072,1024B). Runtime 420 seconds [ 709.921811][T11070] overlayfs: failed to resolve './bus': -2 [ 710.381012][ T27] audit: type=1804 audit(1780081481.801:45): pid=11065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1981" name="/newroot/407/bus/file1" dev="loop0" ino=15 res=1 errno=0 [ 710.401203][T11065] 9pnet_fd: Insufficient options for proto=fd [ 710.928600][T11080] device syzkaller0 entered promiscuous mode [ 713.094151][T11097] tmpfs: Cannot retroactively limit inodes [ 713.958697][T11106] loop5: detected capacity change from 0 to 4096 [ 714.377813][T11106] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 714.896495][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 714.972919][T11113] loop2: detected capacity change from 0 to 512 [ 715.007819][T11113] EXT4-fs (loop2): Test dummy encryption mode enabled [ 715.015019][T11113] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 715.094240][T11113] EXT4-fs error (device loop2): ext4_init_orphan_info:621: comm syz.2.2004: orphan file block 0: bad magic [ 715.190688][T11113] EXT4-fs (loop2): mount failed [ 716.038347][T11113] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2004'. [ 716.135164][T11113] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2004'. [ 717.940327][T11148] loop5: detected capacity change from 0 to 1024 [ 718.080222][T11148] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 718.090480][T11148] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 718.593831][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 719.311136][ T4347] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 719.521759][ T4290] EXT4-fs (loop0): unmounting filesystem. [ 719.530061][ T4347] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 719.557532][ T4347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.565686][ T4347] usb 3-1: Product: syz [ 719.631840][ T4347] usb 3-1: Manufacturer: syz [ 719.656005][ T4347] usb 3-1: SerialNumber: syz [ 719.741570][T11168] loop1: detected capacity change from 0 to 256 [ 719.780435][T11168] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 719.880386][T11168] FAT-fs (loop1): Directory bread(block 64) failed [ 719.897299][T11168] FAT-fs (loop1): Directory bread(block 65) failed [ 719.912047][ T4347] net_ratelimit: 2 callbacks suppressed [ 719.912070][ T4347] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 719.917167][T11168] FAT-fs (loop1): Directory bread(block 66) failed [ 719.937500][ T4347] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 720.008006][T11168] FAT-fs (loop1): Directory bread(block 67) failed [ 720.014767][T11168] FAT-fs (loop1): Directory bread(block 68) failed [ 720.047761][T11168] FAT-fs (loop1): Directory bread(block 69) failed [ 720.069050][T11168] FAT-fs (loop1): Directory bread(block 70) failed [ 720.096270][T11168] FAT-fs (loop1): Directory bread(block 71) failed [ 720.103510][T11168] FAT-fs (loop1): Directory bread(block 72) failed [ 720.119331][T11168] FAT-fs (loop1): Directory bread(block 73) failed [ 720.416384][T11180] loop4: detected capacity change from 0 to 512 [ 721.185105][T11180] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 721.927516][ T4347] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 721.957699][ T4347] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 722.938841][T11180] EXT4-fs (loop4): 1 truncate cleaned up [ 722.944588][T11180] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 722.955126][ T4347] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 723.361352][T11196] loop1: detected capacity change from 0 to 512 [ 723.409578][T11196] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 723.510609][T11196] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 723.552576][T11196] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 723.738180][ T4347] lan78xx: probe of 3-1:1.0 failed with error -110 [ 723.809040][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 723.954988][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 723.986776][ T6391] usb 3-1: USB disconnect, device number 20 [ 724.164847][T11207] loop2: detected capacity change from 0 to 512 [ 724.257981][T11209] loop1: detected capacity change from 0 to 2048 [ 724.292432][T11207] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 724.325922][T11207] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 724.368054][T11209] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 724.461659][T11209] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 724.476607][T11209] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 724.488986][T11209] EXT4-fs (loop1): This should not happen!! Data will be lost [ 724.488986][T11209] [ 724.498745][T11209] EXT4-fs (loop1): Total free blocks count 0 [ 724.504763][T11209] EXT4-fs (loop1): Free/Dirty block details [ 724.513658][T11222] input: syz0 as /devices/virtual/input/input41 [ 724.522023][T11209] EXT4-fs (loop1): free_blocks=2415919504 [ 724.527893][T11209] EXT4-fs (loop1): dirty_blocks=48 [ 724.533709][T11209] EXT4-fs (loop1): Block reservation details [ 724.539799][T11209] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 724.818720][T11224] 9pnet_fd: Insufficient options for proto=fd [ 725.219808][ T27] audit: type=1804 audit(1780081496.231:46): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2028" name="/newroot/415/bus/file1" dev="loop2" ino=15 res=1 errno=0 [ 725.299285][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 726.612418][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 726.726784][T11239] loop0: detected capacity change from 0 to 512 [ 726.891252][T11239] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 726.935826][T11239] EXT4-fs (loop0): mount failed [ 727.280763][T11251] loop1: detected capacity change from 0 to 512 [ 727.292147][T11251] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 727.353238][T11251] EXT4-fs (loop1): 1 truncate cleaned up [ 727.359236][T11251] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 727.549722][T11258] loop5: detected capacity change from 0 to 1024 [ 727.582344][T11258] EXT4-fs: Ignoring removed orlov option [ 727.621183][T11260] vivid-000: ================= START STATUS ================= [ 727.635521][T11258] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 727.757549][T11260] vivid-000: Test Pattern: 75% Colorbar [ 727.765039][T11260] vivid-000: Fill Percentage of Frame: 100 [ 727.771371][T11260] vivid-000: Horizontal Movement: No Movement [ 727.778171][T11260] vivid-000: Vertical Movement: No Movement [ 727.784480][T11260] vivid-000: OSD Text Mode: All [ 727.797046][T11260] vivid-000: Show Border: false [ 727.807626][T11260] vivid-000: Show Square: false [ 727.819249][T11260] vivid-000: Sensor Flipped Horizontally: false [ 727.825804][T11260] vivid-000: Sensor Flipped Vertically: false [ 727.868373][T11260] vivid-000: Insert SAV Code in Image: false [ 727.874479][T11260] vivid-000: Insert EAV Code in Image: false [ 727.880520][ T52] block nbd3: Possible stuck request ffff888024b70000: control (read@0,1024B). Runtime 360 seconds [ 727.880563][ T52] block nbd3: Possible stuck request ffff888024b70200: control (read@1024,1024B). Runtime 360 seconds [ 727.880594][ T52] block nbd3: Possible stuck request ffff888024b70400: control (read@2048,1024B). Runtime 360 seconds [ 727.880623][ T52] block nbd3: Possible stuck request ffff888024b70600: control (read@3072,1024B). Runtime 360 seconds [ 727.947861][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 727.957732][T11260] vivid-000: Insert Video Guard Band: false [ 727.987581][T11260] vivid-000: Reduced Framerate: false [ 728.015117][T11260] vivid-000: Enable Capture Cropping: true [ 728.047616][T11260] vivid-000: Enable Capture Composing: true [ 728.077681][T11260] vivid-000: Enable Capture Scaler: true [ 728.088836][T11260] vivid-000: Timestamp Source: End of Frame [ 728.105085][T11260] vivid-000: Colorspace: SMPTE 170M [ 728.110534][T11260] vivid-000: Transfer Function: Default [ 728.126375][T11260] vivid-000: Y'CbCr Encoding: Default [ 728.131946][T11260] vivid-000: HSV Encoding: Hue 0-179 [ 728.145162][T11260] vivid-000: Quantization: Default [ 728.154444][T11271] loop5: detected capacity change from 0 to 2048 [ 728.157701][T11260] vivid-000: Apply Alpha To Red Only: false [ 728.192724][T11260] vivid-000: Standard Aspect Ratio: 4x3 [ 728.216345][T11260] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 728.246938][T11260] vivid-000: DV Timings: 640x480p59 inactive [ 728.271798][T11260] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 728.288759][T11271] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 728.289272][T11260] vivid-000: Maximum EDID Blocks: 2 [ 728.303109][T11260] vivid-000: Limited RGB Range (16-235): false [ 728.310286][T11260] vivid-000: Rx RGB Quantization Range: Automatic [ 728.316831][T11260] vivid-000: Power Present: 0x00000001 [ 728.323581][T11260] tpg source WxH: 720x576 (R'G'B) [ 728.329237][T11260] tpg field: 3 [ 728.332696][T11260] tpg crop: 16x32@10x0 [ 728.336964][T11260] tpg compose: 16x8@0x0 [ 728.341565][T11260] tpg colorspace: 1 [ 728.345467][T11260] tpg transfer function: 0/1 [ 728.350559][T11260] tpg