last executing test programs: 2m32.496936854s ago: executing program 2 (id=117): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xf80) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/152, 0x98}], 0x1) 2m30.564477541s ago: executing program 2 (id=130): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) sendmsg$unix(r2, &(0x7f0000000340)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0xa, 0x4000815}, 0x4000080) close(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x4}]}}]}, 0x38}}, 0x20040054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x103, 0xc574450d1af1b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2m28.121463849s ago: executing program 2 (id=136): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x1000000, &(0x7f00000001c0)={[{@barrier_val={'barrier', 0x3d, 0x4}}, {@dioread_lock}, {@nojournal_checksum}]}, 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 2m27.737344847s ago: executing program 2 (id=140): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x81, &(0x7f0000000480)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}, {@usrquota}, {@journal_checksum}, {@bh}, {@nodioread_nolock}, {}], [{@subj_role={'subj_role', 0x3d, 'nodioread_nolock'}}, {@flag='sync'}]}, 0x0, 0x64a, &(0x7f0000002380)="$eJzs3c9vFG8ZAPBnZrfd/kC3EKPiQRqNgURpaQFDjAn04okQ/HHzVGkhyEIJrdEiiW2CFxPjxYOJJw/if6EkXj158+DFkyEhxnAQQ77sN7M7W7a73Xa77Xbp9vNJls7Muzvvs2SffWfefd+ZAE6s6eyfNOJsRDxOIspNZcXIC6frz3vz32d3skcS1er3/5PEs18kG837SvK/k/mLPynXt5wptNe7uv70wWKlsvwkX59de/h4dnX96cX7DxfvLd9bfjT/zflrV69cvTZ36UDvL4tgJF+++fzHPy3/6tYP//j7d8ncn/55K4kb8T6PLXtfra8tHajm7P9sOqp1b7cVpBHXDrjvj8X/yo3PSU0p+0AkxUFGxH6kEXE9z5EvRDkK8SFZy/HL7w40OKCvqknU2qjpKnDyJNGx6P5Y/iXRbqyvMQFHoXEc0Di33+k8uF3az0MS4Ii8Xqj31dVzfyQiGvlfrPcNxlitb2DiTdLcz1PrVztYz1xdVsff/nrrefaIDv1wQH9sbDZ6uVvb/6SWm1NRPweYeJNuy/+F/CggzX8n+F7rjrvsPJ9uWZf/cHQ2NiPii3n7Pxpd53+a524j/3/UY/095v+pHqsDAAAAAACAofZyISK+sdP4v3Rr/M9ooX38z2RE3DiE+vf+/S99lS8kh1Ad0OT1QsS3dxz/uzXGd6qQr32mNh5gJLl7v7J8KSI+GxEXYqSUrc+17Ld5hPDFX5/5Xaf6m8f/ZY+s/sZYwHxPr4otY4mWFtcWD/q+gYjXmxFfqo3/PZdv2T7+J2v/k63xvx+G3WT5/bjLOs587cXtTmV75z/QL9U/RJzfsf3/cLid7H59jtna8cBs46ig3Zd//ps/d6pf/sPgZO3/xO75X0qar9ezur/9j0bE5fVitVN5r8f/o8kPCo39Z362uLb2ZC5iNLnZvn1+fzHDsGrkQyNfsvy/8NXd+/+2jv+b8nA8Ija6rPPz7yf/1alM+w+Dk+X/0u7tf3l7+7//hfkXU3/pVP/trtr/K7U2/UK+Rf8fNGu/Hke3CTqQcAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgmEsj4lQk6czWcprOzERMRsTnYiKtrKyuff3uyk8eLUXt7t9TMZI27vRbrq8njfv/TzWtz7esX46I0xHx28J4bX3mzkpladBvHgAAAAAAAAAAAAAAAAAAAD4Sk7U5/9VS6/z/zL8Lg44O6Lti/le+w8lT7PmV1dKhBgIcud7zHzjONveV/yN9jQU4ep3z/+27ak3L5u98pe8xAUej6/b/7073Ydj0eP7v5wIYAvr/4KTqsk9vrN9xAIOg/QcAAAAAgKFy+tzLfyQRsfGt8dojM5qXjQ80MqDf0j3KfQfA8DKGF06u4sqgIwAGxYR+INla+n/rZP+azqP/k/4EBAAAAAAAAAAAAAC0OX+28/x/cwNguO06/3+viwMAx9ou8/93mtjjcgEwRDrf+sO8Phh2zvGBvVp78/8BAAAAAAAAAAAA4CMw9vTBYqWy/GR1/fgtXO/pVYWIGGDwG4sH20+1NKjgx6JT0fv+VDoSEYP+jB3aQpZslcpytRqx95Mbl+AYYMx7f3WU+vzVBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1H0aAAD///UvHMY=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000002d80)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002d40)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000002010108000000001000000007000006080015400000000208001640000004aa0800084000000007db92092d238dff0485e44f94c7e1d4e6f94aa12b361b54f74bc23b3e096682944bd396e9267fe1aaf60ab6541956027bd9d2393831d84cb5ebc0cb64c7ec55e19e00"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 2m26.286540025s ago: executing program 2 (id=148): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) rename(0x0, 0x0) close(r0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x18c7c80, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xbb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0xf, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000034000)=""/102392, 0x18ff8) 2m26.285895375s ago: executing program 3 (id=149): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1c, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) 2m25.047341969s ago: executing program 3 (id=154): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r1, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r2) sendmmsg$unix(r0, &(0x7f0000002580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x20, 0x4000}}], 0x2, 0x2900) 2m23.632681957s ago: executing program 3 (id=156): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000005000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m23.569057568s ago: executing program 2 (id=157): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 2m23.301166963s ago: executing program 32 (id=157): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 2m23.265775744s ago: executing program 3 (id=160): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x81, &(0x7f0000000480)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}, {@usrquota}, {@journal_checksum}, {@bh}, {@nodioread_nolock}, {}], [{@subj_role={'subj_role', 0x3d, 'nodioread_nolock'}}, {@flag='sync'}]}, 0x0, 0x64a, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000002d80)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002d40)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000002010108000000001000000007000006080015400000000208001640000004aa0800084000000007db92092d238dff0485e44f94c7e1d4e6f94aa12b361b54f74bc23b3e096682944bd396e9267fe1aaf60ab6541956027bd9d2393831d84cb5ebc0cb64c7ec55e19e00"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 2m21.561480417s ago: executing program 3 (id=162): syz_usb_connect(0x1, 0x36, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffffffffffff2f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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") 2m19.184042043s ago: executing program 3 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r1 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001a80)=""/4096, 0x1000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) 2m18.990661567s ago: executing program 33 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r1 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001a80)=""/4096, 0x1000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) 1m54.196599822s ago: executing program 1 (id=251): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x5, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/14, 0xe) 1m52.431402996s ago: executing program 1 (id=247): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$inet_mreqn(r1, 0x12, 0x23, 0x0, 0x0) 1m50.892563436s ago: executing program 1 (id=260): openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x95) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x2d8, 0x20, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd1000, 0x0, 0xf4, 0x2, 0xfd, 0xd4, 0x1, 0x0, 0x4, 0x3, 0x6}, {0x10102006, 0xffff1000, 0xd, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0xf, 0x3, 0xca}, {0x6000, 0xdddd0000, 0x3, 0x0, 0x6, 0x7, 0x11, 0x21, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0xdddd1000, 0xd, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x9}, {0xffff1000, 0x4000, 0x9, 0x7f, 0x3, 0x9, 0x9, 0x6, 0x7, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x0, 0x26, 0x3, 0x6e, 0x1, 0xff, 0x3, 0x80, 0x1, 0xfc}, {0x8080000, 0x6000, 0xb, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xffff1000, 0x2, 0xd, 0x5, 0x3, 0x2, 0xa, 0xfd, 0x5, 0x6, 0x2, 0x7}, {0x3000, 0x5}, {0xeefee000, 0x9}, 0xc000000b, 0x0, 0xdddd1000, 0x22a0, 0x9, 0x0, 0xe6e70c00, [0xfffffffffffffff9, 0x401, 0x0, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0x40000b, 0xa, 0xfffffffc, 0x0, [{0xc, 0x5, 0x7, '\x00', 0xb4}, {0x83, 0x87, 0x4, '\x00', 0x4b}, {0xfe, 0xe, 0x7, '\x00', 0x40}, {0x0, 0x9, 0x40, '\x00', 0x8}, {0x8, 0x10, 0x8, '\x00', 0xa8}, {0x2, 0x2, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x4b, '\x00', 0x6}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xdc, 0x6, '\x00', 0x4}, {0x1, 0xd, 0x15, '\x00', 0x8}, {0x8, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0xb, '\x00', 0xfd}, {0x6, 0x9b, 0x42, '\x00', 0x23}, {0x7, 0x2, 0x4, '\x00', 0x7}, {0xef, 0x6, 0x9, '\x00', 0x4}, {0xf, 0x6, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x15, 0xfd, 0x7, '\x00', 0xff}, {0x92, 0x6, 0xfa, '\x00', 0x42}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22180, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000140)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0xfffb, 0x3000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 1m50.307784007s ago: executing program 1 (id=254): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x8b101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) 1m49.929361875s ago: executing program 1 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x3, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) 1m49.508418293s ago: executing program 1 (id=258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x262, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000a9"], 0x0}, 0x0) 1m49.427959674s ago: executing program 34 (id=258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x262, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000a9"], 0x0}, 0x0) 43.226331386s ago: executing program 7 (id=529): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x2810489, &(0x7f0000000480)={[{@uid}, {@adinicb}, {@unhide}, {@lastblock={'lastblock', 0x3d, 0x4}}, {@unhide}, {}, {@shortad}, {@volume={'volume', 0x3d, 0x6}}, {@shortad}, {@umask={'umask', 0x3d, 0x532e}}, {@adinicb}, {@uid_ignore}, {@gid}, {@dmode={'dmode', 0x3d, 0x65}}, {@fileset={'fileset', 0x3d, 0xffffffffffffffff}}]}, 0x5, 0xc24, &(0x7f0000000d00)="$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") 41.860112753s ago: executing program 7 (id=533): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 40.341332112s ago: executing program 7 (id=535): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102}, @in=@multicast2, {@in6=@private2, @in6=@local, 0x0, 0x40}, {{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb1}, {}, 0x4, 0x6e6bb8}, 0xfffffffe}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xa3}}]}, 0x134}}, 0x0) 40.201033545s ago: executing program 7 (id=537): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x1) syz_clone(0x8200, 0x0, 0xfffffffffffffed9, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) unlink(&(0x7f0000000100)='./file0/file0\x00') 39.600331767s ago: executing program 7 (id=540): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 38.557309797s ago: executing program 7 (id=545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@remote, 0x800, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x1, 0xfb}}, 0xe8) close(r2) 37.729763164s ago: executing program 35 (id=545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@remote, 0x800, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x1, 0xfb}}, 0xe8) close(r2) 30.777547969s ago: executing program 4 (id=574): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x62}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) 30.662505341s ago: executing program 4 (id=575): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x0) 30.537296344s ago: executing program 4 (id=576): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001c00)=[{{&(0x7f00000009c0)=@l2, 0x80, &(0x7f0000001b80)=[{0x0}], 0x1}, 0x8}], 0x1, 0x18062, 0x0) 30.523292314s ago: executing program 4 (id=577): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$eJzs3Au0jtXWOPA511oPm8Sb5L7mmg9vclkkSS4JiSRJjiS5JSRJkoTEJrckJCH3JPeQ3EJyv99yT5IjSZKQkGT9h079nXM63+l83znn842z52+MZ+w19/vO+c5nz733+zxrjL2/7jCoSr2qleowM/xT8E8fUgEgBQD6AkAWAIgAoGTWklkBh0IGjan/3IuIf60Hpl7pDsSVJPNP22T+aZvMP22T+adtMv+0Teaftsn80zaZvxBp2dZpua6RI+0e/3v7/yD7///nyPv/f5DDRUd/vr7odR3/Gyky/7RN5p+2yfzTNpl/2ibzT9tk/v/hIoCKf+dhmX/aJvMXIi270vvPclzZ40p//wkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESBvOhcsMAPy6vtJ9CSGEEEIIIYQQ4l8npP/zKN2Va0QIIYQQQgghhBD/RggKNBiIIB2khxTIABnhKsgEV0NmyAIJuAaywrWQDa6D7JADckIuyA15IC9YIHDAEEM+yA9JuB4KwA1QEApBYSgCHopCMbgRisNNUAJuhpJwC5SCW6E0lIGyUA5ug/JwO1SAilAJ7oDKcCdUgapwF1SDu6E63AM14F6oCfdBLbgfasMfoA48AHXhQagHD0F9eBgaQENoBI2hyf8o/3noAi9AV+gGqdAdesCL0BN6QW/oA33hJegHL0N/eAUGwEAYBK/CYHgNhsDrMBSGwXB4A0bASBgFo2EMjIVx8CaMh7dgArwNE2ESTIYpMBWmwXR4B2bATJgF78JseA/mwFyYB/NhAbwPC2ERLIYPYAl8CEthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW+Ej2AbbYQfshF2wG/bAx7AXPoF98Cnsh8/+Oj/L388/+1f5HREQUKFCgwbTYTpMwRTMiBkxE2bCzJgZE5jArJgVs2E2zI7ZMSfmxNyYG/NiXiQkZGTMh/kwiUksgAWwIBbEwlgYPXoshsWwON6EJbAElsSSWApLYWksg2WwHJbD8lgeK2AFrISVsDJWxipYBe/Cu/BurI7VsQbWwJpYE2thLayNtbEO1sG6WBfrYT2sj/WxATbARtgIm2ATbIpNsRk2wxbYAltiS2yFrbA1tsY22AbbYltsh+2wPbbHDtgBO2In7ITP4/P4Ar6A3bCy6o49sAf2xJ7YG/tgH3wJ++HL+DK+ggNwIA7CV/FVfA2H4BkcisNwOA7H8mokjsLRyGosjsNxOB7H4wScgBNxEk7CKTgVp+F0nI4zcCbOxHdxNr6H7+FcnIvzcQEuwIW4CBfjYlyCZ3EpLsPluAJX4ipciWtwLa7B9bgB1+Mm3IRbcAt+hB/hdtyOO3En7sbd+DF+jJ/gJzgA9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPIfn8Dyexwv4bO4v6+4utG4AqEuMMiqdSqdSVIrKqDKqTCqTyqwyq4RKqKwqq8qmsqnsKrvKqXKq3Cq3yqvyKlKkWMUqn8qnkiqpCqgCqqAqqAqrwsorr4qpYqq4Kq5KqBKqpLpFlVK3qtKqjGruy6lyqrxq4SuoiqqSqqQqqztVFVVVVVXVVDVVXVVXNVQNVVPVVLXU/aq26o698QF1aTL11ECsrwZhA9VQNVKN1Wv4iGqqhmAz1Vy1UI+pYTgUW6mmvrV6UrVRo7CtelqNxmdUezUWO6jnVEfVSXVWz6suqpnv+ut2p5qCPVUv1Vv1UTPwTnVpYlXUK2qAGqgGqVfVfHxNDVGvq6FqmBqu3lAj1Eg1So1WY9RYNU69qcart9QE9baaqCapyWqKmqqmqenqHTVDzVSz1LtqtnpPzVFz1Tw1Xy1Q76uFapFarD5QS9SHaqlapparFWqlWqVWqzVqrVqn1qsNaqPapDarLWqr+khtU9vVDrVT7VK71R71sdqrPlH71Kdqv/pMHVB/VAfV5+qQ+kIdVl+qI+ordVR9rY6pb9Rx9a06oU6qU+o7dVp9r86os+qc+kGdVz+qC+ondVEFBRq10lobHel0Or1O0Rl0Rn2VBn21zqyz6IS+RmfV1+ps+jqdXefQOXUunVvn0Xm11aSdZh3rfDq/TurrdQF9gy6oC+nCuoj2uqgupm/UxfVNuoS+WZfUt+hS+lZdWpfRZXU5fZsur2/XFXRFXUnfoSvrO3UVXVXfpavpu3V1fY+uoe/VNfV9upa+X9fWf9B19AO6rn5Q19MP6fr6Yd1AN9SNdGPdRD+im+pHdTPdXLfQj+mW+nHdSj+hW+sndRv9lG6rn9bt9DO6vX5Wd9DP6Y66k+6sf9IXddBddTedqrvrHvpF3VP30r11H91Xv6T76Zd1f/2KHqAH6kH6VT1Yv6aH6Nf1UD1MD9dv6BF6pB6lR+sxeqwep9/U4/VbeoJ+W0/Uk/RkPUVP1dN0718qzfoH8t/6G/n9f371LXqr/khv09v1Dr1T79K79R69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Uv+gv9On9ff6jD6rz+of9Hl9Xl/45WsABo0y2hgTmXQmvUkxGUxGc5XJZK42mU0WkzDXmKzmWpPNXGeymxwmp8llcps8Jq+xhowzbGKTz+Q3SXO9KWBuMAVNIVPYFDHeFDXFzI3/dP7v9dfENDFNTVPTzDQzLUwL09K0NK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PRdDSdTWfTxXQxXU1Xk2pSTQ/zoulpepnepo/pa14y/Uw/09/0NwPMADPIDDKDzWAzxAwxQ81QM9wMNyPMCDPKjDJjzBgzzowz4814M8FMMBPNRDPZTDZTzVQz3Uw3M8wMM8vMMrPNbDPHzDHzzDyzwCwwC81Cs9gsNkvMErPULDPLzAqzwqwyq8was8asM+vMBrPBbDKbzFKz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDKHzWFzxBwxR81Rc8wcM8fNcXPCnDCnzClz2pw2Z8wZc86cM+fNeXPBXDAXzcVLl32RilRkIhOli9JFKVFKlDHKGGWKMkWZo8xRIkpEWaOsUbbouih7lCPKGeWKckd5olSwEUUu4iiO8kX5o2R0fVQguiEqGBWKCkdFIh8VjYpFN0bFo5uiEtHNUcnolqhUdGtUOioTlY3KRbdF5aPbowpRxahSdEdUObozqhJVje6KqkV3R9Wje6Ia0b1Rzei+qFZ0f1Q7+kNUJ3ogqhs9GNWLHorqRw9HDaKGUaOocdTkX1o/hDM5HvVdbTebarvbHvZF29P2sr1tH9vXvmT72Zdtf/uKHWAH2kH2VTvYvmaH2NftUDvMDrdv2BF2pB1lR9sxdqwdZ9+04+1bdoJ92060k+xkO8VOtdPsdPuOnWFn2ln2XTvbvmfn2Ll2np1vF9j37UK7yC62H9gl9kO71C6zy+0Ku9KusqvtGrvWrrPr7Qa70W6ym+0Wu9V+ZLfZ7XaH3Wl32d12j/3Y7rWf2H32U7vffmYP2D/ag/Zze8h+YQ/bL+0R+5U9ar+2x+w39rj91p6wJ+0p+509bb+3Z+xZe87+YM/bH+0F+5O9aMOli/tLb+9kyFA6SkcplEIZKSNlokyUmTJTghKUlbJSNspG2Sk75aSclJtyU17KS5cwMeWjfJSkJBWgAlSQClJhKkyePBWjYlScilMJKkElqSSVolJUmkpTWSpLt9FtdDvdThWpIt1Bd9CddCdVpapUjapRdapONagG1aSaVItqUW2qTXWoDtWlulSP6lF9qk8NqAE1okbUhJpQU2pKzagZtaAW1JJaUitqRa2pNbWhNtSW2lI7akftqT11oA7UkTpSZ+pMXagLdaWulEqp1IN6UE/qSb2pN/WlvtSP+lF/6k8DaAANokE0mAbTEBpCQ2kYDac3aASNpFE0msbQWBpH42g8jacJNIEm0kSaTJNpKk2l6TSdZtAMmkWzaDbNpjk0h+bRPFpAC2ghLaTFtJiW0BJaSktpOS2nlbSSVtNqWktraT2tp420kTbTZtpKW2kbbaMdtIN20S7aQ3toL+2lfbSP9tN+OkAH6CAdpEN0iA7TYTpCR+goHaVjdIyO03E6QSfoFJ2i03SaztAZOkfn6Dz9SBfoJ7pIgVKcgozuKpfJXe0yuywuxWVwl+IIAC7FOV0ul9vlcXmdddldjr+IyTlX0BVyhV0R511RV8zd+Ju4tCvjyrpy7jZX3t3uKvwmrubudtXdPa6Gu9dVdXf9RVzT3edquYdcbfewq+MaurqusavnHnL13cOugWvoGrnGrqV73LVyT7jW7knXxj31m3ihW+TWunVuvdvg9rpP3Dn3gzvqvnbn3Y+uq+vm+rqXXD/3suvvXnED3MDfxMPdG26EG+lGudFujBv7m3iym+KmumluunvHzXAzfxMvcO+72W6xm+Pmunlu/s/xpZ4Wuw/cEvehW+qWueVuhVvpVrnVbs3/73WF2+Q2uy1uj/vYbXPb3Q630+1yu3+OL53HPvep2+8+c0fcV+6g+9wdcsfcYfflz/Gl8zvmvnHH3bfuhDvpTrnv3Gn3vTvjzv58/pfO/Tv3k7voggNGVqzZcMTpOD2ncAbOyFdxJr6aM3MWTvA1nJWv5Wx8HWfnHJyTc3FuzsN52TKxY+aY83F+TvL1XIBv4IJciAtzEfZclIvxjVycb+ISfDOX5Fu4FN/KpbkMl+VyfBuX59u5AlfkSnwHVw6Bq3BVvour8d1cne/hGnwv1+T7uBbfz7X5D1yHH+C6/CDX44e4Pj/MDbghN+LG3IQf4ab8KDfj5tyCH+OW/Di34ie4NT/JbfgpbstPczt+htvzs9yBn+OO3Ik78/PchV/grtyNU7k79+AXuSf34t7ch/vyS9yPX+b+/AoP4IE8iF/lwfwaD+HXeSgP4+H8Bo/gkTyKR/MYHsvj+E0ez2/xBH6bJ/IknsxTeCpP4+n8Ds/gmTyL3+XZ/B7P4bk8j+fzAn6fF/IiXswf8BL+kJfyMl7OK3glr+LVvIbX8jpezxt4I2/izbyFt/JHvI238w7eybt4N+/hj3kvf8L7+FPez5/xAf4jH+TP+RB/wYf5Sz7CX/FR/pqP8Td8nL/lE3yST/F3fJq/5zN8ls/xD3yef+QL/BNf5MAQY6xiHZs4itPF6eOUOEOcMb4qzhRfHWeOs8SJ+Jo4a3xtnC2+Ls4e54hzxrni3HGeOG9sY4pdzHEc54vzx8n4+rhAfENcMC4UF46LxD4uGheLb4yLxzfFJeKb45LxLXGp+NYYUsvED91bLr4tLh/fHleIK8aV4jviyvGdcZW4anxXXC2+O64e3xPXiO+NS8T3xbXi++Pa8R/iOvEDcd34wbhe/FBcP344bhA3jBvFjeMm8SNx0/jRuFncPG4RPxa3jB+PW8VPxK3jJ+M28VO/+3hq3D3uEb8YvxiHcI/65T4xuTC5KLk4+UFySfLD5NLksuTy5IrkyuSq5OrkmuTa5Lrk+uSG5MbkpuTm5JZkCFXTg0evvPbGRz6dT+9TfAaf0V/lM/mrfWafxSf8NT6rv9Zn89f57D6Hz+lz+dw+j8/rrSfvPPvY5/P5fdJf7wv4G3xBX8gX9kW890V9Md/YN/FNfFP/qG/mm/sW/jH/mH/cP+6f8E/4J30b/5Rv65/27fwzvr1/1j/rn/MdfSff2T/vu/gXfFffzaf6VN/D9/A9fU/f2/f2fX1f38/38/19fz/AD/CD/CA/2A/2Q/wQP9QP9cP9cD/Cj/Cj/Cg/xo/x4/w4P96P9xP8BD/RT/ST/WQ/1U/10/10P8PP8LP8LD+74Gw/x8/x8/w8v8Av8Av9Qr/YL/ZL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/hD/sv/RH/lT/qv/bH/Df+uP/Wn/An/Sn/nT/tv/dn/Fl/zv/gz/sf/QX/k7/ogx+XeDMxPvFWYkLi7cTExKTE5MSUxNTEtMT0xDuJGYmZiVmJdxOzE+8l5iTmJuYl5icWJN5PLEwsSixOfJBYkvgwsTSxLLE8sSKxMrEqEUKebXHIF/KHZLg+FAg3hIKhUCgcigQfioZi4cZQPNwUSoSbQ8lwSygVbg2lQ5lQNjwcGoSGoVFoHJqER0LT8GhoFpqHFuGx0DI8HlqFJ0Lr8GRoE54KbcPToV14JrQPz4YO4bnQMXQKncPzoUt4IXQN3UJq6B56hBdDz9Ar9A59Qt/wUugXXg79wythQBgYBoVXw+DwWhgSXg9Dw7AwPLwRRoSRYVQYHcaEsWFceDOMD2+FCeHtMDFMCpPDlDA1TAvTwzthRpgZZoV3w+zwXpgT5oZ5YX5YEN4PC8OisDh8EJaED8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBR2Ba2hx1hZ9gVdoc94eOwN3wS9oVPw/7wWTgQ/hgOhs/DofBFOBy+DEfCV+Fo+DocC9+E4+HbcCKcDKfCd+F0+D6cCWfDufBDOB9+DBfCT+Gi/M2aEEIIIcQ/RP/O493/xufSAcCvt0Q9AODq7bkO/3XNjdn/tO6lcrdMAMCT3To88OtRuXJqauovz12qIco/FwASf1n/13gZtIDHoTU0h+J/s79eqtN5/p36yVsAMv5ZTgpcji/Xv+m/qP/IY8MXlorPZf079ecCFMx/OScDXI4v1y/xX9TP0fR3+s/w+TiAZn+Wkwkux5frF4NH4Slo/RfPFEIIIYQQQggh/qSXKtvu9+6fL92f5zaXc9LD5fj37s+FEEIIIYQQQghx5T3TqfMTj7Ru3bzdP7bAX/YF/ntZspDFf84iwy8/Ov9X+vk3La7kbyUhhBBCCCHEv8Pli/4r3YkQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJF2/W/8O7ErfY5CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfb/AgAA//+wBDLo") setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x1) syz_clone(0x8200, 