quantization: 0/2 [ 728.354823][T11260] tpg RGB range: 0/2 [ 728.359183][T11260] vivid-000: ================== END STATUS ================== [ 728.598522][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 729.598177][T11287] 9pnet_fd: Insufficient options for proto=fd [ 731.028697][T11276] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 731.043661][T11276] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 731.055980][T11276] EXT4-fs (loop5): This should not happen!! Data will be lost [ 731.055980][T11276] [ 731.065743][T11276] EXT4-fs (loop5): Total free blocks count 0 [ 731.072109][T11276] EXT4-fs (loop5): Free/Dirty block details [ 731.078189][T11276] EXT4-fs (loop5): free_blocks=2415919504 [ 731.083965][T11276] EXT4-fs (loop5): dirty_blocks=48 [ 731.089387][T11276] EXT4-fs (loop5): Block reservation details [ 731.095425][T11276] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 731.110504][T11276] input: syz0 as /devices/virtual/input/input42 [ 731.751780][T11296] device syzkaller0 entered promiscuous mode [ 732.753900][T11314] loop2: detected capacity change from 0 to 1024 [ 732.795928][T11314] EXT4-fs: Ignoring removed orlov option [ 732.878700][T11314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 733.401767][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 734.431904][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 734.877116][T11338] loop4: detected capacity change from 0 to 512 [ 734.897469][T11338] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 735.059766][T11338] EXT4-fs (loop4): 1 truncate cleaned up [ 735.065625][T11338] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 735.273018][T11345] loop5: detected capacity change from 0 to 512 [ 735.311211][T11345] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 735.343535][T11345] EXT4-fs (loop5): mount failed [ 739.378060][ T3639] udevd[3639]: worker [4479] /devices/virtual/block/nbd3 timeout; kill it [ 739.393847][ T3639] udevd[3639]: seq 13250 '/devices/virtual/block/nbd3' killed [ 739.400653][ T52] block nbd0: Possible stuck request ffff888024a70000: control (read@0,1024B). Runtime 450 seconds [ 739.412297][ T52] block nbd0: Possible stuck request ffff888024a70200: control (read@1024,1024B). Runtime 450 seconds [ 739.423635][ T52] block nbd0: Possible stuck request ffff888024a70400: control (read@2048,1024B). Runtime 450 seconds [ 739.435080][ T52] block nbd0: Possible stuck request ffff888024a70600: control (read@3072,1024B). Runtime 450 seconds [ 739.446359][ T3639] udevd[3639]: worker [4458] /devices/virtual/block/nbd0 timeout; kill it [ 739.455176][ T3639] udevd[3639]: seq 12615 '/devices/virtual/block/nbd0' killed [ 739.880824][T11363] 9pnet_fd: Insufficient options for proto=fd [ 740.823483][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 741.526340][T11377] loop0: detected capacity change from 0 to 1024 [ 741.572735][T11377] EXT4-fs: Ignoring removed orlov option [ 741.808434][T11377] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 742.636504][ T4290] EXT4-fs (loop0): unmounting filesystem. [ 742.707852][T11395] 9pnet_fd: Insufficient options for proto=fd [ 742.727646][T11396] loop5: detected capacity change from 0 to 256 [ 742.736350][T11396] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 742.881008][T11396] FAT-fs (loop5): Directory bread(block 64) failed [ 742.895635][T11396] FAT-fs (loop5): Directory bread(block 65) failed [ 742.928692][T11396] FAT-fs (loop5): Directory bread(block 66) failed [ 742.936159][T11396] FAT-fs (loop5): Directory bread(block 67) failed [ 742.960640][T11396] FAT-fs (loop5): Directory bread(block 68) failed [ 742.980561][T11396] FAT-fs (loop5): Directory bread(block 69) failed [ 743.010530][T11396] FAT-fs (loop5): Directory bread(block 70) failed [ 743.030533][T11396] FAT-fs (loop5): Directory bread(block 71) failed [ 743.050629][T11396] FAT-fs (loop5): Directory bread(block 72) failed [ 743.081071][T11396] FAT-fs (loop5): Directory bread(block 73) failed [ 743.897010][T11408] loop1: detected capacity change from 0 to 4096 [ 743.928871][T11408] EXT4-fs (loop1): Test dummy encryption mode enabled [ 743.963027][T11408] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 744.294176][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 746.843089][T11421] device syzkaller0 entered promiscuous mode [ 747.726521][T11429] loop0: detected capacity change from 0 to 1024 [ 747.801066][T11429] EXT4-fs: Ignoring removed orlov option [ 747.958556][T11429] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 748.156885][ T4290] EXT4-fs (loop0): unmounting filesystem. [ 750.123507][T11460] loop1: detected capacity change from 0 to 512 [ 750.224869][T11460] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 750.258312][T11460] ext4 filesystem being mounted at /421/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 750.956702][T11470] loop4: detected capacity change from 0 to 128 [ 750.975343][ T27] audit: type=1804 audit(1780081522.391:47): pid=11468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2085" name="/newroot/421/bus/file1" dev="loop1" ino=15 res=1 errno=0 [ 751.025834][T11468] 9pnet_fd: Insufficient options for proto=fd [ 751.055039][T11470] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 751.073123][T11470] ext4 filesystem being mounted at /403/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 752.206280][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.212719][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.242296][T11480] loop2: detected capacity change from 0 to 256 [ 752.332634][T11480] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 752.667992][T11480] FAT-fs (loop2): Directory bread(block 64) failed [ 752.789640][T11480] FAT-fs (loop2): Directory bread(block 65) failed [ 752.827635][T11480] FAT-fs (loop2): Directory bread(block 66) failed [ 752.864826][T11480] FAT-fs (loop2): Directory bread(block 67) failed [ 752.905403][T11480] FAT-fs (loop2): Directory bread(block 68) failed [ 752.950216][T11480] FAT-fs (loop2): Directory bread(block 69) failed [ 752.996295][T11480] FAT-fs (loop2): Directory bread(block 70) failed [ 753.061766][T11480] FAT-fs (loop2): Directory bread(block 71) failed [ 753.078015][T11480] FAT-fs (loop2): Directory bread(block 72) failed [ 753.084609][T11480] FAT-fs (loop2): Directory bread(block 73) failed [ 753.144066][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 754.071508][T11488] loop4: detected capacity change from 0 to 1024 [ 754.100420][T11490] 9pnet_fd: Insufficient options for proto=fd [ 754.155710][T11488] EXT4-fs: Ignoring removed orlov option [ 754.294789][T11488] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 754.706632][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 755.968566][T11506] overlayfs: missing 'lowerdir' [ 758.215200][ T52] block nbd3: Possible stuck request ffff888024b70000: control (read@0,1024B). Runtime 390 seconds [ 758.226048][ T52] block nbd3: Possible stuck request ffff888024b70200: control (read@1024,1024B). Runtime 390 seconds [ 758.246132][ T52] block nbd3: Possible stuck request ffff888024b70400: control (read@2048,1024B). Runtime 390 seconds [ 758.257279][ T52] block nbd3: Possible stuck request ffff888024b70600: control (read@3072,1024B). Runtime 390 seconds [ 758.386472][T11529] loop5: detected capacity change from 0 to 128 [ 758.565662][T11529] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 758.574733][T11529] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 758.904879][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 759.300419][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 759.363310][ T4515] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 759.437798][T11539] 9pnet_fd: Insufficient options for proto=fd [ 759.511683][T11541] loop2: detected capacity change from 0 to 1024 [ 759.538464][T11541] EXT4-fs: Ignoring removed orlov option [ 759.577629][ T4515] usb 2-1: Using ep0 maxpacket: 16 [ 759.584714][ T4515] usb 2-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 759.621614][ T4515] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 759.639959][T11541] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 759.643388][ T4515] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 759.664680][ T4515] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 759.674672][ T4515] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 759.689517][ T4515] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 759.703981][ T4515] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 759.712753][ T4515] usb 2-1: Manufacturer: syz [ 759.725912][ T4515] usb 2-1: config 0 descriptor?? [ 759.814768][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 760.763141][T11554] loop2: detected capacity change from 0 to 1024 [ 760.802202][T11554] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 760.810899][T11554] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.873443][T11559] loop0: detected capacity change from 0 to 512 [ 760.884179][T11559] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 760.897908][ T4515] rc_core: IR keymap rc-hauppauge not found [ 760.920359][ T4515] Registered IR keymap rc-empty [ 760.948028][ T4515] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.009821][ T4515] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.033102][T11559] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 761.047693][T11559] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.058796][ T4515] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 761.086029][ T4515] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input43 [ 761.107710][ T129] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 761.107725][ T4515] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.126491][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 761.137589][ T4515] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.178180][ T4515] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.227716][ T4515] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.267160][ T4290] EXT4-fs (loop0): unmounting filesystem. [ 761.267905][ T4515] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.317822][ T4515] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.326033][T11565] loop2: detected capacity change from 0 to 2048 [ 761.341254][ T129] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 761.361804][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.366312][ T4515] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.379285][ T129] usb 6-1: Product: syz [ 761.387956][ T129] usb 6-1: Manufacturer: syz [ 761.405508][ T129] usb 6-1: SerialNumber: syz [ 761.419790][ T4515] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.451940][ T4515] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.475310][T11565] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 761.497538][ T4515] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 761.538713][ T4515] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 761.557475][ T4515] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 761.579394][ T4515] usb 2-1: USB disconnect, device number 20 [ 761.707055][ T129] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 761.729903][ T129] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 761.973149][T11572] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 761.988075][T11572] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 762.000450][T11572] EXT4-fs (loop2): This should not happen!! Data will be lost [ 762.000450][T11572] [ 762.010374][T11572] EXT4-fs (loop2): Total free blocks count 0 [ 762.016798][T11572] EXT4-fs (loop2): Free/Dirty block details [ 762.022813][T11572] EXT4-fs (loop2): free_blocks=2415919504 [ 762.028709][T11572] EXT4-fs (loop2): dirty_blocks=48 [ 762.033900][T11572] EXT4-fs (loop2): Block reservation details [ 762.040050][T11572] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 762.059060][T11572] input: syz0 as /devices/virtual/input/input44 [ 762.557359][ T129] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 762.587457][ T129] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 762.630949][ T129] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 762.718721][ T129] lan78xx: probe of 6-1:1.0 failed with error -32 [ 762.771490][T11577] loop0: detected capacity change from 0 to 128 [ 762.802074][T11577] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 762.887825][T11580] loop1: detected capacity change from 0 to 512 [ 762.950231][T11577] ext4 filesystem being mounted at /428/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 762.996289][T11580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 763.055429][T11580] ext4 filesystem being mounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 763.725149][ T4290] EXT4-fs (loop0): unmounting filesystem. [ 763.890346][ T4322] usb 6-1: USB disconnect, device number 3 [ 764.477312][ T27] audit: type=1804 audit(1780081535.891:48): pid=11596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2112" name="/newroot/423/bus/file1" dev="loop1" ino=15 res=1 errno=0 [ 764.484048][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 764.510106][T11590] 9pnet_fd: Insufficient options for proto=fd [ 765.469430][T11599] loop2: detected capacity change from 0 to 1024 [ 765.509540][T11601] bridge0: port 3(wlan1) entered disabled state [ 765.520439][T11599] EXT4-fs: Ignoring removed orlov option [ 765.614031][T11599] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 765.822774][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 766.206209][T11609] loop2: detected capacity change from 0 to 1024 [ 766.218174][T11611] loop5: detected capacity change from 0 to 512 [ 766.258561][T11611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 766.268282][T11609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 766.276852][T11609] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.355325][T11611] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 766.405123][T11611] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.437519][ T4515] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 766.547184][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 766.637548][ T4515] usb 5-1: Using ep0 maxpacket: 16 [ 766.650055][ T4515] usb 5-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 766.672967][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 766.687876][ T4515] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 766.700089][T11620] loop5: detected capacity change from 0 to 512 [ 766.717438][ T4515] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 766.778465][T11624] loop2: detected capacity change from 0 to 128 [ 766.797736][T11620] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 766.832968][ T4515] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 766.850258][T11624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 766.859971][T11620] EXT4-fs (loop5): mount failed [ 766.863708][ T4515] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 766.895985][ T4515] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 766.905659][T11624] ext4 filesystem being mounted at /437/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 766.916211][ T4515] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 766.925301][ T4515] usb 5-1: Manufacturer: syz [ 766.932880][ T4515] usb 5-1: config 0 descriptor?? [ 767.012440][ T9947] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 767.730592][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 768.021452][ T4515] rc_core: IR keymap rc-hauppauge not found [ 768.043164][ T4515] Registered IR keymap rc-empty [ 768.105579][ T4515] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.251277][ T4515] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.393564][ T4515] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 768.689782][ T4515] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input45 [ 768.964534][ T4515] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.001374][T11642] loop5: detected capacity change from 0 to 512 [ 769.007960][ T4515] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.037554][ T4515] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.060978][T11642] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 769.068059][ T4515] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.117558][ T4515] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.126217][T11642] EXT4-fs (loop5): mount failed [ 769.138551][T11647] loop2: detected capacity change from 0 to 128 [ 769.156237][ T4515] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.207527][ T4515] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.237657][ T4515] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.297693][ T4515] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.348781][ T4515] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.438781][ T4515] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 769.446465][T11650] loop4: detected capacity change from 0 to 1024 [ 769.470836][T11650] EXT4-fs: Ignoring removed orlov option [ 769.492306][ T4515] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 769.548403][ T4515] usb 5-1: USB disconnect, device number 29 [ 769.572222][ T52] block nbd0: Possible stuck request ffff888024a70000: control (read@0,1024B). Runtime 480 seconds [ 769.583839][ T52] block nbd0: Possible stuck request ffff888024a70200: control (read@1024,1024B). Runtime 480 seconds [ 769.596198][ T52] block nbd0: Possible stuck request ffff888024a70400: control (read@2048,1024B). Runtime 480 seconds [ 769.609042][ T52] block nbd0: Possible stuck request ffff888024a70600: control (read@3072,1024B). Runtime 480 seconds [ 769.624359][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 769.631919][T11650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 769.913549][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 770.239721][T11659] loop5: detected capacity change from 0 to 1024 [ 770.321246][T11659] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 770.329927][T11659] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.374221][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 771.461962][T11673] loop0: detected capacity change from 0 to 128 [ 771.525343][T11673] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 