0x0, 0xfffffffffffffed9, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0/file0\x00') 30.260753229s ago: executing program 4 (id=578): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000ffff00000000ac1414bb00000000000000000000000000002400100000000200202084000000", @ANYRES32=0xee01, @ANYBLOB='\x00'/67], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x100003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) mkdir(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0xcac) 26.913332244s ago: executing program 4 (id=585): syz_create_resource$binfmt(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x5421, &(0x7f0000000000)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) syz_extract_tcp_res(0x0, 0x6, 0x51) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 26.661540169s ago: executing program 36 (id=585): syz_create_resource$binfmt(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x5421, &(0x7f0000000000)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) syz_extract_tcp_res(0x0, 0x6, 0x51) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 5.783392737s ago: executing program 9 (id=586): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x800008, &(0x7f0000000140)={[{@init_itable}, {@i_version}, {@discard}, {@jqfmt_vfsv0}]}, 0x4, 0x515, &(0x7f00000040c0)="$eJzs3b9vW1sdAPDvdeImzUtf+uAhAQJeeRQKquokbhtVXWgXEKoqISomhjYkbhTFrqPYFU3okI7slajEBH8CGwNSJwY2NthYyoBUoAI1SAxG99pJ3cRJDHHi1v58pBufH66/58Q959intU8AQ+tcRGxGxKmIuBcRU63ypHXFjeaV3u/1q8cLW68eLyTRaNz5e5LVp2XR9mdSH7QeczwifvDdiB8ne+PW1jdW5svl0lorP12vrE7X1jcuLedaJcW52bmZa5evFnvW108qv375neVbP/ztb7784g+b3/pp2qzJn53J6tr70UvNrudjsq1sNCJuHUewPhlt/f3h/ZOOts9ExKfZ+J+KkezZBAAGWaMxFY2p9jwAMOjS9/+TkeQKrb2AycjlCoXmHt7HMZErV2v1i1PVhw8WI9vDOhv53P3lcmmmtVd4NvJJmp/N0m/yxbfyT0uXI+KjiHg6djqrLyxUy4v9fOEDAEPsg13r/7/Gmus/ADDgxvvdAADgxFn/AWD4WP8BYPj8D+u/TwcCwIDw/h8Aho/1HwCGz6Hr/5OTaQcAcCK+f/t2ejW2mt9/vf1N3ZcWS7WVQuXhQmGhurZaWKpWl8qlwkKjcdjjlavV1dkrO9na+sbdSvXhg/rd5cr8UuluKX+cnQEAuvLRJ8//lC76m9dPZ1e0neVgrYbBlut3A4C+Gel3A4C+8XkeGF5dvMe3DQADrsMRvW/Z978IPXP4K7yvLnzB/j8Mq6Ps/9s7gPfb/7f//+2etwM4edZwGF6NRuLMfwAYMvb4gSP9+z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMqcnsSnKF7CzwzfRnrlCIOBMRZyOf3F8ul2Yi4sOI+ONYfizNz/a70QDAEeX+mrTO/7owdX5yd+2p5N9j2W1E/OQXd37+aL5eX5tNy/+xU15/lpafrq8VT/WjAwBAuxt7i7L1u5jdjraXv371eGH7OsEWxsubzcNF07hbratZMxrNBo5HPiIm/plEe4PT1ysjPYi/+SQiPr/d//F41BZhMtsDaZ58ujt+GvtMz+O3//53x8+91d9cVpfe5rPfxWe7iva5HrQYBsfzm815sjX20iHeGn+5OJfddh7/49kMdXTp/JeO6609819uZ/4b2RM/ycb8uZ38wS15eeV339tT2Jhq1j2J+OJop/jJTvyk8/ybP99lH//8pa98ul9d45cRFzr2f/tE6ko2zU7XK6vTtfWNS8uV+aXSUulBsTg3Ozdz7fLV4nS2R938+ftOMf52/eKH+8VP+z+xT/zxg/sfX++y/7/6z70fffWA+N/8Wufn/+MD4qdr4je6jD8/cWPf47vT+Iv79P+Q5z8udhn/xV82Fru8KwBwAmrrGyvz5XJp7ZBE+lrzsPtIdJ9I39u/A83IErEZ0asHzDYlIqLjfdJX1O9Gl48rkbwbzehFot8zE3Dc3gz6frcEAAAAAAAAAAAAAADYT219Y2Ws86e1epbodx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYXP8NAAD//ztTwv0=") r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_icmp(0x2, 0x2, 0x1) read(r2, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) 5.327992196s ago: executing program 8 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd30, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x80}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000) 5.181097198s ago: executing program 8 (id=665): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x22, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="82efaa81fd9b", 0x6}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f00000001c0)="805ef1544a9d36cb7decc8cd3886fe1a0bc59d4af9ed", 0x16, 0x3b00, 0x0, 0x0) 4.933366434s ago: executing program 8 (id=672): syz_emit_ethernet(0x1e, &(0x7f0000000040)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x4) r1 = inotify_init1(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0xa4000061) 2.475608622s ago: executing program 5 (id=693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x46, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @device_b, @from_mac, {0x1, 0xb18}}, 0x5, @random=0x8000, 0x8000, @void, @val, @void, @val={0x4, 0x6, {0x7, 0x9, 0x1, 0x3}}, @val={0x6, 0x2, 0x7}, @val={0x5, 0x3, {0x2, 0x3d, 0xff}}, @val={0x25, 0x3, {0x0, 0x24, 0x7}}, @void, @val={0x3c, 0x4, {0x1, 0x5, 0xd, 0x9}}, @void, @void, @void, @void}}]}, 0x70}}, 0x0) 2.305404465s ago: executing program 0 (id=694): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0x0, {0x2, 0x0, @broadcast}}) 2.257561826s ago: executing program 0 (id=695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22) 2.080342489s ago: executing program 8 (id=696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.973340171s ago: executing program 0 (id=697): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d29bd700001dcdf251700000008000300", @ANYRES32=r2, @ANYBLOB="2400308014000403b64e9452f74bf885d3345e6373c5a42504000180050002"], 0x40}, 0x1, 0x0, 0x0, 0x4044181}, 0x4044084) 1.790519005s ago: executing program 8 (id=698): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/67], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x100003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) mkdir(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0xcac) 1.53388606s ago: executing program 6 (id=699): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a030000000000000000000300"], 0xb0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 1.425284322s ago: executing program 5 (id=700): openat$ptmx(0xffffffffffffff9c, 0x0, 0x181341, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknod$loop(0x0, 0xc000, 0x1) io_uring_setup(0x7fe7, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpgid(0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x11223}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x48000) 1.425108182s ago: executing program 0 (id=701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @broadcast, @device_b, @random="8e742f592bf6"}, 0x0, @default, 0x101, @void, @void, @void, @val={0x4, 0x6, {0x7f, 0x1, 0x7}}, @val={0x6, 0x2, 0x40}, @val={0x5, 0x3, {0xeb, 0x11, 0xb0}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x1011, 0x979}}}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x7c}}, 0xc010) 1.358327693s ago: executing program 6 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x25}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002740)=""/4093, 0xffd}, {0x0}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000001740)=""/4064, 0xfe0}, {&(0x7f0000000000)=""/148, 0x94}], 0x5}, 0x8}], 0x3, 0x2, 0x0) 1.228121496s ago: executing program 6 (id=703): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x28e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e727dc07001f00000000000086dd609907a602582c03cb697a653e336f000000500000000000ff0200000000000000000000000000010102002e000000000000"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) 1.089370609s ago: executing program 0 (id=704): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @empty, 0x10002}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="49a1a8da23ac", @random="d5d460bdee3c", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.077325389s ago: executing program 6 (id=705): ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000300)={{}, "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"}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 1.01585535s ago: executing program 0 (id=706): syz_emit_ethernet(0x1e, &(0x7f0000000040)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x4) r1 = inotify_init1(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0xa4000061) 889.290602ms ago: executing program 6 (id=707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000440)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7c, 0x20, 0x8}}, @val={0x25, 0x3, {0x0, 0x2, 0x4}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x2, 0x3d, 0xab, 0x5}}, @val={0x2d, 0x1a, {0x8, 0x3, 0x1, 0x0, {0x5, 0x1005, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400, 0x4, 0x5}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x21}}, @val={0x76, 0x6, {0x0, 0x9, 0x3d, 0x1}}}, 0x64) 578.039309ms ago: executing program 5 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0xffffff3a, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2b, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) 435.150901ms ago: executing program 5 (id=709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x22d6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}]}, 0x3c}}, 0x0) 241.416395ms ago: executing program 5 (id=710): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x3745, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3503, 0x0, 0x1, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) sendto$l2tp6(r0, 0x0, 0x0, 0x2000c000, &(0x7f0000000640)={0xa, 0x0, 0x7, @mcast2, 0x7}, 0x20) 207.368936ms ago: executing program 6 (id=711): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x80000000, 0x8, 0xfffffffe}, 0x10) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000000040)=""/4146, &(0x7f0000000000)=0x1032) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 112.147568ms ago: executing program 5 (id=712): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x3, 0x6, 0x4}, {0xe, 0xffff, 0xfffff800}, {0x4, 0xffffff9d}, {0xd, 0x13, 0x6}, {0x6, 0x8, 0xb79}, {0xb, 0xd3d7, 0x80000001}]}]}}, &(0x7f0000000100)=""/141, 0x6e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) socket(0xa, 0x3, 0x3a) 0s ago: executing program 8 (id=713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}]}, 0x28}}, 0x4004040) kernel console output (not intermixed with test programs): evice hsr_slave_0 entered promiscuous mode [ 93.486558][ T4787] device hsr_slave_1 entered promiscuous mode [ 93.534547][ T4787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.543210][ T4787] Cannot create hsr debugfs directory [ 94.681224][ T4207] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.805680][ T4854] chnl_net:caif_netlink_parms(): no params data found [ 94.821324][ T4190] Bluetooth: hci0: command 0x0409 tx timeout [ 94.890517][ T4438] device hsr_slave_0 left promiscuous mode [ 94.900638][ T4438] device hsr_slave_1 left promiscuous mode [ 94.926810][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.946344][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.955361][ T4292] usb 5-1: Cannot set autoneg [ 94.960899][ T4292] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 94.990936][ T4292] usb 5-1: USB disconnect, device number 4 [ 95.004135][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.017101][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.028499][ T4438] device bridge_slave_1 left promiscuous mode [ 95.043100][ T4438] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.065760][ T4438] device bridge_slave_0 left promiscuous mode [ 95.072275][ T4438] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.094668][ T4438] device veth1_macvtap left promiscuous mode [ 95.101527][ T4207] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.111867][ T4438] device veth0_macvtap left promiscuous mode [ 95.117933][ T4438] device veth1_vlan left promiscuous mode [ 95.124050][ T4207] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.133593][ T4438] device veth0_vlan left promiscuous mode [ 95.221558][ T1110] Bluetooth: hci2: command 0x040f tx timeout [ 95.228683][ T4207] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 95.251171][ T4207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 95.260097][ T4207] usb 1-1: SerialNumber: syz [ 95.645325][ T4438] team0 (unregistering): Port device team_slave_1 removed [ 95.660147][ T4438] team0 (unregistering): Port device team_slave_0 removed [ 95.713313][ T4891] loop1: detected capacity change from 0 to 1024 [ 95.726103][ T4438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.738480][ T4207] usb 1-1: 0:2 : does not exist [ 95.743729][ T4207] usb 1-1: unit 5: unexpected type 0x0d [ 95.749845][ T4438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.962468][ T4891] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 96.108800][ T4891] EXT4-fs (loop1): orphan cleanup on readonly fs [ 96.238415][ T4891] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.178: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.347037][ T4207] usb 1-1: USB disconnect, device number 5 [ 96.362304][ T4891] EXT4-fs (loop1): 1 orphan inode deleted [ 96.368055][ T4891] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.650105][ T4438] bond0 (unregistering): Released all slaves [ 97.310419][ T4612] Bluetooth: hci0: command 0x041b tx timeout [ 97.318036][ T4612] Bluetooth: hci2: command 0x0419 tx timeout [ 97.387177][ T4787] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.434223][ T4787] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.464320][ T4819] udevd[4819]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.642655][ T4787] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.874577][ T4787] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.907883][ T4919] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.922712][ T4919] blk_update_request: I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.934240][ T4919] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 97.946873][ T4919] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.958454][ T4919] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 97.968163][ T4919] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 97.975965][ T4919] UDF-fs: Scanning with blocksize 512 failed [ 97.989717][ T4919] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.003080][ T4919] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.014668][ T4919] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 98.026318][ T4919] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.038087][ T4919] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 98.047803][ T4919] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 98.055599][ T4919] UDF-fs: Scanning with blocksize 1024 failed [ 98.067428][ T4919] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.080529][ T4919] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.092228][ T4919] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 98.103881][ T4919] blk_update_request: I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.115682][ T4919] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 98.125411][ T4919] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 98.133215][ T4919] UDF-fs: Scanning with blocksize 2048 failed [ 98.143750][ T4919] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.157397][ T4919] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 98.168849][ T4919] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 98.178578][ T4919] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 98.186385][ T4919] UDF-fs: Scanning with blocksize 4096 failed [ 98.192605][ T4919] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 99.057016][ T4854] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.075873][ T4854] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.296140][ T4854] device bridge_slave_0 entered promiscuous mode [ 99.443655][ T4949] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.580574][ T4950] loop1: detected capacity change from 0 to 256 [ 99.617312][ T4207] Bluetooth: hci0: command 0x040f tx timeout [ 99.625701][ T4854] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.635569][ T4854] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.643983][ T4854] device bridge_slave_1 entered promiscuous mode [ 99.795355][ T4854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.797585][ T4854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.126416][ T4190] Bluetooth: hci0: command 0x0419 tx timeout [ 102.286299][ T4854] team0: Port device team_slave_0 added [ 102.302923][ T4970] loop4: detected capacity change from 0 to 256 [ 102.304757][ T4787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.334908][ T4970] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.355716][ T4970] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 102.413134][ T4854] team0: Port device team_slave_1 added [ 102.428905][ T4970] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 102.478289][ T4787] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.529376][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.544861][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.590144][ T4854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.605450][ T4854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.695701][ T4854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.131771][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.199281][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.218760][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.225898][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.405268][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.444748][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.534434][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.541556][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.600273][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.641804][ T4854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.654726][ T4854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.750767][ T4854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.853169][ T4985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.200'. [ 104.040480][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.055683][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.070589][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.085867][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.139479][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.214333][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.398157][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.724788][ T4854] device hsr_slave_0 entered promiscuous mode [ 104.751631][ T4854] device hsr_slave_1 entered promiscuous mode [ 104.810537][ T4854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.857358][ T4994] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.892957][ T4854] Cannot create hsr debugfs directory [ 104.900232][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.923771][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.940951][ T4787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.081407][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.105016][ T5000] loop0: detected capacity change from 0 to 164 [ 105.113819][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.134807][ T5000] Unable to read rock-ridge attributes [ 105.187858][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.211371][ T4292] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.471297][ T4292] usb 5-1: Using ep0 maxpacket: 32 [ 105.743245][ T4292] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 106.168024][ T1107] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.321676][ T4292] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 106.392704][ T4292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.463314][ T1107] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 106.511001][ T4292] usb 5-1: Product: syz [ 106.546302][ T4292] usb 5-1: Manufacturer: syz [ 106.550927][ T4292] usb 5-1: SerialNumber: syz [ 106.590099][ T4854] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 106.654599][ T4292] usb 5-1: config 0 descriptor?? [ 106.664347][ T4854] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 106.711918][ T4992] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.733266][ T4854] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 106.791743][ T4854] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 106.793874][ T5014] fido_id[5014]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 106.977540][ T4612] usb 5-1: USB disconnect, device number 5 [ 106.985065][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.009129][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.057838][ T4787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.164676][ T5034] loop0: detected capacity change from 0 to 2048 [ 107.178016][ T4854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.249746][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.262964][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.282113][ T5034] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 107.305235][ T4854] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.407865][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.418198][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.466722][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.473863][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.522118][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.580796][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.582937][ T5044] loop4: detected capacity change from 0 to 128 [ 107.595431][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.651636][ T5044] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.672101][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.679174][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.767031][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.776624][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.832403][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.853208][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.875617][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.899008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.925263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.937105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.948752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.003688][ T4438] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.044972][ T4854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.069203][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.108392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.126590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.174771][ T4438] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.213567][ T9] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.246307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.266944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.320736][ T4438] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.407406][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.427194][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.443801][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.471720][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.518184][ T4438] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.541633][ T4292] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.554454][ T4787] device veth0_vlan entered promiscuous mode [ 109.575916][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.585562][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.608165][ T4787] device veth1_vlan entered promiscuous mode [ 109.619756][ T4854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.684337][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.693136][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.729144][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.740583][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.772914][ T4787] device veth0_macvtap entered promiscuous mode [ 109.821721][ T4787] device veth1_macvtap entered promiscuous mode [ 109.906027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.927651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.971258][ T4292] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.988338][ T4292] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.091488][ T4292] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.110854][ T4292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.132877][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.148527][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.158555][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.170082][ T4292] usb 2-1: SerialNumber: syz [ 110.214161][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.233237][ T5104] 9pnet: Insufficient options for proto=fd [ 110.418079][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.626755][ T4292] usb 2-1: 0:2 : does not exist [ 110.653847][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.767656][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.819443][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.825066][ T4292] usb 2-1: USB disconnect, device number 2 [ 110.851860][ T4787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.861539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.876836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.879119][ T5110] loop4: detected capacity change from 0 to 512 [ 110.921419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.975021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.000148][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.021354][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.031825][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.052940][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.064117][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.077102][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.077174][ T5114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'. [ 111.093038][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.106683][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.118138][ T4787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.162771][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.177772][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.189060][ T4787] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.238701][ T4787] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.271364][ T4787] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.290361][ T4787] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.430845][ T5122] loop0: detected capacity change from 0 to 1024 [ 111.455781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.478601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.543574][ T5122] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 111.544350][ T4854] device veth0_vlan entered promiscuous mode [ 111.585925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.600175][ T5124] loop1: detected capacity change from 0 to 512 [ 111.607503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.635370][ T4854] device veth1_vlan entered promiscuous mode [ 111.671290][ T5124] EXT4-fs (loop1): Ignoring removed nobh option [ 111.717346][ T5124] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 111.755455][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.786374][ T5124] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.224: iget: bad i_size value: 38620345925642 [ 111.802484][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 111.872517][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.881789][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.890496][ T5124] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.224: couldn't read orphan inode 15 (err -117) [ 111.903527][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.912096][ T4854] device veth0_macvtap entered promiscuous mode [ 111.991344][ T5124] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,data_err=ignore,,errors=continue. Quota mode: writeback. [ 112.005429][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.015462][ T4854] device veth1_macvtap entered promiscuous mode [ 112.032126][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.074719][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.114169][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.267109][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.331284][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.341642][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.352634][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.363374][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.374163][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.385647][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.398052][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.408141][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.419049][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.431209][ T4854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.510452][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.541183][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.561539][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.585387][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.602590][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.618709][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.637107][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.653548][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.669816][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.718141][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.740856][ T4854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.756170][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.807922][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.847914][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.882550][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.903245][ T4854] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.914744][ T4854] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.923651][ T4854] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.932462][ T4854] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.964181][ T5138] loop0: detected capacity change from 0 to 164 [ 112.981576][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.000070][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.060769][ T5138] Unsupported NM flag settings (8) [ 113.094501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.111268][ T4293] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.174231][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.191962][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.253040][ T5143] loop5: detected capacity change from 0 to 128 [ 113.328692][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.358903][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.471858][ T4293] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 113.481698][ T4293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.706622][ T4293] usb 2-1: config 0 descriptor?? [ 114.070563][ T5151] loop4: detected capacity change from 0 to 164 [ 114.086895][ T25] audit: type=1800 audit(1757583867.882:6): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.158" name="bus" dev="loop5" ino=1048654 res=0 errno=0 [ 114.131806][ T25] audit: type=1800 audit(1757583867.902:7): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.158" name="bus" dev="loop5" ino=1048654 res=0 errno=0 [ 114.165739][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.192973][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.270368][ T5151] Unable to read rock-ridge attributes [ 114.279696][ T4438] device hsr_slave_0 left promiscuous mode [ 114.335200][ T4438] device hsr_slave_1 left promiscuous mode [ 114.352664][ T5161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.230'. [ 114.461935][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.469363][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.482530][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.129672][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.147881][ T4438] device bridge_slave_1 left promiscuous mode [ 115.175762][ T4438] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.188498][ T4438] device bridge_slave_0 left promiscuous mode [ 115.282474][ T4438] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.261454][ T4293] usb 2-1: Cannot set autoneg [ 116.267662][ T4293] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 116.297968][ T4293] usb 2-1: USB disconnect, device number 3 [ 116.356511][ T5172] loop1: detected capacity change from 0 to 1764 [ 116.378666][ T4438] device veth1_macvtap left promiscuous mode [ 116.385742][ T4438] device veth0_macvtap left promiscuous mode [ 116.392218][ T4438] device veth1_vlan left promiscuous mode [ 116.398142][ T4438] device veth0_vlan left promiscuous mode [ 116.551102][ T7] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 116.746384][ T4438] team0 (unregistering): Port device team_slave_1 removed [ 116.763173][ T4438] team0 (unregistering): Port device team_slave_0 removed [ 116.774858][ T4438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.788591][ T4438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.849855][ T4438] bond0 (unregistering): Released all slaves [ 116.941364][ T7] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 116.960956][ T7] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 8 [ 116.986089][ T5187] loop6: detected capacity change from 0 to 1024 [ 116.992542][ T7] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 117.002747][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.070049][ T5187] EXT4-fs (loop6): Ignoring removed oldalloc option [ 117.077191][ T5168] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 117.122972][ T5195] loop1: detected capacity change from 0 to 8 [ 117.136947][ T5187] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,auto_da_alloc=0xfffffffffffffffe,barrier=0x0000000000000003,noblock_validity,dax=never,oldalloc,nodelalloc,usrquota,auto_da_alloc=0x0000000000000053,,errors=continue. Quota mode: writeback. [ 117.336798][ T7] usb 1-1: string descriptor 0 read error: -71 [ 117.530884][ T5207] print_req_error: 2 callbacks suppressed [ 117.530898][ T5207] blk_update_request: I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.547884][ T5207] blk_update_request: I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.558970][ T5207] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 117.568797][ T5207] blk_update_request: I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.579923][ T5207] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 117.589525][ T5207] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 117.597184][ T5207] UDF-fs: Scanning with blocksize 512 failed [ 117.603764][ T5207] blk_update_request: I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.614930][ T5207] blk_update_request: I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.626109][ T5207] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 117.635855][ T5207] blk_update_request: I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.647033][ T5207] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 117.656617][ T5207] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 117.664268][ T5207] UDF-fs: Scanning with blocksize 1024 failed [ 117.670788][ T5207] blk_update_request: I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.682433][ T5207] blk_update_request: I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.693647][ T5207] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 117.703385][ T5207] blk_update_request: I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.714565][ T5207] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 117.724140][ T5207] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 117.731878][ T5207] UDF-fs: Scanning with blocksize 2048 failed [ 117.738343][ T5207] blk_update_request: I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.749498][ T5207] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 117.759349][ T5207] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 117.768935][ T5207] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 117.776602][ T5207] UDF-fs: Scanning with blocksize 4096 failed [ 117.782700][ T5207] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 118.190589][ T7] hub 1-1:32.0: USB hub found [ 118.213221][ T5195] SQUASHFS error: zlib decompression failed, data probably corrupt [ 118.319883][ T5195] SQUASHFS error: Failed to read block 0x4de: -5 [ 118.461180][ T7] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 118.467454][ T5213] loop5: detected capacity change from 0 to 256 [ 118.484522][ T5195] SQUASHFS error: Failed to read block 0x4e2: -5 [ 118.511472][ T5195] SQUASHFS error: Failed to read block 0x9ca: -5 [ 118.538288][ T5195] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 118.549269][ T5213] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.582007][ T7] usb 1-1: USB disconnect, device number 6 [ 118.611104][ T5213] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 118.642099][ T5195] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 118.702838][ T5195] SQUASHFS error: Failed to read block 0x535f2: -5 [ 118.711950][ T5213] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 118.740359][ T25] audit: type=1800 audit(1757583872.532:8): pid=5195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.251" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 118.993312][ T4822] udevd[4822]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.672833][ T5242] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 120.701218][ T4612] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 120.750202][ T5242] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 120.791396][ T4248] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.838406][ T5260] loop0: detected capacity change from 0 to 1024 [ 120.860140][ T5261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.252'. [ 120.963814][ T5260] EXT4-fs (loop0): inline encryption not supported [ 120.970391][ T5260] EXT4-fs (loop0): Ignoring removed nobh option [ 120.987381][ T5260] EXT4-fs (loop0): Ignoring removed bh option [ 121.015119][ T5260] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.041975][ T4612] usb 7-1: no configurations [ 121.046596][ T4612] usb 7-1: can't read configurations, error -22 [ 121.062281][ T5261] netlink: 28 bytes leftover after parsing attributes in process `syz.5.252'. [ 121.077107][ T5266] loop1: detected capacity change from 0 to 8 [ 121.134554][ T5260] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 121.205837][ T4248] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.231226][ T4612] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 121.268786][ T4248] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.338615][ T4185] SQUASHFS error: Unable to read directory block [631:72] [ 121.353398][ T4185] SQUASHFS error: Unable to read inode 0x0 [ 121.361804][ T4185] SQUASHFS error: Unable to read inode 0x0 [ 121.413441][ T4248] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.452064][ T4248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.497925][ T4248] usb 5-1: SerialNumber: syz [ 121.529672][ T5285] loop5: detected capacity change from 0 to 1024 [ 121.571436][ T4612] usb 7-1: no configurations [ 121.577245][ T4612] usb 7-1: can't read configurations, error -22 [ 121.613038][ T4612] usb usb7-port1: attempt power cycle [ 121.640708][ T5285] EXT4-fs (loop5): Ignoring removed oldalloc option [ 121.705843][ T5285] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,auto_da_alloc=0xfffffffffffffffe,barrier=0x0000000000000003,noblock_validity,dax=never,oldalloc,nodelalloc,usrquota,auto_da_alloc=0x0000000000000053,,errors=continue. Quota mode: writeback. [ 121.833647][ T4248] usb 5-1: 0:2 : does not exist [ 121.904581][ T4248] usb 5-1: USB disconnect, device number 6 [ 122.091309][ T4612] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 122.253363][ T4612] usb 7-1: no configurations [ 122.258067][ T4612] usb 7-1: can't read configurations, error -22 [ 122.583789][ T4612] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 122.622655][ T4819] udevd[4819]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.751282][ T4612] usb 7-1: no configurations [ 122.755908][ T4612] usb 7-1: can't read configurations, error -22 [ 122.790221][ T4612] usb usb7-port1: unable to enumerate USB device [ 122.929704][ T5303] loop4: detected capacity change from 0 to 256 [ 123.055091][ T5303] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.121348][ T5303] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 123.167384][ T5303] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 124.545418][ T5295] chnl_net:caif_netlink_parms(): no params data found [ 124.747008][ T4612] Bluetooth: hci4: command 0x0409 tx timeout [ 124.942087][ T5295] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.949150][ T5295] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.020450][ T5295] device bridge_slave_0 entered promiscuous mode [ 125.114736][ T5295] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.198197][ T5295] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.249581][ T5295] device bridge_slave_1 entered promiscuous mode [ 125.320257][ T5339] loop0: detected capacity change from 0 to 512 [ 125.506931][ T5295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.518759][ T5295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.080739][ T5339] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.091939][ T5339] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.136405][ T5295] team0: Port device team_slave_0 added [ 126.153084][ T5295] team0: Port device team_slave_1 added [ 126.305410][ T5295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.305426][ T5295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.305448][ T5295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.308232][ T5295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.446353][ T5360] loop6: detected capacity change from 0 to 512 [ 126.522039][ T5295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.555522][ T5295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.601251][ T5295] device hsr_slave_0 entered promiscuous mode [ 126.608891][ T5295] device hsr_slave_1 entered promiscuous mode [ 126.615953][ T5295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.624857][ T5295] Cannot create hsr debugfs directory [ 126.689268][ T4438] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.718894][ T5360] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.733577][ T5360] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.782921][ T25] audit: type=1800 audit(1757583880.582:9): pid=5360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.266" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 126.817936][ T4438] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.833532][ T4612] Bluetooth: hci4: command 0x041b tx timeout [ 126.879797][ T4438] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.944612][ T5381] loop6: detected capacity change from 0 to 1024 [ 126.973580][ T4438] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.002917][ T5381] EXT4-fs (loop6): inline encryption not supported [ 127.020666][ T5381] EXT4-fs (loop6): Ignoring removed nobh option [ 127.049888][ T5381] EXT4-fs (loop6): Ignoring removed bh option [ 127.104281][ T5381] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.176806][ T5381] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 127.260804][ T5389] loop4: detected capacity change from 0 to 256 [ 127.352282][ T5295] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 127.393479][ T5389] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.406415][ T5295] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 127.425143][ T5389] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 127.454564][ T5389] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 127.500216][ T5295] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 127.617453][ T5295] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 127.865611][ T5410] loop0: detected capacity change from 0 to 16 [ 128.598139][ T5405] loop5: detected capacity change from 0 to 512 [ 128.611609][ T5410] erofs: Unknown parameter '' [ 128.779306][ T5405] loop5: detected capacity change from 0 to 512 [ 128.876560][ T5405] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 128.901285][ T4207] Bluetooth: hci4: command 0x040f tx timeout [ 128.954778][ T5405] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.282: bg 0: block 384: padding at end of block bitmap is not set [ 129.031168][ T5405] EXT4-fs (loop5): Remounting filesystem read-only [ 129.065489][ T5405] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 129.095974][ T5295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.101920][ T5405] EXT4-fs (loop5): Remounting filesystem read-only [ 129.110606][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.119588][ T5405] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.282: attempt to clear invalid blocks 983260 len 1 [ 129.119877][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.144431][ T5295] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.166734][ T5405] EXT4-fs (loop5): Remounting filesystem read-only [ 129.185477][ T5405] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm syz.5.282: Invalid inode table block 0 in block_group 0 [ 129.214675][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.250644][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.271981][ T5405] EXT4-fs (loop5): Remounting filesystem read-only [ 129.294346][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.301479][ T4538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.309152][ T5405] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 129.338445][ T5423] xt_hashlimit: max too large, truncated to 1048576 [ 129.338497][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.358242][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.370289][ T5405] EXT4-fs (loop5): Remounting filesystem read-only [ 129.376981][ T5405] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 129.395144][ T4538] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.402237][ T4538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.416294][ T5405] EXT4-fs (loop5): Remounting filesystem read-only [ 129.424094][ T5405] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm syz.5.282: Invalid inode table block 0 in block_group 0 [ 129.444461][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.461544][ T5405] EXT4-fs (loop5): Remounting filesystem read-only [ 129.484769][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.516016][ T5405] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 129.540156][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.550999][ T5405] EXT4-fs (loop5): Remounting filesystem read-only [ 129.578578][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.590747][ T5405] EXT4-fs error (device loop5): ext4_truncate:4273: inode #11: comm syz.5.282: mark_inode_dirty error [ 129.637125][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.657348][ T5405] EXT4-fs (loop5): Remounting filesystem read-only [ 129.676539][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.693982][ T5405] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 129.725073][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.742115][ T5405] EXT4-fs (loop5): Remounting filesystem read-only [ 129.762910][ T5405] EXT4-fs (loop5): 1 truncate cleaned up [ 129.790798][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.815534][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.820559][ T5405] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 129.851463][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.859890][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.874704][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.888283][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.305715][ T5431] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm syz.5.282: Invalid inode table block 0 in block_group 0 [ 130.374619][ T5431] EXT4-fs (loop5): Remounting filesystem read-only [ 130.408350][ T5430] loop4: detected capacity change from 0 to 512 [ 130.666209][ T5430] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.701599][ T5430] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.791592][ T4438] device hsr_slave_0 left promiscuous mode [ 130.958435][ T4438] device hsr_slave_1 left promiscuous mode [ 130.966090][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.994197][ T26] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.016253][ T4207] Bluetooth: hci4: command 0x0419 tx timeout [ 131.018968][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.031986][ T26] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 131.043655][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.117777][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.175754][ T5444] fido_id[5444]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 131.189960][ T4438] device bridge_slave_1 left promiscuous mode [ 131.245753][ T4438] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.308779][ T4438] device bridge_slave_0 left promiscuous mode [ 131.330486][ T4438] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.362061][ T4438] device veth1_macvtap left promiscuous mode [ 131.379988][ T4438] device veth0_macvtap left promiscuous mode [ 131.386546][ T4438] device veth1_vlan left promiscuous mode [ 131.395957][ T4438] device veth0_vlan left promiscuous mode [ 131.404021][ T5459] loop5: detected capacity change from 0 to 512 [ 131.451146][ T4292] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.456438][ T5459] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.811318][ T4292] usb 5-1: config 2 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.831216][ T4292] usb 5-1: config 2 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.861291][ T4292] usb 5-1: config 2 interface 0 has no altsetting 0 [ 131.878114][ T4292] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 131.904196][ T4292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.929617][ T4438] team0 (unregistering): Port device team_slave_1 removed [ 131.951839][ T4438] team0 (unregistering): Port device team_slave_0 removed [ 131.975655][ T4438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.002801][ T4438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.122107][ T4438] bond0 (unregistering): Released all slaves [ 132.288193][ T5483] loop6: detected capacity change from 0 to 1024 [ 132.330951][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.345465][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.360128][ T5295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.414981][ T4292] hid-generic 0003:05AC:027A.0006: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.4-1/input0 [ 132.438001][ T5483] EXT4-fs (loop6): inline encryption not supported [ 132.471336][ T5483] EXT4-fs (loop6): Ignoring removed nobh option [ 132.477605][ T5483] EXT4-fs (loop6): Ignoring removed bh option [ 132.501276][ T5483] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.585152][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.591538][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.625555][ T4292] usb 5-1: USB disconnect, device number 7 [ 132.657229][ T5483] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 133.689829][ T5510] loop0: detected capacity change from 0 to 1024 [ 133.756994][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.826969][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.944210][ T5295] device veth0_vlan entered promiscuous mode [ 133.950874][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.988562][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.015019][ T5519] loop6: detected capacity change from 0 to 2048 [ 134.045138][ T5510] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 134.073627][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.126775][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.239763][ T5519] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 134.285329][ T5510] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 134.325775][ T5529] loop5: detected capacity change from 0 to 512 [ 134.360173][ T5519] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 134.378387][ T5295] device veth1_vlan entered promiscuous mode [ 134.390027][ T5510] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 134.434748][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.450106][ T5510] EXT4-fs (loop0): This should not happen!! Data will be lost [ 134.450106][ T5510] [ 134.476328][ T5529] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.485368][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.488038][ T5529] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.596490][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.652635][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.711134][ T5510] EXT4-fs (loop0): Total free blocks count 0 [ 134.717268][ T5510] EXT4-fs (loop0): Free/Dirty block details [ 134.728380][ T5295] device veth0_macvtap entered promiscuous mode [ 134.752167][ T5295] device veth1_macvtap entered promiscuous mode [ 134.778723][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.813977][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.861392][ T5510] EXT4-fs (loop0): free_blocks=68451041280 [ 134.921181][ T5510] EXT4-fs (loop0): dirty_blocks=80 [ 134.960718][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.009376][ T5510] EXT4-fs (loop0): Block reservation details [ 135.019190][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.049530][ T5510] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 135.052810][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.076288][ T5547] xt_cgroup: path and classid specified [ 135.091305][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.117302][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.158593][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.208349][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.249724][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.282402][ T5295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.295107][ T1137] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 135.303563][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.351059][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.371141][ T1137] EXT4-fs (loop0): This should not happen!! Data will be lost [ 135.371141][ T1137] [ 135.396562][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.440115][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.481091][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.511160][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.520986][ T5295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.561137][ T5295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.592501][ T5295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.641520][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.654818][ T5558] loop5: detected capacity change from 0 to 512 [ 135.682669][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.709672][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.733928][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.746911][ T5295] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.761230][ T5558] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 135.787101][ T5295] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.797145][ T5558] EXT4-fs (loop5): Unsupported encryption level 249 [ 135.840810][ T5563] loop0: detected capacity change from 0 to 1024 [ 135.841181][ T5295] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.868504][ T5558] hfsplus: unable to find HFS+ superblock [ 135.891107][ T5295] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.986157][ T5563] EXT4-fs (loop0): inline encryption not supported [ 136.021427][ T7] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 136.032344][ T5563] EXT4-fs (loop0): Ignoring removed nobh option [ 136.079598][ T5563] EXT4-fs (loop0): Ignoring removed bh option [ 136.108759][ T5563] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.130388][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.146795][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.180588][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.247790][ T4472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.260596][ T5563] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 136.297152][ T4472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.377052][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.391290][ T7] usb 7-1: config 2 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.412625][ T7] usb 7-1: config 2 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.458546][ T7] usb 7-1: config 2 interface 0 has no altsetting 0 [ 136.478767][ T7] usb 7-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 136.531199][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.550578][ T5576] loop5: detected capacity change from 0 to 2048 [ 136.665398][ T5576] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 136.684459][ T5586] loop7: detected capacity change from 0 to 512 [ 136.905642][ T5586] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.972428][ T5576] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 137.031296][ T5586] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.045336][ T7] hid-generic 0003:05AC:027A.0007: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.6-1/input0 [ 137.292635][ T4192] usb 7-1: USB disconnect, device number 6 [ 137.347817][ T5596] fido_id[5596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 137.485775][ T5606] loop7: detected capacity change from 0 to 1024 [ 137.715600][ T5606] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 137.811210][ T26] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 137.905079][ T5606] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 138.721276][ T26] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 138.757640][ T26] usb 6-1: config 0 has no interface number 0 [ 138.941274][ T26] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 139.061991][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.100665][ T5646] loop6: detected capacity change from 0 to 2048 [ 139.198131][ T26] usb 6-1: Product: syz [ 139.208278][ T5646] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.218146][ T26] usb 6-1: Manufacturer: syz [ 139.231736][ T26] usb 6-1: SerialNumber: syz [ 139.278755][ T5630] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 139.289001][ T26] usb 6-1: config 0 descriptor?? [ 139.361301][ T5630] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 140.714274][ T5659] loop7: detected capacity change from 0 to 2048 [ 140.771207][ T26] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 140.824164][ T26] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 140.854886][ T5659] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 140.871717][ T26] asix: probe of 6-1:0.251 failed with error -5 [ 140.911410][ T26] usb 6-1: USB disconnect, device number 2 [ 142.801679][ T5690] loop0: detected capacity change from 0 to 256 [ 142.915994][ T5690] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.941189][ T5690] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 142.991837][ T5690] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 143.791374][ T4612] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 144.301243][ T4612] usb 6-1: config 2 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.792723][ T4612] usb 6-1: config 2 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.833379][ T5718] loop6: detected capacity change from 0 to 512 [ 144.853836][ T4612] usb 6-1: config 2 interface 0 has no altsetting 0 [ 144.898788][ T4612] usb 6-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 144.925078][ T4612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.959139][ T5718] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 144.974305][ T5718] System zones: 0-2, 18-18, 34-34 [ 144.990912][ T5718] EXT4-fs error (device loop6): ext4_do_update_inode:5204: inode #3: comm syz.6.338: corrupted inode contents [ 145.019380][ T5718] EXT4-fs error (device loop6): ext4_dirty_inode:6040: inode #3: comm syz.6.338: mark_inode_dirty error [ 145.130736][ T5718] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.338: bg 0: block 370: padding at end of block bitmap is not set [ 145.216846][ T5718] Quota error (device loop6): write_blk: dquota write failed [ 145.244699][ T5718] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 145.281486][ T5718] EXT4-fs error (device loop6): ext4_acquire_dquot:6209: comm syz.6.338: Failed to acquire dquot type 0 [ 145.346703][ T5718] Quota error (device loop6): write_blk: dquota write failed [ 145.357125][ T5744] loop7: detected capacity change from 0 to 1024 [ 145.385079][ T5718] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 145.425129][ T5718] EXT4-fs error (device loop6): ext4_acquire_dquot:6209: comm syz.6.338: Failed to acquire dquot type 0 [ 145.470799][ T5744] EXT4-fs (loop7): inline encryption not supported [ 145.489762][ T4612] hid-generic 0003:05AC:027A.0008: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.5-1/input0 [ 145.503923][ T5718] Quota error (device loop6): write_blk: dquota write failed [ 145.522248][ T5744] EXT4-fs (loop7): Ignoring removed nobh option [ 145.529720][ T5744] EXT4-fs (loop7): Ignoring removed bh option [ 145.539144][ T5718] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 145.560217][ T5744] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.623804][ T5718] EXT4-fs error (device loop6): ext4_acquire_dquot:6209: comm syz.6.338: Failed to acquire dquot type 0 [ 145.651966][ T5718] EXT4-fs (loop6): 1 orphan inode deleted [ 145.661268][ T5718] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.712573][ T5744] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 145.744612][ T4612] usb 6-1: USB disconnect, device number 3 [ 145.755885][ T5718] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.789932][ T5718] syz.6.338 (5718) used greatest stack depth: 20256 bytes left [ 147.659584][ T5797] loop5: detected capacity change from 0 to 128 [ 147.780489][ T5797] EXT4-fs (loop5): Test dummy encryption mode enabled [ 147.861150][ T5797] EXT4-fs (loop5): Test dummy encryption mode enabled [ 147.867953][ T5797] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 147.930710][ T5797] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 147.969557][ T5797] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 148.051308][ T5797] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.203568][ T5815] binder: BINDER_SET_CONTEXT_MGR already set [ 148.258949][ T5815] binder: 5814:5815 ioctl 40046207 0 returned -16 [ 148.681881][ T5797] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 148.717285][ T5848] loop6: detected capacity change from 0 to 256 [ 149.467863][ T5848] exfat: Bad value for 'uid' [ 149.696060][ T5859] loop5: detected capacity change from 0 to 256 [ 149.845694][ T5859] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.952589][ T5859] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 151.232863][ T5859] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 152.959477][ T5903] loop5: detected capacity change from 0 to 164 [ 153.139429][ T5903] Unable to read rock-ridge attributes [ 154.060062][ T5927] loop5: detected capacity change from 0 to 1024 [ 154.120116][ T5927] EXT4-fs (loop5): inline encryption not supported [ 154.144234][ T5927] EXT4-fs (loop5): Ignoring removed nobh option [ 154.173127][ T5927] EXT4-fs (loop5): Ignoring removed bh option [ 154.179241][ T5927] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.318836][ T5927] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 154.611638][ T5948] loop7: detected capacity change from 0 to 256 [ 154.799723][ T5948] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.841161][ T5948] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 155.383204][ T5948] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 155.411179][ T4292] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 155.634582][ T5959] loop4: detected capacity change from 0 to 2048 [ 155.791245][ T4292] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.852439][ T4292] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 155.868485][ T5959] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.918224][ T4292] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.990584][ T4292] usb 7-1: config 0 descriptor?? [ 156.256155][ T5969] loop7: detected capacity change from 0 to 764 [ 157.160525][ T4292] sony 0003:054C:024B.0009: hiddev0,hidraw0: USB HID v1.01 Device [HID 054c:024b] on usb-dummy_hcd.6-1/input0 [ 157.185312][ T4292] sony 0003:054C:024B.0009: failed to claim input [ 157.356645][ T4293] usb 7-1: USB disconnect, device number 7 [ 157.733335][ T5980] fido_id[5980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 158.853355][ T6020] loop7: detected capacity change from 0 to 256 [ 158.855787][ T6017] loop4: detected capacity change from 0 to 136 [ 159.071809][ T6020] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.183908][ T6020] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 159.498966][ T6020] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 160.021550][ T6036] overlayfs: unrecognized mount option "/" or missing value [ 160.750332][ T6047] netlink: 48 bytes leftover after parsing attributes in process `syz.6.413'. [ 160.875366][ T6051] loop5: detected capacity change from 0 to 1024 [ 160.965349][ T6051] EXT4-fs (loop5): inline encryption not supported [ 160.976155][ T6057] netlink: 60 bytes leftover after parsing attributes in process `syz.6.417'. [ 161.014866][ T6051] EXT4-fs (loop5): Ignoring removed nobh option [ 161.051776][ T6057] netlink: 'syz.6.417': attribute type 2 has an invalid length. [ 161.074169][ T6051] EXT4-fs (loop5): Ignoring removed bh option [ 161.080279][ T6051] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.081184][ T6057] netlink: 'syz.6.417': attribute type 1 has an invalid length. [ 161.147812][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.417'. [ 161.192866][ T6051] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 161.311227][ T26] Bluetooth: hci4: command 0x0405 tx timeout [ 161.443864][ T6078] loop6: detected capacity change from 0 to 128 [ 161.578043][ T6078] FAT-fs (loop6): Unrecognized mount option "ut" or missing value [ 162.609156][ T6095] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.252390][ T6110] loop6: detected capacity change from 0 to 256 [ 163.330835][ T6110] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.415240][ T6110] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 163.477725][ T6110] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 166.133211][ T6144] loop4: detected capacity change from 0 to 8 [ 166.229369][ T6144] SQUASHFS error: zlib decompression failed, data probably corrupt [ 166.261188][ T6144] SQUASHFS error: Failed to read block 0x9b: -5 [ 166.267463][ T6144] SQUASHFS error: Unable to read metadata cache entry [99] [ 166.340562][ T6144] SQUASHFS error: Unable to read inode 0x127 [ 166.595183][ T6162] loop6: detected capacity change from 0 to 1024 [ 167.139520][ T6162] EXT4-fs (loop6): Ignoring removed nobh option [ 167.165929][ T6162] EXT4-fs (loop6): inline encryption not supported [ 167.184911][ T6162] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.424336][ T6162] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,jqfmt=vfsold,journal_dev=0x0000000000000800,nobh,inlinecrypt,grpquota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 167.603440][ T6161] EXT4-fs error (device loop6): __ext4_get_inode_loc:4321: comm syz.6.440: Invalid inode table block 17268126298330986056 in block_group 0 [ 167.688358][ T6161] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 167.736013][ T6161] EXT4-fs error (device loop6): ext4_dirty_inode:6040: inode #15: comm syz.6.440: mark_inode_dirty error [ 167.831696][ T6161] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.440: Invalid block bitmap block 6887142925608166956 in block_group 0 [ 167.872450][ T6161] EXT4-fs error (device loop6): ext4_mb_discard_group_preallocations:4954: comm syz.6.440: Error -117 reading block bitmap for 0 [ 167.937431][ T6192] loop5: detected capacity change from 0 to 1024 [ 167.950472][ T6161] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.440: Invalid block bitmap block 6887142925608166956 in block_group 0 [ 167.995467][ T6161] EXT4-fs error (device loop6): ext4_mb_discard_group_preallocations:4954: comm syz.6.440: Error -117 reading block bitmap for 0 [ 168.026308][ T6192] EXT4-fs (loop5): Ignoring removed bh option [ 168.057044][ T6161] EXT4-fs error (device loop6): __ext4_get_inode_loc:4321: comm syz.6.440: Invalid inode table block 17268126298330986056 in block_group 0 [ 168.097556][ T6192] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 168.195965][ T6161] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 168.248350][ T6161] EXT4-fs error (device loop6): ext4_dirty_inode:6040: inode #15: comm syz.6.440: mark_inode_dirty error [ 168.325250][ T6192] EXT4-fs (loop5): shut down requested (2) [ 168.555839][ T6204] loop7: detected capacity change from 0 to 256 [ 168.574794][ T144] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 168.806680][ T6204] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.007104][ T6204] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 169.043527][ T144] EXT4-fs (loop6): This should not happen!! Data will be lost [ 169.043527][ T144] [ 169.237031][ T144] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 117 [ 169.261534][ T6204] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 169.325282][ T6214] device batadv_slave_1 entered promiscuous mode [ 169.331833][ T144] EXT4-fs (loop6): This should not happen!! Data will be lost [ 169.331833][ T144] [ 169.362123][ T6213] device batadv_slave_1 left promiscuous mode [ 169.581736][ T6228] loop4: detected capacity change from 0 to 1024 [ 169.695505][ T6228] EXT4-fs (loop4): inline encryption not supported [ 169.729851][ T6228] EXT4-fs (loop4): Ignoring removed nobh option [ 169.750038][ T6228] EXT4-fs (loop4): Ignoring removed bh option [ 169.764907][ T6228] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.848969][ T6228] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 169.868892][ T6243] loop5: detected capacity change from 0 to 1764 [ 170.595442][ T6252] loop7: detected capacity change from 0 to 512 [ 170.697831][ T6252] EXT4-fs (loop7): Mount option "noload" incompatible with ext2 [ 171.916789][ T6273] loop7: detected capacity change from 0 to 512 [ 171.948357][ T6273] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 172.012539][ T6273] EXT4-fs (loop7): 1 truncate cleaned up [ 172.018191][ T6273] EXT4-fs (loop7): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 172.439577][ T6284] loop7: detected capacity change from 0 to 8 [ 172.656538][ T6289] loop6: detected capacity change from 0 to 256 [ 172.768658][ T6289] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.879350][ T6289] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 172.928418][ T6289] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 172.953707][ T6292] loop7: detected capacity change from 0 to 8192 [ 173.006792][ T6292] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 173.085729][ T6292] UDF-fs: Scanning with blocksize 512 failed [ 173.127819][ T6292] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 173.164837][ T6292] UDF-fs: Scanning with blocksize 1024 failed [ 173.208089][ T6292] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 173.224273][ T6292] UDF-fs: Scanning with blocksize 2048 failed [ 173.271473][ T6292] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.004508][ T6344] loop5: detected capacity change from 0 to 1024 [ 175.032787][ T6347] loop6: detected capacity change from 0 to 512 [ 175.063752][ T25] audit: type=1326 audit(1757583928.862:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.0.483" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf2158fba9 code=0x0 [ 175.089241][ T6347] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 175.096063][ T6344] EXT4-fs (loop5): inline encryption not supported [ 175.118870][ T6347] UDF-fs: Scanning with blocksize 512 failed [ 175.128821][ T6347] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 175.137794][ T6347] UDF-fs: Scanning with blocksize 1024 failed [ 175.144765][ T6344] EXT4-fs (loop5): Ignoring removed nobh option [ 175.154195][ T6347] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 175.167064][ T6344] EXT4-fs (loop5): Ignoring removed bh option [ 175.169620][ T6347] UDF-fs: Scanning with blocksize 2048 failed [ 175.193262][ T6347] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 175.196381][ T6344] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 175.243567][ T6347] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.288070][ T6356] loop7: detected capacity change from 0 to 128 [ 175.314107][ T6344] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 175.982563][ T4192] Bluetooth: hci1: command 0x0406 tx timeout [ 175.997923][ T4248] Bluetooth: hci3: command 0x0406 tx timeout [ 176.105561][ T6370] netlink: 'syz.7.486': attribute type 3 has an invalid length. [ 176.119717][ T6371] loop6: detected capacity change from 0 to 256 [ 176.136055][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.7.486'. [ 176.183926][ T6377] loop4: detected capacity change from 0 to 128 [ 176.350942][ T6371] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.374000][ T6377] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.585530][ T6371] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 176.644873][ T6377] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.881112][ T6371] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 177.150353][ T144] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.621506][ T4292] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 177.911699][ T4292] usb 8-1: Using ep0 maxpacket: 16 [ 178.291297][ T4292] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 178.611208][ T4292] usb 8-1: can't read configurations, error -61 [ 178.686731][ T6413] capability: warning: `syz.4.497' uses deprecated v2 capabilities in a way that may be insecure [ 178.759618][ T6413] loop4: detected capacity change from 0 to 1024 [ 178.801412][ T4292] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 178.926459][ T6423] loop4: detected capacity change from 0 to 128 [ 179.022286][ T6423] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.041327][ T6423] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.063065][ T6423] fscrypt (loop4, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 179.081216][ T4292] usb 8-1: Using ep0 maxpacket: 16 [ 179.281392][ T4292] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 179.291377][ T4292] usb 8-1: can't read configurations, error -61 [ 179.318116][ T4292] usb usb8-port1: attempt power cycle [ 179.812477][ T6440] loop6: detected capacity change from 0 to 164 [ 179.911077][ T4292] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 180.489401][ T4292] usb 8-1: Using ep0 maxpacket: 16 [ 180.651135][ T4292] usb 8-1: device descriptor read/all, error -71 [ 181.094000][ T6460] loop7: detected capacity change from 0 to 16 [ 181.193894][ T6460] erofs: (device loop7): mounted with root inode @ nid 36. [ 181.268956][ T6464] loop6: detected capacity change from 0 to 256 [ 181.330415][ T6464] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.489304][ T6464] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 182.292732][ T6464] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 182.334586][ T6473] loop4: detected capacity change from 0 to 512 [ 182.369676][ T6473] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 182.515803][ T6473] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 182.661312][ T6473] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 182.681110][ T6473] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.507: Failed to acquire dquot type 1 [ 183.768162][ T6473] EXT4-fs (loop4): 1 truncate cleaned up [ 183.808212][ T6473] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpjquota=mnt/encrypted_dir,minixdf,noinit_itable,init_itable,,errors=continue. Quota mode: writeback. [ 183.871256][ T6473] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.221209][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 184.711173][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.081746][ T6428] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 185.336677][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 185.350482][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 185.460380][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.470958][ T7] usb 5-1: config 0 descriptor?? [ 185.505495][ T7] usb 5-1: can't set config #0, error -71 [ 185.522620][ T7] usb 5-1: USB disconnect, device number 8 [ 185.695076][ T6535] loop4: detected capacity change from 0 to 1024 [ 185.724960][ T6528] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 185.955602][ T6528] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 186.144276][ T6535] EXT4-fs (loop4): inline encryption not supported [ 186.147522][ T6539] loop7: detected capacity change from 0 to 4096 [ 186.150856][ T6535] EXT4-fs (loop4): Ignoring removed nobh option [ 186.191127][ T6535] EXT4-fs (loop4): Ignoring removed bh option [ 186.202075][ T6535] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.319688][ T6539] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.345077][ T6554] loop5: detected capacity change from 0 to 128 [ 187.366786][ T6535] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 187.616762][ T6562] EXT4-fs (loop7): shut down requested (2) [ 187.684852][ T6539] EXT4-fs error (device loop7): ext4_do_update_inode:5204: inode #15: comm syz.7.521: corrupted inode contents [ 188.077430][ T9] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 188.155651][ T9] Quota error (device loop7): write_blk: dquota write failed [ 188.192413][ T9] Quota error (device loop7): free_dqentry: Can't write quota data block 5 [ 189.140908][ T6579] loop7: detected capacity change from 0 to 2048 [ 189.222859][ T6579] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 189.271098][ T6579] UDF-fs: Scanning with blocksize 512 failed [ 189.318491][ T6579] UDF-fs: warning (device loop7): udf_fill_super: No fileset found [ 189.521264][ T6593] loop7: detected capacity change from 0 to 128 [ 189.576624][ T6593] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.674154][ T6593] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.193303][ T6608] loop7: detected capacity change from 0 to 256 [ 191.282940][ T6608] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.408926][ T6608] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 191.473224][ T6608] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 193.395725][ T4472] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.528152][ T4472] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.640542][ T6650] loop6: detected capacity change from 0 to 1024 [ 193.652145][ T4248] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 193.719819][ T6650] EXT4-fs (loop6): inline encryption not supported [ 193.728449][ T4472] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.753303][ T6650] EXT4-fs (loop6): Ignoring removed nobh option [ 193.759593][ T6650] EXT4-fs (loop6): Ignoring removed bh option [ 193.791500][ T6650] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.822365][ T6654] loop5: detected capacity change from 0 to 8 [ 193.882877][ T6650] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 193.917415][ T4472] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.022528][ T4248] usb 5-1: not running at top speed; connect to a high speed hub [ 194.026374][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.038307][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.111457][ T4248] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.255199][ T4248] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.322367][ T4248] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 194.356656][ T6659] chnl_net:caif_netlink_parms(): no params data found [ 194.541306][ T4248] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.561065][ T4248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.611273][ T4248] usb 5-1: Product: syz [ 194.640929][ T4248] usb 5-1: Manufacturer: syz [ 194.645942][ T4248] usb 5-1: SerialNumber: syz [ 194.741689][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.850219][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.917805][ T6659] device bridge_slave_0 entered promiscuous mode [ 195.132733][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.156255][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.200081][ T6659] device bridge_slave_1 entered promiscuous mode [ 195.291187][ T6686] loop5: detected capacity change from 0 to 164 [ 195.306811][ T4248] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 195.377314][ T4248] usb 5-1: USB disconnect, device number 9 [ 195.584185][ T6659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.715633][ T6659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.016510][ T6659] team0: Port device team_slave_0 added [ 196.021624][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 196.049511][ T6659] team0: Port device team_slave_1 added [ 196.317144][ T6709] loop4: detected capacity change from 0 to 2048 [ 196.966814][ T6709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.161385][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.168352][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.247544][ T6659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.372300][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.434819][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.169213][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 198.275659][ T6659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.345134][ T6742] loop5: detected capacity change from 0 to 256 [ 198.345180][ T6746] loop6: detected capacity change from 0 to 128 [ 198.426198][ T6746] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 198.464332][ T6746] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.473294][ T6742] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.550875][ T6742] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 198.570717][ T6659] device hsr_slave_0 entered promiscuous mode [ 198.598878][ T6742] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 198.623296][ T6659] device hsr_slave_1 entered promiscuous mode [ 198.643881][ T6659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.679023][ T6659] Cannot create hsr debugfs directory [ 200.272953][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 200.394051][ T4472] device hsr_slave_0 left promiscuous mode [ 200.407118][ T4472] device hsr_slave_1 left promiscuous mode [ 200.423956][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.446165][ T6772] loop6: detected capacity change from 0 to 4096 [ 200.452376][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.492901][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.500339][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.527790][ T4472] device bridge_slave_1 left promiscuous mode [ 200.557149][ T4292] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 200.566345][ T6772] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.581208][ T4472] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.668886][ T4472] device bridge_slave_0 left promiscuous mode [ 