771.550711][T11673] ext4 filesystem being mounted at /432/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 772.207523][ T4288] Bluetooth: hci3: command 0x1003 tx timeout [ 772.216234][ T4293] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 772.701616][ T4290] EXT4-fs (loop0): unmounting filesystem. [ 774.548996][T11696] loop5: detected capacity change from 0 to 512 [ 774.822141][T11696] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 774.877653][T11696] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 776.734379][T11708] 9pnet_fd: Insufficient options for proto=fd [ 776.740813][ T27] audit: type=1804 audit(1780081548.121:49): pid=11708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2142" name="/newroot/128/bus/file1" dev="loop5" ino=15 res=1 errno=0 [ 777.445211][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 777.878025][ T129] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 778.007159][T11715] loop0: detected capacity change from 0 to 1024 [ 778.084061][T11715] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 778.093103][T11715] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 778.116115][ T129] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 778.146002][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.298783][ T129] usb 6-1: Product: syz [ 778.386091][ T129] usb 6-1: Manufacturer: syz [ 778.487654][ T129] usb 6-1: SerialNumber: syz [ 778.897224][ T129] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 779.010361][ T129] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 779.467672][T11700] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 779.766635][ T4290] EXT4-fs (loop0): unmounting filesystem. [ 779.978199][ T129] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 780.007888][ T129] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 780.017718][ T129] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 780.035939][ T129] lan78xx: probe of 6-1:1.0 failed with error -32 [ 780.206350][T11734] loop1: detected capacity change from 0 to 128 [ 780.353180][T11734] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 780.381339][T11734] ext4 filesystem being mounted at /427/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 781.760099][ T4327] usb 6-1: USB disconnect, device number 4 [ 783.205232][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 784.815348][T11769] loop5: detected capacity change from 0 to 128 [ 785.999132][T11775] loop1: detected capacity change from 0 to 1024 [ 786.086100][T11775] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 786.094758][T11775] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.175978][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 787.340546][T11786] loop1: detected capacity change from 0 to 512 [ 787.419144][T11786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 787.482601][T11786] EXT4-fs (loop1): 1 truncate cleaned up [ 787.493086][T11786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 788.381633][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 788.717533][T11653] block nbd3: Possible stuck request ffff888024b70000: control (read@0,1024B). Runtime 420 seconds [ 788.728398][T11653] block nbd3: Possible stuck request ffff888024b70200: control (read@1024,1024B). Runtime 420 seconds [ 788.832352][T11653] block nbd3: Possible stuck request ffff888024b70400: control (read@2048,1024B). Runtime 420 seconds [ 788.844110][T11653] block nbd3: Possible stuck request ffff888024b70600: control (read@3072,1024B). Runtime 420 seconds [ 788.990496][T11805] loop0: detected capacity change from 0 to 128 [ 789.028865][T11805] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 789.053622][ T129] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 789.120969][T11805] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 789.165294][T11805] FAT-fs (loop0): Filesystem has been set read-only [ 789.187717][T11805] syz.0.2168: attempt to access beyond end of device [ 789.187717][T11805] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 789.238186][T11805] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 789.246098][T11805] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 789.271416][ T129] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 789.288216][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.296289][ T129] usb 3-1: Product: syz [ 789.313493][T11805] syz.0.2168: attempt to access beyond end of device [ 789.313493][T11805] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 789.335294][ T129] usb 3-1: Manufacturer: syz [ 789.347506][ T129] usb 3-1: SerialNumber: syz [ 789.353128][ T27] audit: type=1800 audit(1780081560.771:50): pid=11805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2168" name="file2" dev="loop0" ino=1048621 res=0 errno=0 [ 789.597174][ T129] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 789.634065][ T129] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 790.565967][ T129] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 790.617805][ T129] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 790.662541][ T129] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 790.683384][T11815] 9pnet_fd: Insufficient options for proto=fd [ 790.703918][ T129] lan78xx: probe of 3-1:1.0 failed with error -32 [ 790.905634][T11821] loop0: detected capacity change from 0 to 256 [ 790.956203][T11821] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 791.021632][T11821] FAT-fs (loop0): Directory bread(block 64) failed [ 791.057501][T11821] FAT-fs (loop0): Directory bread(block 65) failed [ 791.084589][T11821] FAT-fs (loop0): Directory bread(block 66) failed [ 791.114865][T11821] FAT-fs (loop0): Directory bread(block 67) failed [ 791.137671][T11821] FAT-fs (loop0): Directory bread(block 68) failed [ 791.144287][T11821] FAT-fs (loop0): Directory bread(block 69) failed [ 791.181549][T11821] FAT-fs (loop0): Directory bread(block 70) failed [ 791.217447][T11821] FAT-fs (loop0): Directory bread(block 71) failed [ 791.248936][T11821] FAT-fs (loop0): Directory bread(block 72) failed [ 791.275998][T11821] FAT-fs (loop0): Directory bread(block 73) failed [ 791.485887][T11819] loop1: detected capacity change from 0 to 1024 [ 791.563731][T11819] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 791.585299][T11819] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.767728][ T129] usb 3-1: USB disconnect, device number 21 [ 791.973212][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 794.324960][T11854] loop5: detected capacity change from 0 to 512 [ 794.460078][T11854] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 794.662032][T11854] EXT4-fs (loop5): mount failed [ 794.899029][ T4288] Bluetooth: hci3: command 0x1003 tx timeout [ 794.905753][ T4293] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 795.377211][T11863] device syzkaller0 entered promiscuous mode [ 797.972432][T11878] loop2: detected capacity change from 0 to 256 [ 798.281813][T11886] loop0: detected capacity change from 0 to 128 [ 798.500022][T11878] FAT-fs (loop2): Directory bread(block 64) failed [ 798.535564][T11878] FAT-fs (loop2): Directory bread(block 65) failed [ 798.739416][T11878] FAT-fs (loop2): Directory bread(block 66) failed [ 798.936594][T11878] FAT-fs (loop2): Directory bread(block 67) failed [ 798.943375][T11878] FAT-fs (loop2): Directory bread(block 68) failed [ 798.950006][T11878] FAT-fs (loop2): Directory bread(block 69) failed [ 798.956616][T11878] FAT-fs (loop2): Directory bread(block 70) failed [ 798.981551][T11878] FAT-fs (loop2): Directory bread(block 71) failed [ 799.057884][T11878] FAT-fs (loop2): Directory bread(block 72) failed [ 799.106980][T11878] FAT-fs (loop2): Directory bread(block 73) failed [ 800.197726][T11653] block nbd0: Possible stuck request ffff888024a70000: control (read@0,1024B). Runtime 510 seconds [ 800.209423][T11653] block nbd0: Possible stuck request ffff888024a70200: control (read@1024,1024B). Runtime 510 seconds [ 800.220931][T11653] block nbd0: Possible stuck request ffff888024a70400: control (read@2048,1024B). Runtime 510 seconds [ 800.232074][T11653] block nbd0: Possible stuck request ffff888024a70600: control (read@3072,1024B). Runtime 510 seconds [ 801.849970][T11907] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2197'. [ 802.165128][T11913] loop2: detected capacity change from 0 to 256 [ 802.198736][T11913] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 802.618702][T11913] FAT-fs (loop2): Directory bread(block 64) failed [ 802.798179][T11913] FAT-fs (loop2): Directory bread(block 65) failed [ 802.874101][T11913] FAT-fs (loop2): Directory bread(block 66) failed [ 803.030982][T11913] FAT-fs (loop2): Directory bread(block 67) failed [ 803.224160][T11913] FAT-fs (loop2): Directory bread(block 68) failed [ 803.277927][T11913] FAT-fs (loop2): Directory bread(block 69) failed [ 803.327624][T11913] FAT-fs (loop2): Directory bread(block 70) failed [ 803.334322][T11913] FAT-fs (loop2): Directory bread(block 71) failed [ 803.418382][T11913] FAT-fs (loop2): Directory bread(block 72) failed [ 803.425004][T11913] FAT-fs (loop2): Directory