200.690057][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.752124][ T4472] device veth1_macvtap left promiscuous mode [ 200.758184][ T4472] device veth0_macvtap left promiscuous mode [ 200.770511][ T4472] device veth1_vlan left promiscuous mode [ 200.786819][ T4472] device veth0_vlan left promiscuous mode [ 200.822255][ T4292] usb 6-1: Using ep0 maxpacket: 16 [ 200.822655][ T6795] loop4: detected capacity change from 0 to 256 [ 200.894509][ T6795] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.916670][ T6795] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 200.941423][ T4292] usb 6-1: config 0 interface 0 has no altsetting 0 [ 200.952037][ T6795] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 200.953562][ T4292] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 201.011107][ T4292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.031170][ T4292] usb 6-1: config 0 descriptor?? [ 201.434947][ T4472] team0 (unregistering): Port device team_slave_1 removed [ 201.477951][ T4472] team0 (unregistering): Port device team_slave_0 removed [ 201.496822][ T4472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.538667][ T4472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.574172][ T6806] loop6: detected capacity change from 0 to 8 [ 201.765342][ T6806] SQUASHFS error: zlib decompression failed, data probably corrupt [ 201.773610][ T6806] SQUASHFS error: Failed to read block 0x4de: -5 [ 201.781775][ T6806] SQUASHFS error: Failed to read block 0x4e2: -5 [ 201.788674][ T6806] SQUASHFS error: Failed to read block 0x9ca: -5 [ 201.795595][ T6806] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 201.802601][ T6806] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 201.809562][ T6806] SQUASHFS error: Failed to read block 0x535f2: -5 [ 201.841310][ T25] audit: type=1800 audit(1757583955.622:11): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.579" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 202.053026][ T4292] hid (null): bogus close delimiter [ 202.073201][ T4292] usb 6-1: USB disconnect, device number 4 [ 202.722172][ T4192] Bluetooth: hci4: command 0x0419 tx timeout [ 202.767776][ T4472] bond0 (unregistering): Released all slaves [ 203.822035][ T6659] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 203.845631][ T6659] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 204.240307][ T6659] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 204.318961][ T6659] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 204.627869][ T6659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.650292][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.671761][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.688995][ T6659] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.715481][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.745864][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.756763][ T5211] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.763865][ T5211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.797653][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.839424][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.861962][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.898312][ T4804] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.905421][ T4804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.988420][ T6848] loop6: detected capacity change from 0 to 256 [ 204.996147][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.052987][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.069992][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.109617][ T6848] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.126609][ T6848] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 205.157059][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.170231][ T6848] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 205.211688][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.250085][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.272070][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.290800][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.310948][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.337408][ T6659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.368637][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.447833][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.461984][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.811204][ T4274] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 205.880409][ T6843] chnl_net:caif_netlink_parms(): no params data found [ 205.908312][ T6875] loop5: detected capacity change from 0 to 512 [ 206.611313][ T4274] usb 7-1: Using ep0 maxpacket: 32 [ 206.653376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.690793][ T6875] EXT4-fs (loop5): 1 orphan inode deleted [ 206.707101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.724057][ T6875] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 206.741306][ T4274] usb 7-1: config 0 has an invalid interface number: 7 but max is 0 [ 206.750941][ T4274] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.771059][ T4274] usb 7-1: config 0 has no interface number 0 [ 206.777311][ T4274] usb 7-1: config 0 interface 7 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.781579][ T6875] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.801294][ T4274] usb 7-1: config 0 interface 7 has no altsetting 0 [ 206.807914][ T4274] usb 7-1: New USB device found, idVendor=00ff, idProduct=032c, bcdDevice= 0.00 [ 206.822961][ T6659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.829842][ T4274] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.841608][ T4274] usb 7-1: config 0 descriptor?? [ 206.890872][ T4274] usbhid 7-1:0.7: couldn't find an input interrupt endpoint [ 207.061086][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 207.565777][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.573126][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.581509][ T6843] device bridge_slave_0 entered promiscuous mode [ 207.603386][ T6843] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.610473][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.618793][ T6843] device bridge_slave_1 entered promiscuous mode [ 207.627210][ T4248] usb 7-1: USB disconnect, device number 8 [ 207.686963][ T6843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.898648][ T6843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.419347][ T6843] team0: Port device team_slave_0 added [ 208.624592][ T6843] team0: Port device team_slave_1 added [ 208.734970][ T6913] loop6: detected capacity change from 0 to 1024 [ 208.795790][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.821891][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.831818][ T6913] EXT4-fs (loop6): inline encryption not supported [ 208.848944][ T6913] EXT4-fs (loop6): Ignoring removed nobh option [ 208.873775][ T6913] EXT4-fs (loop6): Ignoring removed bh option [ 208.908178][ T6913] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.925556][ T6843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.943531][ T6843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.047814][ T6913] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 209.099483][ T6843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.112655][ T6843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.119604][ T6843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.146333][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 209.169887][ T6843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.254787][ T6659] device veth0_vlan entered promiscuous mode [ 209.282231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.308879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.363268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.400544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.468474][ T6659] device veth1_vlan entered promiscuous mode [ 209.514089][ T6843] device hsr_slave_0 entered promiscuous mode [ 209.557220][ T6843] device hsr_slave_1 entered promiscuous mode [ 209.591730][ T6843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.617223][ T6843] Cannot create hsr debugfs directory [ 209.744136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.770925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.839346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.883977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.927020][ T6659] device veth0_macvtap entered promiscuous mode [ 209.957815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.031468][ T6659] device veth1_macvtap entered promiscuous mode [ 210.187034][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.215996][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.233473][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.244296][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.255505][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.313804][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.351217][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.379989][ T6952] loop5: detected capacity change from 0 to 4096 [ 210.391089][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.402541][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.418014][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.457195][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.500665][ T6952] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 210.517522][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.574186][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.632375][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.643214][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.653207][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.665026][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.675460][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.688929][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.705676][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.808622][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.916226][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.489640][ T4190] Bluetooth: hci3: command 0x040f tx timeout [ 211.497931][ T4190] Bluetooth: hci2: command 0x0406 tx timeout [ 211.512781][ T6659] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.527332][ T6659] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.543138][ T6659] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.552427][ T6659] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.856592][ T6978] loop5: detected capacity change from 0 to 1024 [ 211.908112][ T6843] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 211.931974][ T6978] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 211.940815][ T6978] EXT4-fs (loop5): orphan cleanup on readonly fs [ 211.956447][ T6978] EXT4-fs error (device loop5): ext4_free_blocks:6218: comm syz.5.605: Freeing blocks not in datazone - block = 0, count = 4096 [ 212.037328][ T6978] EXT4-fs (loop5): 1 orphan inode deleted [ 212.047086][ T6843] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 212.073218][ T6978] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 212.106143][ T4804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.125197][ T6843] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 212.183475][ T6843] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 212.190558][ T4804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.610160][ T4472] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.768902][ T6990] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 212.796190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.115284][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 214.226414][ T4472] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.478504][ T7020] netlink: 88 bytes leftover after parsing attributes in process `syz.5.614'. [ 214.487557][ T7020] netlink: 24 bytes leftover after parsing attributes in process `syz.5.614'. [ 215.338019][ T4804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.352502][ T4804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.372325][ T4472] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.403751][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.489401][ T4472] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.571310][ T6896] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 215.851192][ T6896] usb 6-1: Using ep0 maxpacket: 8 [ 215.983021][ T6843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.011537][ T6896] usb 6-1: unable to get BOS descriptor or descriptor too short [ 216.067049][ T6843] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.089018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.132734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.174245][ T6896] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 216.191226][ T6896] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 216.216020][ T6896] usb 6-1: config 4 has no interface number 0 [ 216.231592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.250531][ T7044] loop6: detected capacity change from 0 to 1024 [ 216.261574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.287736][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.294883][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.338640][ T7044] EXT4-fs (loop6): inline encryption not supported [ 216.361694][ T7044] EXT4-fs (loop6): Ignoring removed nobh option [ 216.368087][ T7044] EXT4-fs (loop6): Ignoring removed bh option [ 216.385334][ T7044] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.411294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.419279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.462236][ T6896] usb 6-1: string descriptor 0 read error: -22 [ 216.468532][ T6896] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 216.480366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.498066][ T6896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.513526][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.520628][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.564077][ T6896] usb 6-1: Found UVC 0.02 device (04f2:b746) [ 216.582245][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.590892][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.622395][ T7044] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 216.623724][ T7053] loop8: detected capacity change from 0 to 256 [ 216.655642][ T6896] usb 6-1: No valid video chain found. [ 216.717901][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.772165][ T1107] usb 6-1: USB disconnect, device number 5 [ 216.779520][ T7053] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.813204][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.821386][ T7053] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 216.825123][ T7053] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 216.865195][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.910787][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.950371][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.988600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.025256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.089407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.112379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.152647][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.235404][ T7066] loop8: detected capacity change from 0 to 512 [ 217.311468][ T4190] Bluetooth: hci0: command 0x0406 tx timeout [ 217.350022][ T7066] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 217.412775][ T7066] EXT4-fs (loop8): Unrecognized mount option "smackfsdef=cgroup.stat" or missing value [ 217.733069][ T7066] loop8: detected capacity change from 0 to 256 [ 218.207686][ T7066] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 218.978538][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.000853][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.055787][ T6843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.107336][ T7082] netlink: 40 bytes leftover after parsing attributes in process `syz.0.623'. [ 219.187637][ T4472] device hsr_slave_0 left promiscuous mode [ 219.208241][ T4472] device hsr_slave_1 left promiscuous mode [ 219.246573][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.284410][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.301098][ T4190] Bluetooth: hci1: command 0x0409 tx timeout [ 219.332267][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.375271][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.417527][ T4472] device bridge_slave_1 left promiscuous mode [ 219.438821][ T4472] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.474676][ T4472] device bridge_slave_0 left promiscuous mode [ 219.514699][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.603983][ T4472] device veth1_macvtap left promiscuous mode [ 219.639262][ T4472] device veth0_macvtap left promiscuous mode [ 