bread(block 73) failed [ 812.913781][T12030] loop1: detected capacity change from 0 to 512 [ 812.922927][T12030] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 813.250342][T12030] EXT4-fs (loop1): 1 truncate cleaned up [ 813.256202][T12030] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 813.682149][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.695611][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.580295][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 814.856830][ T4293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 814.872934][ T4293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 814.881121][ T4293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 814.890169][T10503] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 814.919445][T10503] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 814.927102][T10503] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 817.037174][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 817.743242][ T5155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.874416][T12044] chnl_net:caif_netlink_parms(): no params data found [ 818.029066][ T5155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.144936][ T5155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.419631][ T5155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.706157][T12044] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.758683][T11653] block nbd3: Possible stuck request ffff888024b70000: control (read@0,1024B). Runtime 450 seconds [ 818.816730][T12044] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.838127][T11653] block nbd3: Possible stuck request ffff888024b70200: control (read@1024,1024B). Runtime 450 seconds [ 818.850071][T11653] block nbd3: Possible stuck request ffff888024b70400: control (read@2048,1024B). Runtime 450 seconds [ 818.862084][T12044] device bridge_slave_0 entered promiscuous mode [ 818.868030][T11653] block nbd3: Possible stuck request ffff888024b70600: control (read@3072,1024B). Runtime 450 seconds [ 818.900184][T12044] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.907545][T12044] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.915810][T12044] device bridge_slave_1 entered promiscuous mode [ 818.941596][T12044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.954388][T12044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.983614][T12044] team0: Port device team_slave_0 added [ 818.991977][T12044] team0: Port device team_slave_1 added [ 819.087697][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 819.206246][T12044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.245225][T12044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.271253][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.353602][T12044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.395194][T12044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.425387][T12044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.451467][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.578998][T12044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.178832][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 823.238294][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 827.481714][T12044] device hsr_slave_0 entered promiscuous mode [ 827.489006][T12044] device hsr_slave_1 entered promiscuous mode [ 827.499884][T12044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 827.540914][T12044] Cannot create hsr debugfs directory [ 827.582344][ T5155] tipc: Left network mode [ 832.184930][T12191] loop4: detected capacity change from 0 to 512 [ 832.478259][T12191] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 832.557502][T12191] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 832.651710][T12191] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.2264: Invalid inode table block 1 in block_group 0 [ 832.751371][T12191] EXT4-fs (loop4): get root inode failed [ 832.827689][T12191] EXT4-fs (loop4): mount failed [ 833.210448][T11653] block nbd0: Possible stuck request ffff888024a70000: control (read@0,1024B). Runtime 540 seconds [ 833.221279][T11653] block nbd0: Possible stuck request ffff888024a70200: control (read@1024,1024B). Runtime 540 seconds [ 833.232480][T11653] block nbd0: Possible stuck request ffff888024a70400: control (read@2048,1024B). Runtime 540 seconds [ 833.243522][T11653] block nbd0: Possible stuck request ffff888024a70600: control (read@3072,1024B). Runtime 540 seconds [ 834.410886][T12044] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 834.638110][T12044] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 834.668617][T12044] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 834.866881][T12044] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 835.966058][T12044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.411553][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 836.449889][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 836.583746][T12044] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.950880][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 836.971439][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 837.004292][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.011558][ T4399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.037769][ T4348] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 837.064776][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 837.153184][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 837.172342][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 837.200563][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.207808][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.231402][ T4348] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 837.256364][ T4348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.273760][ T4348] usb 6-1: Product: syz [ 837.282930][ T4348] usb 6-1: Manufacturer: syz [ 837.292447][ T4348] usb 6-1: SerialNumber: syz [ 837.526473][ T4348] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 837.543948][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 837.577186][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 837.639256][ T4348] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 837.763803][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 837.904482][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 838.033353][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 838.300496][ T5155] device hsr_slave_0 left promiscuous mode [ 838.389637][ T5155] device hsr_slave_1 left promiscuous mode [ 838.398566][ T5155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.426095][ T5155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.458656][ T5155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.504428][ T5155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.533246][ T5155] device bridge_slave_1 left promiscuous mode [ 838.552999][ T5155] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.615337][ T5155] device bridge_slave_0 left promiscuous mode [ 838.639254][ T5155] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.791630][T12264] loop2: detected capacity change from 0 to 512 [ 839.055060][T12264] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 839.121630][ T4348] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 839.416790][ T4348] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 839.561479][ T4348] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 839.571345][T12264] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 839.646894][T12264] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.2277: Invalid inode table block 1 in block_group 0 [ 839.671147][ T4348] lan78xx: probe of 6-1:1.0 failed with error -32 [ 839.721423][ T4348] usb 6-1: USB disconnect, device number 5 [ 839.764647][T12264] EXT4-fs (loop2): get root inode failed [ 839.788209][T12264] EXT4-fs (loop2): mount failed [ 839.818288][ T5155] device veth1_macvtap left promiscuous mode [ 839.843741][ T5155] device veth0_macvtap left promiscuous mode [ 839.898546][ T5155] device veth1_vlan left promiscuous mode [ 839.932718][ T5155] device veth0_vlan left promiscuous mode [ 840.579270][T12280] ubi: mtd0 is already attached to ubi0 [ 842.482249][T12295] tmpfs: Unknown parameter 'nr_ino' [ 842.620570][ T5155] team0 (unregistering): Port device team_slave_1 removed [ 843.194421][ T5155] team0 (unregistering): Port device team_slave_0 removed [ 843.347552][ T5155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.484700][ T5155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.295135][ T5155] bond0 (unregistering): Released all slaves [ 844.493998][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 844.517772][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 844.541098][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 844.553342][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 844.565861][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 844.574751][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 844.727600][T12044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 844.958511][T12325] loop5: detected capacity change from 0 to 512 [ 845.027548][T12325] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 845.108836][ T4325] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 845.339445][ T4325] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 845.376625][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.399943][ T4325] usb 5-1: Product: syz [ 845.404181][ T4325] usb 5-1: Manufacturer: syz [ 845.460460][T12325] EXT4-fs (loop5): 1 truncate cleaned up [ 845.527332][ T4325] usb 5-1: SerialNumber: syz [ 845.600441][T12325] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 845.942410][ T4325] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 846.048615][ T4325] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 846.828391][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 846.836199][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 846.904912][T12044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.080259][ T4325] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 847.106066][ T4325] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 847.146508][ T4325] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 847.178327][T12356] tmpfs: Unknown parameter 'nr_ino' [ 847.184279][ T4325] lan78xx: probe of 5-1:1.0 failed with error -32 [ 847.239790][ T4325] usb 5-1: USB disconnect, device number 30 [ 848.838872][T11653] block nbd3: Possible stuck request ffff888024b70000: control (read@0,1024B). Runtime 480 seconds [ 848.858376][T11653] block nbd3: Possible stuck request ffff888024b70200: control (read@1024,1024B). Runtime 480 seconds [ 848.870034][T11653] block nbd3: Possible stuck request ffff888024b70400: control (read@2048,1024B). Runtime 480 seconds [ 848.888145][T11653] block nbd3: Possible stuck request ffff888024b70600: control (read@3072,1024B). Runtime 480 seconds [ 849.434011][T12381] loop2: detected capacity change from 0 to 512 [ 849.818103][T12381] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 849.846840][T12381] EXT4-fs (loop2): orphan cleanup on readonly fs [ 850.093006][T12381] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 850.228637][T12381] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 850.917917][T12381] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #16: comm syz.2.2298: inode has both inline data and extents flags [ 850.998276][T12381] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2298: couldn't read orphan inode 16 (err -117) [ 851.192734][T12381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 851.815236][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 851.979392][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 851.998243][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 852.080854][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 852.110954][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 852.147672][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 852.167870][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 852.198508][T12044] device veth0_vlan entered promiscuous mode [ 852.205968][ T4348] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 852.270773][T12044] device veth1_vlan entered promiscuous mode [ 852.372057][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 852.390881][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 852.408453][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 852.417479][ T4348] usb 5-1: Using ep0 maxpacket: 32 [ 852.424582][ T4348] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 852.432485][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 852.452542][T12044] device veth0_macvtap entered promiscuous mode [ 852.470237][ T4348] usb 5-1: config 0 has no interface number 0 [ 852.501384][T12044] device veth1_macvtap entered promiscuous mode [ 852.507162][ T4348] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 852.539665][ T4348] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 852.571347][ T4348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.574825][T12044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.599890][ T4348] usb 5-1: Product: syz [ 852.602719][T12044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.617513][ T4348] usb 5-1: Manufacturer: syz [ 852.632452][ T4348] usb 5-1: SerialNumber: syz [ 852.661789][ T4348] usb 5-1: config 0 descriptor?? [ 852.688091][T12408] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 852.830053][T12044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.892026][T12044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.930976][T12408] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 852.973080][T12044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.270230][T12044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.298216][T12044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.308805][T12044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.320174][T12044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.332516][T12044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.384756][T12044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.417292][T12044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.453856][T12044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.513576][T12044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.590744][T12044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.650026][T12044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.694859][T12044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.837389][T12044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.884274][T12044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.894270][T12044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.904854][T12044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.917689][T12044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.925134][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 853.934137][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 853.942357][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 853.980175][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 854.028424][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 854.090482][ T4348] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 854.108341][ T4348] asix: probe of 5-1:0.188 failed with error -32 [ 854.118031][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 854.162895][T12044] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.183152][T12044] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.204948][T12044] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.221931][T12044] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.469044][ T4399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.481490][ T4399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.507149][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 854.529847][ T4399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.555927][ T4399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.579434][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 854.768570][T12450] loop6: detected capacity change from 0 to 1024 [ 854.775894][T12450] EXT4-fs: Ignoring removed orlov option [ 854.858091][T12450] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 854.882306][T12450] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2224'. [ 855.110698][T12044] EXT4-fs (loop6): unmounting filesystem. [ 855.179206][ T4347] usb 5-1: USB disconnect, device number 31 [ 857.231116][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 857.608022][T12481] loop4: detected capacity change from 0 to 1024 [ 857.676634][T12481] EXT4-fs: Mount option(s) incompatible with ext3 [ 860.431880][ T4327] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 860.911604][T12522] loop4: detected capacity change from 0 to 1024 [ 860.946934][T12522] EXT4-fs: Ignoring removed orlov option [ 860.968727][T12525] loop2: detected capacity change from 0 to 128 [ 860.997691][ T4327] usb 2-1: Using ep0 maxpacket: 32 [ 861.004797][ T4327] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 861.032496][ T4327] usb 2-1: config 0 has no interface number 0 [ 861.050014][ T4327] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 861.061319][T12525] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 861.071092][T12522] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 861.108063][T12525] ext4 filesystem being mounted at /491/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 861.142096][T12531] loop5: detected capacity change from 0 to 512 [ 861.150155][ T4327] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 861.187880][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.195949][ T4327] usb 2-1: Product: syz [ 861.249456][T12525] EXT4-fs warning (device loop2): ext4_group_extend:1899: can't read last block, resize aborted [ 861.262401][T12531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 861.268685][ T4327] usb 2-1: Manufacturer: syz [ 861.275511][ T4327] usb 2-1: SerialNumber: syz [ 861.318567][T12531] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 861.338042][T12531] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 