219.679530][ T4472] device veth1_vlan left promiscuous mode [ 219.717031][ T4472] device veth0_vlan left promiscuous mode [ 221.497923][ T4472] team0 (unregistering): Port device team_slave_1 removed [ 221.535099][ T4472] team0 (unregistering): Port device team_slave_0 removed [ 221.575213][ T4472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.610369][ T4472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.892169][ T4472] bond0 (unregistering): Released all slaves [ 222.838634][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.892489][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.968168][ T7136] loop6: detected capacity change from 0 to 1024 [ 222.982207][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.011809][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.035374][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.057674][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.072346][ T6843] device veth0_vlan entered promiscuous mode [ 223.094182][ T7136] EXT4-fs (loop6): inline encryption not supported [ 223.100759][ T7136] EXT4-fs (loop6): Ignoring removed nobh option [ 223.106406][ T6843] device veth1_vlan entered promiscuous mode [ 223.146682][ T7136] EXT4-fs (loop6): Ignoring removed bh option [ 223.231626][ T7136] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.297097][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.345710][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 223.378608][ T7136] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 223.434125][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.507162][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.523104][ T6843] device veth0_macvtap entered promiscuous mode [ 223.576200][ T7170] netlink: 360 bytes leftover after parsing attributes in process `syz.0.643'. [ 223.620280][ T6843] device veth1_macvtap entered promiscuous mode [ 223.696134][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.709945][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.760402][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.833988][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.862575][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.922446][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.956980][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.974011][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.987360][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.001060][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.012608][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.053107][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.096432][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.137206][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.181854][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.192177][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.203011][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.213760][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.224433][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.240515][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.255019][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.283961][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.303011][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.320265][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.342714][ T6843] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.369277][ T6843] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.414786][ T6843] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.456375][ T6843] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.121685][ T4287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.140407][ T4287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.187983][ T4438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.241197][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 225.258601][ T4438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.297701][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 225.640403][ T7228] loop9: detected capacity change from 0 to 512 [ 225.757257][ T7225] ipt_CLUSTERIP: Please specify destination IP [ 225.943588][ T7228] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 226.247755][ T7228] EXT4-fs error (device loop9): ext4_quota_enable:6417: inode #4: comm syz.9.586: iget: bad i_size value: 5910974510929920 [ 226.273958][ T7265] tipc: Started in network mode [ 226.311402][ T7265] tipc: Node identity 8636f77ea2b7, cluster identity 4711 [ 226.329657][ T7228] EXT4-fs error (device loop9): ext4_quota_enable:6420: comm syz.9.586: Bad quota inode: 4, type: 1 [ 226.351669][ T7265] tipc: Enabled bearer , priority 0 [ 226.358759][ T7228] EXT4-fs warning (device loop9): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 226.386281][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 226.428691][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.671'. [ 226.472250][ T7228] EXT4-fs (loop9): mount failed [ 226.500163][ T7278] loop6: detected capacity change from 0 to 1024 [ 226.646027][ T7278] EXT4-fs (loop6): inline encryption not supported [ 226.671678][ T7278] EXT4-fs (loop6): Ignoring removed nobh option [ 226.723632][ T7278] EXT4-fs (loop6): Ignoring removed bh option [ 226.729749][ T7278] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 226.858155][ T7278] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 227.382599][ T1107] tipc: Node number set to 612497278 [ 228.949902][ T7356] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.099576][ T7356] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.296420][ T7356] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.395429][ T7356] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.572912][ T7394] loop8: detected capacity change from 0 to 1024 [ 229.603280][ T7394] EXT4-fs (loop8): inline encryption not supported [ 229.625242][ T7394] EXT4-fs (loop8): Ignoring removed nobh option [ 229.639803][ T7394] EXT4-fs (loop8): Ignoring removed bh option [ 229.646675][ T7356] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.655873][ T7394] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.677136][ T7356] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.694490][ T7356] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.712329][ T7356] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.736666][ T7394] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 230.510855][ T7422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.261993][ T7441] [ 231.264352][ T7441] ============================= [ 231.291175][ T7441] WARNING: suspicious RCU usage [ 231.312104][ T7441] syzkaller #0 Not tainted [ 231.348166][ T7441] ----------------------------- [ 231.368063][ T7441] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 231.461391][ T7441] [ 231.461391][ T7441] other info that might help us debug this: [ 231.461391][ T7441] [ 231.493107][ T7441] [ 231.493107][ T7441] rcu_scheduler_active = 2, debug_locks = 1 [ 231.505891][ T7441] 1 lock held by syz.6.711/7441: [ 231.521115][ T7441] #0: ffffffff8d237d88 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 231.541170][ T7441] [ 231.541170][ T7441] stack backtrace: [ 231.547181][ T7441] CPU: 0 PID: 7441 Comm: syz.6.711 Not tainted syzkaller #0 [ 231.554469][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.564530][ T7441] Call Trace: [ 231.567806][ T7441] [ 231.570732][ T7441] dump_stack_lvl+0x168/0x230 [ 231.575416][ T7441] ? load_image+0x3b0/0x3b0 [ 231.579919][ T7441] ? show_regs_print_info+0x20/0x20 [ 231.585127][ T7441] ? lockdep_rcu_suspicious+0x110/0x180 [ 231.590673][ T7441] ? local_bh_enable+0x20/0x20 [ 231.595438][ T7441] rhltable_lookup+0x77b/0x790 [ 231.600213][ T7441] ? mr_mfc_find_parent+0x190/0x190 [ 231.605410][ T7441] ? mark_lock+0x94/0x320 [ 231.609741][ T7441] ? local_bh_enable+0x20/0x20 [ 231.614506][ T7441] ? mark_lock+0x94/0x320 [ 231.618836][ T7441] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 231.624821][ T7441] ? lock_chain_count+0x20/0x20 [ 231.629679][ T7441] mr_mfc_find_any_parent+0xb6/0x1e0 [ 231.634970][ T7441] ? local_bh_enable+0x20/0x20 [ 231.639739][ T7441] ip_mr_forward+0x24c/0xf90 [ 231.644343][ T7441] ipmr_mfc_add+0x2466/0x2eb0 [ 231.649036][ T7441] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 231.653974][ T7441] ? __lock_acquire+0x7c60/0x7c60 [ 231.659018][ T7441] ip_mroute_setsockopt+0xe33/0x11a0 [ 231.664311][ T7441] ? ipmr_rule_default+0x70/0x70 [ 231.669263][ T7441] ? __might_sleep+0xf0/0xf0 [ 231.673855][ T7441] ip_setsockopt+0x4ad/0x3070 [ 231.678544][ T7441] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 231.683912][ T7441] ? aa_sk_perm+0x7b4/0x8f0 [ 231.688421][ T7441] ? aa_af_perm+0x2b0/0x2b0 [ 231.692921][ T7441] ? __fget_files+0x40f/0x480 [ 231.697603][ T7441] ? aa_sock_opt_perm+0x74/0x100 [ 231.702548][ T7441] ? sock_common_setsockopt+0x32/0xb0 [ 231.707925][ T7441] ? raw_setsockopt+0xc5/0x180 [ 231.712686][ T7441] ? sock_common_recvmsg+0x1b0/0x1b0 [ 231.717974][ T7441] __sys_setsockopt+0x2bf/0x3d0 [ 231.722830][ T7441] __x64_sys_setsockopt+0xb1/0xc0 [ 231.727866][ T7441] do_syscall_64+0x4c/0xa0 [ 231.732290][ T7441] ? clear_bhb_loop+0x30/0x80 [ 231.736968][ T7441] ? clear_bhb_loop+0x30/0x80 [ 231.741651][ T7441] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.747553][ T7441] RIP: 0033:0x7f7b7a389ba9 [ 231.751967][ T7441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.771681][ T7441] RSP: 002b:00007f7b785f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 231.780104][ T7441] RAX: ffffffffffffffda RBX: 00007f7b7a5d0fa0 RCX: 00007f7b7a389ba9 [ 231.788081][ T7441] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 231.796054][ T7441] RBP: 00007f7b7a40ce19 R08: 000000000000003c R09: 0000000000000000 [ 231.804025][ T7441] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 231.812003][ T7441] R13: 00007f7b7a5d1038 R14: 00007f7b7a5d0fa0 R15: 00007ffd9b85fb68 [ 231.819990][ T7441] [ 231.827899][ T7441] [ 231.830386][ T7441] ============================= [ 231.835527][ T7441] WARNING: suspicious RCU usage [ 231.840665][ T7441] syzkaller #0 Not tainted [ 231.845479][ T7441] ----------------------------- [ 231.850468][ T7441] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 231.860740][ T7441] [ 231.860740][ T7441] other info that might help us debug this: [ 231.860740][ T7441] [ 231.871470][ T7441] [ 231.871470][ T7441] rcu_scheduler_active = 2, debug_locks = 1 [ 231.879651][ T7441] 1 lock held by syz.6.711/7441: [ 231.884890][ T7441] #0: ffffffff8d237d88 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 231.896342][ T7441] [ 231.896342][ T7441] stack backtrace: [ 231.902518][ T7441] CPU: 1 PID: 7441 Comm: syz.6.711 Not tainted syzkaller #0 [ 231.909800][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.919970][ T7441] Call Trace: [ 231.923250][ T7441] [ 231.926177][ T7441] dump_stack_lvl+0x168/0x230 [ 231.930863][ T7441] ? load_image+0x3b0/0x3b0 [ 231.935374][ T7441] ? show_regs_print_info+0x20/0x20 [ 231.940582][ T7441] ? lockdep_rcu_suspicious+0x110/0x180 [ 231.946128][ T7441] ? local_bh_enable+0x20/0x20 [ 231.950889][ T7441] rhltable_lookup+0x504/0x790 [ 231.955660][ T7441] ? local_bh_enable+0x20/0x20 [ 231.960421][ T7441] ? mr_mfc_find_parent+0x190/0x190 [ 231.965620][ T7441] ? mark_lock+0x94/0x320 [ 231.969952][ T7441] ? local_bh_enable+0x20/0x20 [ 231.974740][ T7441] ? mark_lock+0x94/0x320 [ 231.979071][ T7441] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 231.985053][ T7441] ? lock_chain_count+0x20/0x20 [ 231.989910][ T7441] mr_mfc_find_any_parent+0xb6/0x1e0 [ 231.995196][ T7441] ? local_bh_enable+0x20/0x20 [ 231.999959][ T7441] ip_mr_forward+0x24c/0xf90 [ 232.004555][ T7441] ipmr_mfc_add+0x2466/0x2eb0 [ 232.009236][ T7441] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 232.014166][ T7441] ? __lock_acquire+0x7c60/0x7c60 [ 232.019213][ T7441] ip_mroute_setsockopt+0xe33/0x11a0 [ 232.024514][ T7441] ? ipmr_rule_default+0x70/0x70 [ 232.029468][ T7441] ? __might_sleep+0xf0/0xf0 [ 232.034056][ T7441] ip_setsockopt+0x4ad/0x3070 [ 232.038750][ T7441] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 232.044126][ T7441] ? aa_sk_perm+0x7b4/0x8f0 [ 232.048635][ T7441] ? aa_af_perm+0x2b0/0x2b0 [ 232.053132][ T7441] ? __fget_files+0x40f/0x480 [ 232.057831][ T7441] ? aa_sock_opt_perm+0x74/0x100 [ 232.062768][ T7441] ? sock_common_setsockopt+0x32/0xb0 [ 232.068139][ T7441] ? raw_setsockopt+0xc5/0x180 [ 232.072899][ T7441] ? sock_common_recvmsg+0x1b0/0x1b0 [ 232.078187][ T7441] __sys_setsockopt+0x2bf/0x3d0 [ 232.083040][ T7441] __x64_sys_setsockopt+0xb1/0xc0 [ 232.088067][ T7441] do_syscall_64+0x4c/0xa0 [ 232.092475][ T7441] ? clear_bhb_loop+0x30/0x80 [ 232.097148][ T7441] ? clear_bhb_loop+0x30/0x80 [ 232.101829][ T7441] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.107720][ T7441] RIP: 0033:0x7f7b7a389ba9 [ 232.112128][ T7441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.131731][ T7441] RSP: 002b:00007f7b785f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 232.140145][ T7441] RAX: ffffffffffffffda RBX: 00007f7b7a5d0fa0 RCX: 00007f7b7a389ba9 [ 232.148110][ T7441] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 232.156076][ T7441] RBP: 00007f7b7a40ce19 R08: 000000000000003c R09: 0000000000000000 [ 232.164043][ T7441] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 232.172009][ T7441] R13: 00007f7b7a5d1038 R14: 00007f7b7a5d0fa0 R15: 00007ffd9b85fb68 [ 232.179997][ T7441] [ 232.187745][ T7441] [ 232.190183][ T7441] ============================= [ 232.206641][ T7441] WARNING: suspicious RCU usage [ 232.212014][ T7441] syzkaller #0 Not tainted [ 232.216536][ T7441] ----------------------------- [ 232.225844][ T7441] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 232.235719][ T7441] [ 232.235719][ T7441] other info that might help us debug this: [ 232.235719][ T7441] [ 232.250499][ T7441] [ 232.250499][ T7441] rcu_scheduler_active = 2, debug_locks = 1 [ 232.259930][ T7441] 1 lock held by syz.6.711/7441: [ 232.270736][ T7441] #0: ffffffff8d237d88 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 232.286583][ T7441] [ 232.286583][ T7441] stack backtrace: [ 232.294530][ T7441] CPU: 1 PID: 7441 Comm: syz.6.711 Not tainted syzkaller #0 [ 232.301824][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.311878][ T7441] Call Trace: [ 232.315153][ T7441] [ 232.318080][ T7441] dump_stack_lvl+0x168/0x230 [ 232.322761][ T7441] ? load_image+0x3b0/0x3b0 [ 232.327271][ T7441] ? show_regs_print_info+0x20/0x20 [ 232.332477][ T7441] ? lockdep_rcu_suspicious+0x110/0x180 [ 232.338038][ T7441] ? local_bh_enable+0x20/0x20 [ 232.342794][ T7441] rhltable_lookup+0x5f8/0x790 [ 232.347544][ T7441] ? local_bh_enable+0x20/0x20 [ 232.352288][ T7441] ? mr_mfc_find_parent+0x190/0x190 [ 232.357483][ T7441] ? mark_lock+0x94/0x320 [ 232.361812][ T7441] ? local_bh_enable+0x20/0x20 [ 232.366566][ T7441] ? mark_lock+0x94/0x320 [ 232.370889][ T7441] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 232.376858][ T7441] ? lock_chain_count+0x20/0x20 [ 232.381693][ T7441] mr_mfc_find_any_parent+0xb6/0x1e0 [ 232.386973][ T7441] ? local_bh_enable+0x20/0x20 [ 232.391718][ T7441] ip_mr_forward+0x24c/0xf90 [ 232.396295][ T7441] ipmr_mfc_add+0x2466/0x2eb0 [ 232.400956][ T7441] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 232.405872][ T7441] ? __lock_acquire+0x7c60/0x7c60 [ 232.410884][ T7441] ip_mroute_setsockopt+0xe33/0x11a0 [ 232.416148][ T7441] ? ipmr_rule_default+0x70/0x70 [ 232.421070][ T7441] ? __might_sleep+0xf0/0xf0 [ 232.425636][ T7441] ip_setsockopt+0x4ad/0x3070 [ 232.430294][ T7441] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 232.435639][ T7441] ? aa_sk_perm+0x7b4/0x8f0 [ 232.440123][ T7441] ? aa_af_perm+0x2b0/0x2b0 [ 232.444598][ T7441] ? __fget_files+0x40f/0x480 [ 232.449274][ T7441] ? aa_sock_opt_perm+0x74/0x100 [ 232.454191][ T7441] ? sock_common_setsockopt+0x32/0xb0 [ 232.459539][ T7441] ? raw_setsockopt+0xc5/0x180 [ 232.464279][ T7441] ? sock_common_recvmsg+0x1b0/0x1b0 [ 232.469543][ T7441] __sys_setsockopt+0x2bf/0x3d0 [ 232.474404][ T7441] __x64_sys_setsockopt+0xb1/0xc0 [ 232.479411][ T7441] do_syscall_64+0x4c/0xa0 [ 232.483802][ T7441] ? clear_bhb_loop+0x30/0x80 [ 232.488455][ T7441] ? clear_bhb_loop+0x30/0x80 [ 232.493129][ T7441] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.498998][ T7441] RIP: 0033:0x7f7b7a389ba9 [ 232.503399][ T7441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.523003][ T7441] RSP: 002b:00007f7b785f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 232.531398][ T7441] RAX: ffffffffffffffda RBX: 00007f7b7a5d0fa0 RCX: 00007f7b7a389ba9 [ 232.539349][ T7441] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 232.547297][ T7441] RBP: 00007f7b7a40ce19 R08: 000000000000003c R09: 0000000000000000 [ 232.555244][ T7441] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 232.563194][ T7441] R13: 00007f7b7a5d1038 R14: 00007f7b7a5d0fa0 R15: 00007ffd9b85fb68 [ 232.571151][ T7441]