861.358740][ T4327] usb 2-1: config 0 descriptor?? [ 861.373002][T12507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 861.429808][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 861.568064][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 861.600472][T12507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 861.668160][ T9522] EXT4-fs (loop5): unmounting filesystem. [ 862.872490][ T4327] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 862.911614][ T4327] asix: probe of 2-1:0.188 failed with error -61 [ 863.563102][T11653] block nbd0: Possible stuck request ffff888024a70000: control (read@0,1024B). Runtime 570 seconds [ 863.574222][T11653] block nbd0: Possible stuck request ffff888024a70200: control (read@1024,1024B). Runtime 570 seconds [ 863.587557][T11653] block nbd0: Possible stuck request ffff888024a70400: control (read@2048,1024B). Runtime 570 seconds [ 863.599032][T11653] block nbd0: Possible stuck request ffff888024a70600: control (read@3072,1024B). Runtime 570 seconds [ 864.776477][ T4327] usb 2-1: USB disconnect, device number 21 [ 864.909116][T12584] loop6: detected capacity change from 0 to 128 [ 866.088128][T12584] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 866.160576][T12584] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 866.181764][T12597] loop2: detected capacity change from 0 to 512 [ 866.247522][T12597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 866.286534][T12604] loop1: detected capacity change from 0 to 1024 [ 866.338209][T12604] EXT4-fs: Ignoring removed orlov option [ 866.490700][T12044] EXT4-fs (loop6): unmounting filesystem. [ 866.509626][T12604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 866.560268][T12597] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 866.786544][T12597] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 866.797787][T12604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2345'. [ 867.013826][T12617] overlayfs: failed to resolve './bus': -2 [ 867.726743][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 867.789813][T12620] loop4: detected capacity change from 0 to 512 [ 867.859422][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 868.000347][T12620] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 868.282406][T12620] EXT4-fs (loop4): mount failed [ 872.659934][T12693] overlayfs: failed to resolve './bus': -2 [ 873.364143][T12697] tmpfs: Bad value for 'nr_inodes' [ 875.161105][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.167906][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.349954][T12723] loop6: detected capacity change from 0 to 512 [ 876.636680][T12723] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 876.870571][T12723] EXT4-fs (loop6): mount failed [ 878.559640][T12758] overlayfs: failed to resolve './bus': -2 [ 878.918320][T11653] block nbd3: Possible stuck request ffff888024b70000: control (read@0,1024B). Runtime 510 seconds [ 878.935425][T11653] block nbd3: Possible stuck request ffff888024b70200: control (read@1024,1024B). Runtime 510 seconds [ 879.186897][T11653] block nbd3: Possible stuck request ffff888024b70400: control (read@2048,1024B). Runtime 510 seconds [ 879.198048][T11653] block nbd3: Possible stuck request ffff888024b70600: control (read@3072,1024B). Runtime 510 seconds [ 879.497132][T12763] loop4: detected capacity change from 0 to 512 [ 880.003485][T12763] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 880.758701][T12763] EXT4-fs (loop4): mount failed [ 883.550043][T12805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 885.010451][T12835] device syzkaller0 entered promiscuous mode [ 893.638380][T11653] block nbd0: Possible stuck request ffff888024a70000: control (read@0,1024B). Runtime 600 seconds [ 893.649391][T11653] block nbd0: Possible stuck request ffff888024a70200: control (read@1024,1024B). Runtime 600 seconds [ 893.662266][T11653] block nbd0: Possible stuck request ffff888024a70400: control (read@2048,1024B). Runtime 600 seconds [ 893.673373][T11653] block nbd0: Possible stuck request ffff888024a70600: control (read@3072,1024B). Runtime 600 seconds [ 896.420546][ T28] INFO: task udevd:4458 blocked for more than 143 seconds. [ 896.703112][ T28] Not tainted syzkaller #0 [ 896.749715][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 896.800378][ T28] task:udevd state:D stack:24112 pid:4458 ppid:3639 flags:0x00004006 [ 896.859347][ T28] Call Trace: [ 896.883418][ T28] [ 896.899911][ T28] __schedule+0x11d1/0x40e0 [ 896.939319][ T28] ? mark_lock+0x94/0x320 [ 896.943846][ T28] ? __sched_text_start+0x8/0x8 [ 896.948839][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 896.955364][ T28] ? lock_chain_count+0x20/0x20 [ 896.960906][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 896.966099][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 896.980085][ T28] schedule+0xb9/0x180 [ 896.984262][ T28] io_schedule+0x7c/0xd0 [ 896.988621][ T28] folio_wait_bit_common+0x70a/0xfa0 [ 896.993983][ T28] ? folio_wait_bit+0x30/0x30 [ 897.007395][ T28] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 897.013832][ T28] do_read_cache_folio+0x1a9/0x760 [ 897.023938][ T28] ? blkdev_writepage+0x30/0x30 [ 897.038957][ T28] read_part_sector+0xce/0x350 [ 897.049490][ T28] adfspart_check_POWERTEC+0xc0/0x890 [ 897.060663][ T28] ? adfspart_check_ADFS+0x570/0x570 [ 897.072920][ T28] ? snprintf+0xe5/0x140 [ 897.088399][ T28] ? adfspart_check_ICS+0xa30/0xa30 [ 897.100478][ T28] ? vscnprintf+0x80/0x80 [ 897.106212][ T28] ? alloc_pages+0x4d8/0x740 [ 897.111246][ T28] bdev_disk_changed+0x7d9/0x14a0 [ 897.116451][ T28] ? rcu_is_watching+0x11/0xa0 [ 897.126225][ T28] ? blk_drop_partitions+0x1b0/0x1b0 [ 897.138960][ T28] ? _atomic_dec_and_lock+0x8f/0x110 [ 897.151253][ T28] ? iput+0x3c0/0x980 [ 897.159882][ T28] blkdev_get_whole+0x2e8/0x370 [ 897.170552][ T28] blkdev_get_by_dev+0x32e/0xa60 [ 897.183262][ T28] ? __rwlock_init+0x140/0x140 [ 897.193984][ T28] blkdev_open+0x11e/0x2e0 [ 897.200869][ T28] ? blkdev_mmap+0x1a0/0x1a0 [ 897.205538][ T28] do_dentry_open+0x7e9/0x10d0 [ 897.215812][ T28] path_openat+0x2635/0x2ee0 [ 897.222012][ T28] ? verify_lock_unused+0x140/0x140 [ 897.227298][ T28] ? do_syscall_64+0x4c/0xa0 [ 897.237305][ T28] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.244787][ T28] ? do_filp_open+0x430/0x430 [ 897.257313][ T28] do_filp_open+0x1f1/0x430 [ 897.262243][ T28] ? vfs_tmpfile+0x480/0x480 [ 897.267013][ T28] ? _raw_spin_unlock+0x24/0x40 [ 897.272221][ T28] ? alloc_fd+0x58f/0x630 [ 897.276691][ T28] do_sys_openat2+0x150/0x4b0 [ 897.282268][ T28] ? __x64_sys_recvmsg+0x21d/0x2e0 [ 897.287713][ T28] ? do_sys_open+0xe0/0xe0 [ 897.292316][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 897.298786][ T28] ? lock_chain_count+0x20/0x20 [ 897.308410][ T28] __x64_sys_openat+0x135/0x160 [ 897.313474][ T28] do_syscall_64+0x4c/0xa0 [ 897.337019][ T28] ? clear_bhb_loop+0x60/0xb0 [ 897.353340][ T28] ? clear_bhb_loop+0x60/0xb0 [ 897.366567][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.389991][ T28] RIP: 0033:0x7fef8e4a7407 [ 897.395500][ T28] RSP: 002b:00007ffc4f44cc50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 897.423296][ T28] RAX: ffffffffffffffda RBX: 00007fef8eb63880 RCX: 00007fef8e4a7407 [ 897.434564][ T28] RDX: 00000000000a0800 RSI: 000055b79b5106e0 RDI: ffffffffffffff9c [ 897.449705][ T28] RBP: 000055b79b4f4910 R08: 0000000000000000 R09: 0000000000000000 [ 897.462339][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b79b529e00 [ 897.473057][ T28] R13: 000055b79b50c410 R14: 0000000000000000 R15: 000055b79b529e00 [ 897.486019][ T28] [ 897.521279][ T28] INFO: task udevd:4479 blocked for more than 144 seconds. [ 897.560141][ T28] Not tainted syzkaller #0 [ 897.575554][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 897.602635][ T28] task:udevd state:D stack:22928 pid:4479 ppid:3639 flags:0x00004006 [ 897.630983][ T28] Call Trace: [ 897.645229][ T28] [ 897.656850][ T28] __schedule+0x11d1/0x40e0 [ 897.674796][ T28] ? mark_lock+0x94/0x320 [ 897.690832][ T28] ? __sched_text_start+0x8/0x8 [ 897.705370][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 897.730934][ T28] ? lock_chain_count+0x20/0x20 [ 897.746976][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 897.766433][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 897.788781][ T28] schedule+0xb9/0x180 [ 897.802279][ T28] io_schedule+0x7c/0xd0 [ 897.814630][ T28] folio_wait_bit_common+0x70a/0xfa0 [ 897.842484][ T28] ? folio_wait_bit+0x30/0x30 [ 897.865350][ T28] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 897.894423][ T28] do_read_cache_folio+0x1a9/0x760 [ 897.916833][ T28] ? blkdev_writepage+0x30/0x30 [ 897.923469][ T28] read_part_sector+0xce/0x350 [ 897.933841][ T28] adfspart_check_POWERTEC+0xc0/0x890 [ 897.941347][ T28] ? adfspart_check_ADFS+0x570/0x570 [ 897.946786][ T28] ? snprintf+0xe5/0x140 [ 897.956676][ T28] ? adfspart_check_ICS+0xa30/0xa30 [ 897.963472][ T28] ? vscnprintf+0x80/0x80 [ 897.973135][ T28] ? alloc_pages+0x4d8/0x740 [ 897.977854][ T28] bdev_disk_changed+0x7d9/0x14a0 [ 897.984191][ T28] ? rcu_is_watching+0x11/0xa0 [ 897.989782][ T28] ? blk_drop_partitions+0x1b0/0x1b0 [ 897.995189][ T28] ? _atomic_dec_and_lock+0x8f/0x110 [ 898.001545][ T28] ? iput+0x3c0/0x980 [ 898.005671][ T28] blkdev_get_whole+0x2e8/0x370 [ 898.010941][ T28] blkdev_get_by_dev+0x32e/0xa60 [ 898.016023][ T28] ? __rwlock_init+0x140/0x140 [ 898.021132][ T28] blkdev_open+0x11e/0x2e0 [ 898.025722][ T28] ? blkdev_mmap+0x1a0/0x1a0 [ 898.030670][ T28] do_dentry_open+0x7e9/0x10d0 [ 898.035595][ T28] path_openat+0x2635/0x2ee0 [ 898.040550][ T28] ? verify_lock_unused+0x140/0x140 [ 898.045901][ T28] ? do_syscall_64+0x4c/0xa0 [ 898.055870][ T28] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.062344][ T28] ? do_filp_open+0x430/0x430 [ 898.067197][ T28] do_filp_open+0x1f1/0x430 [ 898.078156][ T28] ? vfs_tmpfile+0x480/0x480 [ 898.082928][ T28] ? _raw_spin_unlock+0x24/0x40 [ 898.090041][ T28] ? alloc_fd+0x58f/0x630 [ 898.094512][ T28] do_sys_openat2+0x150/0x4b0 [ 898.101562][ T28] ? __x64_sys_recvmsg+0x21d/0x2e0 [ 898.106910][ T28] ? do_sys_open+0xe0/0xe0 [ 898.111652][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 898.121188][ T28] ? lock_chain_count+0x20/0x20 [ 898.126180][ T28] __x64_sys_openat+0x135/0x160 [ 898.131396][ T28] do_syscall_64+0x4c/0xa0 [ 898.135933][ T28] ? clear_bhb_loop+0x60/0xb0 [ 898.140914][ T28] ? clear_bhb_loop+0x60/0xb0 [ 898.145728][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.151912][ T28] RIP: 0033:0x7fef8e4a7407 [ 898.156437][ T28] RSP: 002b:00007ffc4f44cc50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 898.165807][ T28] RAX: ffffffffffffffda RBX: 00007fef8eb63880 RCX: 00007fef8e4a7407 [ 898.174117][ T28] RDX: 00000000000a0800 RSI: 000055b79b4fc860 RDI: ffffffffffffff9c [ 898.182363][ T28] RBP: 000055b79b4f4910 R08: 0000000000000000 R09: 0000000000000000 [ 898.194769][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b79b50ce00 [ 898.206494][ T28] R13: 000055b79b50c410 R14: 0000000000000000 R15: 000055b79b50ce00 [ 898.222675][ T28] [ 898.225903][ T28] [ 898.225903][ T28] Showing all locks held in the system: [ 898.235176][ T28] 1 lock held by rcu_tasks_kthre/12: [ 898.240742][ T28] #0: ffffffff8cb2e770 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 898.251498][ T28] 1 lock held by rcu_tasks_trace/13: [ 898.256895][ T28] #0: ffffffff8cb2ef90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 898.277508][ T28] 1 lock held by khungtaskd/28: [ 898.282497][ T28] #0: ffffffff8cb2dde0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 898.299371][ T28] 2 locks held by getty/4032: [ 898.304115][ T28] #0: ffff88814d27d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 898.323581][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 898.334740][ T28] 1 lock held by udevd/4458: [ 898.346020][ T28] #0: ffff888143b0a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60 [ 898.356833][ T28] 1 lock held by udevd/4479: [ 898.368150][ T28] #0: ffff888024a1d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60 [ 898.384296][ T28] 3 locks held by kworker/0:8/4515: [ 898.390859][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 898.406700][ T28] #1: ffffc900049efd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 898.422766][ T28] #2: ffffffff8cb33ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 898.440812][ T28] 3 locks held by kworker/u4:22/5157: [ 898.446257][ T28] 4 locks held by kworker/u4:24/5159: [ 898.451927][ T28] #0: ffff888017616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 898.462575][ T28] #1: ffffc90003b2fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 898.472792][ T28] #2: ffffffff8dd3c890 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 898.486441][ T28] #3: ffffffff8cb33980 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x600 [ 898.502759][ T28] 2 locks held by kworker/0:10/12739: [ 898.508324][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 898.519818][ T28] #1: ffffc90003777d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 898.531528][ T28] 1 lock held by sed/12966: [ 898.536230][ T28] [ 898.539809][ T28] ============================================= [ 898.539809][ T28] [ 898.548557][ T28] NMI backtrace for cpu 0 [ 898.552930][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 898.560162][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 898.570252][ T28] Call Trace: [ 898.573572][ T28] [ 898.576551][ T28] dump_stack_lvl+0x188/0x24e [ 898.581320][ T28] ? irq_work_queue+0xb8/0x140 [ 898.586136][ T28] ? show_regs_print_info+0x12/0x12 [ 898.591369][ T28] ? load_image+0x400/0x400 [ 898.595909][ T28] ? vprintk_emit+0x59f/0x6a0 [ 898.600642][ T28] ? printk_sprint+0x460/0x460 [ 898.605475][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 898.610445][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 898.616643][ T28] ? _printk+0xda/0x130 [ 898.620835][ T28] ? load_image+0x400/0x400 [ 898.625380][ T28] ? load_image+0x400/0x400 [ 898.629933][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 898.636055][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 898.642178][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 898.648285][ T28] watchdog+0xeee/0xf30 [ 898.652488][ T28] ? watchdog+0x1ed/0xf30 [ 898.656867][ T28] kthread+0x29d/0x330 [ 898.660975][ T28] ? hungtask_pm_notify+0x40/0x40 [ 898.666038][ T28] ? kthread_blkcg+0xd0/0xd0 [ 898.670676][ T28] ret_from_fork+0x1f/0x30 [ 898.675132][ T28] [ 898.679204][ T28] Sending NMI from CPU 0 to CPUs 1: [ 898.684455][ C1] NMI backtrace for cpu 1 [ 898.684465][ C1] CPU: 1 PID: 4335 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 898.684482][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 898.684492][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 898.684522][ C1] RIP: 0010:kasan_check_range+0x84/0x290 [ 898.684560][ C1] Code: 49 c1 e9 03 4b 8d 1c 21 49 89 df 4d 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38 01 00 00 4c 89 cb 48 f7 d3 4c 01 f3 41 80 3b 00 <0f> 85 86 01 00 00 49 ff c3 48 ff c3 75 ee e9 18 01 00 00 44 89 dd [ 898.684573][ C1] RSP: 0018:ffffc900040979b0 EFLAGS: 00000246 [ 898.684585][ C1] RAX: ffffffff84856e01 RBX: fffffffffffffff9 RCX: ffffffff84856e2f [ 898.684597][ C1] RDX: 0000000000000001 RSI: 0000000000000040 RDI: ffffc90004097a20 [ 898.684607][ C1] RBP: 0000000000000000 R08: ffffc90004097a5f R09: 1ffff92000812f4b [ 898.684623][ C1] R10: dffffc0000000000 R11: fffff52000812f45 R12: dffffc0000000001 [ 898.684635][ C1] R13: ffffc90004097a80 R14: 1ffff92000812f44 R15: 0000000000000008 [ 898.684646][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 898.684659][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 898.684669][ C1] CR2: 00007f95e6771a90 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 898.684684][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 898.684710][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 898.684721][ C1] Call Trace: [ 898.684725][ C1] [ 898.684733][ C1] memset+0x1e/0x40 [ 898.684749][ C1] _get_random_bytes+0xcf/0x250 [ 898.684772][ C1] ? get_random_bytes+0x20/0x20 [ 898.684795][ C1] ? __kmem_cache_alloc_node+0x140/0x260 [ 898.684814][ C1] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 898.684839][ C1] ? rcu_is_watching+0x11/0xa0 [ 898.684864][ C1] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 898.684892][ C1] ? __alloc_skb+0x4f3/0x7e0 [ 898.684907][ C1] ? skb_put+0x117/0x210 [ 898.684925][ C1] nsim_dev_trap_report_work+0x334/0xaf0 [ 898.684959][ C1] ? process_one_work+0x7b0/0x1160 [ 898.684979][ C1] process_one_work+0x8a2/0x1160 [ 898.685005][ C1] ? worker_detach_from_pool+0x240/0x240 [ 898.685026][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 898.685057][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 898.685076][ C1] ? kthread_data+0x4b/0xc0 [ 898.685101][ C1] worker_thread+0xaa2/0x1270 [ 898.685131][ C1] kthread+0x29d/0x330 [ 898.685144][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 898.685161][ C1] ? kthread_blkcg+0xd0/0xd0 [ 898.685175][ C1] ret_from_fork+0x1f/0x30 [ 898.685202][ C1] [ 898.700508][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 898.700552][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 898.700605][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 898.700629][ T28] Call Trace: [ 898.700647][ T28] [ 898.700666][ T28] dump_stack_lvl+0x188/0x24e [ 898.700741][ T28] ? memcpy+0x3c/0x60 [ 898.700808][ T28] ? show_regs_print_info+0x12/0x12 [ 898.700862][ T28] ? load_image+0x400/0x400 [ 898.700952][ T28] panic+0x2e5/0x730 [ 898.701008][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 898.701092][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 898.701158][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 898.701248][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 898.701332][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 898.701428][ T28] watchdog+0xf2d/0xf30 [ 898.701497][ T28] ? watchdog+0x1ed/0xf30 [ 898.701569][ T28] kthread+0x29d/0x330 [ 898.701608][ T28] ? hungtask_pm_notify+0x40/0x40 [ 898.701661][ T28] ? kthread_blkcg+0xd0/0xd0 [ 898.701715][ T28] ret_from_fork+0x1f/0x30 [ 898.701800][ T28] [ 898.709906][ T28] Kernel Offset: disabled [ 899.053622][ T28] Rebooting in 86400 seconds..